last executing test programs: 3m19.786967224s ago: executing program 32 (id=83): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x41, 0x0) lseek(r0, 0x8000000000000000, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x34, r2, 0x701, 0x0, 0x0, {{}, {@val={0x6, 0x1, 0xc}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}]}, 0x34}}, 0x0) (async) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x598}, {&(0x7f00000007c0)=""/154, 0x4c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3m9.058995486s ago: executing program 33 (id=21): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x7f9f, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x7, &(0x7f0000000000)={0x22, "e922604a455494c905fd824393fe53e14fcab3d1eb0000000000000000000800"}}) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), r4, 0x0, 0x3, 0x1}}, 0x20) bind$alg(r1, &(0x7f0000003700)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000001400b59527bd7000ffdbdf250a1700ff", @ANYRES32=r5, @ANYBLOB="140002080000000000000114000200fe8000000090680008008802000008000905230000140006007f0000004a0900000180000006000100"], 0x64}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)=@newtclass={0x58, 0x28, 0x400, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x7, 0xffff}, {0xc, 0x8}, {0xffe0, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x10}}, @TCA_RATE={0x6, 0x5, {0x2e, 0x1}}, @TCA_RATE={0x6, 0x5, {0x9, 0xa}}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @TCA_RATE={0x6, 0x5, {0x5, 0xff}}, @tclass_kind_options=@c_ingress={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x8011}, 0x4081000) r6 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbdfcbf3d2d7000fdfbdf1700000015000100007564703a73797a310000ab93b6c600"/46], 0x34}, 0x1, 0x0, 0x0, 0x20040040}, 0x40) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r7, 0x4008af75, &(0x7f0000000080)={0x2, 0x84}) r8 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101842) ioctl$NBD_DISCONNECT(r8, 0xab08) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r11) setsockopt$sock_int(r11, 0x1, 0x2b, &(0x7f0000000180)=0x70, 0x4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) r12 = syz_open_procfs(r10, &(0x7f0000000200)='wchan\x00') preadv(r12, &(0x7f0000000100)=[{&(0x7f0000000340)=""/228, 0xe4}], 0x1, 0xfffffff6, 0x9) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000140)={0x200, r11, 0x10, {0x4, 0x8}, 0xf}, 0x1) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000090900010073797a300000000050000000090a010400000000000000000100100008000a40000000000900010073797a300000000008000540000000000060000900020073797a32000000000800034000000023140000001000010000000000000000000000000a000000000000000000"], 0x98}}, 0x0) 2m47.078338916s ago: executing program 34 (id=296): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="459d15f00a", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x4000090) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="a7611c71ee3fef604cd2"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m45.059632656s ago: executing program 35 (id=310): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4) connect$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}}], 0x1, 0x44850) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40240, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000440)={0x2000, 0x0, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7ff8, 0xe}, {0x10, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES8=r1, @ANYBLOB="08001a00", @ANYRES32, @ANYBLOB="06003800d8510000040049800400e0801a165c80f928efeadc95a00c88d81d8d36eb021f05e357ce0cc80496d946a14b733a0b75dc0e0fe7ec451e3304efabb148cf7740d92633549fc799efeffbb500bf6a3db52cb6551af05b9d13a338392b5a8a8a21422903ac79280ba0651419590f6126813018282ea112a8c697e421a55ef2aac7340a5736e3d51504d8c7f023ee72b55ab9a1a1195cf9edf01e30447d1e000ce0ec914a9a6ae232498e74bcd19c01b7086e3fec56b754ab12185fda15b9525dec81f973a9c4bc9e3346f077651b64733a62e0536a41b5d896c07d71bb8b256ff30493694ca27c654b9cdfd0721dcef4726d97a2974dc7d8e373b0a60174bb0800ee00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32=r4, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m41.557490978s ago: executing program 36 (id=342): r0 = io_uring_setup(0x3458, &(0x7f0000000080)={0x0, 0xffffeffa, 0x18, 0x2, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) r3 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @broadcast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x17, 0x0, 0x0, @empty}}}}}, 0x0) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) syz_io_uring_setup(0x2bce, &(0x7f0000000000)={0x0, 0x9a5c, 0x200, 0x7, 0x153, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000006a]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280080007003b070000050006"], 0x4c}}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000004100)={0x2020}, 0x2020) 2m39.491058577s ago: executing program 37 (id=351): r0 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x6, 0x2, 0x3, 0x0, 0x20000000006, 0x7fffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000700)={{0x2, 0x0, 0x0, 0xe}, 0x0, [0x2000000, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x2001001000000000, 0x22072a18}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) socket$kcm(0x10, 0x2, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8b28, &(0x7f0000000000)={'virt_wifi0\x00', @random='4\x00'}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r1, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 2m35.631307907s ago: executing program 9 (id=370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r1, &(0x7f0000000200)=""/82, 0x52) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r3, &(0x7f0000000380)="a0fd1a", 0x3) splice(r3, &(0x7f0000000040), r2, 0x0, 0x800000000ff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001"], 0xf0}}, 0x0) 2m35.50098401s ago: executing program 9 (id=395): r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="0cb7bc5d7544a06978bc1b8d3057289a5b2befad70f4269540820e602bcf03e18ce234475da6686ea845c649e7467dcd1139ac2a74ede07c0da4aa21f5c29835a5ac44e1fbbf3d113ac08cfae7a93e8ef1fcac8e76f05307df01de3113ab99301469c7ca6205951e5294330940c0d60dcb67d0d2fde6346265a65324f6a6964f81a44ff7a87be00dfdc909d93816936a4e02f3968360bfa8f852c0f4de4d38a8d204c3cefaa1841d52e6e02ae2729e51d36348de08e2f93775fc9b1588b3d602013c57ff2d95e8695459ca50963a", 0xce}], 0x1) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x385c) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x28080, 0x0) (async) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r2, 0x4068aea3, &(0x7f0000000240)) (async, rerun: 64) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x1010, r1, 0xebdeb000) (rerun: 64) write$selinux_access(r2, &(0x7f00000002c0)={'system_u:object_r:cpu_device_t:s0', 0x20, 'unconfined', 0x20, 0xc66}, 0x42) syz_open_dev$loop(&(0x7f0000000340), 0x2, 0x2) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000380)) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) (rerun: 32) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x70}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) (async, rerun: 64) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800005, 0x10, 0xffffffffffffffff, 0x7b0a1000) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r5, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x9c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x37}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4004004) (async) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000780)={0x1, 0x3, 0x1000, 0x90, &(0x7f0000000680)="9fce6b5f35b52657255906892dec6e9e59653243d10eac26aeae2d97d4fd81d894d46171edbf17195769e3055b23882d763ba1038689532bd29bbbfd789628b94b60c6bd4962a255aa1152dc7dbd35c8351d24c4f0880c0c9a8820e8186c256c1b229165d725d581be964d914a98b609ea02eb0307c2fa52f11f8a40a38b54f21900ed79bfcd5ceb3ca2446237201049", 0x3, 0x0, &(0x7f0000000740)="8ecc62"}) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r2) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r6, 0x20, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) sendmsg$nl_netfilter(r7, &(0x7f0000001e40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001e00)={&(0x7f0000000a40)={0x138c, 0xb, 0x8, 0x401, 0x70bd2a, 0x25dfdbfb, {0x3, 0x0, 0x8}, [@generic="85424ed856fa2f924d81661cb332d091e13f6afdb52d1724cb6468390657e8f16b73db4586f8476645e5f2b04028efd2618a2183bc9e95273aeb5ad65a2dbdc074fac79d9801f4e1e3b03b409f", @nested={0x10, 0x5, 0x0, 0x1, [@typed={0xc, 0x6d, 0x0, 0x0, @u64=0x8}]}, @generic="a8283bab0b09b856941b4f8488da1a6cb1009dd8386e2bafdebbfaafa30a575ca93538065eecc90e", @typed={0xb1, 0x7a, 0x0, 0x0, @binary="5aea8e2b7dc1a333a4b6ff88a9474cb7f75e0360aaa4389f67f07fe3ed0f6436d614ab354db007b25291495a593c29b7922574312c3cb0b17e10f257248943e3322d40219167d4670b438a62051504fa1685c654c5894fe9f580b70d167261f202653c8413f0fab06c008cb7c5f2be608a6170972ef8fdb56b8ee212b7b1c113de1e683ef49d7290ed46cce68f2b9a1d5f5d7d41f7f4a0c8b32452ad9989b6005c66d69d00f85f1f0595326a89"}, @typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@private1}, @typed={0x8f, 0xa3, 0x0, 0x0, @binary="31cfc42b436df8aca318303448469429a06f0040bba0ab6b8044d6d61f96cebbbdfa77710499a6f55a636c2f8af77d7609b2fa7fa2308ec357a774094626316fe0f8c344edb1608b3714af0d437720918281d87aac4129f7ca0281da330510a9e88936a7caafefd8ce0b8f04d25e70f7c2ca18cfeaef3316f1de30164c0870f8db31e82a03ce0f719f6b95"}, @nested={0x1142, 0xb, 0x0, 0x1, [@generic="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", @nested={0x4, 0x109}, @nested={0x4, 0x37}, @generic="07c262f50541a3235b7554fdfb5e6f9c35fb739658a591126dfdb3bb4cdd10b84d67a8c004b61d5a7ca14cf72276fe20fb553d0e2ec3b8c0cf9f0d4a0bf2", @typed={0x8, 0xcc, 0x0, 0x0, @uid=r8}, @typed={0x8, 0x11c, 0x0, 0x0, @fd=r1}, @generic="8ccfdad0da8547a742c11e1b19c0c0e521f972f53814bbbc12048e9c0d72dc139ae0d00b2265db2399e5f13522dbaefe3ee96592e39bb92a3ba31458fe1a174cbf7b6b4fd1bba577586bed3c340f62ceb199955e1f96f119cf80d56004752fab8067a0b0c15c05f0212079f56b5f7af013b0eaa2562592e51f3dd86ad152e5bf1ee030d59b581fbce5a96d0757183b04f554967f9236ba68a87154b6bd9b29aa2d5a5168999c01c27f4751293afce2822b7c480739de54bcb0041fcf7c3e4e5ea7edacb8fa2c2d9c102f10c60d0e6436e968c2fa", @typed={0x14, 0x94, 0x0, 0x0, @ipv6=@mcast2}]}, @nested={0x41, 0x110, 0x0, 0x1, [@typed={0x8, 0x114, 0x0, 0x0, @u32=0x1}, @generic="5f86bc67f13d6c26146ea8cf7a90d3fe16d9dfdaa4", @nested={0x4, 0x46}, @typed={0x8, 0x13b, 0x0, 0x0, @pid}, @nested={0x4, 0x34}, @typed={0x10, 0xe5, 0x0, 0x0, @str='/dev/nullb0\x00'}]}, @typed={0x8, 0x14d, 0x0, 0x0, @pid}, @typed={0x8, 0xcd, 0x0, 0x0, @u32=0x4}]}, 0x138c}, 0x1, 0x0, 0x0, 0x20000000}, 0x804c094) (async) syz_emit_vhci(&(0x7f0000001e80)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x14}, @l2cap_cid_signaling={{0x10}, [@l2cap_disconn_rsp={{0x7, 0x9, 0x4}, {0x2, 0xcc9}}, @l2cap_disconn_req={{0x6, 0xba, 0x4}, {0x8, 0xe7}}]}}, 0x19) (async) sendfile(r0, r0, &(0x7f0000001ec0)=0x95, 0x3) (async) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000001f40), r5) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x48, r9, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0xa4}, 0x11) (async, rerun: 32) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000020c0), r2) (rerun: 32) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x70, r10, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x40480c4) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002200)='./binderfs/binder1\x00', 0x2, 0x0) 2m35.499328584s ago: executing program 9 (id=396): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x6, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) (async) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r3, &(0x7f0000002300)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, '/dev/kvm\x00'}, {0x20, '@$]]$\\,$'}, {0x20, '/dev/kvm\x00'}, {0x20, '#\x02\x8e\x89\xfef\xb0z\x9d'}, {0x20, '/dev/kvm\x00'}, {}, {0x20, '#! '}, {0x20, '/dev/kvm\x00'}, {0x20, '\''}, {0x20, '/dev/kvm\x00'}]}, 0x1044) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m35.314683099s ago: executing program 9 (id=399): socket$inet6_sctp(0xa, 0x1, 0x84) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = getpgid(r1) setpgid(0x0, r2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x20c400, 0x11d) r3 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000080)={"895c7e00", 0x48, 0x8, 0xfa, 0x0, 0x3, "7b62d701a7ab0802cd8f2da37d83c1", "f9aa5cba", "de14bf4b", "ed5ebc28", ["f5e444ad1da635d736cdc398", "0d9c30505c09ef98b6fac64f", "a0fe649fa598ea2d67ee7d8f", "25e3bf3778db2993ccde71ee"]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80400, 0x4) 2m34.400746393s ago: executing program 9 (id=406): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050026bd7000000000000f00200008000300", @ANYRES32=r2, @ANYBLOB="35000e00800000000802110000010802110000005050505050500000000000000000000064000100250301040e7206030303030303000000080026006c090000080027000100000008000c006400000008000d"], 0x74}}, 0x20000014) 2m33.261385856s ago: executing program 7 (id=425): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (fail_nth: 9) 2m33.08933386s ago: executing program 7 (id=426): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x1000000, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe88000000000000000000000000000100000000000000000300070000000000020000000000000000000000000000000100150000000000010014"], 0xd8}}, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x1407, 0x300, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x801) r4 = socket$kcm(0x2b, 0x1, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='udf\x00', 0x20001b, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x3f76193d2ff61f01, 0x0, 0x7}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x10) sendmsg$sock(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x4f, 0x594}}], 0x18}, 0x2404c8d5) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000440)='./cgroup/file0\x00', 0x8101) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) 2m32.935905368s ago: executing program 7 (id=431): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x90841, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth0_macvtap\x00', 0x100}) r2 = socket(0x2, 0x2, 0x8) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x87, @remote, 0x4e24, 0x1, 'lblc\x00', 0x63, 0x8}, 0x2c) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000200)) 2m32.850955958s ago: executing program 7 (id=432): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x99f}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x6}]}}}]}, 0x3c}}, 0x0) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @private2}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000700000061114c000000000085000000cf18000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71006000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x0) 2m32.791716756s ago: executing program 7 (id=434): socket$inet6_sctp(0xa, 0x1, 0x84) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = getpgid(r1) setpgid(0x0, r2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x20c400, 0x11d) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80400, 0x4) 2m31.941100385s ago: executing program 7 (id=435): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x421062, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x54000002, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x81\x84\xb8\x92P\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r0, 0x0, 0x400000000000000, 0x7) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xde, &(0x7f0000000500)='/proc/net/\x00\x00t4/c3\x0fG\xf9aK\fX\a?\x00\x00\xff\x1a\xa5K@\xd1R|\xcb\xb6\xe1\x00\x82q\xee\xc6\xcc\xfd\xa4AB\xf7R\x87\x83\xd8\xb6\x9a1\xe3\xbe\xf0\xa5\x19\\\xea\xc9J\xbf\xa4\x93\x98\xc7\xe5LJ\xe0\xe0\nO\x0e\x0e]\xd6\xb1]{>\xf6\xdc:\x85\xed\r\xe3\xb8\xa3c\xe0\x06,\f2\x99\x1e\xd5\xc3\x8f\x9ay\xdd|\xc32 \t\xfa@%f\xde\xbc\xec0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 2m30.531545801s ago: executing program 6 (id=442): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x517) (async) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 2m29.641611395s ago: executing program 6 (id=443): socket$inet6_sctp(0xa, 0x1, 0x84) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = getpgid(r1) setpgid(0x0, r2) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80400, 0x4) 2m28.769730729s ago: executing program 6 (id=444): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x11) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r1) sendmsg$alg(r1, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x340000c1) sendmsg$rds(r1, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000008c0)=""/231, 0xe7}, {&(0x7f00000009c0)=""/123, 0x7b}, {&(0x7f0000000a80)=""/245, 0xf5}], 0x3, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="440000001800010000000000000000000a002000000000000000000018001600140001000100000000000000000010000000000008000400", @ANYRES32=r4, @ANYBLOB="0600150003"], 0x44}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="cfd5bb32e0538a93aa3c1cea30437432d6886ef3d0f96c932ccc1a3a54ae213fe30666a1d6695f2b9a9074c71118f67a7cee16f0e078291c1f2840aed24327c37eaaf204e2dfc688a5afe7541ba8087dbe33a28c007e49c2bc1d8618e7f34af845e3c4dd3195d2becdf0303e906215d2a343c57b0bc0908966a54adaa15232a5611ed1cf6c9275c68f3b76233f1b24326fee2e3a07623b36a9c4e6b3b0027d1d623d7e913116f62941e35239d9f1cf845438615da1db01053afbeb600d197e53694cac7eb6933cb2183742d7502cdd2d86c34926ca6b6e3d927dc20e5e11b301c22666cd2b51c07e42", 0xe9) 2m21.748246539s ago: executing program 38 (id=384): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x100, 0x2, 0x0, 0x0, "0000fa00ea8000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x541b, &(0x7f0000000ec0)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200048}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x401}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}}, 0x40) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000000626bd7000ffdb5b5e6d21cf3e35e90000000000"], 0x18}, 0x1, 0x0, 0x0, 0x20000014}, 0x200080c0) r6 = openat(r5, &(0x7f0000000200)='./file0\x00', 0x2800, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x14dc02, 0x0) r8 = dup(r7) ioctl$BLKGETSIZE64(r8, 0x80081272, &(0x7f0000000240)) syz_emit_ethernet(0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000073907800000300e00000010000000f00"/50], 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x49}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r6, r9, 0x20, 0x0, @val=@iter={&(0x7f0000000180)=@cgroup={0x2, r6, 0x1}, 0x10}}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m18.734082683s ago: executing program 39 (id=406): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050026bd7000000000000f00200008000300", @ANYRES32=r2, @ANYBLOB="35000e00800000000802110000010802110000005050505050500000000000000000000064000100250301040e7206030303030303000000080026006c090000080027000100000008000c006400000008000d"], 0x74}}, 0x20000014) 2m16.710840983s ago: executing program 40 (id=435): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x421062, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x54000002, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x81\x84\xb8\x92P\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r0, 0x0, 0x400000000000000, 0x7) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xde, &(0x7f0000000500)='/proc/net/\x00\x00t4/c3\x0fG\xf9aK\fX\a?\x00\x00\xff\x1a\xa5K@\xd1R|\xcb\xb6\xe1\x00\x82q\xee\xc6\xcc\xfd\xa4AB\xf7R\x87\x83\xd8\xb6\x9a1\xe3\xbe\xf0\xa5\x19\\\xea\xc9J\xbf\xa4\x93\x98\xc7\xe5LJ\xe0\xe0\nO\x0e\x0e]\xd6\xb1]{>\xf6\xdc:\x85\xed\r\xe3\xb8\xa3c\xe0\x06,\f2\x99\x1e\xd5\xc3\x8f\x9ay\xdd|\xc32 \t\xfa@%f\xde\xbc\xec0x0}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001440)=@delchain={0x24, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010029bd7000f4dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000002000000000000030064756d6d7930000000000000000000000a00ec0aaaaaaaaaaaaa0000"], 0x40}}, 0x0) 2m15.490920523s ago: executing program 1 (id=451): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/26, 0x1a) 2m15.490627296s ago: executing program 1 (id=452): socket$inet6_sctp(0xa, 0x1, 0x84) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) getpgid(r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80400, 0x4) 2m15.419329547s ago: executing program 1 (id=453): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050026bd7000000000000f0000000f000300", @ANYRES32=r2, @ANYBLOB="35000e00800000000802110000010802110000005050505050500000000000000000000064000100250301040e7206030303030303000000080026006c090000080027000100000008000c006400000008000d"], 0x74}}, 0x20000014) 2m15.197447866s ago: executing program 1 (id=454): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x5, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x437, 0x1, 0x25dfdbb8, {0x0, 0x0, 0x0, r2, 0x40c89}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xc}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x20020800) recvmmsg(r3, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0x861}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000600)=""/249, 0xf9}, {&(0x7f0000000200)=""/176, 0xb0}, {&(0x7f0000000180)}, {&(0x7f0000000400)=""/71, 0x47}], 0x4, &(0x7f0000000500)=""/53, 0x35}, 0x7}], 0x8, 0x10160, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}}], {0x14}}, 0xa4}}, 0x0) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc111f000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) 2m15.11544401s ago: executing program 41 (id=454): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x5, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x437, 0x1, 0x25dfdbb8, {0x0, 0x0, 0x0, r2, 0x40c89}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xc}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x20020800) recvmmsg(r3, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0x861}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000600)=""/249, 0xf9}, {&(0x7f0000000200)=""/176, 0xb0}, {&(0x7f0000000180)}, {&(0x7f0000000400)=""/71, 0x47}], 0x4, &(0x7f0000000500)=""/53, 0x35}, 0x7}], 0x8, 0x10160, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}}], {0x14}}, 0xa4}}, 0x0) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc111f000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) 2m13.094261291s ago: executing program 42 (id=444): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020a25bd7000ffdbdf2503000000050005008100000020000180060005004e20000008000300ac1414aa0600a84c64e6000008000300ac1414b70800060013000000050002000900000008000300ac1e01018e594bbb2c77d92ea0f88be44288284cb59320dc022c88962a35f36ad98417a3cd8e4e13a96ff735209dc42e574c725c6fcc81b348ee55f456a43dfaf9309c7177788d675bba3e77a43b39d89834c96bb9bcb0f5bba609b5849cf869cbb7624c3f368db22aa74f8163516ca0a6877bb8f4cdb53bf8958b253070e20d77ebd8c0d6e14a3a2e99924256da879fa7fd65a07c00af20d322e91b5e116401b9efed2323097502478efbf5786b255f9adfe96118ff2370cc6b62cd1ae07ca422fc5605c53370188b3f7fa2c193575755cfcc8d4b8f0cd1d5280e7082f6dc3d8d311b0d55971dd7561dc6226b997d70395ba6af3785c22ad94162188eb7d8afd00a4f478344db2b601719ab5cb56990b5ca2f280804340c461d87814c072ae85ddb5589ab5484364363de4f2093375145cf331d85867abeaa022a782fa206f7d4c1a03878c1ce886ea1cf4baef3176873bf8c11fa926a47bbc1eaf0a70616ce02ef62b6773518e07ce9a6ea6d7ea0ae417ff363f0"], 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x11) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r1) sendmsg$alg(r1, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x340000c1) sendmsg$rds(r1, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000008c0)=""/231, 0xe7}, {&(0x7f00000009c0)=""/123, 0x7b}, {&(0x7f0000000a80)=""/245, 0xf5}], 0x3, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="440000001800010000000000000000000a002000000000000000000018001600140001000100000000000000000010000000000008000400", @ANYRES32=r4, @ANYBLOB="0600150003"], 0x44}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="cfd5bb32e0538a93aa3c1cea30437432d6886ef3d0f96c932ccc1a3a54ae213fe30666a1d6695f2b9a9074c71118f67a7cee16f0e078291c1f2840aed24327c37eaaf204e2dfc688a5afe7541ba8087dbe33a28c007e49c2bc1d8618e7f34af845e3c4dd3195d2becdf0303e906215d2a343c57b0bc0908966a54adaa15232a5611ed1cf6c9275c68f3b76233f1b24326fee2e3a07623b36a9c4e6b3b0027d1d623d7e913116f62941e35239d9f1cf845438615da1db01053afbeb600d197e53694cac7eb6933cb2183742d7502cdd2d86c34926ca6b6e3d927dc20e5e11b301c22666cd2b51c07e42", 0xe9) 1m48.91968941s ago: executing program 3 (id=798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4080) (async) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(r1, 0x5396, &(0x7f0000000000)={0xb98c, 0x1}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) r3 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001d00010025bd7000fbdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="0200050008000100"], 0x2c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x40001, 0x0) (async) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2101, 0x0) (async, rerun: 64) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (rerun: 64) close_range(r4, 0xffffffffffffffff, 0x0) 1m48.650860375s ago: executing program 3 (id=801): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r4, &(0x7f0000000180)='0', 0xfe64) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f00000000c0), 0x3, r1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f00000001c0)={0xe, r5, r1}) 1m47.440251303s ago: executing program 3 (id=824): r0 = socket$kcm(0x10, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000f40)={0x5, 0x0, [{0x8000, 0x7, 0xfffff714, [0x9, 0x9, 0x1af, 0xb9a2, 0x1, 0x10, 0x8, 0x2]}, {0xfffff78a, 0x6, 0x9, [0x9f7, 0x3, 0x1, 0x0, 0x4, 0xf, 0x8, 0x200]}, {0x1ff, 0x9, 0x1ff, [0x94f, 0x1, 0x73e5d9cb, 0x9, 0x0, 0x9, 0xfffffff7, 0x400]}, {0x5, 0x7fffffff, 0xf, [0xbf, 0x100, 0x0, 0x10000, 0x8001, 0xca, 0x100, 0xf08b9bb]}, {0x2e, 0x3, 0x8, [0x8, 0x6, 0xb1, 0x7, 0x7, 0x0, 0x100, 0x4]}]}) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000000)={0x2, 0x3, 0x800}) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e1208001800000004825f7fef1de7d15e1f87d701040016000a00104006001025006010fab94dcf5c0461c1d67f6f94007134036ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d938dfe1d9d322fe7c9f8775730d16a4683f4d360000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951e215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d", 0xd8}], 0x1}, 0x0) 1m47.439743563s ago: executing program 3 (id=825): socket$inet6_sctp(0xa, 0x1, 0x84) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80400, 0x4) 1m47.349625882s ago: executing program 3 (id=826): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14020000100001000000000000000000fe880000000000000000000000000001fe80000000000000000000000000000000000000000000000a0020005c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="6401010100000000000000000000000000000000330000007f0000010000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000fdffffffffffffff0000000000000000000000000000000000000000000002000000000000000000000000000a000480000000000000000024011400736d3300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c006"], 0x214}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x480100, 0x0) ioctl$COMEDI_CMDTEST(r2, 0x8050640a, &(0x7f00000000c0)={0x6, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x88f, 0x40, 0x4, 0x20, 0x1, &(0x7f0000000000), 0x0, &(0x7f0000000180)="af39208376803d58adbdd7a9d632544d28f520422bcdd9381657604bb4eedf4ac16d773b44e11a8c1b688e9d3892724deb41278f2349be56d3bd4148a3a2e1cb984e2523d50a8e40c3cdd2903ab5357a4820", 0x52}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000001400)={'IDLETIMER\x00'}, &(0x7f0000001440)=0x1e) 1m47.349434512s ago: executing program 3 (id=827): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) poll(&(0x7f0000000440)=[{r0, 0x420}, {r0}, {r0, 0x9593}, {r0}, {r0, 0x4200}, {r0, 0x8010}, {r0, 0x4000}, {r0, 0x100}, {r0, 0x18}, {r0, 0x20}], 0xa, 0x1) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x0, @win={{0xd, 0x9}, 0x5, 0x3c61, &(0x7f0000000200)={{0xc, 0xffffffff, 0x4722, 0x8}, &(0x7f00000001c0)={{0x0, 0xc00000, 0x10000, 0xfffffff9}, &(0x7f0000000180)={{0x1, 0x8, 0x1, 0xa}}}}, 0x3, &(0x7f0000000240)="a790ea6eb215625bae0894623fbcfb89fd467a467921931c24398baf9312f17624dca7537128be0485241069763b99f29fd234b2336bbe4c7d81df1d3bfad8139680452437298786dc40bf3146b6a6b9c3c53717987ed2b2b565be1b76ae61e726a182ff9aac9aef72202c64939acb384c3b8c971d5fff940a2881d53f8143d8cc184cbaf232cad7205c76629585c1d437bb25b649741db4c94112005a2569593d9c2d79f01c996f9092c042ae0b76575b36484d65dfd5f8d20848d4fc4dbad3f49385d346d18f6bd31ffe4eef", 0xda}}) r1 = syz_io_uring_setup(0xe9, &(0x7f0000000000)={0x0, 0xab3f, 0x200, 0x0, 0x202}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000000140), 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 1m47.245964071s ago: executing program 43 (id=827): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) poll(&(0x7f0000000440)=[{r0, 0x420}, {r0}, {r0, 0x9593}, {r0}, {r0, 0x4200}, {r0, 0x8010}, {r0, 0x4000}, {r0, 0x100}, {r0, 0x18}, {r0, 0x20}], 0xa, 0x1) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x0, @win={{0xd, 0x9}, 0x5, 0x3c61, &(0x7f0000000200)={{0xc, 0xffffffff, 0x4722, 0x8}, &(0x7f00000001c0)={{0x0, 0xc00000, 0x10000, 0xfffffff9}, &(0x7f0000000180)={{0x1, 0x8, 0x1, 0xa}}}}, 0x3, &(0x7f0000000240)="a790ea6eb215625bae0894623fbcfb89fd467a467921931c24398baf9312f17624dca7537128be0485241069763b99f29fd234b2336bbe4c7d81df1d3bfad8139680452437298786dc40bf3146b6a6b9c3c53717987ed2b2b565be1b76ae61e726a182ff9aac9aef72202c64939acb384c3b8c971d5fff940a2881d53f8143d8cc184cbaf232cad7205c76629585c1d437bb25b649741db4c94112005a2569593d9c2d79f01c996f9092c042ae0b76575b36484d65dfd5f8d20848d4fc4dbad3f49385d346d18f6bd31ffe4eef", 0xda}}) r1 = syz_io_uring_setup(0xe9, &(0x7f0000000000)={0x0, 0xab3f, 0x200, 0x0, 0x202}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000000140), 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="791298000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c650000000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e80100008000000000887a5ad103649afa17690884f800031e03a6d1bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a56715a0a62a26a0f6a5480a55c22fe394ae0000000000000000000000000000437d57defb79ea000500000000000000000000f014a4a318ba48d35ae9f438000000000000db894b62a614cb1fdd46619c5d2200000000000700000000000000000000006dcd2f421400f69947e4f26e099c9e8369080663c909b7e7c87e3b5e8e5a6df77c8f7338cd5a85f211a41b5d529d4243e47d7ab0d5991756b59d363ba30b18fc2ff189a4e8db38ab97c6a125e2785619e84c6a2b50f0e3ff83ef5149aff43dc899fdebdc2c496e6bdd4dd4d21f06fe133f4444272c5f0839ad663100452a6c6b6421f7e89a33b339401eee2cd466ab2a93a1ee7fb8a9e455ba1c6e17b02a1cd7bf35d36cf5b2a0f063469ae0d0b9fc042b48e98626eb0f9754d8cbbefa3079fe63063047baff09e9aaf7600000fba9a88db9ebef86f7cb522a784bb6d37e5f802757a15c6735138b493db9df53440a63fc565a0b190a710ae1e6807cbeb415ac841e94b706974160a60a14e571274f333d23186143b95514c79b50994cb39cda343bda8f01cf8ec7cdfdace0289e83ce50a57d69bfecfaf69fe7ff5b0375a47d3eb57b41d8a0589b82a1cf1149ba3f21ea2b65433321eb1a6f04ecc713c2b26d27baa49e54c2babec86335b9f418b5a5eb997bc9dd65197124b9aa80fc4aa8defb986bf05c41b919886bb81ecd3d24cf9ecc7004000000000000002c70d32f5d55ef2a2cf7560cb2884f46a92b3c25550f73e407fc5d514b2b7a6b690e290e676266addb7d96e723dec9c418eec8c48dffb6f432b4d5fef16e4f0051ba7efc690022c3f62b37cb5682d8bfdfc637ad3bf089ef0117bcd395322fcfb8e8e0a6e2babceb5f289b1d991770681192bcd0b584c3497e455f30ab918a690514a87a7d8e1d5f169a4e680e9c390071d26f2e0e26fc062f2785f14c0404fe01fb4000000000000000577dcb1698a9021a36d73ed03651c1937b2c84046023a1a0a87b208e33ad2d7c2892b176877264e1d699b7401eb917b289f6f67060fda0fa44b54bd87517a2bf09dba7209e41db4288b61bda5960952c45e5c55f2cd68bf9c6ff33e46109584bf42e8696ef1876564fef6f24cbbed0db8ab7fda1ffcc8c9fd4ab2cbe8f8df8e5535b12a942a948eacdaf308d48932064cfc3329da74f6f3e4409d6764a29680e312bf1a0143180e6493c9201ea916e6c9b2566c558ad88d9f7c0aebf82f5807eecefa97ada9bbd9e478e5d7748ee188bc719ca7a73dce5b6758a767c4c6b7572ab25eb2d73986379d5685cb438fe7091d097cc8f33fc0f83dee76603d6580f1c8fc4c37efd305ccc5a25678180425718bb9344e60dda8dae2677bb602d29aa0810616a2fdbca7020d72291b592b84223e2522ee01f5bdaa0fc4eb8d71d948a2baccf3ea2aa79d4d9069d8c0000000000000000000000321cd67859b4567badee56f158406f08683bdc5ffe2dedc916000c71f922fa2dfead7535999436a4aeb908781893479319b8b55e00d90ae6f09f06be2a0fc0bc17bef53331208112a0132350c0c5dd4607547079acc9471300dea6ae01742dccdae69f932cef80bca1bfcb57b9c852cf8358a580044772a80f20de36f707385380155be8907029d039a1d1447fc06b7020221e0d439f3f47edcf12f913dc8b6389a540340ae37804728ea65352e630c2e90424d58d72fdc1b28403e1dc7aad238b81df3b2d4166d656c6a9c73554bdf4f7312a4c0271e0eb45b4a596b7fa928ac3683f09fdaca46226c1df2c6c866cb4412d17d3d52c38cf0f7bd3b0eea2d4e06d061bb1b7c8c52f37f4036932d00028abd4527f5649bd60df638596fd639d7b16860033754ab13419429e5e39f290751ab6bd9392aef5519cd8c16e1f1cb1f225cc84a1a62497c1e436142fe28048a2b4d133905814a1808bc5b3e45eaa9eaebd946bee806968aeeb5a9eed87eba3d25d0b412a1b4cf2d419a58b09fc275c4395a0bd332eb538321465043e5967dd22459d0f52190a37f93ab823431a81fa6f54de61637fd473e19a6f567fead100e7d8cac149b66ebe9973af846146c62065a64854ed21e8b6f6fbe78474b753915a42efcb7da8ad18bacff8d69e0af1ca1f8174530a21820738412b100b54ee9b4a0dc22d5fe1cadecaea73fbfad087b19ce53177488d230539c5174f572a539d9d7c42698aa82bccf030ad393f25c10baa17e919f647d0e31877b7a6c1d8d86583f884a0c1da07b9b6dced06cdeb0094aa635a82f233b5993926b8970a0840ba116a7d20a40efb3bd03c4bdf380a2510a0a1ea69811ded68943c71218b42783b38959753978f222e1396b9b36dee2ce205122a000577cab29f48bff4f88c417e6bf5fb430d925596f29aca8677ca5a113aeaa5e0252ca17244d6c76e78ff1bbd81a71c4dfc72431d7f1126f8bdbf4056ee0f58a1bf83d53b1de07489541182dc4ee0f573c25b6c15dad930bc7a770b5a4f407d7a879db7185f15f80100000000000000739cc97db66ec6b925955d9a591808947fdd8d484ad27353230a449fdf87fc46c73b852fec931cfb6718acf3315bf5e577d00beb77c5514bc05d576a81345a03ad7aae74c5d2b77d45718348aed4fcbcd1441ff31b8f038824a989a9446a4a69367b228b3d174230b7320fc4d3c03368db573816dd0c04e65d6f8ce48283e76abdddbb965e0b2568e93c9cc5494a55421793f562c50c53f876cbde93c5cc7a3099c99d9775af010ba093f8a13b771782a3cfb24fbde6ef763e20c613164ab014d1906c4e098f1431b6b2886a155c4bac2911d7ee6a646f5913205ebd175e68975b93c330e4f9131788026b3b7cd5b6452c9e17452ac70000000000000000000000c71185f72436640fd4294fc3da230f9065095be47d7a848df12316c3c8b184fe110b061987fd79cf7d83443e69d08e2e839ae4fbe26ef7764f4870ef3bd0ec12eb45f60ca10dbfe329271f0bc93b28798e982e0dd32fc14bd4313c63b2dbb568f33fb45acad2dc7f438ea162c0709c0bbe1ea13e1e47399286e8143f400d7adf5f69e455706626814ee49274667f47769293451fd49885a152b8d2cf18febc7993f4a93893c6c7b7e46a230359ef2443e6bb9f50bb0faa5eaafd3ed6d551600c46b58a29fd7ccbbb0616f0be27302b683eccd742791d97f4a1daa0447f004426fd09b67d926f51525da63987bc73af35b28277879089b89fff6edab2fa1caf660a46a1a9f09e2d095b1c4be95c7c33dc81857f580e36c0a78d94dd879ee18de4a6475858d2ded2e3427ae007cc6f8e5e99aa146667f71ad83f3ddcf5db2dc396d7da499b65cd98125f20c284fc84d6a70be1de44b49c82022225292199c75cc26beab98dce4c331ed722f01d0d6314a72416814a565f4d90a5f8a255810f23541082f4b06f451e4724cd882f4d589600000000005854ca490d7df9cc293547c9a51aecc7a92f417f6a4d327737f1b198252358832dbe43507844a0cc112af4ce457c173fa64174ffd5ab9501eeb85508ebb60e169c0736c5960f2fe08735d6a7aa7c1f4a6433e77d3e547bbe6cf5b5d93a491ab4bba1ea7a1e6f37618b1d74cff3630d85a210092211be1ec12a30891eef590b19cdde055d626818c64e1c56b8918f33441a64b54946571b7bc70fb065d3bb1647f6f989ab8159e6d1cfa6c0ec7329d7d2263ca22144bf17d8692f03b592bd0f610096094da096233984e95b9a8216a6e60a104ae0bb5f77ac70b4390ea2cb6f6c40c928fae489f447240a25fd0a5bd9d5b6cd2a98f8804862922c11229c4e45c765e4d3348af3d3aadd5cc24b39437f1ea2df0000000000000000000000000022b90d93a267f3af4e02606f0ce6c2ffc404b575a09d6e625f3248689005eb4a9c8df3c67e6b2b759cab3a7bedf1b927cd8ba6d13b3e7d7279515e3d6d20"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 23.427642528s ago: executing program 5 (id=2113): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="84", 0x1}], 0x2}}], 0x1, 0x4400c000) sendto$inet6(r1, &(0x7f0000000300), 0x48, 0x3b00, 0x0, 0xfffffffffffffdfd) 23.348616844s ago: executing program 5 (id=2114): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffb, 0x3000000, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c3a2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) (async) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c3a2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 23.347817073s ago: executing program 5 (id=2115): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="3504000040000511d25a35400c0002000200002037153e371d04018006041000450000002a560000e7ff00000000", 0x2e}, {&(0x7f0000000600)="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"/1031, 0x407}], 0x2}, 0x20) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000000380)={0x27, 0x0, 0x1, 0x3, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r5 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000040)=0x29, 0x4) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000000040)=""/185) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) bind$nfc_llcp(r3, &(0x7f0000000100)={0x27, 0x0, 0x1, 0x1, 0x0, 0xde, "c14d1dedaa1bde1a3299b7e0f741ef51772aba1135698eba8372f303d6cdbfc141f8b9600cce9cb5628c07ceb1d7cfe97e8ab6bbcd8c29f5f782d5fd6a6e81", 0x10}, 0x60) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r7, 0xffffffffffffffff, 0x0) 21.90009232s ago: executing program 5 (id=2123): r0 = syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480240001800b000100736f636b65740000140002800800024000000003080001400000000230000180080001006e6174002400028008000640000000030800054000000003080001400000000008000240000000020900010073797a30000000000900020073797a32"], 0xac}}, 0x0) ptrace(0x10, r0) ptrace$peekuser(0x3, r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r2 = gettid() timer_create(0x1, &(0x7f0000000040)={0x0, 0x1a, 0x4, @tid=r2}, &(0x7f0000000000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x77359400}, {0x0, 0x989680}}, 0x0) rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) r3 = open(&(0x7f0000000140)='./bus\x00', 0x88000, 0x1) mknodat$loop(r3, &(0x7f0000000480)='./file1\x00', 0x2000, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x0, 0x0) read$char_usb(r4, &(0x7f00000004c0)=""/156, 0x9c) readv(r4, &(0x7f0000000380)=[{&(0x7f0000000240)=""/237, 0xed}], 0x1) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') link(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)='./file1\x00') 21.80941087s ago: executing program 5 (id=2124): clock_getres(0x2, &(0x7f0000000380)) mq_timedreceive(0xffffffffffffffff, &(0x7f00000000c0)=""/137, 0x89, 0x3, &(0x7f0000000000)) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="470d000000000000000000000000080002"], 0x1c}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="14020000140001002dbd7000000000000a"], 0x214}], 0x1}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1c9, 0x3f) 21.3187971s ago: executing program 5 (id=2132): syz_emit_ethernet(0x8e, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f48cba00582c0020010000000000000000000000000001ff0200000000000000000000000000013a00008423c3b900020090780000000468cd85b50007840020010000000000000000000000000002fe8000000000000000000000000000bbaad25a7f302d4579b298392ccf95e1e48f10658b1a1c7edc1ffd13d9ccbf356d24e73200e777fc3d7b2b8d99405896870cf293b0"], 0x0) (async) syz_emit_ethernet(0x8e, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f48cba00582c0020010000000000000000000000000001ff0200000000000000000000000000013a00008423c3b900020090780000000468cd85b50007840020010000000000000000000000000002fe8000000000000000000000000000bbaad25a7f302d4579b298392ccf95e1e48f10658b1a1c7edc1ffd13d9ccbf356d24e73200e777fc3d7b2b8d99405896870cf293b0"], 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000200), 0xd22, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000380)={r6, 0x0, 0x1ff, 0x0, 0x0, [0x0], [0x9, 0x0, 0x0, 0x8], [0x3, 0x20000000, 0x100, 0xd], [0x1000010000000, 0x0, 0x7fffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r7}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r8}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xffffffffffffff7d, 0x101, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x2, 0x5, 0x1000000000, 0x9, 0x0, 0x7], 0xeeee8000, 0x2117c0}) (async) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xffffffffffffff7d, 0x101, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x2, 0x5, 0x1000000000, 0x9, 0x0, 0x7], 0xeeee8000, 0x2117c0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60", 0x14}], 0x1}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r12, @ANYBLOB="cf0400000000fcffffff1200000008000300", @ANYRES32=r13, @ANYBLOB="0a00060008021100000100000600b500ca060000b400be"], 0xe4}}, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r14 = syz_open_dev$video(&(0x7f00000003c0), 0x4, 0x406200) ioctl$VIDIOC_S_INPUT(r14, 0xc0045627, &(0x7f0000000400)=0x80000001) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000100)={0xc0, [0x2, 0x5, 0x3, 0x3, 0x5378, 0x9, 0x5, 0x6, 0x101, 0x2, 0x2, 0x1fb, 0xfff, 0x1000, 0x9, 0x40, 0xfaa, 0x81, 0x1000, 0x3, 0x1, 0x3ff, 0x6, 0x5d91, 0x3, 0xdb, 0x1, 0x1, 0x0, 0x5, 0x2, 0x1, 0x400, 0x1, 0xb, 0x8, 0xff, 0x0, 0x8, 0x6, 0x4, 0x8, 0x9, 0xcb2, 0x7, 0x1, 0xa, 0x3], 0x2}) (async) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000100)={0xc0, [0x2, 0x5, 0x3, 0x3, 0x5378, 0x9, 0x5, 0x6, 0x101, 0x2, 0x2, 0x1fb, 0xfff, 0x1000, 0x9, 0x40, 0xfaa, 0x81, 0x1000, 0x3, 0x1, 0x3ff, 0x6, 0x5d91, 0x3, 0xdb, 0x1, 0x1, 0x0, 0x5, 0x2, 0x1, 0x400, 0x1, 0xb, 0x8, 0xff, 0x0, 0x8, 0x6, 0x4, 0x8, 0x9, 0xcb2, 0x7, 0x1, 0xa, 0x3], 0x2}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000380)=0x9) (async) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000380)=0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0xa56, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0xffff, @rand_addr=' \x01\x00', 0x40}, @in={0x2, 0x4e22, @rand_addr=0x64010100}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e23, 0x2, @private2, 0x2}], 0xa4) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x2, 0xe, 0x3}) 21.27074518s ago: executing program 44 (id=2132): syz_emit_ethernet(0x8e, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f48cba00582c0020010000000000000000000000000001ff0200000000000000000000000000013a00008423c3b900020090780000000468cd85b50007840020010000000000000000000000000002fe8000000000000000000000000000bbaad25a7f302d4579b298392ccf95e1e48f10658b1a1c7edc1ffd13d9ccbf356d24e73200e777fc3d7b2b8d99405896870cf293b0"], 0x0) (async) syz_emit_ethernet(0x8e, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f48cba00582c0020010000000000000000000000000001ff0200000000000000000000000000013a00008423c3b900020090780000000468cd85b50007840020010000000000000000000000000002fe8000000000000000000000000000bbaad25a7f302d4579b298392ccf95e1e48f10658b1a1c7edc1ffd13d9ccbf356d24e73200e777fc3d7b2b8d99405896870cf293b0"], 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000200), 0xd22, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000380)={r6, 0x0, 0x1ff, 0x0, 0x0, [0x0], [0x9, 0x0, 0x0, 0x8], [0x3, 0x20000000, 0x100, 0xd], [0x1000010000000, 0x0, 0x7fffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r7}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r8}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xffffffffffffff7d, 0x101, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x2, 0x5, 0x1000000000, 0x9, 0x0, 0x7], 0xeeee8000, 0x2117c0}) (async) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xffffffffffffff7d, 0x101, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x2, 0x5, 0x1000000000, 0x9, 0x0, 0x7], 0xeeee8000, 0x2117c0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60", 0x14}], 0x1}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r12, @ANYBLOB="cf0400000000fcffffff1200000008000300", @ANYRES32=r13, @ANYBLOB="0a00060008021100000100000600b500ca060000b400be"], 0xe4}}, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r14 = syz_open_dev$video(&(0x7f00000003c0), 0x4, 0x406200) ioctl$VIDIOC_S_INPUT(r14, 0xc0045627, &(0x7f0000000400)=0x80000001) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000100)={0xc0, [0x2, 0x5, 0x3, 0x3, 0x5378, 0x9, 0x5, 0x6, 0x101, 0x2, 0x2, 0x1fb, 0xfff, 0x1000, 0x9, 0x40, 0xfaa, 0x81, 0x1000, 0x3, 0x1, 0x3ff, 0x6, 0x5d91, 0x3, 0xdb, 0x1, 0x1, 0x0, 0x5, 0x2, 0x1, 0x400, 0x1, 0xb, 0x8, 0xff, 0x0, 0x8, 0x6, 0x4, 0x8, 0x9, 0xcb2, 0x7, 0x1, 0xa, 0x3], 0x2}) (async) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000100)={0xc0, [0x2, 0x5, 0x3, 0x3, 0x5378, 0x9, 0x5, 0x6, 0x101, 0x2, 0x2, 0x1fb, 0xfff, 0x1000, 0x9, 0x40, 0xfaa, 0x81, 0x1000, 0x3, 0x1, 0x3ff, 0x6, 0x5d91, 0x3, 0xdb, 0x1, 0x1, 0x0, 0x5, 0x2, 0x1, 0x400, 0x1, 0xb, 0x8, 0xff, 0x0, 0x8, 0x6, 0x4, 0x8, 0x9, 0xcb2, 0x7, 0x1, 0xa, 0x3], 0x2}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000380)=0x9) (async) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000380)=0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0xa56, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0xffff, @rand_addr=' \x01\x00', 0x40}, @in={0x2, 0x4e22, @rand_addr=0x64010100}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e23, 0x2, @private2, 0x2}], 0xa4) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x2, 0xe, 0x3}) 6.179937192s ago: executing program 8 (id=2347): r0 = syz_open_dev$usbfs(&(0x7f00000002c0), 0xc, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES8=r0], 0x7c}}, 0x8050) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000300)={0x4, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x2f) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x133240) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x4080, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000000180)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="aedb349a0b7c77918a176a61", @ANYRES16=0x0, @ANYBLOB="000226bd7000fcdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x240040c1}, 0x48010) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4c, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x2000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000440)="0f01f20f205a66b8ed000f00d0c4e3116cb300800000000f013166baf80cb8b2709084ef66bafc0c66ed360f1c05000000000f798434000000000f01d1260f01c2"}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) mlock(&(0x7f00000e5000/0x3000)=nil, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r9, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x21a757f2, 0xfffff7fffffffffa}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) 5.816595338s ago: executing program 8 (id=2351): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x81, 0x2c}, 0x9c) 5.816293347s ago: executing program 8 (id=2352): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000800000000000000004000000180100002020702500000000002020207b1af8ff00000000bfa108000000000047010000f6ffffffb702000008001000b703000000000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x1}, 0x94) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="a800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000200012800b0001006d61637365630000100002800c0004000300000100c2800008000500", @ANYRES32=r3, @ANYBLOB="664f3b572f42bd3375d7a78050bb7399fb50ab93f034e3963d82deb9ce3f69ff9c8c0af51ad9ce0dadacbe7e253ec6e689f1ee0a1ec5e879fca4742ff01cde2d82979780ae78b2c17187ebe4ee8b617e58dc54db297cf1a691fc1e3e04843b1b5e9efaf9fe83eb9a541e25ffab2d5a387fc09476d547abc6f785204b46421c052ad40f2accfd09ff640ce6d2b7feddf96bd32ec9f5b627c32bd711631e49e70192ef3f8c779e06ef616f829d4cda476534b724df5e6b6017fb38051e083ee1864f42d1b8ff486311a300"/211], 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r4 = add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "0a92072159ab0fbeb5e67b804d1cf7382975a202eaa7b07c5a414337d40bb803fc93d356aea4d8caeea9cc85ad688e03e566ed55c6efaeed3cb57d4c51fb0235"}, 0x48, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r4, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) write(r0, &(0x7f0000000040)="05000000010000", 0x7) socket$inet6_mptcp(0xa, 0x1, 0x106) 5.750161788s ago: executing program 8 (id=2353): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./control\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@private1, @private0, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0xb, 0x0, 0x100, 0x4, 0x0, r2}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @private0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x150042, r2}) 5.746963687s ago: executing program 8 (id=2354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x86a00, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000240), 0x2000a54, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x76}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xe}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) connect$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x4) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r4, @ANYBLOB="040046000a0034000202020202020000080026006c090000240051"], 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1, 0x0, 0xf8}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x0, 0x1, 0x1, 0x4880}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x86a00, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000240), 0x2000a54, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r6, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r6, 0x0) (async) sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x76}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xe}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) (async) connect$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) close(0x4) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r4, @ANYBLOB="040046000a0034000202020202020000080026006c090000240051"], 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1, 0x0, 0xf8}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x0, 0x1, 0x1, 0x4880}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) 5.589882769s ago: executing program 8 (id=2356): bind$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1, 0x2}, 0xc) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0]) close_range(r0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x3f, &(0x7f00000008c0), 0x4) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x1) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000200)=0xef49) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)=ANY=[], 0x6) 3.979931664s ago: executing program 4 (id=2371): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x8c01, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x9, 0x42, 0x200, 0x20000}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40080c0}, 0x10010) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@can_newroute={0x44, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0x1d, 0x1, 0x7}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x0, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "d3698ac660061306"}, 0x4}}, @CGW_MOD_SET={0x15, 0x4, {{{0x2}, 0x6, 0x3, 0x0, 0x0, "5e0203a761254863"}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xde50a9659187563d}, 0x40000c0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 3.979445495s ago: executing program 4 (id=2372): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="140000000000000000000e000000"], 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x20, r3, 0x301, 0xfffffffc, 0x0, {0x2b}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth0_vlan\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x41, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xf, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80}, [@exit, @printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @jmp={0x5, 0x1, 0x0, 0x2, 0x4, 0x18, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x8083aa77a60c6815, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r4, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 3.879016811s ago: executing program 4 (id=2373): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xc) syz_open_dev$evdev(0x0, 0x0, 0x2002) (async) syz_open_dev$evdev(0x0, 0x0, 0x2002) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x10000}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9}, {0x0, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRESDEC, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008"], 0x3c}}, 0x8000) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) (async) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) 3.878678334s ago: executing program 4 (id=2374): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xb0, 0x3ff, 0x34325241, 0x0, [], [0x2b8, 0x200000], [0x0, 0x9, 0x0, 0x3]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x800, 0x100, 0x0, 0x5700000000000000, 0x401, 0x6, 0xfffffffffffffff7, 0x0, 0x13f, 0x100000001, 0xba25, 0xfff, 0x0, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x1c0080}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000006, 0x42031, 0xffffffffffffffff, 0x180000000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.390162971s ago: executing program 2 (id=2379): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x40a0012, r3, 0x0) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) 3.279698782s ago: executing program 2 (id=2382): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x7ff) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x15) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f00000000c0)=0x8000000000000000, 0x12) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000240012800900010069706970000000001400028005000900ff"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x20, 0x8, 0x0, 0x80000001, {{0x27, 0x4, 0x3, 0x3d, 0x9c, 0x64, 0x0, 0x6, 0x4, 0x0, @empty, @private=0xa010100, {[@lsrr={0x83, 0xb, 0x4c, [@rand_addr=0x64010100, @empty]}, @cipso={0x86, 0x45, 0x1, [{0x2, 0xb, "9bdb34127d254fb42e"}, {0x7, 0x7, "ade6b98c8f"}, {0x6, 0x8, 'F[g9y~'}, {0x2, 0xf, "141e1814b0d773af7ddaf77742"}, {0x2, 0x10, "1564a96a2968957f93fdd64d6606"}, {0x7, 0x6, "e313d9f6"}]}, @ssrr={0x89, 0x17, 0x8b, [@private=0xa010102, @rand_addr=0x64010100, @remote, @private=0xa010101, @local]}, @noop, @rr={0x7, 0x1f, 0x3b, [@rand_addr=0x64010101, @loopback, @dev={0xac, 0x14, 0x14, 0xe}, @empty, @private=0xa010101, @multicast1, @remote]}]}}}}}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000040)={@mcast2, 0x12, r9}) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 3.190213032s ago: executing program 2 (id=2383): r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000040), 0x445213198e0986c3, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000200)={0x100, r2}, 0x0) close(r1) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) syncfs(r3) 3.16494957s ago: executing program 2 (id=2384): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x2, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0x1244, &(0x7f00000004c0)={0x0, 0xd5a5, 0x1, 0x1, 0x147}, &(0x7f0000000400)=0x0, &(0x7f00000000c0)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r7, 0x4b69, &(0x7f0000000000)=""/221) io_uring_enter(r3, 0x47f6, 0x0, 0x8, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100001400210200000000faffffff031100800c0002"], 0x114}], 0x1}, 0x40014) 2.879968332s ago: executing program 4 (id=2385): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x80, 0x1) execve(&(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000980)={[&(0x7f00000005c0)='syz1\x00', &(0x7f0000000600)='LED\x00']}) 2.879092693s ago: executing program 4 (id=2386): ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) (async) r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_context(r0, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b) (async, rerun: 32) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x549440, 0x0) (rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) (async) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x9, 0x6, 0x5, 0x7fff}]}) preadv2(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000200)=""/130, 0x82}, {&(0x7f00000002c0)=""/143, 0x8f}, {&(0x7f0000000380)=""/18, 0x12}, {&(0x7f00000003c0)=""/59, 0x3b}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/215, 0xd7}, {&(0x7f0000000540)=""/42, 0x2a}], 0x7, 0xffffff80, 0x3ed9, 0x0) r2 = syz_usb_connect$cdc_ncm(0x4, 0x187, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x175, 0x2, 0x1, 0x5, 0x10, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "6a99a07b3912"}, {0x5, 0x24, 0x0, 0x7379}, {0xd, 0x24, 0xf, 0x1, 0xfffffff2, 0x178a, 0x9, 0x1}, {0x6, 0x24, 0x1a, 0x80, 0x1}, [@mdlm_detail={0xe8, 0x24, 0x13, 0x2, "bc48308c1f1a68efd635ea4013ff7f64f7824d91ad68d7e74d2500a694f8548b9da952ed2d66ac828bde88b88b1b0894051c6398606faaed5cd88e99eeab161bf0ad3d4c30633f81796e6ea161ba5380d05c1ae42cbbb99a773789242c09350082d7e7ef0bca0a64fb0612481923303f7c924aa9320c0241b3f53894b72511fb5f3256762fb7aeea14b6758f26b0f3b6cc814bf4a534a903f7e19d8af025c6dcc415a9ccfc3728599d614a58616ef848a2a3b5cffd13f24cffdae5cde7bf1d733278989cf333ce0876c153cca15f11f8a081425a3dc2b0f264a7d18ffbcf56df72348be9"}, @network_terminal={0x7, 0x24, 0xa, 0xa, 0x2, 0x2, 0xff}, @country_functional={0x10, 0x24, 0x7, 0x4, 0xfacf, [0xcf, 0x1000, 0x2, 0x9, 0x8]}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x2, 0x23}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x4, 0x1, 0x1, 0x0, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x0, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x3, 0xf7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x3, 0x5, 0x1a}}}}}}}]}}, &(0x7f0000000b00)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x250, 0x2, 0x80, 0x9c, 0xff, 0x4}, 0x95, &(0x7f0000000800)={0x5, 0xf, 0x95, 0x2, [@generic={0x7c, 0x10, 0x4, "7b8de26b6b41304bc2f89aaf68260ab933535735794011236d915d5a8f886fe2a8ae7dcbcf425bd50c675f855b29f751c051cbce1af0ecc07e668cce6d59acd6f0fe05331c6a797b9a34c5bfeb216740aabb0ea833e108cdf14c00b2f8a03e49d1e239c373b847f15861a6bff4218464a0a670ccb1c26e66dc"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "ba474c94e8411eeb5aedd2894a3c8293"}]}, 0x5, [{0x58, &(0x7f00000008c0)=@string={0x58, 0x3, "2406144849677665f2ba60e8e3e5a06a13cd95eae1a15c088210ae88f48872470f65006b7e755c26af53d0ab138dbb92b0b9dea8d3ef43cf5b7fbfd3135b6c814dbd0043fc1d73d1b743ae9793e9f6af39fc8b2dcfd6"}}, {0x36, &(0x7f0000000940)=@string={0x36, 0x3, "15ff26d6318caa60e5d4a5bfc998a2651afdfbd6a8533a313e00b5bd6c91fb3bfa1045077d67a163a23827515d533bc02ec37a08"}}, {0x4, &(0x7f0000000980)=@string={0x4, 0x3, 'na'}}, {0xfb, &(0x7f00000009c0)=@string={0xfb, 0x3, "805180339fa291ab07707fd96496adb4c6599b19b23ac6639390764e64a0c1ba5987bcbee5c550909cf1143627f98ef4982994765d6eba2c82890f4b8ac262ea04e61a60dd081a522a7c7c41cbe23025cc994cb4a3862e19aca97d88d671186a051c52c0f7fee7be4aaa036d3985ec4c4fd4bbbd582a63b6aad7654b06d73f9571ee05d745cd5a4ad99bbef6a11460900a1d768ded89cce6919ec9a2ed13a1d34dc81ad52bed152589ff9b3036a2d7ad5fc2154438cdc22a6509e74d507339f8485f1393b9990540f79230c4b2ef0ce1b0dc59a51de247ec3927b1f48449e23ee096ed8bb0f98144ce4aa4bd9996bd14c23560aa65ab658d29"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x425}}]}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000d00)={0x14, &(0x7f0000000b80)={0x40, 0x23, 0xff, {0xff, 0xc, "1f5b4b4d2e2bca1baaec0a7398983e0bbb7b3b4e90c6f86558ea1427b8b3e7087cd5159e2a510681db5ee9afe58f2098adcc7decacd6afcc4fef1b6da6194bd2ccad95982bac4b752837e3dcc6260b28768cea1882be771bda2a100a5743cbc541f61a57f31469613ae4dfc92c24a7548dfa8fca668c0c6c849b2465fdfe777edf42d13e9bb986a13b31fd65b69635e4f4aac3e65a9f4c3b4d6ed74d18b97ad4a7cb836122c0d6564375598803c0ec1330f3ed9da68df1e7307a5130b5c7d82cb2a947f6795a03190d8d7c11660ff88ff15e644e2d8f2957523992306ae1709192b04101186b8c32fdadf377acdc66189481097305d12db34b2adb2b7a"}}, &(0x7f0000000cc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000f80)={0x44, &(0x7f0000000d40)={0x0, 0x17, 0x56, "036096a210c0345a722360b7747b8fc1b0336130e170d67837253819339796ebc9e52545e24377e55aa5a7b8a7e47d96100043e35b59db8ff7f4d506bc5ebd5052feaaadcb234ce1343abd5853e5a710477374dad281"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0x77}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000e40)={0x20, 0x80, 0x1c, {0x7, 0x9, 0x2, 0xfffc, 0xc, 0xf, 0xe, 0x5, 0x9, 0xffff, 0x7, 0x2}}, &(0x7f0000000e80)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000ec0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000f00)={0x20, 0x87, 0x2, 0x7fff}, &(0x7f0000000f40)={0x20, 0x89, 0x2}}) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001000), 0x10580, 0x0) write$ppp(r3, &(0x7f0000001040)="ef2d91163199de291a848ac6dbaac64241c8fb93bc33772c9fb4d790a589d4821f4d9c503df5f036f36c7852ed1ad977546b4df09c2d8346f916a010775e612930a77de87e3b548460a2390718a4224b060b35e24013da02878f75768c4c39f5a1659ea6129347f0f21471cc", 0x6c) writev(r0, &(0x7f00000033c0)=[{&(0x7f00000010c0)="dfb180964ebd6136634aae79f5bf78312992217afa619bdf5123c57f643cfe0096e353c60cfb0d1dc3e8ed087e11018ec87332b529fa92cf5c932a35e8019539ee540f328e6859e125e3a39323f5d64df08af665760b517f8fc96ab904e0100fb7b544993677b617d2d376c836e3fcc2577f733d8cecf71b474975e00fb1323ab35bab94ad704e46f12435c429cc69f439bee05c8ade0ea82dc584d48b8a22e1e90797bbb9c8486d", 0xa8}, {&(0x7f0000001180)="2c0d0d632cf478e08a39ed804edc2366aadeb9065745ebfc69b1526806067ec29f292f5ded276aa732c1b85f7a95bdd97a9571b30161c7bbce892217271c34be800c1c3f54e2d0d6ecb755d28051f91064d29697a7869425310081e2bd70167a549201a04e0a1093f06cc7f4866f7d7d4510e0895d566e7564f2dfbc418609cba9fdfb4dfe43793eaca19bf202f3c9a54cc6cf630039753f56020b2fcd8cb4e610ddf94908aec92691443405ab2a46ee", 0xb0}, {&(0x7f0000001240)="6b8166edaf42622b0b6ec334cfbd081fe7d2cacff5c2bba764ef398c626c5c1e91252340fbd937309b3ed153fa9399827a7a206f5d28d50dd7bacfaa1d1a901f7a29255d3dd15616596fb2ace6861c6d1d30d0f6437ea76b0f0f7713ce6fc3d2666b2151c2fb42ba7a442280011b7762d62c1de5eea8d19da440007d3ab8bb06b0a1f9dc2802de47254fa826d30a14739bcd85ec8d96794f6459f018", 0x9c}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="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", 0x1000}, {&(0x7f0000003300)="21ddf2d19e5bb74db4bf2464ad01cb87f7a3889f5913a16bc456c275dfe0d99ea89ef56c0a13dff3317d490a63f2457686fea349ac334e9b6e69ea14f720b080cbb7efe47227f171c8739ffa42d93d0d18ae55a9e7d1a8d330ba42dfeffa0d30cf6cb9557cb5680646fea68d813ed309a5f82d5393eac40f5f671069d9a80c6811a36e4c79e9b4a94c58ec328e6a46b4beb3496ffd6b65a7037d0e31af0e027a092a", 0xa2}], 0x6) syz_usb_connect(0x5, 0x424, &(0x7f0000003440)={{0x12, 0x1, 0x101, 0x82, 0x56, 0x1b, 0x8, 0x147a, 0xe03a, 0xf984, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x412, 0x3, 0xe, 0x0, 0x40, 0xff, [{{0x9, 0x4, 0xd4, 0xc, 0x6, 0xe0, 0xf8, 0xfa, 0xc0, [@uac_as={[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x565, 0x4, 0x9, "f19927e61b53"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x9d, 0x3, 0x32, 0x7, "d7418cc46d"}]}], [{{0x9, 0x5, 0x0, 0x8, 0x10, 0x8, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x101}]}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0xb, 0xfe, 0x9}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0xab, 0x81, 0x2}}, {{0x9, 0x5, 0x7, 0x1, 0x40, 0xfe, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x9}, @generic={0xac, 0x2, "3f2cd54e20d7e4a9c26f4bddf964cb8368b34d29715948803eb309e8be5789c5ff5128d334de7ecb6b8b18ace0bcb5bb3b65ad02683fd8dfd2d1d49d0b45f90609d66cd5220eecf7bb045d96855169c897fc5ec87d508b9de452bf9b29ffe6681b877e3bd0fa9640c7338b540c54897883dfa5cd47621fe90536086657ee6b4bfcd93ba40ae65e4778ed56a540e91c6ddcf36e686edbf4c894053dc97a454bee4460bbe1200412e13f56"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x40, 0x1, 0x6, 0x8}}, {{0x9, 0x5, 0x4, 0x2, 0x40, 0x8, 0x0, 0xb, [@generic={0x3a, 0xf2f4536b2ff151aa, "ae3f0f590bceb214ad8785ddb6bad278f97c95c00a42f606fdfc988c3dcdd355f02ce911cec2fba57d53a1490ba5898fd507734bb20a9d7f"}]}}]}}, {{0x9, 0x4, 0x95, 0x2, 0x3, 0x6e, 0xd8, 0x72, 0x1, [], [{{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x1, 0x9, 0x9, [@generic={0x63, 0x9, "7eb1cee74c6ee197a06002d7e34a22bac82db01971c85e47338e16f4dfbbb65b1fdf755d4ebb89da2a0479ba7578ccb462b6da23d347968884057f3dd8e2bcf0b6cc826fa483b99ed7907e46ab0b45a9fa9f62870298144a6e57cf1fcb27f7fb32"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x4, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x2}]}}, {{0x9, 0x5, 0xc, 0x1c, 0x40, 0x2, 0xed, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0xc3, 0xd, 0x3}, @generic={0x79, 0xd, "602d0f2f6387ec4269c996e3bccc4364eaad58d1497c4392482bc827743d322a68456323c8b5240cbc7b03486c64235987b5d0f88d681cb2ef95daea4b0075fa9b4690e540de6877e10c8d4289acf87152db818a0f56aaad04cbdcad8887cd3b080b07a0287ba4748996359884b4479dc11330d773579d"}]}}]}}, {{0x9, 0x4, 0xc1, 0x7f, 0x3, 0xef, 0x1e, 0xc3, 0x4, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "b681"}, {0x5, 0x24, 0x0, 0xc}, {0xd, 0x24, 0xf, 0x1, 0xec, 0x8, 0x5, 0x6}, [@dmm={0x7, 0x24, 0x14, 0x8, 0xe}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x2, 0x2, 0x34}, @obex={0x5, 0x24, 0x15, 0xd}, @ncm={0x6, 0x24, 0x1a, 0x4, 0x1b}, @acm={0x4, 0x24, 0x2, 0xa}, @obex={0x5, 0x24, 0x15, 0x8000}]}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, '8R%j'}, {0x5, 0x24, 0x0, 0x61}, {0xd, 0x24, 0xf, 0x1, 0x8000000, 0x3, 0x8, 0xfa}, {0x6, 0x24, 0x1a, 0x3, 0x2c}, [@mbim={0xc, 0x24, 0x1b, 0x3, 0x9, 0x23, 0x8, 0xc000, 0x4}]}], [{{0x9, 0x5, 0xc4ee76f89759a1ed, 0x0, 0x10, 0x1, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0xfb0}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x6, 0x2, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x7}, @generic={0x65, 0x10, "78d3c6ffd334ec9629ad1996750e254557356eef3283c3163559929cb8ae5037fc0f4db24db8536382b55e07f26a9623594c432f7d8b3737236222d95d514d23ec0d3b0300bb21076b24e481bebde5ae522af67e9718edffd3a0e7618dd3e60d898863"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x3ff, 0x5, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x8}, @generic={0xa6, 0x8, "6c49c5aa33ee85e332b1a592ebce90542f4c3ce7c6295aaaf1e8c7ff5ef435cd34c09c188242329a2f4bd54e045bb5ed2fafe80401e93d011c0645f73a2531a1d5e8fae28b201fe189e387fb1b8cbcc124a84d0b9ace3807357e24b05befa88422dda7dfdf918cf143eb35224a30e533fdef6a025f43740314f20b002d8e09abbc311a1229e08619d0188fc1d8542a9af3a279ee67f7aa40636ce4b05da1e0cc0cfc0364"}]}}]}}]}}]}}, &(0x7f0000003ac0)={0xa, &(0x7f0000003880)={0xa, 0x6, 0x0, 0x1, 0x1, 0x6, 0x10, 0x4}, 0x19, &(0x7f00000038c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "19e68ca57fc4888aeca4ed0cdb2c6686"}]}, 0x5, [{0x4, &(0x7f0000003900)=@lang_id={0x4, 0x3, 0x42a}}, {0x45, &(0x7f0000003940)=@string={0x45, 0x3, "5646e057ab45c14911184aded0fd6a6d2896d7ceae8429f5e89a446e16e1e74aab201f45d31b585fc85bf4fb019c12eda38e7c491462d6ef5ade457aa97f5fd921225a"}}, {0x1f, &(0x7f00000039c0)=@string={0x1f, 0x3, "429030f04dbd7b2ef37a3db21fd18b960444b7e5a8349d728dba79274c"}}, {0x4, &(0x7f0000003a00)=@lang_id={0x4, 0x3, 0xc0a}}, {0x80, &(0x7f0000003a40)=@string={0x80, 0x3, "b2fc2ea36e0e305572a33968db073fd22cfe5001be6476157ad31091eaa0ea23123d27db2da5c8e1bda85ae140fd106a7c3d51387d4ac0a4a197d8c0c951419c42d07752feba09418d0965821689e0e1bac66dd52a54251c8f03268a1b3b943e9a1393e647d1fb884efdb471280635025783356dca6d00cc2a3de7367c04"}}]}) ioctl$FICLONE(r0, 0x40049409, r1) (async) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000003b40)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x60, 0x4, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x4e, 0x40, 0x8b}}}}}]}}]}}, &(0x7f0000003f80)={0xa, &(0x7f0000003b80)={0xa, 0x6, 0x201, 0x4, 0x2, 0x40, 0xbf, 0x1}, 0x25, &(0x7f0000003bc0)={0x5, 0xf, 0x25, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0xf, 0x2, 0x0, 0x0, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x6, 0xd, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3b, 0x3, 0x77, 0x0, 0x3}]}, 0x8, [{0xe, &(0x7f0000003c00)=@string={0xe, 0x3, "962198941ee483d294dff548"}}, {0x41, &(0x7f0000003c40)=@string={0x41, 0x3, "6c03a30567eba3aa312a3375c9885e5e2c245e485ca092be07aa50cdcef14c16b38530218b78139573e66c070faa4a3cba75d3f385f8246fdab0d3ee02f419"}}, {0x89, &(0x7f0000003cc0)=@string={0x89, 0x3, "c974e6c0f300d450234ac82d9b20c459ad319c5f847995cb5cf3e76a9553eba3f0bb82720aee6c0f033f090e23002bb8c17012c220ca7c46d5c02231c865a5e4b55c610cbcada9fba19aa9cb382207cb10df4f5d260f79206fe408637166c5473ec50636ac57dcf2e4c9ef2286d78b9a40478b084cd7f9ef976764e3938f0c2114acc2edc2e665"}}, {0x4, &(0x7f0000003d80)=@lang_id={0x4, 0x3, 0x2e}}, {0x35, &(0x7f0000003dc0)=@string={0x35, 0x3, "8343fc4113f9c6a2ce577c22a75b4bd90915bcb348cd735ae7ac0d4632796f9565b8d80757eae9d5ba275349e6deb052cf7fc0"}}, {0x4, &(0x7f0000003e00)=@lang_id={0x4, 0x3, 0x200a}}, {0x3c, &(0x7f0000003e40)=@string={0x3c, 0x3, "7f5892588c84e84860f386f7b326a54e7b4b551cef0187dc8b6523e2fb49033e536dd339e7327337798ab81dd3b407e44b70d9b066486a589da1"}}, {0xe3, &(0x7f0000003e80)=@string={0xe3, 0x3, "b2480fc3915829ca6ce2248d71889e62e290ff7227c3bd9a22771204db7b3137d870922059b5763a9ea09504eca3aaaf8227f09b98df8e3d58233e9e0fc93c08bd3b43b37e89f53c9a10e2218f0c1ead30235bef8f9c8b51aae85933d901471e92653361ae7ed96d574e508ce2218268394df1b6d433c8ed6557c5f3a31f5b34e898a52d6c7717464d504d3a1c76f884ae967723b5c4144adf09982ec752b42d0ea9118374b7ec09449a2d2c76d198a304c5f35d3fd7939173a3e39c7947cba0186ff74d55f7ffb9f5cafb97c6cbe181b5ca4781c3da9baaa1f2a53280c2e0ccb5"}}]}) (async) epoll_create1(0x80000) (async) syz_usb_connect$cdc_ncm(0x4, 0xeb, &(0x7f0000004000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd9, 0x2, 0x1, 0x7, 0x20, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "51af"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x95, 0x3, 0x4}, {0x6, 0x24, 0x1a, 0x400, 0x22}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x40}, @acm={0x4, 0x24, 0x2, 0x3}, @mdlm_detail={0x61, 0x24, 0x13, 0xf0, "358ba169736bbda2d9980f10c19ea4424ce48022b1d906fc2e934a0d2254afdc08dde43940d637b03a4d18612d8a7a9c08fdcf065c2c19357a0f27475d35fefe0c09018eda73973dc495dfda75b77e1d709cf45d5ac2236a239d94b890"}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x1, 0xfff8}, @acm={0x4, 0x24, 0x2, 0xc}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xbd, 0x2d, 0xc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9, 0x81, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x50, 0x5, 0xb}}}}}}}]}}, &(0x7f00000042c0)={0xa, &(0x7f0000004100)={0xa, 0x6, 0x310, 0x0, 0x6, 0x1, 0x8, 0xa5}, 0x10, &(0x7f0000004140)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0xaa, 0xd0, 0x4, 0x40}]}, 0x4, [{0x4, &(0x7f0000004180)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f00000041c0)=@lang_id={0x4, 0x3, 0x422}}, {0x67, &(0x7f0000004200)=@string={0x67, 0x3, "95f8b86ae063685b215f7c1d91723c633d594c059512e66bbd973ae657bd8eab328e8a10d07a63875bb0ba9cf24aaba7c129035a2469963c020ca2792667cc84034f924fce9e0972884e64d078e62912f5a1086a10e51957b63adc031437d0cba5fb1a9b9a"}}, {0x4, &(0x7f0000004280)=@lang_id={0x4, 0x3, 0x812}}]}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000004340), 0x509000) ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f0000004380)={0x7, r3, 'id1\x00'}) connect$inet(r1, &(0x7f0000004400)={0x2, 0x4e23, @multicast1}, 0x10) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000004640)={0x1b, 0x0, 0x0, 0xff, 0x0, r1, 0x7, '\x00', 0x0, r5, 0x1, 0x3, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004780)={0x11, 0x10, &(0x7f0000004440)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff800}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @alu={0x4, 0x0, 0x1, 0x5, 0x9, 0xc, 0x1}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xa}, @generic={0x8, 0x6, 0x7, 0x4, 0x9}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}], &(0x7f00000044c0)='syzkaller\x00', 0x10001, 0xdf, &(0x7f0000004500)=""/223, 0x41000, 0x7d5606a430428cda, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000004600)={0x1, 0x6, 0x1c}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000046c0)=[r1, r6, r5, r1], &(0x7f0000004700)=[{0x5, 0x1, 0x8}, {0x1, 0x3, 0x6, 0x4}, {0x4, 0x1, 0xe, 0x6}, {0x5, 0x2, 0x8, 0x3}, {0x0, 0x5, 0x0, 0x8}], 0x10, 0x3}, 0x94) r7 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000004840)={'wlan1\x00'}) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f00000048c0)={0x14, 0x25, &(0x7f0000004880)="4a1cb0092eb3c7b918d936b89cb6acd9928dc92b26d3172bde05b16a6eb2087476798f5806"}) r8 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r8, 0x111, 0x3, 0x1, 0x4) (async, rerun: 64) write$cgroup_devices(r1, &(0x7f0000004900)={'a', ' *:* ', 'rwm\x00'}, 0xa) (async, rerun: 64) close_range(r1, r6, 0x0) (async) unshare(0x25020100) 2.536662079s ago: executing program 0 (id=2387): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x200013, 0x0) 2.536132451s ago: executing program 0 (id=2388): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x8, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000340)={0x12, 0x25, 0xb, 0xc, 0x7, 0xffff70a4, 0x6, 0x123, 0x1}) readv(r3, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/19, 0x13}, {&(0x7f00000003c0)=""/177, 0xb1}, {&(0x7f0000000480)=""/75, 0x4b}, {&(0x7f0000000500)=""/143, 0x8f}, {&(0x7f00000005c0)=""/221, 0xdd}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x6) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x2c, r1, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x18}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a838895069"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044811}, 0x4048000) ioctl$DRM_IOCTL_MODE_ADDFB(r4, 0xc01c64ae, &(0x7f0000001840)={0x0, 0x80000000, 0x8, 0x3fb37c45, 0xffff, 0x7, 0x3}) write$rfkill(r3, &(0x7f0000001880)={0x5, 0x6}, 0x8) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f00000018c0)) r5 = syz_io_uring_complete(0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000001980), &(0x7f00000019c0)=0x4) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r5, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x20, r1, 0x30c, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x5d}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x80) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000001b00)={@any, 0x1}) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000001b40)) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000001bc0)={0x798a, 0x17, [{0x9}, {0xa}, {0xe}, {0xa}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0xb}, {0xc}, {}, {0x7}, {0xa}, {0x5, 0x1}, {0xa, 0x1}, {0x7, 0x1}, {0x7, 0x1}, {0x1}, {0xa, 0x1}, {0xa, 0x1}, {0xd}, {0x7}, {0x3}, {0x4}]}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001c00), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000001c40)={0x3, r3}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r7, 0x8983, &(0x7f0000001c80)) write$UHID_CREATE(r5, &(0x7f0000001d80)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000001cc0)=""/191, 0xbf, 0x8, 0x7ff, 0x1, 0x3, 0x3}}, 0x120) ioctl$SIOCX25SCAUSEDIAG(r5, 0x89ec, &(0x7f0000001ec0)={0x9, 0x10}) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000001f40)={0x9, 0x18, '\x00', 0x1, &(0x7f0000001f00)=[0x0, 0x0, 0x0]}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002240)={0x0, 0x23, &(0x7f0000001fc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@ldst={0x0, 0x0, 0x6, 0x5, 0x1, 0x100, 0x8}, @map_fd={0x18, 0x9, 0x1, 0x0, r3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002100)='syzkaller\x00', 0x401, 0x73, &(0x7f0000002140)=""/115, 0x41000, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000021c0)={0x0, 0x3, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002200)=[r4, r4, r4, r3, r5], 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002300)={&(0x7f0000001f80)='afs_make_fs_call2\x00', r8, 0x0, 0x4}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) 2.460303609s ago: executing program 0 (id=2389): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x9000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) 2.410268128s ago: executing program 0 (id=2390): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x6033000) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) read(r0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 2.35031338s ago: executing program 0 (id=2391): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0xa50003d1) r2 = inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x1000000) inotify_rm_watch(r1, r2) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r3, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0x2000}], 0x2) inotify_rm_watch(r0, r2) mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='.\x00', &(0x7f0000000080)='adfs\x00', 0x200800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) (async) inotify_init() (async) inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0xa50003d1) (async) inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x1000000) (async) inotify_rm_watch(r1, r2) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) writev(r3, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0x2000}], 0x2) (async) inotify_rm_watch(r0, r2) (async) mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='.\x00', &(0x7f0000000080)='adfs\x00', 0x200800, 0x0) (async) 2.299388261s ago: executing program 0 (id=2392): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x5, 0x0, 0xffff}) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x200, 0x70bd2c, 0x25dfdbff, {0xa, 0x8}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0xad, 0x27, 0x6, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x3, 0x0, 0x0, 'queue1\x00'}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, &(0x7f0000000400)={0x2c, &(0x7f0000000040)={0x20, 0x8, 0x2b, {0x2b, 0x29, "d0580d13a60e6cdee279083efff6daaea879f631571bc36cff1349aeb305ce67649cd89ccb3cfd69c8"}}, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003f6000000f603ef13c3a48398ac42382bffec42bd29502048e93b37b29c4154a57529125621b34593132a0dcc6652639cc6f8d0fc7beb96a2a0a7cddcf97be99bf36156b938649f46924e34fae21d3265a030be1fa9d0048f6ae2003f86aff28929eef1321b1be6c34c6bc7d14a0661b5255ce916a69d7e795349d41544698f16175fad0bd767f68b4170734173b5c4a42e1a5f9f9afbdd5ba5f44ad3a1bccfd056afaa09ba76d670cc749c58a6059aa8559e96dc898bdfcfdad3894cfefa31c60ecde0ae28c8b8044495357a6484f20052b3c844cb4c8c7e4feae066e2c91fc1abb2bd6128a0d954ef4ce359eca971aa6b18355c869006e260da"], &(0x7f0000000c00)=ANY=[@ANYBLOB="000f3d000000050f3d000224100a02e63f00000f00060030400100cf000000f0c0ff0000ff0000c0000000c0c0000014100404a4000000000300000000000000040000026426a02254d18cad03835e8eeb6c0f06a1c80cf0ea17ba24a8721d7419047304a35a65f8020dbbb3e14d7b5f5057b263d831dbfdca77a73d7b4176ae97b2a2fb916eb8b2ade8fe32268b6f068b63d5aa07742c6a"], &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x3, 0x8, 0x74, "facd2baf", "40a866f8"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x1, 0x2, 0x8, 0x5, 0x0, 0x17c}}}, &(0x7f0000000900)={0x84, &(0x7f0000000ac0)=ANY=[@ANYBLOB="6014b3000000ef738232eedbed592244d624a5c2bc0fbcb66063c01109aade96ec1e2b258357cf86795b6567c76807df94819400849d058ba859675a8effe28072c508de792d825192c3a5c93b67e4d74bb256941a9c8b2c391038f978b26b7539037cef48be6f79bd98e8a5855e8a5501a59558270b3d2dfd7639b9f5ec27f36d0f059054828c4e0e995d142a74b87823f11ee2e1fa3796349f247722b5f660bb858fca806dfebe08c69b6a3f0ad73d69eb498df6cb0614d182d4d08935de0e05cfc806c41ca7518d3c9cc4c3e03881ef94ab06579994fcb7aa42bdbc9adf526266c631fc48fb4bc99f091b56c8d1c0863a26029c14ab93be94def1c7f82b9b373721eee6ec3ef6495db23dd69dc3a949132be99b689ba2dae30bf2525688b01b7de23fa2491ce092d8"], &(0x7f0000000540)={0x0, 0xa, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x40}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5, 0x2}}, &(0x7f00000009c0)=ANY=[@ANYBLOB="200029001000300010000f000000261d77040000000000000063a28f4e431f7dee2db710a3eed19f7dbf7864a1c6556018b1b2191a79d59ee1e58666a11b240edabcc44990eb"], &(0x7f0000000a40)={0x40, 0x7, 0x2, 0x40}, &(0x7f0000000a80)={0x40, 0x9, 0x1}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "a13e"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x13, 0x6, @random="16f2142cd34f"}, &(0x7f0000000780)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "b4c5"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0xf}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0xa6}}) write$sndseq(r3, &(0x7f0000000200)=[{0x84, 0x77, 0x0, 0x0, @tick=0x7, {}, {}, @raw32={[0x0, 0xfffffffe]}}, {0x6, 0x43, 0x84, 0x3, @time={0x9}, {0xff, 0x9}, {0x2, 0x6}, @raw32={[0x9, 0xfffffffa, 0x7]}}], 0x38) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000001c0)={0x223, @tick=0x81f, 0x0, {0x4, 0xfc}, 0xff, 0x2}) r5 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmat(r5, &(0x7f0000ffb000/0x3000)=nil, 0x2000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f00000000c0)={r9, 0x4}, 0x8) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x180, 0xffffff80, 0x178, 0x0, 0x178, 0x2a0, 0x230, 0x258, 0x2a0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x138, 0x180, 0x12, {0x959f1400}, [@common=@unspec=@ipvs={{0x48}, {@ipv4=@multicast1}}, @common=@unspec=@limit={{0x48}, {0x0, 0x412}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'geneve1\x00'}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ipv6header={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r11 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r11, &(0x7f0000000380)=ANY=[@ANYBLOB='LINE \'Mic\' 000000000000'], 0xa9) close(r11) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) 129.713384ms ago: executing program 2 (id=2393): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x83, 0xb837, 0x1, 0x3ff}}) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x80) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x5, 0x80, 0x1, 0x2, 0x9, 0x101, 0x2000004, 0x2, 0x8, 0x0, 0x85f, 0x81, 0xb853, 0x8, 0x0, 0x0, {0x7, 0x9}, 0x8, 0x4e}}) r2 = socket(0x11, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000040)='t\xa3D)\xcb(/\x00\xd9\xf8x\xf2\x9dw$\xaeF\x03\x91\xbe\x13r\xcc\xd7\xec&\x9f\xd4U\x1e$\x93\x938\xaa\x1e\x92\x9fk\xef\xe1\xfe\x11\x89\xf1\x8fX\x8c\xb0l\xda\xd0\xc1#\x89\x97g\xe1\xd2\xdd\xa3lzM:\x17\x06\x1d<\xb2\x8e\xb2\xa1J(\\Q\xef\xfa\xff\xff\xff\xff\xff\xff\xffs\xa6\x98q\xba\x02\xbe\xd0\xa5D\x13]Uo\x84\x00') bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept(r2, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="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"}, {&(0x7f00000000c0)="86ac9e74fd899a1e591dff1275cdf516f510b9c6284880054a42487028f43628a7fd3b06d7dbde1d263481fddc95531a8179bf6840f8703a3ef39d8c9969eb8e97b674e43574e74c52561e548bd40c1cbe0c4824c18b81c5779748512b1a518eed22ff89315a42945e366840457b91cd262a30ee266cab49a79bc3cc119247fe454b975a117f1c2629b3bd"}, {&(0x7f0000000380)="0cbc1166efb7c4a2022c2a856de10685d497750700000000000000efe9349f7b4b67ddaa68f10e126421e473e9f3acf76070a8fc5a3bf5b09c0c840ce2e637167738fbe17c393880df96b57693ae54c866e07040005207b441899ea4a689c1"}], 0x0, &(0x7f0000000600)=[@op, @assoc={0x0, 0x117, 0x4, 0x8}], 0x0, 0x80}], 0x32, 0x8000) recvmsg(r4, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x8001) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) renameat(r8, &(0x7f00000005c0)='./file0\x00', r8, &(0x7f0000000680)='./file0\x00') ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000580)={0x2, r8}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'pim6reg1\x00'}) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) io_uring_enter(r10, 0xb1, 0x63ed, 0x21, &(0x7f0000000500)={[0x5]}, 0x8) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="020114000129184ad4a08058195c60140000002f0600ac141414e0ecff02808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e46691e233da4d163f53ab1b3f65c3042e749c2d4c8303a0f7fbda34fb8825f80200a3"], 0xdd12}], 0x1, 0x0, 0x0, 0x4008084}, 0x10) 0s ago: executing program 2 (id=2394): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r6, {0x3, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48020041}, 0x0) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f00000000c0)={0x7, 0x9, 0x1, 0x4, 0x10001, 0x2, 0x100, 0x2, r9}, &(0x7f00000001c0)=0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x10, 0x1, 0x2, 0x7fffffff, 0x31052, r2, 0x6, '\x00', r6, r0, 0x0, 0x4, 0x2}, 0x50) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x110a}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x40, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x3, 0x9d, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x1, 0x9c, 0x2}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0x3, 0x0, 0x5, 0x40, 0x2}, 0x8, &(0x7f0000000440)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0x40, &(0x7f0000000480)=@string={0x40, 0x3, "1ee10b812706a1afec80db5cb7ffe99447833c19d2347e14036b44c6892e4f318c37c5beb26e0354f1b0c70def26a3c417706083f4f0bc34592d6ccecbfd"}}, {0x92, &(0x7f00000004c0)=@string={0x92, 0x3, "c923927683c03fcd3622761058ac227582c568b394a68f6f00ce746f17a211cdc812350a6aa68e3e90044d345959a1564bacfd5aedbd84310692125a556eba011e27fb51553435fa9886ec4fdae3fec05221341114d95de1241619f1f0cacb623909bf39b8d6525b157ba6453a6cdf7506ae472f3c74132f7f55043343fd1a1c52f1eba51cd17b6649a67c9e91bca6e8"}}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1070, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=2395): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xc00, 0x5) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000008800"/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f00000001c0)='GPL\x00'}, 0x90) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r2, &(0x7f00000004c0)=""/57, 0x39) mkdirat(r0, &(0x7f0000000080)='./file0/file0\x00', 0x29) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0x2, 0x0, &(0x7f0000000400)) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x1) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e24, 0x1ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x6}, 0x1c) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x1, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x800) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d98d439da6f7198a8f29a6d358fd431ae70b52e9bb5276522b899d4b73279e39a21a9069a1c7cc77d8595a3f244b097c1b856a6a86a4392f6d7a1c1cd40e4b10b8d030159760774b130f6a0aa980a44fc6d7939c6a04db81df609c229131f9293db5a2e1e7b127aa00b4e19d9c5cfaa710aca140df421341c21d629d7e67b3d06747f2708cb0b5425857a09e34a6494bf54be280af9857b8c8aa27a97acbd30adc28f475e835451467dced2aa457f763e7fe8766d08096a18aa4836182dc9c9e96e9c9fbe350716a841bc6880e79c4fb5ae54af743e7d696387c0b8e4", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r3, &(0x7f000000cb00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f00000000c0)={0x50, 0x0, r8, {0x7, 0x21, 0x0, 0x945f4a821577fb5d}}, 0x50) chmod(&(0x7f0000000000)='./file0\x00', 0x5) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x7, {0x0, 0x0, 0x0, {0x5, 0xf400000000000000, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x80010000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): for unknown connection handle 201 [ 209.800652][T12389] batman_adv: batadv0: Adding interface: dummy0 [ 209.802728][T12389] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.810373][T12389] batman_adv: batadv0: Interface activated: dummy0 [ 209.827565][T12389] batadv0: mtu less than device minimum [ 209.830045][T12389] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 209.833773][T12389] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 209.837493][T12389] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 209.841172][T12389] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 209.844931][T12389] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 209.848583][T12389] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 209.852237][T12389] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 209.855957][T12389] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 209.859613][T12389] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 209.870103][ T40] audit: type=1400 audit(465.778:94067): avc: denied { create } for pid=12388 comm="syz.4.1800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 210.009637][T12400] netlink: 'syz.5.1803': attribute type 10 has an invalid length. [ 210.012123][T12400] team0: Cannot enslave team device to itself [ 210.014486][T12400] netlink: 'syz.5.1803': attribute type 1 has an invalid length. [ 210.053199][ T6036] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 210.206407][ T6036] usb 7-1: config 0 interface 0 has no altsetting 0 [ 210.209774][ T6036] usb 7-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 210.216308][T12409] QAT: failed to copy from user cfg_data. [ 210.220217][ T6036] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.227913][ T6036] usb 7-1: config 0 descriptor?? [ 210.253219][ T6016] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 210.280289][T12415] SELinux: policydb string does not match my string SE Linux [ 210.282806][T12415] SELinux: failed to load policy [ 210.287368][T12415] loop6: detected capacity change from 0 to 524287999 [ 210.335873][T12415] netlink: 'syz.4.1809': attribute type 10 has an invalid length. [ 210.338362][T12415] hsr_slave_0: entered allmulticast mode [ 210.340466][T12415] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 210.348975][T12415] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1809'. [ 210.414705][ T6016] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.422068][ T6016] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 210.426827][ T6016] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 210.429898][ T6016] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 210.435089][ T6016] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 210.438420][ T6016] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 210.441049][ T6016] usb 10-1: Manufacturer: syz [ 210.448579][ T6016] usb 10-1: config 0 descriptor?? [ 210.460506][T12392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.464516][T12392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.469649][T12439] xt_TCPMSS: Only works on TCP SYN packets [ 210.494298][T12440] binder: BINDER_SET_CONTEXT_MGR already set [ 210.496516][T12440] binder: 12438:12440 ioctl 40046207 0 returned -16 [ 210.713277][ T6016] rc_core: IR keymap rc-hauppauge not found [ 210.715810][ T6016] Registered IR keymap rc-empty [ 210.718175][ T6016] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 210.743361][ T6016] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 210.766685][ T6016] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 210.771429][ T6016] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input31 [ 210.779097][ T6016] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 210.793353][ T6016] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 210.798485][ T6036] usbhid 7-1:0.0: can't add hid device: -71 [ 210.800439][ T6036] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 210.808507][ T6036] usb 7-1: USB disconnect, device number 11 [ 210.813206][ T6016] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 210.843291][ T6016] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 210.864759][ T6016] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 210.885441][ T6016] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 210.890407][T12462] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1820'. [ 210.903567][ T6016] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 210.923601][ T6016] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 210.943833][ T6016] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 210.964075][ T6016] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 210.984282][ T6016] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 210.987154][ T6016] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 210.991170][ T6016] usb 10-1: USB disconnect, device number 12 [ 210.993505][T12469] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1823'. [ 211.104505][T12475] kvm: emulating exchange as write [ 211.343657][T12481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1827'. [ 211.346763][T12481] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1827'. [ 211.381314][T12486] tmpfs: Bad value for 'mpol' [ 211.397052][T12489] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1830'. [ 211.401007][T12489] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1830'. [ 211.404072][T12489] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1830'. [ 211.407064][T12489] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1830'. [ 211.410032][T12489] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1830'. [ 211.448131][T12492] netlink: 'syz.0.1831': attribute type 9 has an invalid length. [ 211.450530][T12492] netlink: 'syz.0.1831': attribute type 6 has an invalid length. [ 211.571222][T12511] 9p: Unknown access argument 18446744073709551615: -34 [ 211.600020][T12512] cgroup: Unknown subsys name 'cpuset' [ 211.747003][T12515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12515 comm=syz.4.1837 [ 211.798762][T12522] syzkaller1: entered promiscuous mode [ 211.800516][T12522] syzkaller1: entered allmulticast mode [ 211.901034][T12527] netlink: 'syz.4.1840': attribute type 10 has an invalid length. [ 211.904640][T12527] team0: Cannot enslave team device to itself [ 211.908202][T12527] netlink: 'syz.4.1840': attribute type 1 has an invalid length. [ 211.956369][T12529] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 211.977514][T12529] cramfs: wrong magic [ 212.165835][ T6035] usb 9-1: new full-speed USB device number 28 using dummy_hcd [ 212.237688][T11179] Bluetooth: hci3: Frame reassembly failed (-84) [ 212.245612][T12538] overlayfs: maximum fs stacking depth exceeded [ 212.247026][ T40] audit: type=1400 audit(468.158:94068): avc: denied { mounton } for pid=12537 comm="syz.0.1844" path="/324/file0" dev="hugetlbfs" ino=65415 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 212.325753][ T6035] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.329176][ T6035] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 212.332608][ T6035] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 212.336260][ T6035] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 212.341356][ T6035] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 212.344582][ T6035] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 212.347108][ T6035] usb 9-1: Manufacturer: syz [ 212.350425][ T6035] usb 9-1: config 0 descriptor?? [ 212.593372][ T6035] rc_core: IR keymap rc-hauppauge not found [ 212.595499][ T6035] Registered IR keymap rc-empty [ 212.597123][ T6035] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 212.613537][ T6035] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 212.634106][ T6035] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 212.638744][ T6035] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input32 [ 212.644253][ T6035] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 212.673466][ T6035] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 212.693429][ T6035] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 212.718550][ T40] audit: type=1400 audit(468.628:94069): avc: denied { create } for pid=12566 comm="syz.5.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 212.725669][ T6035] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 212.728311][ T40] audit: type=1400 audit(468.638:94070): avc: denied { sys_admin } for pid=12566 comm="syz.5.1851" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 212.754137][ T6035] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 212.776067][ T6035] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 212.803196][ T6035] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 212.823712][ T6035] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 212.835383][T12576] netlink: 'syz.5.1852': attribute type 1 has an invalid length. [ 212.854105][ T6035] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 212.873215][ T6035] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 212.904008][ T6035] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 212.907346][ T6035] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 212.913639][ T6035] usb 9-1: USB disconnect, device number 28 [ 213.255133][T12593] geneve1: entered allmulticast mode [ 213.371208][T12601] program syz.5.1863 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.380400][T12601] tmpfs: Bad value for 'mpol' [ 213.489352][ T5312] Bluetooth: hci0: unexpected event for opcode 0x0c14 [ 213.503406][ T40] audit: type=1400 audit(469.408:94071): avc: denied { map } for pid=12608 comm="syz.0.1866" path="/dev/video36" dev="devtmpfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 213.617038][T12620] netlink: 'syz.0.1870': attribute type 10 has an invalid length. [ 213.619660][T12620] team0: Cannot enslave team device to itself [ 213.622188][T12620] netlink: 'syz.0.1870': attribute type 1 has an invalid length. [ 213.873158][ T9] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 214.019839][T12634] bio_check_eod: 4 callbacks suppressed [ 214.019849][T12634] syz.4.1872: attempt to access beyond end of device [ 214.019849][T12634] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 214.027119][T12634] SQUASHFS error: Failed to read block 0x0: -5 [ 214.029072][T12634] unable to read squashfs_super_block [ 214.034634][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.037783][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 214.041137][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 214.044509][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 214.050744][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 214.053882][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 214.056495][ T9] usb 5-1: Manufacturer: syz [ 214.060528][ T9] usb 5-1: config 0 descriptor?? [ 214.179066][ T40] audit: type=1400 audit(470.088:94072): avc: denied { transfer } for pid=12635 comm="syz.4.1873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 214.284177][T12536] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 214.294321][ T5312] Bluetooth: hci3: command 0x1003 tx timeout [ 214.295081][ T63] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 214.303456][ T9] rc_core: IR keymap rc-hauppauge not found [ 214.305305][ T9] Registered IR keymap rc-empty [ 214.307018][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 214.323180][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 214.344445][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 214.349484][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input33 [ 214.354748][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 214.373181][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 214.403192][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 214.424641][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 214.445307][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 214.465616][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 214.483545][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 214.503184][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 214.523375][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 214.523752][T12652] No source specified [ 214.543243][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 214.564485][ T9] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 214.567320][ T9] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 214.574417][ T9] usb 5-1: USB disconnect, device number 23 [ 214.717084][T12660] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 214.858535][T12677] autofs: Unknown parameter '@' [ 214.919156][T12682] program syz.2.1888 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.010303][T12676] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 215.113294][T12695] netlink: 'syz.2.1892': attribute type 25 has an invalid length. [ 215.665086][T12713] netlink: 'syz.4.1898': attribute type 10 has an invalid length. [ 215.667629][T12713] team0: Cannot enslave team device to itself [ 215.669999][T12713] netlink: 'syz.4.1898': attribute type 1 has an invalid length. [ 215.879563][ T40] audit: type=1400 audit(471.788:94073): avc: denied { bind } for pid=12717 comm="syz.5.1900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 215.886637][ T40] audit: type=1400 audit(471.788:94074): avc: denied { getopt } for pid=12717 comm="syz.5.1900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 215.914201][ T9] usb 9-1: new full-speed USB device number 29 using dummy_hcd [ 215.930618][ T40] audit: type=1400 audit(471.838:94075): avc: denied { connect } for pid=12722 comm="syz.5.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 216.064918][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.068197][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 216.071620][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 216.076409][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 216.083763][ T9] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 216.086767][ T9] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 216.089218][ T9] usb 9-1: Manufacturer: syz [ 216.103830][ T9] usb 9-1: config 0 descriptor?? [ 216.125483][T12734] program syz.5.1903 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.179102][ T40] audit: type=1326 audit(472.088:94076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12740 comm="syz.2.1906" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5713f8e929 code=0x0 [ 216.364186][ T9] rc_core: IR keymap rc-hauppauge not found [ 216.366084][ T9] Registered IR keymap rc-empty [ 216.367667][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 216.384051][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 216.407432][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 216.412688][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input34 [ 216.419566][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 216.433304][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 216.453202][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 216.473257][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 216.493600][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 216.511945][T12749] xt_hashlimit: size too large, truncated to 1048576 [ 216.516294][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 216.534775][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 216.554432][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 216.573249][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 216.579042][T12751] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 1 [ 216.593806][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 216.615798][ T9] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 216.619495][ T9] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 216.628188][ T9] usb 9-1: USB disconnect, device number 29 [ 217.051657][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 217.052498][ T40] audit: type=1400 audit(472.958:94077): avc: denied { lock } for pid=12777 comm="syz.5.1915" path="socket:[70196]" dev="sockfs" ino=70196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 217.164291][T12786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=12786 comm=syz.5.1917 [ 217.183182][ T6016] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 217.343281][ T6016] usb 5-1: Using ep0 maxpacket: 16 [ 217.347036][ T6016] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 217.353223][ T6016] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 217.360568][ T6016] usb 5-1: config 0 interface 0 has no altsetting 0 [ 217.368792][ T6016] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 217.372372][ T6016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.383301][ T6016] usb 5-1: Product: syz [ 217.385458][ T6016] usb 5-1: Manufacturer: syz [ 217.387067][ T6016] usb 5-1: SerialNumber: syz [ 217.389857][ T6016] usb 5-1: config 0 descriptor?? [ 217.439657][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 217.439668][ T40] audit: type=1400 audit(473.348:94080): avc: denied { module_load } for pid=12806 comm="syz.2.1922" path=2F6D656D66643A20C736BE91F9183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="tmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 217.454296][T12807] Invalid ELF header magic: != ELF [ 217.501136][T12813] syz.2.1923: attempt to access beyond end of device [ 217.501136][T12813] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 217.508868][T12813] syz.2.1923: attempt to access beyond end of device [ 217.508868][T12813] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 217.512891][T12813] Mount JFS Failure: -5 [ 217.514547][T12813] jfs_mount failed w/return code = -5 [ 217.605407][T12820] netlink: 'syz.2.1925': attribute type 10 has an invalid length. [ 217.611297][T12820] netlink: 'syz.2.1925': attribute type 1 has an invalid length. [ 217.853243][ T9] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 217.919528][ T6016] usb 5-1: USB disconnect, device number 24 [ 217.971663][T12823] __nla_validate_parse: 66 callbacks suppressed [ 217.971680][T12823] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1926'. [ 217.980946][T12823] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1926'. [ 217.985130][T12823] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1926'. [ 218.015180][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.018999][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 218.022569][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 218.026064][T12826] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1927'. [ 218.029427][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 218.038766][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 218.041770][ T9] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 218.044687][ T9] usb 7-1: Manufacturer: syz [ 218.047616][ T9] usb 7-1: config 0 descriptor?? [ 218.112502][T12830] net_ratelimit: 11 callbacks suppressed [ 218.112519][T12830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.119132][T12830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.122622][T12830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.126308][T12830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.129742][T12830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.133147][T12830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.136651][T12830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.139958][T12830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.143684][T12830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.147022][T12830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.179079][T12833] rtc_cmos 00:05: Alarms can be up to one day in the future [ 218.293206][ T9] rc_core: IR keymap rc-hauppauge not found [ 218.295257][ T9] Registered IR keymap rc-empty [ 218.297251][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 218.316302][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 218.334078][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 218.340995][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input35 [ 218.348648][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 218.363391][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 218.383415][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 218.414605][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 218.433590][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 218.463757][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 218.491055][ T40] audit: type=1400 audit(474.398:94081): avc: denied { write } for pid=12843 comm="syz.0.1931" path="socket:[72804]" dev="sockfs" ino=72804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 218.513241][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 218.533467][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 218.553235][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 218.573516][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 218.607232][ T9] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 218.611731][ T9] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 218.627799][ T9] usb 7-1: USB disconnect, device number 12 [ 219.059567][T12854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1934'. [ 219.063735][T12854] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1934'. [ 219.069187][T12854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1934'. [ 219.077968][T12854] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1934'. [ 219.084483][ T6016] rtc_cmos 00:05: Alarms can be up to one day in the future [ 219.088194][ T6016] rtc_cmos 00:05: Alarms can be up to one day in the future [ 219.091949][ T6016] rtc_cmos 00:05: Alarms can be up to one day in the future [ 219.096581][ T6016] rtc_cmos 00:05: Alarms can be up to one day in the future [ 219.099589][ T6016] rtc rtc0: __rtc_set_alarm: err=-22 [ 219.211944][T12866] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1939'. [ 219.317512][T12871] netlink: 'syz.5.1941': attribute type 10 has an invalid length. [ 219.320924][T12871] team0: Cannot enslave team device to itself [ 219.324538][T12871] netlink: 'syz.5.1941': attribute type 1 has an invalid length. [ 219.376464][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1942'. [ 219.406029][T12873] 9pnet: Could not find request transport: [ 219.406029][T12873] }xZ?;;virtio [ 219.467505][ T40] audit: type=1400 audit(475.378:94082): avc: denied { map } for pid=12877 comm="syz.2.1943" path="socket:[73010]" dev="sockfs" ino=73010 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 219.577330][ T6016] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 219.601001][ T40] audit: type=1400 audit(475.508:94083): avc: denied { connect } for pid=12886 comm="syz.0.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 219.640011][T12891] netlink: 'syz.2.1948': attribute type 21 has an invalid length. [ 219.644682][ T40] audit: type=1400 audit(475.558:94084): avc: denied { listen } for pid=12890 comm="syz.2.1948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 219.652937][T12891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12891 comm=syz.2.1948 [ 219.747173][ T6016] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.751423][ T6016] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 219.762017][ T6016] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 219.771016][ T6016] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 219.776867][ T6016] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 219.779651][ T6016] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 219.782264][ T6016] usb 10-1: Manufacturer: syz [ 219.787374][ T6016] usb 10-1: config 0 descriptor?? [ 219.790606][T12904] netlink: 'syz.2.1952': attribute type 1 has an invalid length. [ 219.846613][T12904] 8021q: adding VLAN 0 to HW filter on device bond4 [ 219.849950][T12904] bond3: (slave bond4): making interface the new active one [ 219.852649][T12904] bond3: (slave bond4): Enslaving as an active interface with an up link [ 219.861162][T12904] 8021q: adding VLAN 0 to HW filter on device bond3 [ 219.907093][ T40] audit: type=1400 audit(475.818:94085): avc: denied { ioctl } for pid=12909 comm="syz.0.1954" path="socket:[74957]" dev="sockfs" ino=74957 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 220.034270][ T6016] rc_core: IR keymap rc-hauppauge not found [ 220.038419][ T6016] Registered IR keymap rc-empty [ 220.041274][ T6016] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 220.064922][ T6016] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 220.094845][ T6016] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 220.101080][ T6016] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input36 [ 220.108482][ T6016] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 220.133950][ T6016] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 220.153538][ T6016] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 220.183584][ T6016] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 220.205471][ T6016] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 220.206966][ T63] Bluetooth: hci4: unexpected event for opcode 0x2024 [ 220.227563][ T6016] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 220.243343][ T6016] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 220.259617][T12935] netlink: 'syz.0.1960': attribute type 15 has an invalid length. [ 220.278379][ T6016] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 220.295667][ T6016] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 220.313286][ T6016] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 220.354941][ T6016] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 220.356228][T12947] usb usb8: usbfs: process 12947 (syz.4.1964) did not claim interface 0 before use [ 220.358512][ T6016] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 220.361502][T12947] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 220.367453][ T6016] usb 10-1: USB disconnect, device number 13 [ 220.371896][T12950] netlink: 'syz.4.1964': attribute type 4 has an invalid length. [ 220.405856][T12947] netlink: 'syz.4.1964': attribute type 4 has an invalid length. [ 220.414385][T12951] netlink: 'syz.2.1959': attribute type 12 has an invalid length. [ 220.488408][T12959] SELinux: syz.4.1966 (12959) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 220.540068][ T40] audit: type=1400 audit(476.448:94086): avc: denied { mount } for pid=12958 comm="syz.4.1966" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 220.706006][ T40] audit: type=1400 audit(476.618:94087): avc: denied { watch } for pid=12972 comm="syz.2.1967" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 220.714454][ T40] audit: type=1400 audit(476.618:94088): avc: denied { watch_sb } for pid=12972 comm="syz.2.1967" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 220.811017][T12978] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.815365][T12978] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.819448][T12978] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 220.927280][T12978] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.931209][T12978] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.936734][T12978] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 220.995617][T12978] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.999806][T12978] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.004150][T12978] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 221.059012][T13010] loop2: detected capacity change from 0 to 7 [ 221.062903][T13010] Dev loop2: unable to read RDB block 7 [ 221.064972][T13010] loop2: AHDI p1 p2 p3 p4 [ 221.066532][T13010] loop2: partition table partially beyond EOD, truncated [ 221.069516][T13010] loop2: p1 start 1601398130 is beyond EOD, truncated [ 221.071632][T13010] loop2: p2 start 1702059890 is beyond EOD, truncated [ 221.074843][T13010] loop2: p3 size 150995200 extends beyond EOD, truncated [ 221.102585][ T8152] udevd[8152]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 221.124008][T12978] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.127471][T12978] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.130635][T12978] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 221.187238][T13021] comedi comedi0: comedi_config --init_data is deprecated [ 221.206942][T12978] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.209883][T12978] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 221.212594][T12978] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 221.231779][T12978] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.234898][T12978] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 221.237397][T12978] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 221.245441][T12978] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.247977][T12978] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 221.250436][T12978] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 221.254943][T13025] batman_adv: batadv0: Interface deactivated: dummy0 [ 221.258838][T13025] batman_adv: batadv0: Removing interface: dummy0 [ 221.266719][T12978] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.269222][T12978] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 221.271697][T12978] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 221.369524][T13040] [U] 1WT`8H$09\ [ 221.371522][T13040] [U] ;2}UGVĥ#O9ե>-ߴSݢP [ 221.377146][T13039] [U]  [ 221.415418][ T40] audit: type=1400 audit(477.328:94089): avc: denied { ioctl } for pid=13044 comm="syz.4.1983" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x7210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 221.526437][T13061] 9p: Unknown Cache mode or invalid value fs [ 221.553341][ T7536] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 221.557148][T13065] tipc: Enabling of bearer rejected, failed to enable media [ 221.645785][T13071] cgroup: No subsys list or none specified [ 221.692395][T13079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.701260][T13079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.706400][ T7536] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.709663][ T7536] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 221.712994][ T7536] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 221.716571][ T7536] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 221.724194][ T7536] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 221.726955][ T7536] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 221.729300][ T7536] usb 7-1: Manufacturer: syz [ 221.732214][ T7536] usb 7-1: config 0 descriptor?? [ 221.943459][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 221.993267][ T1335] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 222.003810][ T7536] rc_core: IR keymap rc-hauppauge not found [ 222.005986][ T7536] Registered IR keymap rc-empty [ 222.007657][ T7536] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 222.023286][ T7536] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 222.046314][ T7536] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 222.051079][ T7536] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input37 [ 222.068036][ T7536] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 222.084560][ T7536] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 222.103461][ T7536] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 222.133881][ T7536] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 222.163430][ T7536] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 222.163442][ T1335] usb 10-1: Using ep0 maxpacket: 16 [ 222.164442][T13097] PKCS7: Unknown OID: [4] 5.25.43204.122 [ 222.173850][T13097] PKCS7: Only support pkcs7_signedData type [ 222.175177][ T1335] usb 10-1: config 0 has no interfaces? [ 222.184205][ T1335] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 222.187037][ T1335] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 222.189548][ T1335] usb 10-1: SerialNumber: syz [ 222.192694][ T1335] usb 10-1: config 0 descriptor?? [ 222.196557][ T7536] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 222.223225][ T7536] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 222.254645][ T7536] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 222.270778][T13103] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.273740][T13103] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.274473][ T7536] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 222.276286][T13103] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.276304][T13103] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.303585][ T7536] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 222.319977][T13105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.323331][T13105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.327463][ T7536] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 222.330549][ T7536] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 222.340948][ T7536] usb 7-1: USB disconnect, device number 13 [ 222.401429][ T10] usb 10-1: USB disconnect, device number 14 [ 222.563350][ T6036] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 222.713327][ T6036] usb 9-1: Using ep0 maxpacket: 32 [ 222.718972][ T6036] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 222.722336][ T6036] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 222.728042][ T6036] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 222.731743][ T6036] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 222.736137][ T6036] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 222.739526][ T6036] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 222.744633][ T6036] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 222.748220][ T6036] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.757203][ T6036] usb 9-1: config 0 descriptor?? [ 222.961894][ T6036] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 222.970040][ T6036] usb 9-1: USB disconnect, device number 30 [ 222.978124][ T6036] usblp0: removed [ 223.008634][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 223.008650][ T40] audit: type=1326 audit(478.918:94093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.2.2003" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5713f8e929 code=0x7fc00000 [ 223.017695][ T40] audit: type=1326 audit(478.918:94094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.2.2003" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5713f8e929 code=0x7fc00000 [ 223.024678][ T40] audit: type=1326 audit(478.918:94095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.2.2003" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5713f8e929 code=0x7fc00000 [ 223.031495][ T40] audit: type=1326 audit(478.918:94096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.2.2003" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5713f8e929 code=0x7fc00000 [ 223.038909][ T40] audit: type=1326 audit(478.918:94097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.2.2003" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5713f8e929 code=0x7fc00000 [ 223.046663][ T40] audit: type=1326 audit(478.918:94098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.2.2003" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5713f8e929 code=0x7fc00000 [ 223.053548][ T40] audit: type=1326 audit(478.918:94099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.2.2003" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5713f8e929 code=0x7fc00000 [ 223.060273][ T40] audit: type=1326 audit(478.918:94100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.2.2003" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5713f8e929 code=0x7fc00000 [ 223.067390][ T40] audit: type=1326 audit(478.918:94101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.2.2003" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5713f8e929 code=0x7fc00000 [ 223.075804][ T40] audit: type=1326 audit(478.918:94102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.2.2003" exe="/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5713f8e929 code=0x7fc00000 [ 223.155364][T13126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.161949][T13127] validate_nla: 3 callbacks suppressed [ 223.161959][T13127] netlink: 'syz.5.2007': attribute type 10 has an invalid length. [ 223.195851][T13131] syzkaller1: tun_chr_ioctl cmd 1074025675 [ 223.197833][T13131] syzkaller1: persist disabled [ 223.348659][T13146] __nla_validate_parse: 15 callbacks suppressed [ 223.348670][T13146] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2014'. [ 223.723207][ T5312] Bluetooth: hci3: command 0x1003 tx timeout [ 223.723276][ T63] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 223.893806][T13162] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2019'. [ 223.897087][T13162] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2019'. [ 223.938177][T13164] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2020'. [ 223.975014][T13164] net_ratelimit: 251 callbacks suppressed [ 223.975027][T13164] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 224.003792][T13166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2019'. [ 224.007440][T13166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13166 comm=syz.4.2019 [ 224.036932][T13171] syz.0.2022: attempt to access beyond end of device [ 224.036932][T13171] loop0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 224.041224][T13171] MINIX-fs: unable to read superblock [ 224.283862][ T63] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 224.287828][ T63] Bluetooth: hci4: Injecting HCI hardware error event [ 224.293437][ T63] Bluetooth: hci4: hardware error 0x00 [ 224.393177][ T9] usb 5-1: device descriptor read/64, error -71 [ 224.551545][T13180] support for the xor transformation has been removed. [ 224.575330][T13177] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2024'. [ 224.633243][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 224.793482][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 224.796912][ T9] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 224.799519][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 224.803199][ T9] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 224.806610][ T9] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 224.810692][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 224.824335][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 224.827295][ T9] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 224.829863][ T9] usb 5-1: Product: syz [ 224.831374][ T9] usb 5-1: Manufacturer: syz [ 224.832984][ T9] usb 5-1: SerialNumber: syz [ 224.838172][ T9] usb 5-1: config 0 descriptor?? [ 224.841986][ T9] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 224.847498][ T9] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 224.980434][T13200] netlink: 'syz.2.2033': attribute type 4 has an invalid length. [ 224.987432][T13200] netlink: 'syz.2.2033': attribute type 4 has an invalid length. [ 225.045576][ T1335] usb 5-1: USB disconnect, device number 26 [ 225.047528][ C3] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 225.051343][ T1335] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 225.141580][T13212] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2038'. [ 225.291813][T13218] netlink: 'syz.2.2040': attribute type 1 has an invalid length. [ 225.295800][T13218] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2040'. [ 225.388189][T13232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2043'. [ 225.391026][T13232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2043'. [ 225.918920][T13268] syzkaller1: entered promiscuous mode [ 225.920661][T13268] syzkaller1: entered allmulticast mode [ 226.134713][T13296] xfrm1: entered allmulticast mode [ 226.292418][T13310] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 226.373240][ T63] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 226.505017][T13331] netlink: 'syz.0.2077': attribute type 23 has an invalid length. [ 226.841104][T13354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13354 comm=syz.0.2085 [ 226.980382][T13354] No control pipe specified [ 227.814454][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 227.984369][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 227.986437][T13389] openvswitch: netlink: Tunnel attr 7 has unexpected len 9 expected 0 [ 227.987519][ T9] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 227.992216][ T9] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 227.996383][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 227.999219][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 228.002525][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 228.005923][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 228.008955][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 228.011935][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 228.019638][ T9] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 228.022564][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.028620][ T9] usb 7-1: config 0 descriptor?? [ 228.053243][ T24] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 228.185209][T13393] vivid-000: ================= START STATUS ================= [ 228.188907][T13393] vivid-000: Test Pattern: 100% Color Squares [ 228.191963][T13393] vivid-000: Fill Percentage of Frame: 100 [ 228.194733][T13393] vivid-000: Horizontal Movement: No Movement [ 228.197280][T13393] vivid-000: Vertical Movement: No Movement [ 228.199731][T13393] vivid-000: OSD Text Mode: All [ 228.201782][T13393] vivid-000: Show Border: false [ 228.204461][ T24] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 228.205701][T13393] vivid-000: Show Square: false [ 228.209208][T13393] vivid-000: Sensor Flipped Horizontally: false [ 228.211819][T13393] vivid-000: Sensor Flipped Vertically: true [ 228.213588][ T24] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.214352][T13393] vivid-000: Insert SAV Code in Image: [ 228.216983][ T24] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.219321][T13393] false [ 228.222654][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 228.227037][T13393] [ 228.228085][T13393] vivid-000: Insert EAV Code in Image: false [ 228.230599][T13393] vivid-000: Insert Video Guard Band: false [ 228.233643][ T24] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.233771][T13393] vivid-000: Reduced Framerate: [ 228.236415][ T24] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.236421][T13393] false [ 228.236432][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 228.237072][ T9] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 228.238517][T13393] [ 228.238526][T13393] vivid-000: HDMI 000-0 Is Connected To: [ 228.242686][ T24] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.242937][T13393] Test Pattern Generator [ 228.245239][ T24] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.249127][T13393] [ 228.249905][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 228.251908][T13393] vivid-000: S-Video 000-0 Is Connected To: [ 228.258955][ T24] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.259875][T13393] Test Pattern Generator [ 228.260676][ T24] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.262959][T13393] [ 228.262965][T13393] vivid-000: Enable Capture Cropping: [ 228.264947][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 228.266480][ T24] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.268941][T13393] true [ 228.270323][ T24] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.274812][T13393] [ 228.276189][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 228.277257][T13393] vivid-000: Enable Capture Composing: [ 228.283917][ T24] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.286642][T13393] true [ 228.286653][T13393] vivid-000: Enable Capture Scaler: true [ 228.286665][T13393] vivid-000: Timestamp Source: End of Frame [ 228.286676][T13393] vivid-000: Colorspace: SMPTE 170M [ 228.287948][ T24] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.289757][T13393] vivid-000: Transfer Function: [ 228.291468][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 228.294326][T13393] Default [ 228.294338][T13393] vivid-000: Y'CbCr Encoding: Default [ 228.294349][T13393] vivid-000: HSV Encoding: Hue 0-179 [ 228.294360][T13393] vivid-000: Quantization: Default [ 228.294371][T13393] vivid-000: Apply Alpha To Red Only: false [ 228.294381][T13393] vivid-000: Standard Aspect Ratio: 4x3 [ 228.294391][T13393] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 228.294430][T13393] vivid-000: DV Timings: 640x480p59 inactive [ 228.294443][T13393] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 228.294454][T13393] vivid-000: Maximum EDID Blocks: 2 [ 228.294465][T13393] vivid-000: Limited RGB Range (16-235): false [ 228.294476][T13393] vivid-000: Rx RGB Quantization Range: Automatic [ 228.294486][T13393] vivid-000: Power Present: 0x00000001 [ 228.294498][T13393] tpg source WxH: 720x576 (Y'CbCr) [ 228.296213][ T24] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.297137][T13393] tpg field: 3 [ 228.299034][ T24] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.300573][T13393] tpg crop: (704,0)/16x64 [ 228.304104][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 228.304996][ T24] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.306046][T13393] tpg compose: (0,0)/16x8 [ 228.308120][ T24] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.309236][T13393] tpg colorspace: 1 [ 228.309245][T13393] tpg transfer function: 0/1 [ 228.309251][T13393] tpg Y'CbCr encoding: 0/1 [ 228.309257][T13393] tpg quantization: 0/2 [ 228.309263][T13393] tpg RGB range: 0/2 [ 228.309270][T13393] vivid-000: ================== END STATUS ================== [ 228.311013][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 228.367642][ T24] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 228.370634][ T24] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 228.373764][ T24] usb 9-1: Product: syz [ 228.375992][ T24] usb 9-1: Manufacturer: syz [ 228.377705][ T24] usb 9-1: SerialNumber: syz [ 228.381436][ T24] usb 9-1: config 0 descriptor?? [ 228.388133][ T24] yurex 9-1:0.0: USB YUREX device now attached to Yurex #1 [ 228.444904][ T40] kauditd_printk_skb: 814 callbacks suppressed [ 228.444919][ T40] audit: type=1400 audit(484.358:94917): avc: denied { read write } for pid=13375 comm="syz.2.2094" name="lp0" dev="devtmpfs" ino=3333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 228.447329][T13378] syz.2.2094: attempt to access beyond end of device [ 228.447329][T13378] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 228.447749][ T40] audit: type=1400 audit(484.358:94918): avc: denied { open } for pid=13375 comm="syz.2.2094" path="/dev/usb/lp0" dev="devtmpfs" ino=3333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 228.456594][T13378] befs: (nbd2): unable to read superblock [ 228.473000][T13398] netlink: 'syz.0.2101': attribute type 10 has an invalid length. [ 228.476450][T13398] team0: Cannot enslave team device to itself [ 228.479569][T13398] netlink: 'syz.0.2101': attribute type 1 has an invalid length. [ 228.494511][ T9] usb 7-1: USB disconnect, device number 14 [ 228.500983][ T9] usblp0: removed [ 228.595510][T13383] __nla_validate_parse: 19 callbacks suppressed [ 228.595511][T13382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2096'. [ 228.595521][T13383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2096'. [ 228.723254][ T7831] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 228.884852][ T7831] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.888094][ T7831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 228.891471][ T7831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 228.895667][ T7831] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 228.900527][ T7831] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 228.903348][ T7831] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 228.905777][ T7831] usb 5-1: Manufacturer: syz [ 228.908486][ T7831] usb 5-1: config 0 descriptor?? [ 229.163942][ T7831] rc_core: IR keymap rc-hauppauge not found [ 229.165920][ T7831] Registered IR keymap rc-empty [ 229.167481][ T7831] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.183171][ T7831] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.213614][ T7831] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 229.218042][ T7831] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input39 [ 229.244067][ T7831] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.263225][ T7831] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.283202][ T7831] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.303185][ T7831] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.323735][ T7831] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.343182][ T7831] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.363278][ T7831] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.384548][ T7831] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.403407][ T7831] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.423166][ T7831] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.444459][ T7831] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 229.447373][ T7831] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 229.454062][ T7831] usb 5-1: USB disconnect, device number 27 [ 229.929517][T13430] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (8), value rounded to 0 ms [ 230.067535][T13443] netlink: 'syz.5.2115': attribute type 10 has an invalid length. [ 230.070081][T13443] team0: Cannot enslave team device to itself [ 230.072469][T13443] netlink: 'syz.5.2115': attribute type 1 has an invalid length. [ 230.313210][ T6036] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 230.319151][T13448] vxcan1 speed is unknown, defaulting to 1000 [ 230.323241][T13448] vxcan1 speed is unknown, defaulting to 1000 [ 230.327010][T13448] vxcan1 speed is unknown, defaulting to 1000 [ 230.408462][T13448] infiniband syz2: set active [ 230.411417][ T9] vxcan1 speed is unknown, defaulting to 1000 [ 230.413358][T13448] infiniband syz2: added vxcan1 [ 230.442071][T13448] RDS/IB: syz2: added [ 230.444421][T13448] smc: adding ib device syz2 with port count 1 [ 230.446981][T13448] smc: ib device syz2 port 1 has pnetid [ 230.451233][T13448] vxcan1 speed is unknown, defaulting to 1000 [ 230.457709][ T6016] vxcan1 speed is unknown, defaulting to 1000 [ 230.495139][ T6036] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.499078][ T6036] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 230.503499][ T6036] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 230.507358][ T6036] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 230.513244][ T6036] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 230.516800][ T6036] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 230.520002][ T6036] usb 10-1: Manufacturer: syz [ 230.523505][ T6036] usb 10-1: config 0 descriptor?? [ 230.558268][T13448] vxcan1 speed is unknown, defaulting to 1000 [ 230.603233][ T1335] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 230.644702][T13448] vxcan1 speed is unknown, defaulting to 1000 [ 230.726001][T13448] vxcan1 speed is unknown, defaulting to 1000 [ 230.773196][ T6036] rc_core: IR keymap rc-hauppauge not found [ 230.775548][ T6036] Registered IR keymap rc-empty [ 230.777545][ T6036] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 230.793326][ T6036] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 230.813803][ T6036] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 230.817701][T13448] vxcan1 speed is unknown, defaulting to 1000 [ 230.818319][ T6036] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input40 [ 230.827972][ T6036] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 230.843334][ T6036] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 230.864615][ T6036] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 230.884702][ T6036] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 230.896896][ T9] usb 9-1: USB disconnect, device number 31 [ 230.903440][ T6036] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 230.904337][ T9] yurex 9-1:0.0: USB YUREX #1 now disconnected [ 230.923565][ T6036] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 230.952029][ T6036] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 230.973232][ T6036] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 230.983367][ T40] audit: type=1400 audit(486.898:94919): avc: denied { setopt } for pid=13453 comm="syz.4.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 230.993231][ T6036] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 231.004826][T13448] vxcan1 speed is unknown, defaulting to 1000 [ 231.013243][ T6036] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 231.034098][ T6036] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 231.036994][ T6036] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 231.045684][ T6036] usb 10-1: USB disconnect, device number 15 [ 231.190930][T13448] vxcan1 speed is unknown, defaulting to 1000 [ 231.306120][T13448] vxcan1 speed is unknown, defaulting to 1000 [ 231.383273][T13448] vxcan1 speed is unknown, defaulting to 1000 [ 231.403250][ T40] audit: type=1400 audit(487.308:94920): avc: denied { accept } for pid=13467 comm="syz.4.2121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 231.505150][ T1335] usb 5-1: unable to get BOS descriptor or descriptor too short [ 231.509220][ T1335] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 231.509240][ T1335] usb 5-1: can't read configurations, error -71 [ 231.969309][T13491] netlink: 328 bytes leftover after parsing attributes in process `syz.4.2128'. [ 232.050549][T13502] netlink: 'syz.4.2131': attribute type 10 has an invalid length. [ 232.054809][T13502] team0: Cannot enslave team device to itself [ 232.057157][T13502] netlink: 'syz.4.2131': attribute type 1 has an invalid length. [ 232.289507][ T5312] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 232.293372][ T7831] usb 9-1: new full-speed USB device number 32 using dummy_hcd [ 232.293394][ T5312] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 232.300988][ T5312] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 232.305437][ T5312] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 232.307955][ T5312] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 232.336682][T13504] vxcan1 speed is unknown, defaulting to 1000 [ 232.446752][ T7831] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.450377][ T7831] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 232.454400][ T7831] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 232.457097][ T7831] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 232.461617][ T7831] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 232.467060][ T7831] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 232.469872][ T7831] usb 9-1: Manufacturer: syz [ 232.477014][ T7831] usb 9-1: config 0 descriptor?? [ 232.564613][T13511] ata3.00: invalid multi_count 1 ignored [ 232.569223][T13504] chnl_net:caif_netlink_parms(): no params data found [ 232.682822][T13504] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.685660][T13504] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.688237][T13504] bridge_slave_0: entered allmulticast mode [ 232.691309][T13504] bridge_slave_0: entered promiscuous mode [ 232.696071][T13504] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.698351][T13504] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.700731][T13504] bridge_slave_1: entered allmulticast mode [ 232.710816][T13504] bridge_slave_1: entered promiscuous mode [ 232.745808][T13504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.750679][T13504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.753201][ T7831] rc_core: IR keymap rc-hauppauge not found [ 232.755814][ T7831] Registered IR keymap rc-empty [ 232.757577][ T7831] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 232.773224][ T7831] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 232.790894][T13524] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2137'. [ 232.799729][T13504] team0: Port device team_slave_0 added [ 232.804395][ T7831] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 232.804883][T13504] team0: Port device team_slave_1 added [ 232.809162][ T7831] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input41 [ 232.819259][ T7831] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 232.843485][ T7831] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 232.871176][T13527] netlink: 'syz.2.2138': attribute type 29 has an invalid length. [ 232.877302][T13527] netlink: 'syz.2.2138': attribute type 29 has an invalid length. [ 232.880606][T13527] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2138'. [ 232.883294][ T7831] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 232.883699][T13504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.883979][T13527] unsupported nla_type 58 [ 232.890694][T13504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.903208][T13504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.913352][ T7831] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 232.913597][T13504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.917649][T13504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.926512][T13504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.933498][ T7831] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 232.963449][ T7831] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 232.986328][ T7831] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 232.989931][T13532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2139'. [ 232.995813][T13504] hsr_slave_0: entered promiscuous mode [ 232.998162][T13504] hsr_slave_1: entered promiscuous mode [ 233.000761][T13504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.004308][T13504] Cannot create hsr debugfs directory [ 233.013274][ T7831] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 233.033249][ T7831] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 233.053234][ T7831] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 233.074667][ T7831] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 233.077364][ T7831] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 233.084197][ T7831] usb 9-1: USB disconnect, device number 32 [ 233.176189][ T40] audit: type=1326 audit(489.088:94921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13546 comm="syz.2.2144" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5713f8e929 code=0x0 [ 233.474385][T13504] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 233.483744][T13504] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 233.488085][T13504] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 233.503335][T13504] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 233.507861][T13554] delete_channel: no stack [ 233.549399][T13504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.559671][T13504] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.567492][T11170] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.569775][T11170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.579416][T11167] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.581707][T11167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.608408][ T40] audit: type=1400 audit(489.518:94922): avc: denied { egress } for pid=836 comm="kworker/0:2" daddr=ff02::16 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 233.615519][ T40] audit: type=1400 audit(489.518:94923): avc: denied { sendto } for pid=836 comm="kworker/0:2" daddr=ff02::16 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 233.706979][T13504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.737587][T13586] netlink: 'syz.4.2152': attribute type 10 has an invalid length. [ 233.740178][T13586] team0: Cannot enslave team device to itself [ 233.742593][T13586] netlink: 'syz.4.2152': attribute type 1 has an invalid length. [ 233.839132][T13504] veth0_vlan: entered promiscuous mode [ 233.844132][T13504] veth1_vlan: entered promiscuous mode [ 233.866248][T13504] veth0_macvtap: entered promiscuous mode [ 233.870006][T13504] veth1_macvtap: entered promiscuous mode [ 233.881159][T13504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.887892][T13504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.892929][T13504] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.897674][T13504] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.901319][T13504] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.904994][T13504] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.942565][T11165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.949154][T11165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.964122][T11165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.966658][T11165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.993418][ T836] usb 9-1: new full-speed USB device number 33 using dummy_hcd [ 234.016359][T13594] syz_tun: entered allmulticast mode [ 234.032356][T13594] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 234.035467][T13594] mroute: pending queue full, dropping entries [ 234.046250][ T40] audit: type=1400 audit(489.958:94924): avc: denied { append } for pid=13591 comm="syz.2.2153" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 234.076522][T13599] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2154'. [ 234.145742][ T836] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.149781][ T836] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 234.154528][ T836] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 234.158481][ T836] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 234.165950][ T836] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 234.169662][ T836] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 234.172904][ T836] usb 9-1: Manufacturer: syz [ 234.181908][ T836] usb 9-1: config 0 descriptor?? [ 234.186326][T13596] syz_tun: left allmulticast mode [ 234.194787][T13604] bond0: entered promiscuous mode [ 234.196428][T13604] bond_slave_0: entered promiscuous mode [ 234.198397][T13604] bond_slave_1: entered promiscuous mode [ 234.201181][T13604] batadv0: entered promiscuous mode [ 234.209474][T13604] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 234.215005][T13604] bond0: left promiscuous mode [ 234.217219][T13604] bond_slave_0: left promiscuous mode [ 234.219617][T13604] bond_slave_1: left promiscuous mode [ 234.222698][T13604] batadv0: left promiscuous mode [ 234.257789][T13605] 8021q: VLANs not supported on ip6gre0 [ 234.350802][T13609] /dev/sg0: Can't lookup blockdev [ 234.357226][T13609] binder: 13608:13609 unknown command 65520 [ 234.359803][T13609] binder: 13608:13609 ioctl c0306201 200000000340 returned -22 [ 234.363613][ T5312] Bluetooth: hci2: command tx timeout [ 234.444384][ T836] rc_core: IR keymap rc-hauppauge not found [ 234.446282][ T836] Registered IR keymap rc-empty [ 234.448049][ T836] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 234.463187][ T836] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 234.483707][ T836] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 234.488109][ T836] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input43 [ 234.493413][ T836] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 234.522395][ T836] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 234.534756][T13621] netlink: 'syz.8.2163': attribute type 1 has an invalid length. [ 234.544531][ T836] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 234.564050][ T836] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 234.583495][ T836] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 234.603918][ T836] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 234.623983][ T836] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 234.643800][ T836] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 234.663187][ T836] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 234.683554][ T836] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 234.704082][ T836] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 234.707626][ T836] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 234.712930][ T836] usb 9-1: USB disconnect, device number 33 [ 235.070654][T13634] vxcan1 speed is unknown, defaulting to 1000 [ 235.182394][T13648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2171'. [ 235.188075][T13648] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2171'. [ 235.284893][T13663] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 235.287014][T13663] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 235.290011][T13667] netlink: 'syz.4.2177': attribute type 10 has an invalid length. [ 235.291135][T13663] vhci_hcd vhci_hcd.0: Device attached [ 235.292825][T13667] team0: Cannot enslave team device to itself [ 235.296901][T13667] netlink: 'syz.4.2177': attribute type 1 has an invalid length. [ 235.304616][T13664] vhci_hcd: connection closed [ 235.306521][T11165] vhci_hcd: stop threads [ 235.309361][T11165] vhci_hcd: release socket [ 235.310801][T11165] vhci_hcd: disconnect device [ 235.563837][ T24] usb 9-1: new full-speed USB device number 34 using dummy_hcd [ 235.715817][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.719114][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 235.722462][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 235.725510][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 235.730683][ T24] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 235.734377][ T24] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 235.737432][ T24] usb 9-1: Manufacturer: syz [ 235.747399][ T24] usb 9-1: config 0 descriptor?? [ 236.004185][ T24] rc_core: IR keymap rc-hauppauge not found [ 236.007768][ T24] Registered IR keymap rc-empty [ 236.010082][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 236.023197][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 236.046116][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 236.052746][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input44 [ 236.064836][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 236.083721][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 236.103633][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 236.132404][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 236.153294][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 236.173207][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 236.193551][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 236.213269][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 236.233285][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 236.254391][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 236.274018][ T24] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 236.276885][ T24] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 236.281437][ T24] usb 9-1: USB disconnect, device number 34 [ 236.326992][T13690] netlink: 'syz.2.2183': attribute type 1 has an invalid length. [ 236.347754][T13690] 8021q: adding VLAN 0 to HW filter on device bond5 [ 236.363256][ T7831] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 236.454164][ T5312] Bluetooth: hci2: command tx timeout [ 236.600830][ T40] audit: type=1326 audit(492.508:94925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13698 comm="syz.2.2186" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5713f8e929 code=0x0 [ 236.620335][ T7831] usb 5-1: unable to get BOS descriptor or descriptor too short [ 236.626141][ T7831] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 236.628540][ T7831] usb 5-1: can't read configurations, error -71 [ 236.961498][T13723] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 237.233394][ T6016] usb 9-1: new low-speed USB device number 35 using dummy_hcd [ 237.258938][T13727] netlink: 'syz.8.2195': attribute type 10 has an invalid length. [ 237.265521][T13727] team0: Cannot enslave team device to itself [ 237.268649][T13727] netlink: 'syz.8.2195': attribute type 1 has an invalid length. [ 237.395773][ T6016] usb 9-1: config index 0 descriptor too short (expected 9507, got 92) [ 237.398326][ T6016] usb 9-1: config 42 has too many interfaces: 130, using maximum allowed: 32 [ 237.400988][ T6016] usb 9-1: config 42 contains an unexpected descriptor of type 0x1, skipping [ 237.404344][ T6016] usb 9-1: config 42 has an invalid descriptor of length 180, skipping remainder of the config [ 237.407670][ T6016] usb 9-1: config 42 has 0 interfaces, different from the descriptor's value: 130 [ 237.412801][ T6016] usb 9-1: string descriptor 0 read error: -22 [ 237.415024][ T6016] usb 9-1: New USB device found, idVendor=000e, idProduct=0000, bcdDevice= 0.00 [ 237.417816][ T6016] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 237.462155][ T40] audit: type=1400 audit(493.368:94926): avc: denied { connect } for pid=13729 comm="syz.2.2196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 237.506519][T13732] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 237.511589][T13732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13732 comm=syz.2.2197 [ 237.523472][ T9] usb 13-1: new full-speed USB device number 2 using dummy_hcd [ 237.602886][T13736] SELinux: ebitmap: truncated map [ 237.608117][T13736] SELinux: failed to load policy [ 237.624828][ T6016] usb 9-1: USB disconnect, device number 35 [ 237.675096][ T9] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.679324][ T9] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 237.684207][ T9] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 237.688329][ T9] usb 13-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 237.692973][T13740] hfs: can't find a HFS filesystem on dev sr0 [ 237.694852][ T9] usb 13-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 237.700275][ T9] usb 13-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 237.702889][ T9] usb 13-1: Manufacturer: syz [ 237.706480][ T9] usb 13-1: config 0 descriptor?? [ 237.751977][T13744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2202'. [ 237.926612][T13749] netlink: 'syz.2.2203': attribute type 16 has an invalid length. [ 237.929183][T13749] netlink: 'syz.2.2203': attribute type 2 has an invalid length. [ 237.931656][T13749] netlink: 14182 bytes leftover after parsing attributes in process `syz.2.2203'. [ 237.963568][ T9] rc_core: IR keymap rc-hauppauge not found [ 237.966239][ T9] Registered IR keymap rc-empty [ 237.968042][ T9] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 237.983286][ T9] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 238.003730][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0 [ 238.008552][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0/input45 [ 238.015499][ T9] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 238.033507][ T9] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 238.053215][ T9] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 238.073233][ T9] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 238.093233][ T9] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 238.096665][ T40] audit: type=1400 audit(494.008:94927): avc: denied { getopt } for pid=13761 comm="syz.0.2207" lport=33532 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 238.114614][ T9] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 238.133183][ T9] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 238.153175][ T9] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 238.173209][ T9] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 238.193761][ T9] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 238.214045][ T9] mceusb 13-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 238.217091][ T9] mceusb 13-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 238.227853][ T9] usb 13-1: USB disconnect, device number 2 [ 238.443526][ T4586] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 238.456010][T13780] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2213'. [ 238.477111][T13780] overlayfs: failed to resolve './file1': -2 [ 238.480319][T13780] overlayfs: failed to resolve './file1': -2 [ 238.483450][T13780] overlayfs: failed to resolve './file1': -2 [ 238.486753][T13780] overlayfs: failed to resolve './file1': -2 [ 238.489817][T13780] overlayfs: failed to resolve './file1': -2 [ 238.492482][T13780] overlayfs: failed to resolve './file1': -2 [ 238.495118][T13780] overlayfs: failed to resolve './file1': -2 [ 238.497507][T13780] overlayfs: failed to resolve './file1': -2 [ 238.499828][T13780] overlayfs: failed to resolve './file1': -2 [ 238.502090][T13780] overlayfs: failed to resolve './file1': -2 [ 238.505960][T13780] overlayfs: failed to resolve './file1': -2 [ 238.508818][T13780] overlayfs: failed to resolve './file1': -2 [ 238.511118][T13780] overlayfs: failed to resolve './file1': -2 [ 238.513884][T13780] overlayfs: failed to resolve './file1': -2 [ 238.516376][T13780] overlayfs: failed to resolve './file1': -2 [ 238.518877][T13780] overlayfs: failed to resolve './file1': -2 [ 238.521130][T13780] overlayfs: failed to resolve './file1': -2 [ 238.523280][ T5312] Bluetooth: hci2: command tx timeout [ 238.524571][T13780] overlayfs: failed to resolve './file1': -2 [ 238.528381][T13780] overlayfs: failed to resolve './file1': -2 [ 238.530972][T13780] overlayfs: failed to resolve './file1': -2 [ 238.536026][T13780] overlayfs: failed to resolve './file1': -2 [ 238.539434][T13780] overlayfs: failed to resolve './file1': -2 [ 238.543076][T13780] overlayfs: failed to resolve './file1': -2 [ 238.546698][T13780] overlayfs: failed to resolve './file1': -2 [ 238.550252][T13780] overlayfs: failed to resolve './file1': -2 [ 238.555203][T13780] overlayfs: failed to resolve './file1': -2 [ 238.558220][T13780] overlayfs: failed to resolve './file1': -2 [ 238.561190][T13780] overlayfs: failed to resolve './file1': -2 [ 238.566526][T13780] overlayfs: failed to resolve './file1': -2 [ 238.616733][ T4586] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 238.619752][ T4586] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 238.622719][ T4586] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.635820][ T4586] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 238.638646][ T4586] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.641217][ T4586] usb 7-1: Product: syz [ 238.642823][ T4586] usb 7-1: Manufacturer: syz [ 238.645061][ T4586] usb 7-1: SerialNumber: syz [ 238.664739][ T4586] hub 7-1:1.0: bad descriptor, ignoring hub [ 238.666648][ T4586] hub 7-1:1.0: probe with driver hub failed with error -5 [ 238.867164][ T4586] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 238.868447][T13771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.886841][T13771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.985566][T13818] netlink: 'syz.8.2224': attribute type 10 has an invalid length. [ 238.988042][T13818] team0: Cannot enslave team device to itself [ 238.990447][T13818] netlink: 'syz.8.2224': attribute type 1 has an invalid length. [ 239.003760][ T6036] usb 7-1: USB disconnect, device number 15 [ 239.017250][ T6036] usblp0: removed [ 239.053389][T13809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2221'. [ 239.142594][T13809] hsr_slave_0 (unregistering): left promiscuous mode [ 239.227234][T13830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2227'. [ 239.230979][T13830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2227'. [ 239.244418][ T4586] usb 13-1: new full-speed USB device number 3 using dummy_hcd [ 239.418533][ T4586] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.421732][ T4586] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 239.425969][ T4586] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 239.429183][ T4586] usb 13-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 239.434438][ T4586] usb 13-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 239.437370][ T4586] usb 13-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 239.440032][ T4586] usb 13-1: Manufacturer: syz [ 239.442968][ T4586] usb 13-1: config 0 descriptor?? [ 239.498917][T13844] binder_alloc: binder_alloc_mmap_handler: 13843 200000ff9000-200000ffd000 already mapped failed -16 [ 239.513220][ T7536] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 239.528695][T13846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.677635][ T7536] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 239.682060][ T7536] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.686613][ T7536] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.690462][ T7536] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 239.695717][ T7536] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 239.698573][ T7536] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 239.698586][ T7536] usb 5-1: Manufacturer: syz [ 239.699774][ T7536] usb 5-1: config 0 descriptor?? [ 239.703208][ T4586] rc_core: IR keymap rc-hauppauge not found [ 239.706194][ T4586] Registered IR keymap rc-empty [ 239.709096][ T4586] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 239.724876][ T4586] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 239.744044][ T4586] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0 [ 239.748551][ T4586] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0/input46 [ 239.754603][ T4586] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 239.773642][ T4586] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 239.793296][ T4586] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 239.813645][ T4586] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 239.833169][ T4586] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 239.853177][ T4586] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 239.873615][ T4586] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 239.893247][ T4586] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 239.913197][ T4586] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 239.933871][ T4586] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 239.954024][ T4586] mceusb 13-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 239.956915][ T4586] mceusb 13-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 239.963060][ T4586] usb 13-1: USB disconnect, device number 3 [ 240.109960][ T7536] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 240.118229][ T7536] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 240.490131][ T40] audit: type=1400 audit(496.398:94928): avc: denied { append } for pid=13869 comm="syz.4.2239" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 240.498950][ T40] audit: type=1400 audit(496.398:94929): avc: denied { write } for pid=13869 comm="syz.4.2239" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 240.506960][ T40] audit: type=1400 audit(496.398:94930): avc: denied { ioctl } for pid=13869 comm="syz.4.2239" path="/dev/input/mice" dev="devtmpfs" ino=939 ioctlcmd=0x5334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 240.515130][ T40] audit: type=1400 audit(496.398:94931): avc: denied { setattr } for pid=13869 comm="syz.4.2239" name="NETLINK" dev="sockfs" ino=82278 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 240.603657][ T5312] Bluetooth: hci2: command tx timeout [ 240.635392][T13884] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2244'. [ 240.638216][T13884] bridge_slave_1: left allmulticast mode [ 240.641184][T13884] bridge_slave_1: left promiscuous mode [ 240.644214][T13884] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.650080][T13884] bridge_slave_0: left allmulticast mode [ 240.652469][T13884] bridge_slave_0: left promiscuous mode [ 240.655896][T13884] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.656308][T13888] netlink: 'syz.2.2245': attribute type 10 has an invalid length. [ 240.709249][T13890] netlink: 'syz.2.2245': attribute type 1 has an invalid length. [ 240.850399][T13892] netlink: 'syz.8.2246': attribute type 1 has an invalid length. [ 240.852865][T13892] netlink: 244 bytes leftover after parsing attributes in process `syz.8.2246'. [ 240.934525][T13897] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2247'. [ 240.937416][T13897] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2247'. [ 240.940285][T13897] tipc: MTU too low for tipc bearer [ 240.953242][ T4586] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 241.124670][ T4586] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.127795][ T4586] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 241.143655][ T4586] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 241.146796][ T4586] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 241.151607][ T4586] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 241.154492][ T4586] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 241.156940][ T4586] usb 7-1: Manufacturer: syz [ 241.163769][ T4586] usb 7-1: config 0 descriptor?? [ 241.203818][T13906] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2250'. [ 241.211480][T13906] sp0: Synchronizing with TNC [ 241.423151][ T4586] rc_core: IR keymap rc-hauppauge not found [ 241.425092][ T4586] Registered IR keymap rc-empty [ 241.426776][ T4586] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 241.443199][ T4586] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 241.464862][ T4586] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 241.470677][ T4586] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input47 [ 241.477597][ T4586] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 241.495093][ T4586] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 241.513485][ T4586] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 241.533179][ T4586] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 241.553545][ T4586] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 241.573329][ T4586] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 241.593191][ T4586] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 241.613570][ T4586] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 241.633165][ T4586] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 241.653190][ T4586] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 241.675143][ T4586] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 241.678083][ T4586] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 241.682587][ T4586] usb 7-1: USB disconnect, device number 16 [ 241.890152][T13917] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2252'. [ 241.894108][T13917] xt_limit: Overflow, try lower: 1207959552/384 [ 241.896621][T13917] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2252'. [ 241.900033][T13917] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2252'. [ 242.115430][T13937] overlayfs: workdir and upperdir must reside under the same mount [ 242.119610][ T40] audit: type=1400 audit(498.028:94932): avc: denied { lock } for pid=13936 comm="syz.2.2257" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=79654 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 242.127508][ T40] audit: type=1400 audit(498.028:94933): avc: denied { open } for pid=13936 comm="syz.2.2257" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=79654 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 242.198967][ T10] usb 5-1: USB disconnect, device number 32 [ 242.333557][T13954] program syz.2.2259 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.337603][ T40] audit: type=1400 audit(498.248:94934): avc: denied { read } for pid=13943 comm="syz.2.2259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 242.343415][ T40] audit: type=1800 audit(498.248:94935): pid=13954 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2259" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 242.356264][T13956] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 242.500598][T13960] netlink: 'syz.2.2264': attribute type 30 has an invalid length. [ 242.554781][T13966] xt_CT: You must specify a L4 protocol and not use inversions on it [ 242.582082][T13968] netlink: 'syz.4.2266': attribute type 10 has an invalid length. [ 242.584678][T13968] team0: Cannot enslave team device to itself [ 242.586912][T13968] netlink: 'syz.4.2266': attribute type 1 has an invalid length. [ 242.823168][ T6016] usb 9-1: new full-speed USB device number 36 using dummy_hcd [ 242.974874][ T6016] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.980385][ T6016] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 242.987321][ T6016] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 242.991065][ T6016] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 242.995863][ T6016] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 242.998703][ T6016] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 243.001188][ T6016] usb 9-1: Manufacturer: syz [ 243.004499][ T6016] usb 9-1: config 0 descriptor?? [ 243.264682][ T6016] rc_core: IR keymap rc-hauppauge not found [ 243.268057][ T6016] Registered IR keymap rc-empty [ 243.270462][ T6016] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 243.283334][ T6016] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 243.304084][ T6016] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 243.311890][ T6016] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input48 [ 243.322124][ T6016] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 243.353312][ T6016] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 243.373351][ T6016] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 243.403483][ T6016] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 243.427652][ T6016] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 243.453565][ T6016] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 243.464391][T14016] loop2: detected capacity change from 0 to 7 [ 243.467512][T14016] Dev loop2: unable to read RDB block 7 [ 243.469669][T14016] loop2: AHDI p1 p2 p3 [ 243.471318][T14016] loop2: partition table partially beyond EOD, truncated [ 243.474943][T14016] loop2: p1 start 1601398130 is beyond EOD, truncated [ 243.477586][T14016] loop2: p2 start 1702059890 is beyond EOD, truncated [ 243.483202][ T6016] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 243.483870][T14016] xt_l2tp: invalid flags combination: c [ 243.503189][ T6016] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 243.523244][ T6016] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 243.543182][ T6016] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 243.576542][ T6016] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 243.579320][ T6016] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 243.585355][ T6016] usb 9-1: USB disconnect, device number 36 [ 243.955324][T14042] netlink: 'syz.8.2288': attribute type 1 has an invalid length. [ 243.957720][T14042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.015557][T14051] tipc: Enabled bearer , priority 0 [ 244.022479][T14051] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !fIZE,=$)%ĂL [ 244.116496][T14057] wg2: entered promiscuous mode [ 244.118454][T14057] wg2: entered allmulticast mode [ 244.259880][T14070] netlink: 'syz.8.2298': attribute type 10 has an invalid length. [ 244.262374][T14070] team0: Cannot enslave team device to itself [ 244.266769][T14070] netlink: 'syz.8.2298': attribute type 1 has an invalid length. [ 244.503290][ T7831] usb 13-1: new full-speed USB device number 4 using dummy_hcd [ 244.668292][ T7831] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.672466][ T7831] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 244.678005][ T7831] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 244.681923][ T7831] usb 13-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 244.687743][ T7831] usb 13-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 244.690539][ T7831] usb 13-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 244.692988][ T7831] usb 13-1: Manufacturer: syz [ 244.696156][ T7831] usb 13-1: config 0 descriptor?? [ 244.973164][ T7831] rc_core: IR keymap rc-hauppauge not found [ 244.975048][ T7831] Registered IR keymap rc-empty [ 244.976584][ T7831] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 244.993305][ T7831] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 245.014972][ T7831] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0 [ 245.019892][ T7831] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0/input49 [ 245.026941][ T7831] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 245.043176][ T7831] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 245.073194][ T7831] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 245.086299][T14100] __nla_validate_parse: 48 callbacks suppressed [ 245.086314][T14100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2306'. [ 245.093258][ T7831] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 245.113197][ T7831] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 245.143271][ T7831] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 245.164638][ T7831] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 245.169256][T14104] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2308'. [ 245.193891][ T7831] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 245.214899][ T7831] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 245.233344][ T7831] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 245.255627][ T7831] mceusb 13-1:0.0: Registered with mce emulator interface version 1 [ 245.258586][ T7831] mceusb 13-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 245.262999][ T7831] usb 13-1: USB disconnect, device number 4 [ 245.470147][T14122] syzkaller1: entered promiscuous mode [ 245.471893][T14122] syzkaller1: entered allmulticast mode [ 245.472501][T14124] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 245.475763][T14124] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 245.477635][T14122] syzkaller1: left promiscuous mode [ 245.480293][T14122] syzkaller1: left allmulticast mode [ 245.483624][T14124] vhci_hcd vhci_hcd.0: Device attached [ 245.486185][T14122] vti0: entered promiscuous mode [ 245.487716][T14125] vhci_hcd: connection closed [ 245.489237][T11167] vhci_hcd: stop threads [ 245.493674][T11167] vhci_hcd: release socket [ 245.495157][T11167] vhci_hcd: disconnect device [ 245.672299][T14136] netlink: 'syz.2.2317': attribute type 4 has an invalid length. [ 245.707361][ T40] audit: type=1400 audit(501.618:94936): avc: denied { connect } for pid=14131 comm="syz.0.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 245.707509][T14132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2319'. [ 245.753324][T14139] netlink: 'syz.8.2320': attribute type 1 has an invalid length. [ 245.759349][T14139] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 245.791454][T14144] netlink: 'syz.8.2323': attribute type 10 has an invalid length. [ 245.798740][T14144] team0: Cannot enslave team device to itself [ 245.804072][T14144] netlink: 'syz.8.2323': attribute type 1 has an invalid length. [ 245.847157][ T40] audit: type=1800 audit(501.758:94937): pid=14145 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2322" name="file0" dev="tmpfs" ino=2376 res=0 errno=0 [ 245.854023][ T40] audit: type=1804 audit(501.758:94938): pid=14145 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.2322" name="/newroot/429/file0" dev="tmpfs" ino=2376 res=1 errno=0 [ 246.165614][T14175] 9pnet_virtio: no channels available for device syz [ 246.258384][T14183] netlink: 'syz.4.2332': attribute type 10 has an invalid length. [ 246.260945][T14183] team0: Cannot enslave team device to itself [ 246.263312][T14183] netlink: 'syz.4.2332': attribute type 1 has an invalid length. [ 246.350924][T14190] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2334'. [ 246.460856][ T40] audit: type=1400 audit(502.368:94939): avc: denied { getopt } for pid=14187 comm="syz.4.2333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 246.524176][T14197] 9pnet_virtio: no channels available for device syz [ 246.751893][T14204] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2337'. [ 246.782069][T14207] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2338'. [ 246.786561][T14207] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2338'. [ 246.959117][T14215] netlink: 'syz.0.2341': attribute type 1 has an invalid length. [ 246.972308][T14215] 8021q: adding VLAN 0 to HW filter on device bond6 [ 246.984405][T14215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2341'. [ 246.995725][T14215] vlan2: entered promiscuous mode [ 246.997632][T14215] bond6: entered promiscuous mode [ 247.071673][T14226] netlink: 'syz.0.2345': attribute type 10 has an invalid length. [ 247.074957][T14226] team0: Cannot enslave team device to itself [ 247.217551][ T40] audit: type=1400 audit(503.128:94940): avc: denied { setopt } for pid=14217 comm="syz.4.2342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 247.256095][T14241] 9p: Unknown access argument 18446744073709551615: -34 [ 247.463171][ T7831] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 247.614764][ T7831] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.618233][ T7831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 247.621890][ T7831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 247.625106][ T7831] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 247.629942][ T7831] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 247.632970][ T7831] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 247.635781][ T7831] usb 5-1: Manufacturer: syz [ 247.640879][ T7831] usb 5-1: config 0 descriptor?? [ 247.783641][ T24] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 247.831709][T14264] program syz.8.2356 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.913166][ T7831] rc_core: IR keymap rc-hauppauge not found [ 247.915042][ T7831] Registered IR keymap rc-empty [ 247.916870][ T7831] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 247.926322][ T40] audit: type=1400 audit(503.838:94941): avc: denied { getattr } for pid=14268 comm="syz.4.2357" name="/" dev="9p" ino=35913821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 247.934005][ T7831] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 247.935274][T14274] overlayfs: workdir and upperdir must reside under the same mount [ 247.939739][ T24] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 247.948277][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 247.951575][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 247.953660][ T7831] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 247.955916][ T24] usb 7-1: SerialNumber: syz [ 247.964695][ T7831] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input51 [ 247.975279][ T7831] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 247.993184][ T7831] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 248.013274][ T7831] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 248.033178][ T7831] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 248.053181][ T7831] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 248.073180][ T7831] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 248.093248][ T7831] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 248.113753][ T7831] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 248.133280][ T7831] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 248.153226][ T7831] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 248.166449][ T24] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 248.171327][ T24] usb 7-1: USB disconnect, device number 17 [ 248.175807][ T7831] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 248.178688][ T7831] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 248.190634][ T7831] usb 5-1: USB disconnect, device number 33 [ 248.367624][T14245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2349'. [ 248.376504][T14245] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 248.379120][T14245] IPv6: NLM_F_CREATE should be set when creating new route [ 248.382314][T14245] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 248.384763][T14245] IPv6: NLM_F_CREATE should be set when creating new route [ 248.417847][T14288] use of bytesused == 0 is deprecated and will be removed in the future, [ 248.420552][T14288] use the actual size instead. [ 248.552329][T14310] team0: Cannot enslave team device to itself [ 248.803873][ T24] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 248.964959][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.969235][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 248.976744][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 248.980719][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 248.993988][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 248.997599][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 249.000776][ T24] usb 5-1: Manufacturer: syz [ 249.005235][ T24] usb 5-1: config 0 descriptor?? [ 249.027983][T14313] vxcan1 speed is unknown, defaulting to 1000 [ 249.263549][ T24] rc_core: IR keymap rc-hauppauge not found [ 249.265498][ T24] Registered IR keymap rc-empty [ 249.267059][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 249.283379][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 249.303741][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 249.308370][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input52 [ 249.314743][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 249.333261][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 249.353578][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 249.373213][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 249.393306][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 249.413601][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 249.433217][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 249.447470][T14325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14325 comm=syz.4.2372 [ 249.453428][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 249.453875][T14325] validate_nla: 3 callbacks suppressed [ 249.453884][T14325] netlink: 'syz.4.2372': attribute type 1 has an invalid length. [ 249.473702][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 249.474718][T14325] bond3: (slave bridge4): making interface the new active one [ 249.478927][T14325] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 249.493335][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 249.514114][ T24] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 249.516564][ T24] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 249.521558][ T24] usb 5-1: USB disconnect, device number 34 [ 249.865524][T14344] vivid-000: ================= START STATUS ================= [ 249.877227][T14344] vivid-000: Test Pattern: 100% Color Squares [ 249.879814][T14344] vivid-000: Fill Percentage of Frame: 100 [ 249.881933][T14344] vivid-000: Horizontal Movement: Move Right [ 249.885126][T14349] cgroup2: Unknown parameter 'euid' [ 249.885435][T14344] vivid-000: Vertical Movement: No Movement [ 249.889412][T14344] vivid-000: OSD Text Mode: All [ 249.891527][T14344] vivid-000: Show Border: false [ 249.892029][T14349] NILFS (nullb0): couldn't find nilfs on the device [ 249.895268][T14344] vivid-000: Show Square: false [ 249.899663][T14344] vivid-000: Sensor Flipped Horizontally: false [ 249.902342][T14344] vivid-000: Sensor Flipped Vertically: true [ 249.905516][T14344] vivid-000: Insert SAV Code in Image: false [ 249.910006][T14344] vivid-000: Insert EAV Code in Image: false [ 249.912626][T14344] vivid-000: Insert Video Guard Band: false [ 249.915362][T14344] vivid-000: Reduced Framerate: false [ 249.917662][T14344] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 249.921002][T14344] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 249.924592][T14344] vivid-000: Enable Capture Cropping: true grabbed [ 249.927418][T14344] vivid-000: Enable Capture Composing: true grabbed [ 249.930274][T14344] vivid-000: Enable Capture Scaler: true grabbed [ 249.932791][T14344] vivid-000: Timestamp Source: End of Frame [ 249.934932][T14344] vivid-000: Colorspace: SMPTE 170M [ 249.936706][T14344] vivid-000: Transfer Function: Default [ 249.938471][T14344] vivid-000: Y'CbCr Encoding: Default [ 249.940165][T14344] vivid-000: HSV Encoding: Hue 0-179 [ 249.941823][T14344] vivid-000: Quantization: Default [ 249.943506][T14344] vivid-000: Apply Alpha To Red Only: false [ 249.945341][T14344] vivid-000: Standard Aspect Ratio: 4x3 [ 249.947157][T14344] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 249.949564][T14344] vivid-000: DV Timings: 720x480p59 inactive [ 249.951512][T14344] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 249.954709][T14344] vivid-000: Maximum EDID Blocks: 2 [ 249.956373][T14344] vivid-000: Limited RGB Range (16-235): false [ 249.958370][T14344] vivid-000: Rx RGB Quantization Range: Automatic [ 249.960416][T14344] vivid-000: Power Present: 0x00000001 [ 249.962545][T14344] tpg source WxH: 720x576 (R'G'B) [ 249.964316][T14344] tpg field: 5 [ 249.965466][T14344] tpg crop: (704,0)/16x32 [ 249.966876][T14344] tpg compose: (0,0)/16x8 [ 249.968266][T14344] tpg colorspace: 1 [ 249.969524][T14344] tpg transfer function: 0/1 [ 249.971016][T14344] tpg quantization: 0/1 [ 249.972351][T14344] tpg RGB range: 0/2 [ 249.974221][T14344] vivid-000: ================== END STATUS ================== [ 250.020938][ T40] audit: type=1400 audit(505.928:94942): avc: denied { listen } for pid=14353 comm="syz.0.2380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 250.026967][ T40] audit: type=1400 audit(505.928:94943): avc: denied { accept } for pid=14353 comm="syz.0.2380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 250.162762][T14360] blkio.reset_stats is deprecated [ 250.165625][T14360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2382'. [ 250.483226][ T1335] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 250.623444][ T1335] usb 7-1: device descriptor read/64, error -71 [ 250.773190][ T6036] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 250.862436][T14407] syz.0.2387: attempt to access beyond end of device [ 250.862436][T14407] loop0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 250.867223][T14407] MINIX-fs: unable to read superblock [ 250.883334][ T1335] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 250.923284][ T6036] usb 9-1: Using ep0 maxpacket: 8 [ 250.926179][ T6036] usb 9-1: config 14 has an invalid interface number: 212 but max is 2 [ 250.928967][ T6036] usb 9-1: config 14 contains an unexpected descriptor of type 0x2, skipping [ 250.931717][ T6036] usb 9-1: config 14 has an invalid interface number: 149 but max is 2 [ 250.935366][ T6036] usb 9-1: config 14 has an invalid interface number: 193 but max is 2 [ 250.937924][ T6036] usb 9-1: config 14 has no interface number 0 [ 250.939950][ T6036] usb 9-1: config 14 has no interface number 1 [ 250.942234][ T6036] usb 9-1: config 14 has no interface number 2 [ 250.944649][ T6036] usb 9-1: config 14 interface 212 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 250.948429][ T6036] usb 9-1: config 14 interface 212 altsetting 12 has a duplicate endpoint with address 0x7, skipping [ 250.952128][ T6036] usb 9-1: config 14 interface 212 altsetting 12 bulk endpoint 0x4 has invalid maxpacket 64 [ 250.956289][ T6036] usb 9-1: config 14 interface 149 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 250.959679][ T6036] usb 9-1: config 14 interface 149 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 250.963543][ T6036] usb 9-1: config 14 interface 193 altsetting 127 has an endpoint descriptor with address 0xED, changing to 0x8D [ 250.968392][ T6036] usb 9-1: config 14 interface 193 altsetting 127 has a duplicate endpoint with address 0x8D, skipping [ 250.972259][ T6036] usb 9-1: config 14 interface 193 altsetting 127 has a duplicate endpoint with address 0x7, skipping [ 250.975764][ T6036] usb 9-1: config 14 interface 193 altsetting 127 has a duplicate endpoint with address 0x4, skipping [ 250.979447][ T6036] usb 9-1: config 14 interface 212 has no altsetting 0 [ 250.981726][ T6036] usb 9-1: config 14 interface 149 has no altsetting 0 [ 250.984555][ T6036] usb 9-1: config 14 interface 193 has no altsetting 0 [ 250.988833][ T6036] usb 9-1: Dual-Role OTG device on HNP port [ 250.990928][ T6036] usb 9-1: New USB device found, idVendor=147a, idProduct=e03a, bcdDevice=f9.84 [ 250.993867][ T6036] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.996372][ T6036] usb 9-1: Product: 遂뵍⹻竳눽턟隋䐄㒨犝몍❹ [ 250.998668][ T6036] usb 9-1: Manufacturer: 䙖埠䖫䧁᠑﷐浪阨컗蒮髨湄䫧₫䔟ᯓ彘寈ﯴ鰁躣䥼戔穅義∡ [ 251.002335][ T6036] usb 9-1: SerialNumber: ఊ [ 251.007367][ T6036] usb 9-1: rejected 1 configuration due to insufficient available bus power [ 251.010048][ T6036] usb 9-1: no configuration chosen from 1 choice [ 251.013257][ T1335] usb 7-1: device descriptor read/64, error -71 [ 251.035985][T14417] [U] [ 251.037162][T14417] [U] [ 251.038279][T14417] [U] [ 251.039401][T14417] [U] [ 251.040614][T14417] [U] [ 251.041755][T14417] [U] [ 251.042893][T14417] [U] [ 251.044035][T14417] [U] [ 251.045880][T14417] [U] [ 251.046871][T14417] [U] [ 251.047997][T14417] [U] [ 251.049127][T14417] [U] [ 251.050380][T14417] [U] [ 251.051515][T14417] [U] [ 251.052705][T14417] [U] [ 251.053898][T14417] [U] [ 251.059590][T14417] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 251.076719][T14420] [U] [ 251.123441][ T1335] usb usb7-port1: attempt power cycle [ 251.343259][ T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 251.473153][ T1335] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 251.494612][ T1335] usb 7-1: device descriptor read/8, error -71 [ 251.495085][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 251.501751][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 251.506265][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 251.510699][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 251.516735][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 251.520448][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.525912][ T24] usb 5-1: config 0 descriptor?? [ 251.528254][T14422] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 251.733231][ T1335] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 251.753981][ T1335] usb 7-1: device descriptor read/8, error -71 [ 251.864367][ T1335] usb usb7-port1: unable to enumerate USB device [ 251.937338][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 251.940366][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 251.942761][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 251.945278][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 251.947713][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 251.950115][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 251.952518][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 251.954933][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 251.957257][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 251.959610][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 251.962008][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 251.964852][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 251.967479][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 251.969843][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 251.972229][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 251.980030][ T24] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 252.499517][T14424] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 253.536628][ T6016] usb 9-1: USB disconnect, device number 37 [ 253.572695][T14433] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 253.576506][T14433] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 253.577890][ T40] audit: type=1400 audit(509.488:94944): avc: denied { write } for pid=5865 comm="syz-executor" path="pipe:[843]" dev="pipefs" ino=843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 253.579658][T14433] CPU: 3 UID: 0 PID: 14433 Comm: syz.4.2395 Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8 #0 PREEMPT(full) [ 253.579675][T14433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 253.579683][T14433] RIP: 0010:__list_del_entry_valid_or_report+0x20/0x200 [ 253.598507][T14433] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 54 55 53 48 89 fb 48 83 c7 08 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 8b 01 00 00 48 89 da 48 8b 6b 08 48 b8 00 00 00 [ 253.604554][T14433] RSP: 0018:ffffc90005f672f8 EFLAGS: 00010202 [ 253.606520][T14433] RAX: dffffc0000000000 RBX: 0000000000000050 RCX: ffffc900269e1000 [ 253.609109][T14433] RDX: 000000000000000b RSI: ffffffff89935acc RDI: 0000000000000058 [ 253.611654][T14433] RBP: 0000000000000050 R08: 0000000000000005 R09: 0000000000000000 [ 253.614204][T14433] R10: 00000000000afff2 R11: 0000000000000001 R12: ffffffff8ce8d220 [ 253.616692][T14433] R13: 0000000000000058 R14: ffffffff8ce8d200 R15: ffff88802cd3e000 [ 253.619470][T14433] FS: 00007fe0ed7116c0(0000) GS:ffff8880d6a15000(0000) knlGS:0000000000000000 [ 253.622235][T14433] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 253.624287][T14433] CR2: 00007fe0ed710f98 CR3: 000000002c4e8000 CR4: 0000000000352ef0 [ 253.626750][T14433] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 253.629254][T14433] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 253.631709][T14433] Call Trace: [ 253.632776][T14433] [ 253.633724][T14433] drr_qlen_notify+0x24/0x150 [ 253.635305][T14433] qdisc_tree_reduce_backlog+0x221/0x500 [ 253.637117][T14433] codel_change+0x6d9/0xc90 [ 253.638526][T14433] ? qdisc_alloc+0x900/0xc50 [ 253.639996][T14433] ? qdisc_create+0x71/0xfc0 [ 253.641440][T14433] ? tc_modify_qdisc+0x12bb/0x2130 [ 253.643047][T14433] ? rtnetlink_rcv_msg+0x3c6/0xe90 [ 253.644687][T14433] ? ____sys_sendmsg+0xa98/0xc70 [ 253.646381][T14433] ? __pfx_codel_change+0x10/0x10 [ 253.647990][T14433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.649887][T14433] codel_init+0x2e6/0x430 [ 253.651255][T14433] ? __pfx_codel_init+0x10/0x10 [ 253.652865][T14433] qdisc_create+0x454/0xfc0 [ 253.654335][T14433] tc_modify_qdisc+0x12bb/0x2130 [ 253.655970][T14433] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 253.657650][T14433] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 253.659394][T14433] rtnetlink_rcv_msg+0x3c6/0xe90 [ 253.661059][T14433] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 253.662849][T14433] ? ref_tracker_free+0x37c/0x830 [ 253.664499][T14433] netlink_rcv_skb+0x155/0x420 [ 253.666534][T14433] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 253.668351][T14433] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 253.669997][T14433] ? netlink_deliver_tap+0x1ae/0xd30 [ 253.671631][T14433] netlink_unicast+0x53d/0x7f0 [ 253.673090][T14433] ? __pfx_netlink_unicast+0x10/0x10 [ 253.674790][T14433] netlink_sendmsg+0x8d1/0xdd0 [ 253.676406][T14433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.678020][T14433] ____sys_sendmsg+0xa98/0xc70 [ 253.679525][T14433] ? copy_msghdr_from_user+0x10a/0x160 [ 253.681187][T14433] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.682810][T14433] ? __pfx_futex_wake_mark+0x10/0x10 [ 253.684583][T14433] ___sys_sendmsg+0x134/0x1d0 [ 253.686391][T14433] ? __pfx____sys_sendmsg+0x10/0x10 [ 253.688000][T14433] ? __lock_acquire+0x622/0x1c90 [ 253.689590][T14433] __sys_sendmsg+0x16d/0x220 [ 253.691039][T14433] ? __pfx___sys_sendmsg+0x10/0x10 [ 253.692611][T14433] ? __x64_sys_futex+0x1e0/0x4c0 [ 253.694217][T14433] do_syscall_64+0xcd/0x4c0 [ 253.695690][T14433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.697525][T14433] RIP: 0033:0x7fe0ec98e929 [ 253.698995][T14433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.705578][T14433] RSP: 002b:00007fe0ed711038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.708534][T14433] RAX: ffffffffffffffda RBX: 00007fe0ecbb5fa0 RCX: 00007fe0ec98e929 [ 253.711710][T14433] RDX: 0000000000000800 RSI: 0000200000000100 RDI: 0000000000000005 [ 253.714927][T14433] RBP: 00007fe0eca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 253.718124][T14433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.721264][T14433] R13: 0000000000000000 R14: 00007fe0ecbb5fa0 R15: 00007ffc7f8e4738 [ 253.724033][T14433] [ 253.725318][T14433] Modules linked in: [ 253.727060][T14433] ---[ end trace 0000000000000000 ]--- [ 253.729310][T14433] RIP: 0010:__list_del_entry_valid_or_report+0x20/0x200 [ 253.732138][T14433] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 54 55 53 48 89 fb 48 83 c7 08 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 8b 01 00 00 48 89 da 48 8b 6b 08 48 b8 00 00 00 [ 253.739913][T14433] RSP: 0018:ffffc90005f672f8 EFLAGS: 00010202 [ 253.742204][T14433] RAX: dffffc0000000000 RBX: 0000000000000050 RCX: ffffc900269e1000 [ 253.745451][T14433] RDX: 000000000000000b RSI: ffffffff89935acc RDI: 0000000000000058 [ 253.748762][T14433] RBP: 0000000000000050 R08: 0000000000000005 R09: 0000000000000000 [ 253.752088][T14433] R10: 00000000000afff2 R11: 0000000000000001 R12: ffffffff8ce8d220 [ 253.755461][T14433] R13: 0000000000000058 R14: ffffffff8ce8d200 R15: ffff88802cd3e000 [ 253.758868][T14433] FS: 00007fe0ed7116c0(0000) GS:ffff8880d6a15000(0000) knlGS:0000000000000000 [ 253.762626][T14433] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 253.765488][T14433] CR2: 00007fe0ed710f98 CR3: 000000002c4e8000 CR4: 0000000000352ef0 [ 253.768820][T14433] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 253.772263][T14433] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 253.775632][T14433] Kernel panic - not syncing: Fatal exception in interrupt [ 253.779280][T14433] Kernel Offset: disabled [ 253.780730][T14433] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:46:36 Registers: info registers vcpu 0 CPU#0 RAX=00000000001dfa1c RBX=0000000000000000 RCX=ffffffff8b884c69 RDX=ffffed100d486646 RSI=ffffffff8c158760 RDI=ffffffff8191fc61 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a97550 R15=0000000000000000 RIP=ffffffff8b8837cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6715000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5713f726e0 CR3=000000004b865000 CR4=00352ef0 DR0=0000000000000007 DR1=0000000000000002 DR2=0000000000000008 DR3=1000000100000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030303030303030 3030303020276369 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd881011b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd881011b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd881011b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd881011b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd881011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd881011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3c8d51a71cc406c8 cf050ede3589d0d4 82d11406cbf68d49 eb693dd70a3f6a9b ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88806a742080 RCX=ffffffff81b001fd RDX=ffff888028150000 RSI=ffffffff81b001d9 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc900048e7518 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000007c79 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed100d4e8411 R15=ffff88806a53b580 RIP=ffffffff81b001db RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6815000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa3a22e7d60 CR3=000000003350d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa3a17856a3 00007fa3a17856a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe7e0698f0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558a0a2080 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558a0adb25 000055558a0ab110 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 756e2f7665642f01 ffffffffffffffff e708000300000004 0806010000000806 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010fffffffffffff 040280a080100002 800407800400040a 0141d60002000700 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7366646101ffffff fffffffffff50802 8003002e01ffffff fffffffffffb0807 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80030030626c6c75 6e2f7665642f01ff ffffffffffffffe7 0800030000000408 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0601000000080604 010dc20002000704 10002c8004010000 06080606017d8c00 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855befc5 RDI=ffffffff9b0c52e0 RBP=ffffffff9b0c52a0 RSP=ffffc9000078f880 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000069647561 R12=0000000000000000 R13=0000000000000037 R14=ffffffff9b0c52a0 R15=ffffffff855bef60 RIP=ffffffff855befef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6915000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555698a7808 CR3=0000000056414000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc7f8e4ac0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0eca11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0eca11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0eca11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0eca11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0eca11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0eca11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000140 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000140 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000011e5f RBX=0000000000000035 RCX=ffffc900269e1000 RDX=0000000000080000 RSI=ffffffff819b8290 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc90005f66f70 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=000000004153414b R12=1ffff92000becdf0 R13=0000000000000000 R14=ffff88801c38a440 R15=ffffc90005f67038 RIP=ffffffff819b8292 RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe0ed7116c0 ffffffff 00c00000 GS =0000 ffff8880d6a15000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe0ed710f98 CR3=000000002c4e8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=3a810b1eb6134bdc DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000280001 Opmask01=0000000001000003 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0ed710f90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0eca11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0eca11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0eca11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0eca11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0eca11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0eca11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666c65732f636f72 702f0073252f666c 65732d6461657268 742f636f72702f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 434940560a464a57 550a0056000a4349 405608414440574d 510a464a57550a00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000140 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000