last executing test programs: 1m44.260520805s ago: executing program 3 (id=2300): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000300)=ANY=[], 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0x5509, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149004006040800", 0x58}], 0x1) 1m43.684002148s ago: executing program 3 (id=2303): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000280)={@local, 0x1}) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f00000000c0)={&(0x7f0000000780)={{@any, 0xfd}, {@hyper, 0x4}, 0x400, "982cbf5250a16070f462a33e81487dc2c89a71670d229a4958c91e934bf250b89ac9eb14f62abbceaa2758e59adbb3713426bfa62100d3cfb9fc3e2a1115a1c4c3e1fcb0811f30fe8a04c5a366bac1fe2ba60d3dc986fabef91bea070000008665585ff12f61ddc9e602bb8e451e172e317ad7fa1308662d371cf74cd9d62fb3173f6ded9926ef88aa62e0af52fdc97cf474500c4364bd747d83e242c4de11c30f7f8507b60dac9ffa855914a4f010a793e5a463ca1431db2098d45f83805250f82a0c9165b5347c7f0d70473a6faa22a2c151583ed7d6b204c3a8fca9434b6c537f45511e1647cf34fc9af714f395b3ee99c950afd1f687d67a71a01a83a8e8d585b5a6b8f34ceb8a4253596f57ca4a4ecd8d194ef11d3592e389de788da42dde388f36c4e02e422851971f6d4c5673d986c047ab8e32b937594bc35b281cc0cdffd1876f5848a9a4a36335e584495e6a7be7c09fec288447e204c2e2e87717d2b425fc93d23459384ae3b1242050e044b1c2cd303dc6c59facc0ff3c66a44c0fbb95dbf237870ac88764be9d3491e5e46402f099b7cdcf9836670875ed0fdf96bbd3350e82da2e5ae5a1f8345e98bf3edafa8db44ee7aa0372eaebf9635a467c4570c2a779fcea3c543760329bb41a7c72f3dca444c2897bb7dda830b9fdd934483d90d7463f83185ee689f89b4960508f8130eb6cfa7e2ec8b7cc518312005d7825258801c46b5245ec6795248813b3bfac6e04039081da5a9c9a80637866f78039e7fde0b0362a09f827e98602028a0159a00f6a1e8c73c3ab00b73b3b0895a5bcb5aa5c4b6b0d9668ffdb9f3b11f2b213daf1088508fbf545c3a5d9e6ec9debc4648268879aec54059e0b3bb296ab1ea775b42d9b206e2f759e80ce47a9c5de85753f6463856cc0ad94cff563e27621d137a0b61983bb49a795bc283956894b1ec4efc55dda0c62bc61c76f09fae24e5676bb73db392089477ec21b61534d84f912bbe5c8bea4167a5018317f5292561c9f76bfb969d7d67b26e9ddfe95cace6fbc5898b91396bf1c9a1cae3ce01cf8264f53e7c5c58bce6b9328f320a274f47f92d87f529ee2f9dce9a7711be65fe0f8787578809e365bca178f40a1813ebf5011233880108f4aa2d70a2a861a2849d878bed392b5fad306a26b35f25681cf5277b6573a53890dbabff34dee29a15ff56c86a0e422e67e36838384871197a759cccd3df30f4a4f4fb41a702334b92a0512569f9e197d75337e2baf6990ce3a556c56e26fc471054fe2ebd641212f86263804721e9bdeb88308bdecb531e247a8408fe85fbd261e7f0712729ca4d2710bbeb01749a5bd10249f4a3f87dcaf074ae948f0cd1483033b6b9f13fba50510522a4f81ab686b6515b7b7bd7d8f0e28320fd7fdc982f13c95195b7ac3e2f9ccbe09732500"}, 0x418, 0x6}) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) ppoll(&(0x7f0000000140)=[{}], 0x1, &(0x7f0000000180), 0x0, 0x0) (async) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000014c0), 0x4) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) (async) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000540)=0xd172, 0x2) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x3, 0x20}, &(0x7f00000012c0)=0xc) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002740)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="e397aba2b027890e039d8db9abcc7ad887939592c2addb37bbef44fb5ff3f86ea5487db0a73416c621718cfdc88ef3554f0e910ab42841b9d51940256dd98d331da549c995e85200000000569593753d43c50152563c74b31ea8b0ca6b0220a7d332f6fb200000000000"], 0x1c}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002540), 0x2400, 0x0) (async) pread64(r5, &(0x7f0000000480)=""/154, 0x9a, 0xe4) (async) r6 = memfd_secret(0x80000) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000001340)={@qipcrtr={0x2a, 0xffffffff, 0x8000}, {&(0x7f0000001180)=""/225, 0xe1}, &(0x7f0000001280), 0x8}, 0xa0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000001000)={0x1fd, 0x2, 0x54000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000001300)={r3, 0x96, "3d66f480174aaabf5a37b9f69b207425472d1aef1953a0f6b0c36ca5ac6afc5cfeed85c42fee740370d10e460942bb36f0fcf09673131a"}, &(0x7f0000000140)=0x3f) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000001080)={r7, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x8040) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) recvmsg(0xffffffffffffffff, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x0, 0x20, 0x6, 0x1, {{0xc, 0x4, 0x3, 0x3d, 0x30, 0x64, 0x0, 0xea, 0x2f, 0x0, @loopback, @empty, {[@cipso={0x86, 0x18, 0x2, [{0x6, 0x12, "cc7760a861c2a164243dfd5fd88e9867"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) 1m43.597503341s ago: executing program 3 (id=2304): rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002b40)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="e779a888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r5, @ANYBLOB="f35f54320df933e653d447c28bb572edc2afe8c43581f0611c5076e5ee95ff6ad68e671093cf59b0ed94eb32875b579b74709a06b8b4e785a94fc1794791f296b2239a9662afb8673a73c084cd77732b642b560100000000000000fdffff0dc4275285d30f1b88b975d9828eeff270ef611cdf531b6cdf9b82bb0a3b5c58536e3513c989bb50869cf43e045122a4a0433be54a4f"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000a80)={'syztnl1\x00', &(0x7f0000000a00)={'ip6_vti0\x00', r2, 0x0, 0xb, 0x80, 0x4863, 0x63, @private2, @mcast1, 0x700, 0x7800, 0x8, 0x6}}) sendmmsg$sock(r4, &(0x7f0000001900)=[{{&(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1, 0x4, 0x1, 0x2, {0xa, 0x4e21, 0x8, @local, 0x2}}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000440)="078fabce37a2978c438972747e85204d15eb6f5a04572065dd2777ba0f5d3393f742832a2adf6fe7831597c44e9669f15ecbf1d426484ba60338d2a9877ccbf030511f605d5ffd5e83b8da2333735d24b35364ac2bfc3c9b7d46b6da7c37e790eec8ecc5709f8931643886660478df744c", 0x71}, {&(0x7f0000000500)="48b019ce53b86a14bf272aeee44e41a931eb8552809feb3e86c16aef58ebc62fe3c5552734a6c3a0e95268c5b344c32561f23779326b0db2c2e7aaefeda20c256d27615287b761fd2866fc194856e78fe7dfd2b76867fb0971d71e60ea36e78e18f6a80be1590ff1a6c99694895019604b70b70497a4d9e35de7a66cff0b7edc0a20ca8728e1ea74ff881f16966b15727fb45c51a31e06074f4a14378d7d7ef5f4bc2bcc17a33bca2add49f8dbc5fd40fd419bdafc8473394bcf2cdf8c9fa008978c20998d0f4964109f743f405b22ffe22d07891c363653bb2d324ff9db62f0250aa2247d4d", 0xe6}, {&(0x7f00000000c0)="16acfab2fd8a201b9fa883023c53b61e3cee9175fec284f594482b6d5d08b9d3e40397db", 0x24}, {&(0x7f0000001a00)="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", 0x105}, {&(0x7f0000000700)="92bc97e5aef0c1edee4563c1e521588f783b0586ab7af7621451cfe6d3f928ed63657bcc400521564f3cd66262cc70172620b0de2c33f182aa8b2d1ed59793cab47847fab82ad20e512cbab51ce856bd984e991fe6ac054062fdf3a85482208f89ebc891d3137182321e81014c2d081fa18c797c7149f2f3eca2d5fad75666ebf13f053e1c5d5580bf876b6764932a61881fd338aca871b0b9e5", 0x9a}, {&(0x7f00000007c0)="94a590fbf38e7dcf8cf022fd40538e82983e24b5ace7b191c5326f30430115590e05d4f3246d117f65f2780def05566e883de502291a67e06110498a6b6bd232ac3c57e4c8e7f04136f30f3e667ffed11e14", 0x52}, {&(0x7f0000000840)="f2204ef86a9277836ab54cb2056cef971332680b8eef44711d2cb75d9b9f57bd89ae89eabaecca383d3e86e36256d01416010a1fb3433140305b857402c07a84ff09dc896931f5c47b16be85cc53442daacc146286acb0dcdb27f93887b8d5569cc4472793f725fd276db3a609715d41d19b5b3963247c518f68a617061623d21636efdbcc446636b55c9c3c0add297c80d9c36c77b330da264e2d44abe1d3683f55eef73b2417c150ef10f62f3c5f2abfc96470d2871272713c18717e0727298e1a884d472f2fb29f05b05989b1cfdd65c6", 0xd2}, {&(0x7f0000001b40)="aa5746cc17d21315bf87b1a1df2879630ff41d69d351eb4b0791062fff38a8c88d2a93793b5261b5f86c2f2d652ea14c8972de460b1687ac5f6ea6ac565596c2b07a4386912b39c7582199b07c1c6f425f94b0a9bedb84691baedd44dacd2caa8fc3131ad01a9358743929b17311bc7672563005d09353cf0a2b72f20dff6e78cd8614a518aaabc10714d377af53b45ce3925016bacda4d319746d3c4ab50914823c88bf0c8f0b3582ad62c77d16539c77754c376362cf056a7c9f9f573b11311c813d9918290d5331feda5aad0cb5ef223e5df9fbe5c00f5f591b63f87fc1068d51d2776cd867b3c88af849a5766ab13584061bc6be390008f2f0bb612ef9cf794db1b3eb32b9792b3d4959d70f82b8774c2d41a46e39ff07ff8cf0bd3c7df922965f84cd667b4dd427653fdca7aa588172d050ccd0f7f2b1ebfaacfcf21fc44ac9c66dc8a455ac620b55583d1b8806f2f37c59dfa0310ebb7c8eaa30e10ee7504f9a071746196a6b44c944243cdd7634fb2ee64d7c56ea3c3d2019f3aa05cbb5d9d52ed6efa82d4bdc1e9240056901ef51f0caf2cbaf17b09f2806e0bbe2a3a054af7dce1768432ad7fe1bc5356ff5dfba7ac646f0f1610596c364d29cc997cdb8a6a8bcd7648f7fef7ba97be0a54227e0fc54579df560985ea8a76f0f9361a0ff1a85f3346d79e4b5f6dfab1f13b82b8a793f2b12e1d810095c94a5dfd98e2d86146ec2dec45024db0926aa3cfa3e36b0020d50273d97a3a8be231d438735e851737b6ee8191bd36f3ee1deb578a211e4e64f95c396b7acfee72ea34d7a316bf4e40c693d4efe1ada79153549394ef3fd68cb1e222e067c3f711ce802a6335e39c0942bf2b5f0956c1d6ed3a9451ddb6db86d59039221fc7174c87dcc046ba0c8746a38af314e566c6a864895f68f3e941fe0455e9b079bf28874e8d7c7197b33d781f52c9208394a50a4224ffe423851fd6d58538183f1081bd8e9f2dfffb8f2d54be0d948669b2f4836768e133cedfebd773c10a66ebbf1e188a8ea5972c93c8515fe025efd756cd658fb236c77f4f015d452970787ed51f14195b43496f5b34a86ce3748648673d1d9aaf97b51047abd77d091e32fccc37a6061bb6e17bf73491a365d7a6e957d026b2fd233a974464b6f612ef87874eed33661a0bb05f4e35c5227fc775e42a4478ca40dfeafb6710faacaa33e57f00a95da432f18b39ca4b153fed79b5944c599482b6bba1d808b7a640265f1bcf0215ddbaa50a367b43af186d4d450664861b05070272585dd7019413a2fa1e23a51196678675941590501e8859a0bfd13f14ac68f71ddba0df88db722273a4e84c8f5808630374e91d35915b472bdecc7bb4d4014c76814fbe6d822c837c485a3bc483ce07b5ac815c32c9466e43df24ad984228d11eb49c4b90678e1ae1a0f9d9d72b714ddc70dcca46de4ecbada325eeb6db77605a91350707a9076c0994efa49d7a37573904909aa227a4e3521631e486df54106fe96f7bcc7a0b82cbe13cd3e25727bc334d3a88fcb3ea3cea7dd2e6bce7e567459e7906d22886509d587689e39ed6b7e9c2c36cae0d1888ff46232fa3140173e6d4e639fb2017b3c6f3e0203e8b68cb2a1a36ff307e84d1b80c42c2f023c9123f3b44c9a8a87496a8cfc642f90549eeb589179c17d827f892dbbbdb3664eb0b1b64d3ec1d11f0ab3a1873d840d33c935a43bf3ce8cb8a9d718cfbaa236c829cb4e12bb4a41b2184693ba5e3c84ca0d193209dc705111d2fa861af20d4290d1d70b985c35a372f302ecd8e4d34d6df9552a677d9b3bfca473b65359ed429407121f005eca11c6376d3ecc3b79c456a95504610626bc5b6abf26347d43804d3288af7d47c7225e8af4a3dc54ffd115df9a79c7d27dd1c5a3172a337fa4972096e83a28c3be631dd6ab56952f1fac63328b0b4e9bdaf3f1bfad6d5cfa3977e3e6e7cfa0a6f441b0636cbec126ad5a93fb86552dc2adbae95ff6ab05bc046f1888bf5c15e9ba6269174593f5b2006664dc4d28e797a8edb184c0c9cea1acbc35629c9b0f02896c4726bde01ec6538eaa7dc86453f2ef15cff7a50ce54cd6cd399e835324c76e338f1d9b9408f1187ee118cc33024dadd1158768acdc1b0f8df4f1329e0f7af5b18b4073ddc06c0b74bbf82b19649e5d1d290cfe0000ca2f99ddded60f385f0a535d23dec13a1b4f6dc8c53e61b1d3b8dfc638f55a058888b9d91e116a0048de4984932e44caf0c57f61c98c51c540745b8943c7e7eeb6d9215f26cbe33d80d8f5b273bd27c7d1f15cacfd5df506cc31a250d8b0deb4819cd62268dc9e5bbf166b69b258fb68a5d2dded577630d84bc86e8fe585cfdd0a93a29b99fa1c4ce98a4d73161e097843e177eadbbd9205a4b4f90538bf22c160817ebcd93534b954ba3152ba5a48316cda9928b4fec8d1d9e25bf4d71b1f1319f793a6e8ea17c8f2a4f1910b66e30ee8358d59ec4027c217cf5780aa9e60c137f4540f040b817f9dd7341b7f1365110cac632bdf4ac318d1f77830146e2f9a74d359246daf7857266f7d27dcad863e85d762631382120307ecc3fd353bae7cdd5217979414511cfc146af70cccafb8420c52c7f2501b467099ef1b7e194937d833565039d425adfbe4e64f8c30a0cbc203461bb4513260d9bcd49926291081b5138563be1d5d54d0def7dabe167d192d46f380786d3ea4827b72d629d98d78ab25200f7607f4779f6d27f884896224dcdba8823613c1eecabb50f08a4052881ddb010dd316e556c408d2cfb18e5551e10ce4b147e484d09447acf0ff28b6436be4bd7f0f839e6ec51b93bf6196dc45c0738a8f2c3d18da75ad8e5187b66b9f13574d16184856107d79386fc63e9313c19d58305c2df318288a88b9db49e106bdc9e2c5c77a59c6a13d3f9feef58df6ed027dd6edd2026a473b3e74cde993d315521001e766a7d9723a7be098c9439f945b333064c7179ecacd29f260b9a8cbc7cf0043f99160953c2125308f5bdab5424def4f7b5239c30a190df34e8d306bfb5ce125f1c48a926b2c19f778e8642cd022dc4ba21fce310cafa430cf181c05a1e71f1191e26d8683cb0005046ea37e3e2a87e99bc7cc35ecfbf76ac06b7818fdfe3bce4d1a5142c7bf6ec3adb108237a7987ff6bc81db2876759aa808f42d6eeb82f4c8de63f44e600b15e49fb905b1648d215f63f5ce93733ab79443073e6d8630f2489488a0164c320a46f912faf818a4229d3ab4efac4767f702ee900f394405a316591e647d359dc4313247a4ee157f196c38f4c32a8fc3216ba0d09a6ee81a865c1059bf40f38cd4adbb1f87b08a2abfc410e29bea8c9bb267ff98b7b94e96b373ce547b475fee8a905c5cab4772bfae08dbda9318cb552399fbff64e889b715dfef4a95f328841e9a0d4cbb5435ebff4a704c8917e2e294f332665417ee7b9715ff33cca4577a7b1fc7fd05e11f4af1262ad29dd2073e67f1f4da57cb2957ac0bec074c819d24a839a61373a1c4419f020807b2aff9b5995edbe32bd3700dc461cc81ded907e4117c0fda9701de238a8b9cb8bc2c058d6db38d7743b813658481ceab7fc575e2c3003a65550c280e645384b3754bdb4b4aae5c11a4d8a8298153fb9011203964531fe833be20078f1a215ea617a8f7f4adc6bc968e5339fd6001962fe114e3cbb93ac9653c91a7911d4a3dae011a19e89540147510bd355b8c445971ea638e1388165120c4d19ec19c7642ffe6f3efeb7c4f2e7cc887e59f0c25be7834b6fcb54402f2cb5e45005725f30005ff09b71fc0ed334a7e008535fa65b4ede3bcbfa0fc21977c6fa9db1171d38769106976f69076aa44a982d1238a8a3c24266ff45a375dbfa03e7c9a1e5f612f7847fe127c59910cbcc3296fd690bb4aa12e6571893d17e52ea02e0144b7e65ebfa2a9d35ae112fdc034b583cf3ca8a26520e8dc05eda49db55b3650820f30fe91fa3f74ec9ed9b7bbf534efd4f345f898efe142b78625beee594c6128203de5c6b88795d41c5c1415a2a9a30c57e89552e487a41dd93d8fb257e2e05b4cd40764b3545f9b500c4207d2b2d299d9a1d2edb44d4c143f8e531f6d296157f8b709492e31cb851676b6506a18d741e7f594b77d1c91b42cbe86d35addf6fefb452a71a2c47a1e20f4e38d3a365f96b3465cbf56f2968bbd7bfcbafaf82b450a1b4840d860486218ebca4f25ae308e95302802a070580196fcd3559c2c328f2c6654df4ce1b527f4234d1488c833bffe3eabc57b6072211666ddc800f9055f211107d3b91148168c7f7e39369e99985aa71a2b63fa245e7ab90003b153f074f5577b4047282733f7d28ee580749e0c9dfb484b1397642d2644fd3b5db9768ed70b4dab48d9a6ec166208eab1c94a3589eccfb4afc07bb7401c36ab2770cd3d87e4a1417eea0501c156b4d37a6b5864dd0b7f872a3947129b8a719703fac136fd6e6558399f9896c28baff7e81552f2bbe4571a6967962e950eaa647061a7f163469bac5075013f8ae945153684db670091650b8686803358ea6a102ed1c77ce0f0e45dc960db2bcbd1e10d683053b789639d22b46683d0886a0c9f20b47fdcf4d8301f06906bd440c5699bed71bb4ea4dade998649a7092ae6feab59991f69a2fe44aadf2270430e49a14bd8863f0fc4e60eeb8078b2344813ebede301a01b7be2003a94eae0c4c524fda98692777b0f318b91a04b825e91a782cd621a92ed6dbd6390392613cdbe32f1c064bd90174a21ac6c10ca62e3f3fb80b908b31df22be8ac625e832b6cca4dec7b50ab4009d62a59c23a5aeff2b66f1c0009cafd57a5db9d69b6af25d5fc534666cbe3dfc48ce5f745398c572ebc7169f944493d732091bb0fa20f3ba28ab9244d0e237dffea089970240492ea7d0aab9cf816e0183b1806286fd621e04faae23cd3016ba11eb3eea8ab15850aba2ee15e36d9984c7e92accb647feb9a473eba76a807f657c2998fbd2b98548882d798c479e470b683cf5c715e0067c7fe1e7428d1b92fd2a00fad9b9d65ae3dbf0af4ac43f3cb492b0d26e75bd8dadb200253018c1380355ba3e4b0aaecec87b1987a99c5c911a3d16400d88355637681eecc0b8595ca811c1982def0bb572a349bfb02c97a1cb1384205657d58e0ef537234c747a25b68a94604006c72d19615da519dcf51203561516aa0ea518ee7d545449c8497d79b42fe16b0f11acc4c1ae99e94104272a6cfca91401ee0686d80c56c2bc28e8ec76ff0566ad01db68bcec1544bbddb50f5e48b4a186a3916644121ee1608408bbd23ba9f2051b6f8bd7ab131e637a448690f840c183833ac47965a26c97389cc4430c5ad1622faae80a8f1a33ae85ff9699e6e35e0222cd7ef61c7eccf59454b7157f8dad307ee43b0a2683ea2faa92600d3945d770c68816a1fa0186ceca7bb54bcb83feb4ddfb963353ca183c5fbe0851d9bb2eb5106b12d4d2b34681b8107c68ebffd97122a5e9e6d708a25a4a4ff7d8f50b451f170fe6573e5d7d398f879d197472d85de3f9d28f33f5017c8f7cdc74ab97098eb5d37a6bb1383e82046dc2f76ece31aec6cb0209f5802a6b727853548b68e5fe704e88a8f1ca9f351a059bcc87c36a20a71c45c69117e64eed080aaa00c52b4ee0b7a80d9ab3cb4e70dd527204e4d84634a3bdcc35d31e7d105a83188b11445cf879ce510b1180dda0778c55f06d945949f6258c900436b12a10cfce5ebc55f256ead2949cd4eb15e564fe36237de69f4b51744fa0d64e4e6395d86995e214ab92", 0x1000}, {&(0x7f0000000180)="b94a501a4664a44c4b23cf88c91733b88f10e4f4674e429e76983945b397a0091ffa3498bcc53b31ead48de83b59f43f4d5efae4c8", 0x35}], 0x9, &(0x7f0000000340)=[@mark={{0x14, 0x1, 0x24, 0x7ff}}], 0x18}}, {{&(0x7f0000000b40)=@ll={0x11, 0x7, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000bc0)="cbf37cf91905b2b490c16073336789aff37e5f232011217f9c68fb890eb2faf7215609bc3a7deaf5538405cae389fe046f835fd0ce31e352c05f991786ced4c56a", 0x41}, {&(0x7f0000000c40)="a7bea9e090c8caf4c346ebc5038a31b295876d8137d3571f67131288e82f1b1d749349d8adcb5eccf59d8d0ca753c28d90985afca71d912c924ef947fb69ef9ca1302452a8ba97535f211548d6b0b5b94f11be1a538e3880daf8460be2939eb3a94b4db84a40504e55b33da93f8ba4909ce6d88d57ec382c90e6d1ea97c59282c4fe9dcda06d82bee3ab52e2acb3246f51214739dc8daa8f8895d811ed7a0ceee40c29981082d3c0f37f2132d86f009a3b2f2fe5db86be74008d92c53bff3a", 0xbf}, {&(0x7f0000000d00)="73eb591bde50183d3614cf80c7f665ca3df036952e226aa136ba5dba49622d15924ceb0fe04fde991bdff592a491642c47892a6d8aa0976b4d692417a0a5965f49caa1ad67a4", 0x46}, {&(0x7f0000000d80)="ff134a0e76cc4271752f00a51d66c72bc30c382dee7eca5a8bff472dda37f32557e5e0a8ea6e7fa5c9b64e42ea21e50a2266f149e71a209d91add22d61faf10b4e395154c2303e040f688d1e9589829ffce822012908f0e70d69b72311e96fdb5ab7753087e863969ed290a5f59aa0d70d3208a2d7492bf6bd82be3b7aca067e0b304a5c328ce3f8d2655d33bdf0cd7fe0cae70c", 0x94}, {&(0x7f0000000f00)="7f411da5522448e648edca641932b8b226c056fdca4eb7c64fe64e526aeb7142b751a251cbd8c2ed6f7a5c2790e555faaa81ae0fadb0e8cb34d9cd2cfe168a5824128b4ab5d9fba21d8e2162b87d8323cbcbd0b32a6a64cb5273cfa9769563ccce3dbf0154a3c0844968aad3cdb223803cd52b1451fa43ccc860f28f44277c7ff602379074d885ef761e416b5c4d00a04af7f4fad03c8d32ea47adee9de367", 0x9f}, {&(0x7f0000000fc0)="4dbb19267420e979a5c6c11819fd735ef047e9b330cfb675a50711fb80da1e94d73382e2dc7548a28619d496b175721fe0c0d68b25fcf8c38ad292a41a323c436a305d9b9228ad7f60f4963370a4289dda13eacdc8c44d797420e6fe62b036a18cfcb092de061655917fa15c296dbad3cf56262c1d8ef12b806917c37e066a7001a64b1f01f56f8e71f2e306d249d00f3eda7d5bbe93d7073feea955e4f3c74bef30ce915b3baee18cf19c4f38d19201a036da3d6fd3b30b082d509d89adbbdc4ea4731dea85fe2be3d043b1c492b2a9c37d755431524a8568e45412f8966b96f0096569387ae198e1b986a9f2ba702c9765b3de7abcaad4", 0xf8}], 0x6, &(0x7f00000010c0)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffc}}, @txtime={{0x18}}], 0xa8}}, {{&(0x7f0000001180)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, 0x2}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001200)="a9073854dbb30853610c0171660e9b0e7f4b53dda332bc0124c0fbf291ac1b7f819d4b1370aadcb1540e35d66f0774e5bfd41387cbc9e2173c67bf9f2fab923a157d02ff7892a8a94c117a248af3680f9cf8e9a9a0b1f0002614a53d01a79ce6bfd902a29614ca2c32c80752cd7a5548613c9f08519b203538ddc62ca922eebf5fda1b78c999094befb813afa6f25a2224b7c07e6f21600950b06d11da18f22be3396c4c7e4dbcb4f47ce454fa8f553742a1cda6acf9c9a90ca31719a69db94d356c53afc4dfd0100216cdfb764c3eae81984acb36900951ac2f5ebce9303fae7a281ce18951e8e3ce", 0xe9}, {&(0x7f0000001300)="a0bb7b1c35da2a34e15df88fd7b537f3295d522f770325c05904dcfb5d34f487dd0956d6d920257abf380108f3ac03f56c374a28406a9301cc4016235a98b848aeaad38fa06b16f0d931c3f5afc76c261d59bba4b4754ab88fdcc562f15afb97d3b28d6eaf5e2088184c29591fbe305be4617f8d0c94bc737b33550b3263580f6e5f422f0f6c5863962d473bd15a66e166b8481e0cafb51329389983e66f7e5229", 0xa1}, {&(0x7f00000013c0)="c5762facf76af533b9a98be206cc1f77b116e341e787e4de0fba206fb82538f32153c7dd3e62548efec48b232e77ea14cb19a80c94564eae9cd4ee064a752f1589e34ee0a0612f08e294186d31518aad8134a452f8872e92fe670bac605d4e29347854ffb1cd03ad768187af1f150fac6f7f5f92193670f125424b27fd8fc68aa9599c077adfaeceb5cd608cec90e7d19283f5fe058dc1659cdfe209cab6e620d1514a6d534c4226d23c381f200b5b64502a79a73646893b5877db787e0904f669833e0a6d0eba025441a891", 0xcc}, {&(0x7f00000014c0)="3776e8b2fc3c219f8a6520309769806ffed85f725fa638357acb2d56e9bc89dfc3cc5a80c90e73de9b490730d6e9db9e07f21f3780dd0b4fd5eaa60faefebc93cb4ac775a83fa014424534cd16d66edcbb709bbf84f2d8880bf3b5f82216540cf8cd24f55ef2098f86570517599d83bf4b506a22f9a8b58c878b6201972938348eefa45b177aaaac1ec0f544be608b73ae6542b3147459907e436c", 0x9b}, {&(0x7f0000001580)="52893262a0c5d24d6d81f72a5ad5813e754d514d3d260c8be3df7d943d5cf2c5b7dcfcf7fd0861e74af0b0e582c8d7d92b3f696add4e2b8f0edf6e94fa9ccc3a09656148ee32d4bf3c301104beded8da9c27903f7a5f5b042fd561f0906b05d5d0397cfa8f44980f4a09173649c9869a6bfa74589c6272343e29933769169dceb4a9af686b603ea0bd5b9013847604948f197f2ee34b5afad1698d63b62d4d2fa480537c3cd8c65da26e4130e63de2608c2b43296b508df468f93401768fb27755fbe850", 0xc4}], 0x5, &(0x7f0000001700)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @mark={{0x14, 0x1, 0x24, 0xc}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x60}}, {{&(0x7f0000001780)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x1, 0x2, 0x1, 0x4}}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001800)="2a7e0435a1fb80bcb57d04f92989186bf649ba62d9917c518343a767f4cc65e045dea9c21653d345fdeffa2863d8c19d0e3047b3bda1ddd69fa6fc2a893299da9dede3a1c2e9a6928b6efdeeea4997109e0d78917420fba33cb768949c5be3d59696be78bd18bee597d5b517823c8df74d9a6800f6a3c5721a73e054b5d47a01b2d9b48be3", 0x85}], 0x1}}], 0x4, 0x8040) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x6}], 0x1c) sendto$inet6(r9, &(0x7f0000000180)="e03dbc", 0x3, 0x800, &(0x7f0000000080)={0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00', 0xfffffdea}, 0x1c) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x9}, 0x4}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TTL={0x5, 0x7, 0xe0}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r11], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r12 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r13, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r14 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r14, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="01002fbd700000000000010000000500040002"], 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 1m42.676744671s ago: executing program 3 (id=2310): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') lseek(r2, 0x8, 0x1) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000300)={0xc000003, 0xf, &(0x7f0000000580)=[0x7d4, 0x3e978e4, 0x3, 0x9, 0x9, 0x8000, 0x80000002, 0x4, 0xbb, 0xfffffffe, 0x2070, 0xfffff407, 0x7, 0x1ac, 0xfffffff8], 0x0, 0x4}) 1m42.62548904s ago: executing program 3 (id=2311): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000180)="440f20c03505000000440f22c0f26df20f38f17a64b805000000b9e10d00000f01d9d8dd0f01728eb8010000000f01d94c0fc71d000000003ef245dbed410fc7f7", 0x41}], 0x1, 0x72, 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/151, 0x97}], 0x1, 0xd, 0x0) (async) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000100)={0x8, 0x10000}) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x13, 0x7, 0x106c, 0x8, 0x8000000000000, 0x8000000400007f, 0x0, 0x6, 0x0, 0x204, 0x0, 0x8001], 0xeeee0000}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m42.389881539s ago: executing program 3 (id=2314): newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='data', 0x4}}, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4, 0x4}], 0x1}, 0x0) setresuid(r0, r0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000580)='block_bio_remap\x00', r5, 0x0, 0x4b}, 0xb) sync() 1m32.675182735s ago: executing program 0 (id=2415): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$BSG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000040)=0xfffffffffffffffd) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000740)={0x30, 0x5, 0x0, {0x0, 0x2, 0xfffffffffffffffe, 0x3}}, 0x30) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fd\x00') bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) fchdir(r2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@alu={0x7, 0x0, 0x1, 0x9, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) 1m32.606109363s ago: executing program 0 (id=2417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) (async) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x4f, 0x86, 0xfffffffffffffffe, 0x5, 0x7, 0x40000000a, 0x651, 0x100000004, 0x9657, 0x0, 0x7ffffffd, 0x0, 0xf3, 0xc, 0x8000000000000000, 0xcc3, 0x1, 0x1, 0x94d6, 0x5, 0xfffffffd, 0x8, 0x8, 0xfffffffffffffffa, 0x5, 0x6}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0xffe2, 0xfff1}, {0xfff2, 0xffff}, {0x1, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x6a}}, 0x0) 1m32.552812303s ago: executing program 0 (id=2418): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@common=@ipv6header={{0x28}, {0x1a, 0x1, 0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xff], @ipv6=@remote, [0x0, 0xff000000, 0xff000000, 0xffffff00], 0x4d3, 0x34ff, 0x1, 0x1, 0x15, 0x10}, {@ipv4=@multicast1, [0x0, 0xffffffff, 0xffffffff, 0xff], @ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff], 0x4d6, 0x3503, 0x87, 0x0, 0x2, 0x10}, {@ipv4=@empty, [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x11}, [0xff000000, 0x0, 0xff, 0xff000000], 0x4d6, 0x3500, 0x3a, 0x0, 0x0, 0x4}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0x0, 0xffffff00], @ipv6=@mcast1, [0xff000000, 0xffffffff, 0xff000000, 0xffffffff], 0x4d3, 0x0, 0x2f, 0x0, 0x4, 0x1a}], 0x1, 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x458) socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0xc) r2 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x42701, 0x192) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r3, &(0x7f00000000c0)='34', 0x2, 0xfffffffffffffff4}]) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x25, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0x5}, @generic={0x8, 0xc, 0x5, 0xfffa, 0xba43}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x7}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x6b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}}, @alu={0x4, 0x1, 0x4, 0x9, 0x1, 0xffffffffffffffc0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) r5 = fsopen(&(0x7f0000000000)='ocfs2_dlmfs\x00', 0x0) r6 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000000)='nolazytime\x00', 0x0, 0x0) fspick(0xffffffffffffffff, &(0x7f00000000c0)='./cgroup\x00', 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x25, &(0x7f0000000100)={0x1, 0x3}) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r5, 0x0, 0x0) mkdirat(r8, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xd42, 0x0) munlockall() ioctl$BLKFLSBUF(r9, 0x1261, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r9], 0x4c}, 0x1, 0x0, 0x0, 0x20004045}, 0x40040) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x80400, 0x0) 1m32.326709593s ago: executing program 0 (id=2425): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x50, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0x5, 0xfffb, 0xa}, 0x0, 0x0}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000001c0)={0x50, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0x5, 0xfffb, 0xa}, 0x41, 0x0}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r3, &(0x7f0000000640)='./file0/file0\x00', 0x272) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local, {[@end]}}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x800}}}}}}, 0x0) 1m30.657767166s ago: executing program 0 (id=2451): r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = getpgrp(r0) syz_emit_ethernet(0x52, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x8, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x8, 0xf989, "bb653c93"}]}}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x8, 0x2, 0x7fff7ffc}]}) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r3, 0x3, {}, 0xfe}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0xfffffe2d, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd22, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0xb, 0x6}, {0x3, 0xe}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4040064) r7 = syz_pidfd_open(r1, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r9, 0xaea2, 0x80000000) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r7, &(0x7f0000000180)) r12 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) sendmsg$nl_generic(r12, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x29, 0x200, 0x70bd26, 0x25dfdbfe, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x42}, 0x0) r14 = gettid() kcmp$KCMP_EPOLL_TFD(r1, r14, 0x7, r7, &(0x7f0000000040)={r11, r7}) 1m30.37134227s ago: executing program 0 (id=2454): r0 = memfd_create(&(0x7f00000025c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 1m30.277947665s ago: executing program 32 (id=2454): r0 = memfd_create(&(0x7f00000025c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 1m26.346372961s ago: executing program 33 (id=2314): newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='data', 0x4}}, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4, 0x4}], 0x1}, 0x0) setresuid(r0, r0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000580)='block_bio_remap\x00', r5, 0x0, 0x4b}, 0xb) sync() 1m4.41875232s ago: executing program 5 (id=2774): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x73f0ba086fd8eda, &(0x7f0000000000)=0x7e, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0x6, 0xfb, 0x8, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200487ed, &(0x7f0000e68000)={0x2, 0x4e23, @private=0xa010100}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000100)) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24f300ca2f8", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001000)='^', 0x1}], 0x1}}], 0x2, 0x4004) fcntl$setownex(r1, 0xf, &(0x7f00000000c0)={0x1}) 1m4.343846774s ago: executing program 5 (id=2776): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000140)="be103c6cb106d39512ad3e9f9b763d41b00057c08f4366986237a581bcf96f27dcab0302ca7130ba24132d9a5138cc39f027fa694d9443205e118b1152fffa203dc542e625bf5ff3b069ec192bf5c9542bb31cb4540293f4ef7e723e085dce01f474dd44438cb8bd35286b4e84470159134f8cd019975fff7853a12b4af1c0733f1ac6e7c66773073eea6ec165f6ab30766cc60b41d81fe8dd4acd91e7eab83e32e81281be18bbb357563d73c466e5820dadfd67a1b75d0a92b13a9dd754c60bce780b09b501a76785293f930fbbef04d6a3052e7e6698bf1dbc5a8c11b7c45be99021c6bba408508044ac0dbf66275e", 0xf0}, {&(0x7f0000000040)="c24efafaf3ed7050852d6d3d89e3f502498552dcafaad236b0adb76a7a4ddee5156ddd21e13e7290223fa9bbd7a556a845cc0006fde7a66288ffc5d3c65a282526eb541f41c566a0b042f81c419db1736e2166e50a495f8109070d15fa4100c9713efaf341cee8654bfa0d096bc1361d93599533e377693876a65e4e03ced9c4eec2eb93004d761a643deadce74209ef94ffbf669bd4e28128fbf9411608d1b4ab04707ec9f73145e199eaaf3a80398f4b3b1b", 0xb3}, {&(0x7f0000000240)="3171310702fa05c472bfc78f0ab30486fe2a622a181042f6c94ebeaec0766e61ff543bf4728fbad376f04749dba8e35296c67facc4f57e07e3e4f0c09a0abed5242be8268b06bede9bb639f5abd1e025de7feabe1343de60b4d2373c24459d5eadc77f9c0f70a0c18db357e8a5693067d3cf4ceb187e77cc7234d47ad434a8a7cff3a53fa2f24b61b366694719d6afa6c27e338149ff61df10b3587287c1372dfb1aa76549ca4e25b1b7aa75f3bc7dcfd1ec98c995fdd40a7e", 0xb9}, {&(0x7f0000000300)="119005ef0d8700c2384eba6b19f7acd7bf2e951b1ceaf57016862aafd2db8e5ff3a6b8147a106c9c0924cd0e3d733d2942dfc4ac60f4d328f51a7edc4bb8da6a63632f32e34a70d6633edaee9cede34ecf10cf4e2b707a8fd503ee7aa2b6025448c7e82cf14dafaa2c722392839967560dc0eec1022a9f2d", 0x78}], 0x4, 0x35d, 0x1) 1m4.048822804s ago: executing program 5 (id=2780): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000000240), 0x41000004, &(0x7f0000000040)) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 1m3.879956773s ago: executing program 5 (id=2786): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b00000000000000000000000000000000000800010001"], 0x20}}, 0x4000000) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r2, &(0x7f0000000640)='./file0/file0\x00', 0x272) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), 0xffffffffffffffff) 1m2.951421778s ago: executing program 5 (id=2800): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x10, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xf1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x49}, 0x20040000) 1m2.687121253s ago: executing program 5 (id=2803): r0 = socket$caif_stream(0x25, 0x1, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) mknod(&(0x7f0000000400)='./file0\x00', 0x1, 0x8) mq_open(&(0x7f0000000000)=')\xaf-\x00', 0x80, 0x22, &(0x7f0000000040)={0x1, 0x400, 0x7, 0x5}) mount$tmpfs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x10, &(0x7f0000000b80)={[{@gid={'gid', 0x3d, r1}}]}) socket$caif_stream(0x25, 0x1, 0x4) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) (async) mknod(&(0x7f0000000400)='./file0\x00', 0x1, 0x8) (async) mq_open(&(0x7f0000000000)=')\xaf-\x00', 0x80, 0x22, &(0x7f0000000040)={0x1, 0x400, 0x7, 0x5}) (async) mount$tmpfs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x10, &(0x7f0000000b80)={[{@gid={'gid', 0x3d, r1}}]}) (async) 1m2.617411929s ago: executing program 34 (id=2803): r0 = socket$caif_stream(0x25, 0x1, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) mknod(&(0x7f0000000400)='./file0\x00', 0x1, 0x8) mq_open(&(0x7f0000000000)=')\xaf-\x00', 0x80, 0x22, &(0x7f0000000040)={0x1, 0x400, 0x7, 0x5}) mount$tmpfs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x10, &(0x7f0000000b80)={[{@gid={'gid', 0x3d, r1}}]}) socket$caif_stream(0x25, 0x1, 0x4) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) (async) mknod(&(0x7f0000000400)='./file0\x00', 0x1, 0x8) (async) mq_open(&(0x7f0000000000)=')\xaf-\x00', 0x80, 0x22, &(0x7f0000000040)={0x1, 0x400, 0x7, 0x5}) (async) mount$tmpfs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x10, &(0x7f0000000b80)={[{@gid={'gid', 0x3d, r1}}]}) (async) 4.611821608s ago: executing program 6 (id=3540): r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314", 0x3}], 0x2}}], 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000000700)={&(0x7f0000000680)=[0x0, 0x0], 0x0, 0x0, 0x2, 0x2}) (async) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000002c0)="a39c1fb4d127f197e8e3a41c9fe5567d9137e293a21d262ad6ead1253f31493569f5737c8ed607d03401d5a3edcb68d755d12873885f886046a2e5550caba204798bc956a8e35b04539a88965838ea21a464cd6511361959341849a8618e0beaa03ad408d943e7f9bbbdb28dde9e33", 0x6f}, {&(0x7f0000000500)="a608e5f2e2724fd7d00b71dc97e13f5a2a987046270dc61632cb51d1ec3c7912901302ff866747b05d5e18a21bc5d2d55d87d4683de5d6dc5aa63b9f6e1c4883c3fcae54300a236a34f1fc74e8ca8e2e807635dc41b9bc8ff385223d7d528b631d0f0538f807e106df999fba2f884d84cb60dd41aa1811cf1e995a246881f986041125fc245cf25cd2c0e73358f6981d19e1f47a8d118b4e", 0x98}, {&(0x7f0000000600)}, {&(0x7f00000006c0)="8d4fb001cf69a4e5d8cea7569c780cc8598d314562f2d2e8bf22047e364764a56d8d35000cc37feb758a43590f1bb28a3713bd28dfa24e670fb5eae6020d6fe9b35b93159c3e7d2cbf38d5f548bd105beea848805a6a01", 0x57}, {&(0x7f0000000780)}, {&(0x7f0000000880)="bf0171aab45469f23a3e11b9c8fb004572d990a78a7a7b3b7b4a4d2def1e711b6d7fb1742ebbca750dca13be6d89a7c1ba6f2af52f77b7735ad9ec4ccb265d37075afa82a0dbb371487e9124126e5b4e245dee2fafc80ac8609a2acd770acccafd112e302e93afbf01f8bfd4262df4ad9a09f59efecff400e2b06fb698b1641a41e82a2369875f9a2fe3e358420a8b3371f3713c1ae2", 0x96}, {&(0x7f0000000b40)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2aca02ea0ba7de7a291914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46fc26d12f4a78890a9492d56ef482f6861fd3d92b5e5f40a6c7362d23a3f9f3f32d32266a8d15882a83ee2d5226afe3ef90088f5082d6c986922dbac25ddabb11695f3317ba3118eb03269fff79cd4fb24c379c832eabf54dea07c0837ff258639f66bcf415e967dbba00e0120e19998eb5c5560afb510a8098491725e7c0507f07074ef19907a22e2922f8bd40931d4ec611645f800cf63ab7733f85912d73", 0xee}], 0x7, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x1f8}}], 0x1, 0x810) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r1) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003a00030324bd7002f8dbdf250d000000"], 0x14}}, 0x4008800) (async) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="c0000000000000001701000002000000aa0000007311fa74848699120b759c71af626408a70b0e3fe271740eb678f101abdfd3ad541be8b6872d75066c65180bb6ba90d43c8707cf01f4ad088691545666fa610ab365b733b1d3d4e137245db465d695fc22426ebc4216c0de89367a4a38154d35e6c855c19c606e78a4f3d8811f839d8475c425a394d46fbbc11f295015fd218c0b3abfa75338593d35a0f230273d124695d04ca7e2b4b282345b84816049d20d8a70ec859035ed22cb330000"], 0xc0}], 0x1, 0x20040805) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000600)=""/83, 0x53}], 0x2}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x10200, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r6, 0xae80, 0x0) (rerun: 32) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r8 = open$dir(&(0x7f0000000940)='./file0\x00', 0x4e82, 0x50) mknodat$loop(r8, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x0) (async) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000240)=0x15) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 32) ioctl$TCSETS(r7, 0x40204706, &(0x7f0000000040)={0x1, 0x0, 0x7, 0x8000, 0x0, "000200000500"}) (async, rerun: 32) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x80005}, 0xc) 4.451285792s ago: executing program 6 (id=3542): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) (async) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async, rerun: 64) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) (rerun: 64) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) (async, rerun: 32) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (rerun: 32) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000e1b000/0x4000)=nil, 0x4000, &(0x7f00000004c0)='nfc\x00') (async) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000180)={&(0x7f00007d0000/0x2000)=nil, 0x2000}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@delchain={0x24, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 4.301806012s ago: executing program 6 (id=3544): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, 0x0, 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpid() syz_pidfd_open(r2, 0x0) syz_open_procfs(r2, &(0x7f0000000080)='fdinfo/3\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='rpm_return_int\x00', r1}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x17630d8dab0bac7a, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r10, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340) r12 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r12, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x3, 0x2, 0x0, 0xfe}) 4.109470841s ago: executing program 6 (id=3548): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2040441}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) r4 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x10, 0xfffffffd, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r4, 0x7323, 0x0, 0x5, 0x0, 0x0) listen(r3, 0x100101) accept4(r3, 0x0, 0x0, 0x80800) ioctl$HIDIOCGUSAGE(r2, 0x501c4814, &(0x7f00000000c0)={0x2, 0x100, 0x0, 0x5, 0x8001, 0xfffffffc}) 2.285459406s ago: executing program 6 (id=3572): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x2008}], 0x1, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x64}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r0, 0x0, 0x0, 0x40800) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x44, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x202d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="010000000004", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000300), 0x4) fspick(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {}, {}, {}, {}, {0x2d}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0xb0, r4, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.636203713s ago: executing program 4 (id=3578): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) (async) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0x40045731, &(0x7f0000000040)={0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@newtfilter={0x874, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x840, 0x2, [@TCA_MATCHALL_ACT={0x83c, 0x2, [@m_police={0x838, 0x1, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x0, 0x5, 0x801, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x4, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x800, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x70, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x8000, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0xffffffff, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0xb, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0xe, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0x0, 0xd, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7ffb, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x61, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0x3, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x20002, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x6, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x874}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x10, 0x100000000002, 0x4) syz_open_procfs(0x0, 0x0) (async) syz_open_procfs(0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0xffffffffffffffea, &(0x7f00000004c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x6c}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0xffffffffffffffea, &(0x7f00000004c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x6c}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x80e03) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x119) r7 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r8 = dup2(r7, r6) write$UHID_DESTROY(r8, 0x0, 0x0) (async) write$UHID_DESTROY(r8, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180fffffdef0000883795c04a31ba377a1b2cc32b38d37400"/57, 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) pread64(r3, &(0x7f0000000040)=""/111, 0x6f, 0x6c38) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}}, 0xb8}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 1.519540049s ago: executing program 4 (id=3579): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = dup(r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x17, 0x0, 0x0, @remote, @mcast2, 0x7800, 0x20, 0x7fff, 0xffff}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0xd, 0x3, 0x8, 0x20804, r2, 0x180, '\x00', r3, 0xffffffffffffffff, 0x5, 0x4, 0x3, 0x9}, 0x50) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000000200)={r1}, 0x1) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000240)={0x4, 0x0}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000280)={r6, 0x6}) openat$cdrom(0xffffffffffffff9c, &(0x7f00000002c0), 0x4a2a00, 0x0) r7 = socket(0x2b, 0x2, 0x6) read$FUSE(r5, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002340)={0x50, 0xfffffffffffffff5, r8, {0x7, 0x2b, 0x1ff, 0x800000, 0x81, 0x8001, 0x10001, 0x7, 0x0, 0x0, 0x40, 0x41}}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000023c0)) connect$pppoe(r7, &(0x7f0000002400)={0x18, 0x0, {0x4, @local, 'gretap0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000002440)) fcntl$getflags(r5, 0x3) mkdirat(r5, &(0x7f0000002480)='./file0\x00', 0x40) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r5, 0xc008551c, &(0x7f00000024c0)={0x2, 0x18, [0xd, 0xd, 0x9, 0xac, 0x7, 0x6]}) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000002500)) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000002540)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1, 0x4e24, 0x2a, 0x4e24, 0x6, 0x2, 0x80, 0xa0, 0x33, r3, r9}, {0x8, 0x10001, 0x1, 0x82b, 0xfffffffffffffffb, 0x2, 0x0, 0xb}, {0x2, 0x7, 0xfff, 0x4}, 0x9, 0x6e6bbd, 0x0, 0x0, 0x2, 0x2}, {{@in6=@private2, 0x4d3, 0x32}, 0xa, @in6=@empty, 0x0, 0x0, 0x1, 0x8, 0x1, 0x6}}, 0xe8) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000002640)) bpf$MAP_CREATE(0x0, &(0x7f0000002680)=@base={0x8, 0x4, 0x1, 0x1, 0x8008, 0x1, 0x21, '\x00', r3, r2, 0x1, 0x0, 0x4, 0x0, @value=r2}, 0x50) r10 = accept$inet6(r7, &(0x7f0000002700)={0xa, 0x0, 0x0, @private1}, &(0x7f0000002740)=0x1c) connect$inet6(r10, &(0x7f0000002780)={0xa, 0x4e22, 0x2, @private0, 0x6}, 0x1c) ioctl$EXT4_IOC_SWAP_BOOT(r10, 0x6611) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) bind$inet6(r2, &(0x7f00000027c0)={0xa, 0x4e23, 0x0, @mcast2, 0x6}, 0x1c) syz_emit_ethernet(0x29, &(0x7f0000002800)={@empty, @empty, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x1, 0x1, 0x3}}, {@llc={0x4, {@llc={0x42, 0x42, "8db7", "773b9a436b71940a820e8bc8a88d62"}}}}}, &(0x7f0000002840)={0x1, 0x3, [0x81d, 0x59b, 0x998, 0xe99]}) 1.517287151s ago: executing program 4 (id=3581): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r0, 0x0, 0x0, 0x40800) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)={0x20, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2ee, 0x2d}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) (fail_nth: 9) 1.328416778s ago: executing program 4 (id=3583): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)={0x188, r1, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0x0, 0x99, {0x400, 0x18}}}}, [@NL80211_ATTR_IE={0x55, 0x2a, [@cf={0x4, 0x6, {0x5, 0x6, 0x31, 0x3ff}}, @gcr_ga={0xbd, 0x6}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0xf9, 0x3, @broadcast, 0x65f4, 0x7fff, 0x6}}, @mic={0x8c, 0x18, {0xad5, "b314fa6d2acb", @long="f863fd208dc8a47d0f58dd124e3e594b"}}, @supported_rates={0x1, 0x6, [{0x12, 0x1}, {0x3}, {0x49}, {0x60, 0x1}, {0x1}, {0x48, 0x1}]}, @channel_switch={0x25, 0x3, {0x1, 0x78}}]}, @NL80211_ATTR_IE={0x113, 0x2a, [@peer_mgmt={0x75, 0x14, {0x0, 0x3, @void, @void, @val="1352e6d4a402fe4516d6113566ce456c"}}, @channel_switch={0x25, 0x3, {0x0, 0x7c, 0x9}}, @perr={0x84, 0x55, {0xe2, 0x5, [{{0x0, 0x1}, @broadcast, 0x3, @value=@broadcast, 0xb}, {{}, @broadcast, 0x100, @void, 0x1d}, {{0x0, 0x1}, @device_a, 0x49, @value=@device_b, 0x10}, {{0x0, 0x1}, @broadcast, 0xb3, @value=@device_b, 0x20}, {{}, @device_a, 0x3, @void, 0x21}]}}, @measure_req={0x26, 0x66, {0x4, 0x4e, 0x2, "9acd9321bddaa2c55afe413bbdd05f88b40f7047a91df99775f0d6de38c88184be43d1c8d37546e69a1ea4c2aa44b3c4b811b83f0d40b23cd4f8c91430601685a1650d73c58f0f6e918a02a695772df0dab8244d03ae542647db6c58b3284bcdaada26"}}, @ssid={0x0, 0x1b, @random="0fb35df3b51a3b22f980464d186c776e23df606f0c942a2d7483da"}, @ibss={0x6, 0x2, 0x7}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0xe6}, 0x4}}}, 0x7) setregid(0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) read$FUSE(r5, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010024bd7021000034ae8262d4c3c2e4db39e8b76b05536e00080003000000000000", @ANYRES32=r3, @ANYBLOB="10002d800a0000000202020202020000"], 0x2c}, 0x1, 0x0, 0x0, 0x24014804}, 0x9590f6cc3aa711f2) 1.327972304s ago: executing program 4 (id=3584): r0 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x80, 0x2, 0x12c}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r1, 0x0, 0x0, 0x1, 0x1}) (rerun: 64) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs_stats\x00') pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) io_uring_enter(r1, 0x22d0, 0x20, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f0000000240)={0x2, 0x2}, 0x1) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000024c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) (async) syz_io_uring_setup(0x354a, &(0x7f0000000000)={0x0, 0xc549, 0x8, 0x2, 0x356, 0x0, r5}, &(0x7f00000000c0), &(0x7f00000001c0)) (async) fsmount(r0, 0x1, 0x91) 1.326481198s ago: executing program 2 (id=3586): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_getaddrlabel={0x24, 0x1e, 0x492dfc465ae32a8d, 0xfffffff6, 0x0, {}, [@IFAL_LABEL={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4c044) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r0, 0x8949, &(0x7f0000000000)) 1.165291407s ago: executing program 1 (id=3587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.160540548s ago: executing program 4 (id=3588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) r1 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r2, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x7, @loopback, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, 0xffffffffffffffff, 0x8001}}, 0x48) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x84000) syz_usb_disconnect(r5) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) socket$pppoe(0x18, 0x1, 0x0) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='net/psched\x00') r8 = socket(0x29, 0x5, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) poll(&(0x7f0000000000)=[{r8, 0x10}], 0x1, 0x4) read$qrtrtun(r7, &(0x7f00000004c0)=""/57, 0x39) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x5, 0x3, 0x20, @mcast2, @empty, 0x8, 0x10, 0x200, 0xfffffffb}}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000060000157c675b23b4f2c7aff4fa0000", @ANYRES32=r7, @ANYBLOB="9e0d00"/20, @ANYRES32=r9, @ANYRES32, @ANYBLOB="0200000000000000040000000200"/28], 0x50) socket$vsock_stream(0x28, 0x1, 0x0) 1.160048859s ago: executing program 2 (id=3589): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) mmap(&(0x7f000097b000/0x2000)=nil, 0x2000, 0xb, 0x8031, 0xffffffffffffffff, 0x0) 1.129097766s ago: executing program 2 (id=3590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x4}, {0xe, 0xfff2}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x43}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44044}, 0x4048884) (async) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) (async) socket(0xa, 0x1, 0x84) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TIOCMBIS(r4, 0x541e, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="44ca4dfbbb80494dafaf8f591ee04417b554dac97e646784544075b8698d9913e29d88b670cbd4d6d1cdb1ef8073b8b6d1e01cbb57ebd7ad70acfc64a62f90863fc84b91b252f804575b95165d07eb163e8f03a215457a5fde", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r5, 0x0, 0x8000000000000}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) (async) vmsplice(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x5) (async) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)=ANY=[@ANYBLOB="48010000040a0500000000000000000002000008680004801400030076657468315f6d616376746170000000080001400000000014000300766972745f77696669300000000000000800014000000000080002404129e15b1400030076657468315f6d6163767461700000000800014000000004"], 0x148}, 0x1, 0x0, 0x0, 0x24041005}, 0x2c77edc509eea7a8) (async) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000040)={@broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x3}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r7, 0x0, 0x4ffe6, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x2}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$rtc(0xffffff9c, &(0x7f0000000280), 0x0, 0x0) 179.210491ms ago: executing program 1 (id=3591): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040), 0x1808c0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x2000a004) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xb, @l2={'ib', 0x3a, 'ipvlan1\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a633a39f0300000000000000000000000100000000000000"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x7, 0x28, 0x67, 0x0, 0x9, 0x1, 0x0, @remote, @remote}, @timestamp={0xd, 0x0, 0x0, 0x3, 0x9c, 0x229, 0x4, 0x6}}}}}, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x1000)=nil, 0x0) 178.724809ms ago: executing program 2 (id=3592): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000840)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r3, r4, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r8, r1) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, &(0x7f0000000440), 0x10) r10 = socket(0x28, 0x3, 0x0) bind$vsock_stream(r10, &(0x7f0000000040), 0x10) r11 = socket$inet_sctp(0x2, 0x1, 0x84) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=r13], 0x9) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000000500)={r13, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r13, 0x3bf}, &(0x7f0000000040)=0x8) 178.585187ms ago: executing program 1 (id=3593): prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/27) 176.613571ms ago: executing program 1 (id=3594): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) r3 = open$dir(&(0x7f00000009c0)='./file0\x00', 0x302240, 0x3) unlinkat(r3, &(0x7f0000000440)='./file1\x00', 0x200) (async, rerun: 32) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000fddbdf2554000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)={0x2f0, r6, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1128}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_SOCK={0xb4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd39}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x87}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xada}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe388}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0xc040}, 0x4000000) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 64) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 64) close(r7) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000240)="800000800000210ee7decd7a000000008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @broadcast}, 0x14) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x170, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x170}, 0x1, 0x0, 0x0, 0x8000040}, 0x4014) r11 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r12 = fanotify_init(0xf00, 0x0) fanotify_mark(r12, 0x105, 0x40009975, r11, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') (async, rerun: 32) read(r12, &(0x7f0000000140)=""/220, 0xdc) (rerun: 32) 172.762674ms ago: executing program 1 (id=3595): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000400), &(0x7f0000000440)=r3}, 0x20) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0xfe, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002680)=@newtaction={0x1d30, 0x30, 0x25, 0x0, 0x0, {}, [{0x1d1c, 0x1, [@m_pedit={0x1d18, 0x1, 0x0, 0x0, {{0xa}, {0x1cec, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x7, 0x6, 0x0, 0x6, 0x3ff}, 0xb, 0x68, [{0x7, 0x1e2, 0x4, 0x80000001, 0x8, 0x5}, {0x1ff, 0xfa, 0x282, 0x1a, 0x0, 0x1}, {0x6, 0x8, 0x5, 0x4, 0x5, 0xe7c0}, {0x80000001, 0x7ff, 0x400, 0x0, 0x9, 0xf2ed}, {0x9, 0xc2ba, 0x1, 0xf, 0x3, 0x8}, {0x1f6, 0x5, 0x1, 0xa, 0x6, 0x10}, {0x4, 0x6, 0x3, 0x67, 0x8f, 0xffffffff}]}, [{0xa576, 0x101, 0x7ff, 0x3ff, 0x9, 0x9}, {0x2422, 0x2, 0x4, 0x14, 0x9, 0x2}, {0xb, 0x9, 0x2, 0x7fffffff, 0xb, 0x5}, {0x9, 0x80000000, 0x80, 0xd5, 0x80000000, 0x2}, {0x9, 0x3ff, 0xb, 0x4, 0x3, 0x731b}, {0x4, 0x2, 0x9, 0xa72, 0x8, 0x4}, {0x7, 0x8b44, 0x69c8, 0x5, 0x100, 0x8}, {0x0, 0x7d08, 0xffffffff, 0xc4, 0x2, 0xf57f}, {0x10000, 0x8, 0x3, 0x1ff, 0x643d, 0x9}, {0x5, 0x5, 0xd, 0xffffffdd, 0xff, 0x2}, {0x400, 0xe6, 0x6, 0xf2, 0x1000}, {0xc65b, 0x19, 0x10001, 0xfffff908, 0x4, 0x8}, {0xffff, 0x4, 0xffff359f, 0xfffffe01, 0x2, 0x2}, {0xad, 0x223, 0x5, 0x2, 0x4, 0x7}, {0x2, 0x3, 0x8, 0x10001, 0xc24b, 0x8}, {0x9, 0x5, 0xb, 0x0, 0x3, 0x7}, {0x101, 0x10001, 0x6, 0x5, 0x8}, {0x9, 0x80000000, 0x5, 0x8, 0x422, 0x5}, {0x1, 0x3, 0x6, 0x3, 0x2, 0x2}, {0x10000, 0x3ff, 0x80000000, 0x7, 0xaffb, 0x4}, {0x4, 0x3, 0xfffff607, 0x4, 0x5, 0xa}, {0x3, 0x86a9, 0x6, 0xba0, 0x6, 0x1}, {0xaa, 0x5, 0x7fff, 0x6, 0x3, 0x656d}, {0x41f, 0x8, 0x1, 0x5, 0x5500, 0x1}, {0x0, 0xb, 0x4, 0x9, 0x28, 0x9}, {0x10000, 0x4, 0x6, 0x1, 0x4, 0xdda}, {0x2, 0x5cc, 0x4, 0xc74, 0x5, 0x2}, {0x2, 0x9, 0x3, 0xdd3, 0x10001, 0x1}, {0x48be, 0x401, 0xc, 0x4, 0x9, 0x7}, {0x4, 0x1, 0x5, 0xf, 0x2, 0xf78}, {0x2f, 0x9, 0xa, 0x80000000, 0x9, 0x1}, {0x3, 0x7, 0x3, 0x5, 0xe8a, 0x1}, {0x0, 0x127, 0x6, 0x6cb71a7b, 0x7, 0x9}, {0xa, 0x5, 0xffffffff, 0x8000, 0x1ff, 0xf51a}, {0xd, 0x4, 0x2000, 0xaee, 0xb3, 0x5}, {0xf7, 0x8, 0x40, 0x2, 0x7, 0xf}, {0x0, 0x310, 0x3, 0x6e, 0xc3d, 0xf}, {0x3, 0x7, 0x5, 0xfff, 0x0, 0x7e4}, {0x0, 0x400, 0x1000, 0x0, 0x4790, 0xec7}, {0x8, 0x3, 0x21c, 0x1, 0x7d4, 0x101}, {0x6, 0x2bd, 0x8, 0xfff, 0x9, 0x9}, {0xa64, 0x2, 0x4, 0x27, 0x6, 0x5}, {0x5228, 0x6, 0x8, 0xd2f, 0x6, 0x5}, {0x51, 0x3, 0x8, 0x40, 0x3, 0x7}, {0x8, 0x2000, 0xfffffff9, 0x8c59, 0x1, 0x7}, {0x7fffffff, 0xe288, 0x9, 0x6, 0xf, 0x6}, {0x5, 0x823, 0x80, 0x7, 0x0, 0x4}, {0x0, 0x3, 0x8000, 0xfff, 0x1, 0x5}, {0x4, 0x40, 0x9, 0x5, 0x4, 0x7}, {0x7, 0x8, 0x2a00, 0x2, 0x0, 0x4}, {0x3, 0x80000000, 0x7ff, 0x8000, 0x2, 0x6}, {0x4, 0x73, 0x77, 0x4, 0x9c3, 0x10001}, {0x7f, 0x800, 0xb, 0xb, 0x7, 0x5}, {0x5, 0xb8be, 0x451d88ed, 0x7, 0x6, 0xfffffff8}, {0x5, 0x0, 0x200, 0x3, 0x101, 0x7fff}, {0x6, 0xfffffffc, 0x8001, 0x6, 0x2, 0x4}, {0x821, 0xffffff26, 0xad1e, 0x9, 0x8, 0x80000000}, {0x5, 0x10c0, 0x8, 0xf6, 0x5, 0x99}, {0xffffffff, 0x8, 0x5, 0x4, 0x8, 0x727}, {0x100, 0x8, 0x3, 0x3, 0x6, 0x8}, {0x4b, 0x6, 0x6, 0x0, 0x2}, {0x2, 0x7b, 0xffff, 0xffff, 0x80, 0x5e42}, {0xae, 0x1c, 0x0, 0x2d, 0x7f}, {0x1, 0x2, 0x3, 0x9, 0x4, 0x80000001}, {0x401, 0x5, 0x2, 0x61d2, 0x210, 0xff}, {0x2, 0x7, 0x1, 0x781, 0x0, 0x5}, {0x0, 0x5, 0x4, 0xfff, 0xa, 0xd6}, {0x9, 0xb3, 0x8, 0x3, 0x7, 0x4}, {0x0, 0x8, 0x8f, 0x1ff, 0x1, 0x1000}, {0x4, 0x38a, 0x7, 0x80000000, 0x0, 0x8}, {0x3ff, 0xdf, 0x81, 0x100, 0x0, 0x8001}, {0x3, 0x6, 0x80000000, 0x12fd, 0x9, 0x81}, {0x7, 0x1, 0x0, 0x5, 0x1, 0x8}, {0x8, 0x8aa4, 0x1bd, 0x7, 0x80000001, 0x16}, {0x7fff, 0x9e04, 0x1, 0xffff, 0x2, 0x8}, {0x0, 0x10001, 0x2, 0x5, 0x8, 0x401}, {0x101, 0x0, 0x8, 0x7, 0x8000, 0x9fc}, {0x8, 0x6, 0x8, 0xffff, 0x7ff, 0xd75}, {0x3, 0x7, 0x4, 0x6, 0x200, 0x7f}, {0x2, 0x5, 0x80000000, 0x7b9, 0x47df, 0x2}, {0x81, 0x5, 0x4, 0xd77, 0x9085, 0x4}, {0xc500, 0x3, 0x2, 0x9145, 0x4, 0x100}, {0x7fffffff, 0x5f1, 0x8, 0x1, 0x81, 0x6}, {0x7, 0x6, 0x10001, 0xfffffff9, 0xd6, 0xffff8000}, {0x9, 0x9, 0x800, 0xffffff54, 0x6, 0x7b97}, {0xf2c8, 0x5, 0x4433, 0x9, 0x4, 0xff}, {0x82c3, 0x8000, 0x3, 0x575d0e43, 0x1b}, {0x6, 0x1a, 0x7, 0x9, 0xaa6, 0x3}, {0x56, 0x8, 0x1, 0x4, 0x7, 0x50}, {0x3, 0x6, 0x7f, 0x81, 0x300, 0x2}, {0x1000, 0x2, 0xe10, 0x6, 0x9, 0xffffe390}, {0x400, 0x4, 0x5, 0x3, 0x8, 0xf0000000}, {0x7, 0x7, 0x2, 0x8, 0x8, 0x6}, {0x7, 0x5, 0xfffffffc, 0xfffffffc, 0x1, 0x6}, {0x8fb, 0x5, 0x1, 0x5, 0x1, 0x4d}, {0x80000001, 0x10001, 0x2, 0x3, 0xe9c, 0x2}, {0x3, 0x7, 0x907, 0x4, 0x4fed, 0x276}, {0xfffffffe, 0x1ff, 0xa, 0xf342, 0x401, 0x8001}, {0x7, 0x7f, 0x3ff, 0x6, 0xef4, 0x7}, {0x7fff, 0x5, 0x80000000, 0x9, 0x9, 0xd}, {0x4e01, 0x7f, 0x6, 0xfffffff8, 0x9, 0xa5c}, {0x3ff, 0x9, 0xe, 0x4, 0x203, 0x6}, {0x40, 0xfffffff7, 0x8001, 0xa1, 0x81, 0x47e}, {0xc, 0x80000000, 0x6, 0xfffffff7, 0x7ff, 0x200}, {0x7, 0x1, 0x3, 0x401, 0x8000, 0x3}, {0x1e000, 0x0, 0x8, 0x9, 0x19, 0x7f}, {0x4, 0xffffffff, 0x7, 0x2, 0x6, 0x9}, {0x7, 0x442662ce, 0x5746, 0x81, 0xffffffff, 0x2}, {0x1ff, 0x1, 0x6, 0x7fff, 0x4, 0x2}, {0x4, 0x5, 0x5, 0x21, 0xfffffffa, 0x8}, {0x0, 0x8, 0x88, 0x8, 0x20000000, 0x10000}, {0x3ff, 0xfffffff7, 0x7, 0x5, 0x0, 0x81}, {0xac30, 0xffff7fff, 0x6fd2, 0xe, 0x2, 0x7}, {0x3ff, 0x265, 0x1000, 0xa0, 0xffeb, 0x3}, {0x4739, 0xc, 0xd4, 0x20ee, 0x8, 0x7}, {0x6, 0x1, 0xc2d, 0x69c2, 0x3, 0x7ff}, {0xc, 0x6, 0x5, 0x3, 0x2, 0x8}, {0x1, 0x10001, 0x80000000, 0x2, 0x2, 0xd1d0}, {0x2, 0x6, 0x21e1, 0x2000000, 0x4, 0x1}, {0x10001, 0x4, 0x2498794a, 0x7, 0x10000000, 0xe}, {0x4, 0xfffffffd, 0x7fffffff, 0x4, 0x3, 0x1}, {0x6, 0x8, 0xe, 0x9, 0x2, 0xffffcc43}, {0x0, 0x200, 0x2, 0x9, 0x2, 0x8}, {0x2, 0x800, 0x7, 0x9b, 0x9, 0x80}, {0x8, 0x80, 0x8, 0x40, 0xfd8b, 0x400}, {0xfffff801, 0x7fff, 0xc, 0x9, 0x40, 0x101}, {0x7, 0x8, 0x81, 0x7, 0x2, 0x3}, {0x4, 0x2, 0x8, 0x400, 0x4b0000, 0x1}], [{0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x507c6d584a3f4368, 0x7defe684f95bbc72}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x2}, {0x1}, {0x1, 0x1}, {0x6}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x4}, {0x1}, {0x3}, {0x5}, {0x52bc0ba90734696, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x5, 0xdfd3ec0b6276dae0}, {0x5}, {0x4, 0x1}, {0x3}, {0x7}, {0x1, 0x1}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x7}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x4}, {0xd, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe81}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xf1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x1d30}}, 0x0) 170.883163ms ago: executing program 2 (id=3596): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000003c0)=0x1) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000003640)={0x0, "45ee5b5df4bf409af30639042ad9234d746d4220894e9e34673882f53a403c50", 0x2, 0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.current\x00', 0x275a, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) prctl$PR_SET_IO_FLUSHER(0x34, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x80000}) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x3, 0xd, 0x4, 0x0, 0x3c7, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x3, 0x1, 0xc, "41f8fe25"}, 0x5, 0x4, {}, 0x4, 0x0, r1}) 163.245848ms ago: executing program 6 (id=3597): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) (async) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) (async) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) timer_create(0x1, &(0x7f00000010c0)={0x0, 0x23, 0x2, @thr={&(0x7f0000001040)="3c3713eb96bb0705f7ad13377d4fde6af24cd7ffe6669e68730c0b400ffd9cd3b7d640", &(0x7f0000001080)="c13fc2f92f645a81c5deae18489439c550ed7b26a300f42dfe6df1d23a426c0b85a972f0598ab9e9b5906850322e63a157cbc0"}}, &(0x7f0000001100)=0x0) timer_settime(r2, 0x0, &(0x7f0000001140)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000001180)) (async) write$UHID_INPUT(r1, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) 2.641065ms ago: executing program 1 (id=3598): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x8, 0x20000) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000071c0)=[{{&(0x7f00000001c0)={0xa, 0x1, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000100)="8fe3b5338c8df419069fff7c084a5157f43776108c42f18fdbfa", 0x1}], 0x10000000000003e0}}], 0x1, 0x4004080) 0s ago: executing program 2 (id=3599): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000140)={0x18, r2, 0x1, 0x0, &(0x7f0000000040)=[{0x4, 0xfffffffffffffff8}]}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r2, 0x0, &(0x7f0000000d40)='L', 0x1, 0x56149216}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x40000}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="af", 0x1, 0x840, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r3, 0x8800000) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) close(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) sendfile(r4, r3, 0x0, 0x578410ed) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000100)=0x1, 0x4) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r6, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_retopts={{0x14, 0x110, 0xd, {[@timestamp_addr={0x44, 0x4}]}}}], 0x18}, 0x0) sched_setattr(0x0, 0x0, 0x0) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 0s ago: executing program 2 (id=3601): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x2000, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc02864cf, &(0x7f00000001c0)={0x0, 0x0, {}, {0xee00}}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r4, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000440)=[r5, r5, r5], 0x0, 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, r3], 0x0, 0x3fffff78}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f0000000100)={&(0x7f0000000080)=[r3, r3], 0x0, 0x2, 0x6}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) close_range(r6, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r0, &(0x7f0000000780)={0x8, {"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", 0x1000}}, 0x1006) r7 = inotify_init1(0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) fcntl$getownex(r7, 0x10, &(0x7f0000000040)={0x0, 0x0}) move_pages(r8, 0x1, &(0x7f0000000740)=[&(0x7f00007c7000/0x3000)=nil], 0x0, 0x0, 0x0) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f0000001540)=[{{&(0x7f0000000280)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000240)="9c", 0x1}], 0x1}}], 0x1, 0x4040849) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r10}, 0x20) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000002c0)={r10, 0x1, "98c34085941a32fe20f032f33a12fa3268ae7bab9c15e1e600"/34}, &(0x7f0000000240)=0xfffffdfb) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000280)={0x9, 0x4349, 0x8200, 0x5, 0x247, 0x7, 0x8, 0x4, r11}, 0x20) kernel console output (not intermixed with test programs): t=0283, bcdDevice=99.0b [ 249.739943][ T5943] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 249.745826][ T5943] usb 11-1: config 0 descriptor?? [ 249.750262][ T5943] hub 11-1:0.0: bad descriptor, ignoring hub [ 249.752832][ T5943] hub 11-1:0.0: probe with driver hub failed with error -5 [ 249.757796][ T5943] usb 11-1: selecting invalid altsetting 0 [ 249.831060][ T5328] bcm5974 7-1:0.0: could not read from device [ 249.875438][ T61] usb 7-1: USB disconnect, device number 35 [ 250.081761][ T29] usb 11-1: USB disconnect, device number 4 [ 250.307376][ T40] kauditd_printk_skb: 282 callbacks suppressed [ 250.307396][ T40] audit: type=1400 audit(2000000377.459:5893): avc: denied { sendto } for pid=1228 comm="kworker/u32:9" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 250.380928][ T40] audit: type=1400 audit(2000000377.525:5894): avc: denied { recv } for pid=5849 comm="syz-executor" saddr=127.0.0.1 src=43486 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 250.394492][ T40] audit: type=1400 audit(2000000377.534:5895): avc: denied { read write } for pid=13359 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 250.404699][ T40] audit: type=1400 audit(2000000377.534:5896): avc: denied { open } for pid=13359 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 250.412581][ T40] audit: type=1400 audit(2000000377.534:5897): avc: denied { ioctl } for pid=13359 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 250.417664][T14944] binder: 14943:14944 unknown command 0 [ 250.424002][ T40] audit: type=1400 audit(2000000377.562:5898): avc: denied { read } for pid=14943 comm="syz.2.2933" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 250.424726][T14944] binder: 14943:14944 ioctl c0306201 200000000080 returned -22 [ 250.433059][ T40] audit: type=1400 audit(2000000377.562:5899): avc: denied { open } for pid=14943 comm="syz.2.2933" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 250.444395][ T40] audit: type=1400 audit(2000000377.562:5900): avc: denied { ioctl } for pid=14943 comm="syz.2.2933" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 250.447704][T14944] binder: 14943:14944 ioctl c0306201 200000000300 returned -11 [ 250.454259][ T40] audit: type=1400 audit(2000000377.562:5901): avc: denied { set_context_mgr } for pid=14943 comm="syz.2.2933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 250.464097][ T40] audit: type=1400 audit(2000000377.581:5902): avc: denied { write } for pid=14943 comm="syz.2.2933" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 250.641353][T14957] Bluetooth: MGMT ver 1.23 [ 250.734346][ T5946] Bluetooth: hci1: command 0x0c1a tx timeout [ 250.819994][ T5946] Bluetooth: hci0: command 0x0c1a tx timeout [ 250.890749][T14973] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 251.044424][ T6090] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 251.124004][T15003] cgroup: No subsys list or none specified [ 251.165014][T15010] __nla_validate_parse: 8 callbacks suppressed [ 251.165024][T15010] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2957'. [ 251.166842][T15013] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 251.204837][ T6090] usb 6-1: Using ep0 maxpacket: 16 [ 251.207190][ T6090] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 251.211856][ T6090] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.217651][ T6090] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.222874][ T6090] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.233332][ T6090] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.240041][ T6090] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.245149][ T6090] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.251036][ T6090] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.257926][ T6090] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.263667][ T6090] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 251.267469][ T6090] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 251.272387][ T6090] usb 6-1: SerialNumber: syz [ 251.277308][ T6090] usb 6-1: config 0 descriptor?? [ 251.283040][ T6090] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input48 [ 251.289032][T15020] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2959'. [ 251.515070][ T5328] bcm5974 6-1:0.0: could not read from device [ 251.560358][ T6090] usb 6-1: USB disconnect, device number 31 [ 251.925285][T15088] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2977'. [ 252.060007][T15096] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.098329][T15103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2982'. [ 252.101278][T15103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2982'. [ 252.104752][T15103] netlink: 'syz.1.2982': attribute type 11 has an invalid length. [ 252.107364][T15103] netlink: 'syz.1.2982': attribute type 13 has an invalid length. [ 252.115691][T15103] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 252.346995][T15122] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 252.353617][T15122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2989'. [ 252.388988][T15122] 8021q: adding VLAN 0 to HW filter on device bond1 [ 252.487780][T15133] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2990'. [ 252.680961][ T6854] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 252.840944][ T6854] usb 9-1: Using ep0 maxpacket: 16 [ 252.843231][ T6854] usb 9-1: too many configurations: 123, using maximum allowed: 8 [ 252.846767][ T6854] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.851307][ T6854] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.856086][ T6854] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.860281][ T6854] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.864955][ T6854] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.875375][ T6854] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.882795][ T6854] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.888537][ T6854] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.892667][ T6854] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 252.895720][ T6854] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 252.898451][ T6854] usb 9-1: SerialNumber: syz [ 252.901837][ T6854] usb 9-1: config 0 descriptor?? [ 252.911220][ T6854] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input50 [ 252.958845][ T5945] Bluetooth: hci1: command 0x0c1a tx timeout [ 253.049356][ T5947] Bluetooth: hci0: command 0x0c1a tx timeout [ 253.135135][ T5328] bcm5974 9-1:0.0: could not read from device [ 253.164251][T15151] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2999'. [ 253.165901][ T6854] usb 9-1: USB disconnect, device number 5 [ 253.699778][T15182] netlink: 696 bytes leftover after parsing attributes in process `syz.4.3009'. [ 253.706990][T15183] binder_alloc: 15173: binder_alloc_buf size 8 failed, no address space [ 253.711449][T15183] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 0 (num: 0 largest: 0) [ 253.932442][T15202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3014'. [ 254.174824][ T5940] IPVS: starting estimator thread 0... [ 254.263561][T15210] IPVS: using max 30 ests per chain, 72000 per kthread [ 254.746979][ T6465] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 254.851676][ T5940] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 254.884202][T11085] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 254.915851][ T6465] usb 7-1: Using ep0 maxpacket: 16 [ 254.918818][ T6465] usb 7-1: too many configurations: 123, using maximum allowed: 8 [ 254.923440][ T6465] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.929000][ T6465] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.934134][ T6465] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.939404][ T6465] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.944800][ T6465] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.950397][ T6465] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.955580][ T6465] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.961221][ T6465] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.966970][ T6465] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 254.970642][ T6465] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 254.973186][ T6465] usb 7-1: SerialNumber: syz [ 254.985941][ T6465] usb 7-1: config 0 descriptor?? [ 255.000991][ T6465] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input52 [ 255.034011][ T5940] usb 6-1: Using ep0 maxpacket: 16 [ 255.044307][ T5940] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 255.048726][ T5940] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.054166][ T5940] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.055201][T11085] usb 9-1: Using ep0 maxpacket: 16 [ 255.059542][ T5940] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.060570][T11085] usb 9-1: too many configurations: 123, using maximum allowed: 8 [ 255.065173][ T5940] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.067576][T11085] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.071729][ T5940] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.074620][T11085] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.078855][ T5940] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.085997][T11085] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.086323][ T5940] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.090478][T11085] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.096098][ T5940] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.100948][T11085] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.104958][ T5940] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 255.104979][ T5940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 255.104996][ T5940] usb 6-1: SerialNumber: syz [ 255.114261][T11085] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.116139][ T5940] usb 6-1: config 0 descriptor?? [ 255.118294][T11085] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.123871][ T5940] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input53 [ 255.139925][T11085] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.145921][T11085] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 255.149686][T11085] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 255.153397][T11085] usb 9-1: SerialNumber: syz [ 255.157151][T11085] usb 9-1: config 0 descriptor?? [ 255.166387][T11085] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input54 [ 255.212388][T15225] input: syz1 as /devices/virtual/input/input55 [ 255.222216][ T5328] bcm5974 7-1:0.0: could not read from device [ 255.269019][ T5945] Bluetooth: hci0: command 0x0c1a tx timeout [ 255.270935][ T6465] usb 7-1: USB disconnect, device number 36 [ 255.346011][T15230] FAULT_INJECTION: forcing a failure. [ 255.346011][T15230] name failslab, interval 1, probability 0, space 0, times 0 [ 255.351326][T15230] CPU: 3 UID: 0 PID: 15230 Comm: syz.1.3019 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.351352][T15230] Tainted: [L]=SOFTLOCKUP [ 255.351358][T15230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 255.351368][T15230] Call Trace: [ 255.351375][T15230] [ 255.351382][T15230] dump_stack_lvl+0x16c/0x1f0 [ 255.351408][T15230] should_fail_ex+0x512/0x640 [ 255.351432][T15230] ? fs_reclaim_acquire+0xae/0x150 [ 255.351458][T15230] should_failslab+0xc2/0x120 [ 255.351480][T15230] __kmalloc_noprof+0xeb/0x910 [ 255.351507][T15230] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 255.351535][T15230] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 255.351557][T15230] tomoyo_realpath_from_path+0xc2/0x6e0 [ 255.351582][T15230] ? tomoyo_profile+0x47/0x60 [ 255.351609][T15230] tomoyo_path_number_perm+0x245/0x580 [ 255.351627][T15230] ? tomoyo_path_number_perm+0x237/0x580 [ 255.351649][T15230] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 255.351671][T15230] ? find_held_lock+0x2b/0x80 [ 255.351720][T15230] ? find_held_lock+0x2b/0x80 [ 255.351743][T15230] ? hook_file_ioctl_common+0x144/0x410 [ 255.351774][T15230] ? __fget_files+0x20e/0x3c0 [ 255.351802][T15230] security_file_ioctl+0x9b/0x240 [ 255.351826][T15230] __x64_sys_ioctl+0xb7/0x210 [ 255.351848][T15230] do_syscall_64+0xcd/0xf80 [ 255.351871][T15230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.351889][T15230] RIP: 0033:0x7fc38f98f7c9 [ 255.351902][T15230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.351918][T15230] RSP: 002b:00007fc390809038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 255.351934][T15230] RAX: ffffffffffffffda RBX: 00007fc38fbe5fa0 RCX: 00007fc38f98f7c9 [ 255.351945][T15230] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 255.351955][T15230] RBP: 00007fc390809090 R08: 0000000000000000 R09: 0000000000000000 [ 255.351965][T15230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.351975][T15230] R13: 00007fc38fbe6038 R14: 00007fc38fbe5fa0 R15: 00007ffde7f94ca8 [ 255.352000][T15230] [ 255.352007][T15230] ERROR: Out of memory at tomoyo_realpath_from_path. [ 255.435987][T15232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.439045][T15230] input: syz1 as /devices/virtual/input/input56 [ 255.444938][T15232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.452919][T15232] input: syz1 as /devices/virtual/input/input57 [ 255.488176][T15254] bcm5974 9-1:0.0: could not read from device [ 255.491237][T11085] usb 9-1: USB disconnect, device number 6 [ 255.539611][T10393] bcm5974 6-1:0.0: could not read from device [ 255.540203][ T6854] usb 6-1: USB disconnect, device number 32 [ 255.579540][ T5328] bcm5974 6-1:0.0: could not read from device [ 255.778830][ T40] kauditd_printk_skb: 370 callbacks suppressed [ 255.778845][ T40] audit: type=1400 audit(2000000382.574:6273): avc: denied { recv } for pid=5849 comm="syz-executor" saddr=127.0.0.1 src=43486 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 255.787159][ T35] block nbd0: Possible stuck request ffff888028500000: control (read@0,4096B). Runtime 150 seconds [ 255.795615][ T40] audit: type=1400 audit(2000000382.574:6274): avc: denied { read write } for pid=13359 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 255.809393][ T40] audit: type=1400 audit(2000000382.574:6275): avc: denied { open } for pid=13359 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 255.821865][ T40] audit: type=1400 audit(2000000382.574:6276): avc: denied { ioctl } for pid=13359 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 255.833566][ T40] audit: type=1400 audit(2000000382.583:6277): avc: denied { sendto } for pid=6020 comm="kworker/0:5" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 255.843409][ T40] audit: type=1400 audit(2000000382.592:6278): avc: denied { read } for pid=15257 comm="syz.2.3023" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 255.853149][ T40] audit: type=1400 audit(2000000382.592:6279): avc: denied { mounton } for pid=15257 comm="syz.2.3023" path="/148/bus" dev="tmpfs" ino=810 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 255.862391][ T40] audit: type=1400 audit(2000000382.602:6280): avc: denied { unlink } for pid=15257 comm="syz.2.3023" name="#62" dev="tmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 255.871615][ T40] audit: type=1400 audit(2000000382.602:6281): avc: denied { mount } for pid=15257 comm="syz.2.3023" name="/" dev="overlay" ino=810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 255.880929][ T40] audit: type=1400 audit(2000000382.611:6282): avc: denied { ioctl } for pid=15257 comm="syz.2.3023" path="socket:[59934]" dev="sockfs" ino=59934 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 255.988212][T15262] tmpfs: Bad value for 'mpol' [ 256.125802][T15282] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 256.252797][T15301] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 256.552258][ T6465] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 256.637582][T15315] __nla_validate_parse: 4 callbacks suppressed [ 256.637598][T15315] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3038'. [ 256.701968][T11085] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 256.714018][ T6465] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 256.717595][ T6465] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 256.720781][ T6465] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 256.723726][ T6465] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.730965][T15304] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 256.740759][ T6465] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 256.862363][T11085] usb 7-1: Using ep0 maxpacket: 16 [ 256.864962][T11085] usb 7-1: too many configurations: 123, using maximum allowed: 8 [ 256.868327][T11085] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.872759][T11085] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.877204][T11085] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.882235][T11085] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.887878][T11085] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.892923][T11085] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.898183][T11085] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.903241][T11085] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.909114][T11085] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 256.912776][T11085] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 256.916593][T11085] usb 7-1: SerialNumber: syz [ 256.921670][T11085] usb 7-1: config 0 descriptor?? [ 256.928751][T11085] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input58 [ 256.971650][ T6854] usb 9-1: USB disconnect, device number 7 [ 257.389015][T15312] input: syz1 as /devices/virtual/input/input59 [ 257.494588][ T5945] Bluetooth: hci0: command 0x0c1a tx timeout [ 257.576440][T15329] netlink: 'syz.1.3043': attribute type 2 has an invalid length. [ 257.664327][T15333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.764271][T15342] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3047'. [ 257.825054][ T6465] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 258.001973][ T6465] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 258.005859][ T6465] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 258.011786][ T6465] usb 9-1: Product: syz [ 258.013517][ T6465] usb 9-1: Manufacturer: syz [ 258.015428][ T6465] usb 9-1: SerialNumber: syz [ 258.019717][ T6465] usb 9-1: config 0 descriptor?? [ 258.025194][ T6465] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 258.028876][ T6465] dvb-usb: bulk message failed: -22 (2/0) [ 258.034660][ T6465] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 258.040502][ T6465] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 258.043906][ T6465] usb 9-1: media controller created [ 258.055485][ T6465] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 258.145902][ T5940] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 258.238335][T15326] dvb-usb: bulk message failed: -22 (4/0) [ 258.241791][T15326] cxusb: i2c read failed [ 258.245433][ T6465] cxusb: set interface failed [ 258.247109][ T6465] dvb-usb: bulk message failed: -22 (1/0) [ 258.272804][ T6465] DVB: Unable to find symbol mt352_attach() [ 258.275615][ T6465] dvb-usb: bulk message failed: -22 (5/0) [ 258.277745][ T6465] zl10353_read_register: readreg error (reg=127, ret==-121) [ 258.280434][ T6465] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 258.316922][ T5940] usb 11-1: Using ep0 maxpacket: 16 [ 258.320387][ T5940] usb 11-1: too many configurations: 123, using maximum allowed: 8 [ 258.324725][ T5940] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.330332][ T5940] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.334313][ T5940] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.338849][ T5940] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.342893][ T5940] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.347242][ T5940] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.349045][ T6465] rc_core: IR keymap rc-dvico-mce not found [ 258.353482][ T6465] Registered IR keymap rc-empty [ 258.353573][ T5940] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.356232][ T6465] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 258.360338][ T5940] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.364872][ T6465] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input60 [ 258.367873][ T5940] usb 11-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 258.374890][ T5940] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 258.377507][ T5940] usb 11-1: SerialNumber: syz [ 258.380409][ T5940] usb 11-1: config 0 descriptor?? [ 258.387580][ T5940] input: bcm5974 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input61 [ 258.609345][T15344] input: syz1 as /devices/virtual/input/input62 [ 258.869595][T15352] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 258.947690][T15357] 9p: Bad value for 'port' [ 259.026531][T15361] binder: 15360:15361 ioctl c0306201 0 returned -14 [ 259.212115][T15370] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3057'. [ 259.228272][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2010 [ 259.626478][T15386] netlink: 'syz.1.3063': attribute type 1 has an invalid length. [ 259.628984][T15386] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.3063'. [ 259.670087][T15388] binder: 15387:15388 ioctl c0306201 0 returned -14 [ 259.736326][ T5328] bcm5974 7-1:0.0: could not read from device [ 259.777814][T11085] usb 7-1: USB disconnect, device number 37 [ 259.780587][ T6465] dvb-usb: schedule remote query interval to 100 msecs. [ 259.783902][ T6465] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 259.788123][ T5940] usb 11-1: USB disconnect, device number 5 [ 259.792373][ T6465] usb 9-1: USB disconnect, device number 8 [ 259.835664][T15393] usb usb4: usbfs: process 15393 (syz.2.3066) did not claim interface 0 before use [ 259.973364][T15405] netlink: 'syz.2.3068': attribute type 30 has an invalid length. [ 260.001280][ T6465] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 260.050723][T15415] netlink: 'syz.1.3070': attribute type 3 has an invalid length. [ 260.078608][T15418] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 260.082017][T15418] omfs: Invalid superblock (0) [ 260.118197][T15423] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 260.118585][T15418] omfs: Invalid superblock (0) [ 260.172638][T15427] binder: 15426:15427 ioctl c0306201 0 returned -14 [ 260.237611][T15431] netlink: 'syz.1.3072': attribute type 2 has an invalid length. [ 260.244769][T15431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3072'. [ 260.298599][T15439] syz_tun: entered allmulticast mode [ 260.301974][T15439] pimreg: left allmulticast mode [ 260.349891][T15443] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3079'. [ 260.355965][T15443] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 260.361471][T15443] overlayfs: missing 'lowerdir' [ 260.416534][T15438] syz_tun: left allmulticast mode [ 260.423859][ T6022] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 260.584895][ T6022] usb 7-1: Using ep0 maxpacket: 16 [ 260.589314][ T6022] usb 7-1: too many configurations: 123, using maximum allowed: 8 [ 260.594462][ T6022] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.600400][ T6022] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.605535][ T6022] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.615571][ T6022] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.619997][ T6022] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.624287][ T6022] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.628923][ T6022] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.633815][ T6022] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.640800][ T6022] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 260.643835][ T6022] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 260.646430][ T6022] usb 7-1: SerialNumber: syz [ 260.649988][ T6022] usb 7-1: config 0 descriptor?? [ 260.661579][ T6022] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input63 [ 260.936034][ T5945] Bluetooth: hci2: Unable to find connection with handle 0x0001 [ 260.991221][T15472] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 260.993446][T15472] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 260.995564][T15472] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 260.997662][T15472] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 260.999732][T15472] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 261.055832][ T5940] usb 7-1: USB disconnect, device number 38 [ 261.057900][ T5328] bcm5974 7-1:0.0: could not read from device [ 261.089496][ T5949] bcm5974 7-1:0.0: could not read from device [ 261.118152][T15488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3089'. [ 261.122386][T15488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3089'. [ 261.142211][T15493] dump_vmcs: 55 callbacks suppressed [ 261.142221][T15493] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 261.147259][ T40] kauditd_printk_skb: 351 callbacks suppressed [ 261.147268][ T40] audit: type=1400 audit(2000000387.595:6634): avc: denied { ioctl } for pid=15492 comm="syz.4.3090" path="socket:[63203]" dev="sockfs" ino=63203 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 261.148905][T15493] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3090'. [ 261.163283][ T40] audit: type=1400 audit(2000000387.613:6635): avc: denied { mounton } for pid=15492 comm="syz.4.3090" path="/160/file0" dev="tmpfs" ino=887 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 261.171027][ T40] audit: type=1400 audit(2000000387.613:6636): avc: denied { mount } for pid=15492 comm="syz.4.3090" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 261.178212][ T40] audit: type=1400 audit(2000000387.613:6637): avc: denied { remount } for pid=15492 comm="syz.4.3090" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 261.211567][ T40] audit: type=1400 audit(2000000387.651:6638): avc: denied { create } for pid=15497 comm="syz.1.3092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 261.237665][ T40] audit: type=1400 audit(2000000387.679:6639): avc: denied { unmount } for pid=13162 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 261.278987][T15502] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3094'. [ 261.311513][ T40] audit: type=1400 audit(2000000387.744:6640): avc: denied { create } for pid=15501 comm="syz.4.3094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 261.320312][ T40] audit: type=1400 audit(2000000387.744:6641): avc: denied { setopt } for pid=15501 comm="syz.4.3094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 261.329942][ T40] audit: type=1400 audit(2000000387.744:6642): avc: denied { ioctl } for pid=15501 comm="syz.4.3094" path="socket:[60298]" dev="sockfs" ino=60298 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 261.343317][ T40] audit: type=1400 audit(2000000387.744:6643): avc: denied { write } for pid=15501 comm="syz.4.3094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 261.424901][T15517] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 261.616733][T15536] xt_l2tp: invalid flags combination: 8 [ 261.743167][ T61] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 261.910584][ T61] usb 9-1: Using ep0 maxpacket: 8 [ 261.913242][T15552] netlink: 'syz.6.3112': attribute type 3 has an invalid length. [ 261.914376][ T61] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 261.924041][ T61] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 261.927963][ T61] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 261.941578][ T61] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 261.945904][ T61] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.951370][ T61] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 261.954809][ T61] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.996709][T11085] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 262.041086][T15562] __nla_validate_parse: 11 callbacks suppressed [ 262.041102][T15562] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3115'. [ 262.167668][T11085] usb 6-1: Using ep0 maxpacket: 16 [ 262.169859][T11085] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 262.173637][T11085] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.175830][ T61] usb 9-1: GET_CAPABILITIES returned 0 [ 262.180709][ T61] usbtmc 9-1:16.0: can't read capabilities [ 262.181598][T11085] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.187991][T11085] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.193428][T11085] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.199513][T11085] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.203713][ T6465] usb 9-1: USB disconnect, device number 9 [ 262.208329][T11085] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.216455][T11085] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.223261][T11085] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.230678][T11085] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 262.235037][T11085] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 262.238650][T11085] usb 6-1: SerialNumber: syz [ 262.244277][T11085] usb 6-1: config 0 descriptor?? [ 262.250505][T11085] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input64 [ 262.306414][T15579] team0: Device gtp0 is up. Set it down before adding it as a team port [ 262.469054][T15543] input: syz0 as /devices/virtual/input/input65 [ 262.504026][T15582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3121'. [ 262.508352][T15582] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3121'. [ 262.514863][ T5328] bcm5974 6-1:0.0: could not read from device [ 262.519534][T11085] usb 6-1: USB disconnect, device number 33 [ 262.563154][ T5949] bcm5974 6-1:0.0: could not read from device [ 262.867525][T15592] openvswitch: netlink: IPv4 tun info is not correct [ 262.879966][T15592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3124'. [ 263.065796][ T5945] Bluetooth: hci4: command 0x0405 tx timeout [ 263.142639][ T5945] Bluetooth: hci0: command 0x0c1a tx timeout [ 263.142697][ T5946] Bluetooth: hci1: command 0x0c1a tx timeout [ 263.142745][ T5947] Bluetooth: hci5: command 0x0419 tx timeout [ 263.142766][ T5947] Bluetooth: hci2: command 0x0c1a tx timeout [ 263.305040][T15624] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 263.307378][T15624] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 263.521094][T15641] overlayfs: overlapping lowerdir path [ 263.529504][T15641] overlayfs: overlapping lowerdir path [ 263.530288][T15642] overlayfs: overlapping lowerdir path [ 263.632456][ T6465] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 263.667789][T15648] FAULT_INJECTION: forcing a failure. [ 263.667789][T15648] name failslab, interval 1, probability 0, space 0, times 0 [ 263.671908][T15648] CPU: 2 UID: 0 PID: 15648 Comm: syz.6.3144 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.671925][T15648] Tainted: [L]=SOFTLOCKUP [ 263.671929][T15648] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 263.671935][T15648] Call Trace: [ 263.671939][T15648] [ 263.671943][T15648] dump_stack_lvl+0x16c/0x1f0 [ 263.671976][T15648] should_fail_ex+0x512/0x640 [ 263.671996][T15648] ? fs_reclaim_acquire+0xae/0x150 [ 263.672012][T15648] should_failslab+0xc2/0x120 [ 263.672026][T15648] __kmalloc_noprof+0xeb/0x910 [ 263.672043][T15648] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 263.672060][T15648] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 263.672074][T15648] tomoyo_realpath_from_path+0xc2/0x6e0 [ 263.672089][T15648] ? tomoyo_profile+0x47/0x60 [ 263.672106][T15648] tomoyo_path_number_perm+0x245/0x580 [ 263.672117][T15648] ? tomoyo_path_number_perm+0x237/0x580 [ 263.672130][T15648] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 263.672143][T15648] ? find_held_lock+0x2b/0x80 [ 263.672170][T15648] ? find_held_lock+0x2b/0x80 [ 263.672185][T15648] ? hook_file_ioctl_common+0x144/0x410 [ 263.672204][T15648] ? __fget_files+0x20e/0x3c0 [ 263.672226][T15648] security_file_ioctl+0x9b/0x240 [ 263.672240][T15648] __x64_sys_ioctl+0xb7/0x210 [ 263.672253][T15648] do_syscall_64+0xcd/0xf80 [ 263.672267][T15648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.672279][T15648] RIP: 0033:0x7facaf98f7c9 [ 263.672287][T15648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.672297][T15648] RSP: 002b:00007facb07c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.672306][T15648] RAX: ffffffffffffffda RBX: 00007facafbe5fa0 RCX: 00007facaf98f7c9 [ 263.672313][T15648] RDX: 0000200000004a40 RSI: 00000000c0306201 RDI: 0000000000000005 [ 263.672319][T15648] RBP: 00007facb07c7090 R08: 0000000000000000 R09: 0000000000000000 [ 263.672324][T15648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.672330][T15648] R13: 00007facafbe6038 R14: 00007facafbe5fa0 R15: 00007ffe17eef428 [ 263.672344][T15648] [ 263.672348][T15648] ERROR: Out of memory at tomoyo_realpath_from_path. [ 263.743991][T15639] delete_channel: no stack [ 263.803576][ T6465] usb 6-1: Using ep0 maxpacket: 16 [ 263.806853][ T6465] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 263.819300][ T6465] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.824609][ T6465] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.830594][ T6465] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.838202][ T6465] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.843593][ T6465] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.848284][ T6465] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.852406][ T6465] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.856555][ T6465] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.861847][ T6465] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 263.864951][ T6465] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 263.867596][ T6465] usb 6-1: SerialNumber: syz [ 263.873317][ T6465] usb 6-1: config 0 descriptor?? [ 263.879219][ T6465] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input66 [ 263.915371][T15666] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 263.915532][T15667] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 263.953880][T15666] <: renamed from bond_slave_1 (while UP) [ 264.068549][T15675] nvme_fabrics: missing parameter 'transport=%s' [ 264.071739][T15675] nvme_fabrics: missing parameter 'nqn=%s' [ 264.074465][T15681] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3155'. [ 264.120790][T15683] FAULT_INJECTION: forcing a failure. [ 264.120790][T15683] name failslab, interval 1, probability 0, space 0, times 0 [ 264.126378][T15683] CPU: 1 UID: 0 PID: 15683 Comm: syz.6.3156 Tainted: G L syzkaller #0 PREEMPT(full) [ 264.126404][T15683] Tainted: [L]=SOFTLOCKUP [ 264.126410][T15683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 264.126420][T15683] Call Trace: [ 264.126425][T15683] [ 264.126432][T15683] dump_stack_lvl+0x16c/0x1f0 [ 264.126487][T15683] should_fail_ex+0x512/0x640 [ 264.126521][T15683] ? fs_reclaim_acquire+0xae/0x150 [ 264.126546][T15683] should_failslab+0xc2/0x120 [ 264.126568][T15683] __kmalloc_noprof+0xeb/0x910 [ 264.126593][T15683] ? tomoyo_encode2+0x100/0x3e0 [ 264.126619][T15683] ? tomoyo_encode2+0x100/0x3e0 [ 264.126639][T15683] tomoyo_encode2+0x100/0x3e0 [ 264.126664][T15683] tomoyo_encode+0x29/0x50 [ 264.126685][T15683] tomoyo_realpath_from_path+0x18f/0x6e0 [ 264.126713][T15683] tomoyo_path_number_perm+0x245/0x580 [ 264.126729][T15683] ? tomoyo_path_number_perm+0x237/0x580 [ 264.126750][T15683] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 264.126769][T15683] ? find_held_lock+0x2b/0x80 [ 264.126816][T15683] ? find_held_lock+0x2b/0x80 [ 264.126840][T15683] ? hook_file_ioctl_common+0x144/0x410 [ 264.126870][T15683] ? __fget_files+0x20e/0x3c0 [ 264.126898][T15683] security_file_ioctl+0x9b/0x240 [ 264.126922][T15683] __x64_sys_ioctl+0xb7/0x210 [ 264.126965][T15683] do_syscall_64+0xcd/0xf80 [ 264.126990][T15683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.127006][T15683] RIP: 0033:0x7facaf98f7c9 [ 264.127019][T15683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.127034][T15683] RSP: 002b:00007facb07c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.127050][T15683] RAX: ffffffffffffffda RBX: 00007facafbe5fa0 RCX: 00007facaf98f7c9 [ 264.127060][T15683] RDX: 0000200000004a40 RSI: 00000000c0306201 RDI: 0000000000000005 [ 264.127070][T15683] RBP: 00007facb07c7090 R08: 0000000000000000 R09: 0000000000000000 [ 264.127079][T15683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.127088][T15683] R13: 00007facafbe6038 R14: 00007facafbe5fa0 R15: 00007ffe17eef428 [ 264.127112][T15683] [ 264.127145][T15683] ERROR: Out of memory at tomoyo_realpath_from_path. [ 264.131722][ T5328] bcm5974 6-1:0.0: could not read from device [ 264.241052][T15697] delete_channel: no stack [ 264.245178][T15697] SELinux: policydb magic number 0x30303030 does not match expected magic number 0xf97cff8c [ 264.248465][T15697] SELinux: failed to load policy [ 264.256232][ T6465] usb 6-1: USB disconnect, device number 34 [ 264.305197][T15705] 9p: Bad value for 'msize' [ 264.532828][T15719] binder: 15718:15719 ioctl c0306201 200000000640 returned -22 [ 264.672446][T15721] FAULT_INJECTION: forcing a failure. [ 264.672446][T15721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.676667][T15721] CPU: 1 UID: 0 PID: 15721 Comm: syz.2.3168 Tainted: G L syzkaller #0 PREEMPT(full) [ 264.676684][T15721] Tainted: [L]=SOFTLOCKUP [ 264.676688][T15721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 264.676694][T15721] Call Trace: [ 264.676698][T15721] [ 264.676702][T15721] dump_stack_lvl+0x16c/0x1f0 [ 264.676719][T15721] should_fail_ex+0x512/0x640 [ 264.676740][T15721] _copy_from_user+0x2e/0xd0 [ 264.676763][T15721] binder_ioctl+0x5df/0x7360 [ 264.676793][T15721] ? tomoyo_path_number_perm+0x18d/0x580 [ 264.676819][T15721] ? __pfx_binder_ioctl+0x10/0x10 [ 264.676841][T15721] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 264.676862][T15721] ? do_vfs_ioctl+0x128/0x14f0 [ 264.676881][T15721] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 264.676900][T15721] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 264.676930][T15721] ? hook_file_ioctl_common+0x144/0x410 [ 264.676962][T15721] ? selinux_file_ioctl+0x180/0x270 [ 264.676981][T15721] ? selinux_file_ioctl+0xb4/0x270 [ 264.677004][T15721] ? __pfx_binder_ioctl+0x10/0x10 [ 264.677026][T15721] __x64_sys_ioctl+0x18e/0x210 [ 264.677046][T15721] do_syscall_64+0xcd/0xf80 [ 264.677070][T15721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.677088][T15721] RIP: 0033:0x7fb93738f7c9 [ 264.677102][T15721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.677117][T15721] RSP: 002b:00007fb9381bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.677134][T15721] RAX: ffffffffffffffda RBX: 00007fb9375e5fa0 RCX: 00007fb93738f7c9 [ 264.677146][T15721] RDX: 0000200000004a40 RSI: 00000000c0306201 RDI: 0000000000000005 [ 264.677157][T15721] RBP: 00007fb9381bd090 R08: 0000000000000000 R09: 0000000000000000 [ 264.677167][T15721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.677177][T15721] R13: 00007fb9375e6038 R14: 00007fb9375e5fa0 R15: 00007ffdc0198b38 [ 264.677201][T15721] [ 264.677209][T15721] binder: 15720:15721 ioctl c0306201 200000004a40 returned -14 [ 265.022976][ T5943] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 265.170729][T15732] overlayfs: upper fs does not support tmpfile. [ 265.193962][ T5943] usb 6-1: Using ep0 maxpacket: 32 [ 265.198133][ T5943] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 265.202357][ T5943] usb 6-1: config 1 interface 0 has no altsetting 0 [ 265.206864][ T5943] usb 6-1: New USB device found, idVendor=046d, idProduct=c08a, bcdDevice= 0.40 [ 265.210627][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.213137][ T5943] usb 6-1: Product: syz [ 265.214716][ T5943] usb 6-1: Manufacturer: ᰊ [ 265.216882][ T5943] usb 6-1: SerialNumber: syz [ 265.233954][T15738] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.3171'. [ 265.634773][T15767] FAULT_INJECTION: forcing a failure. [ 265.634773][T15767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.640158][T15767] CPU: 3 UID: 0 PID: 15767 Comm: syz.2.3178 Tainted: G L syzkaller #0 PREEMPT(full) [ 265.640185][T15767] Tainted: [L]=SOFTLOCKUP [ 265.640191][T15767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 265.640202][T15767] Call Trace: [ 265.640208][T15767] [ 265.640217][T15767] dump_stack_lvl+0x16c/0x1f0 [ 265.640244][T15767] should_fail_ex+0x512/0x640 [ 265.640271][T15767] _copy_from_user+0x2e/0xd0 [ 265.640297][T15767] binder_thread_write+0x13a0/0x4e40 [ 265.640328][T15767] ? __lock_acquire+0x436/0x2890 [ 265.640349][T15767] ? __pfx_binder_thread_write+0x10/0x10 [ 265.640371][T15767] ? binder_debug+0xde/0x1a0 [ 265.640396][T15767] ? find_held_lock+0x2b/0x80 [ 265.640420][T15767] ? __might_fault+0xe3/0x190 [ 265.640436][T15767] ? __might_fault+0x13b/0x190 [ 265.640463][T15767] binder_ioctl+0x2916/0x7360 [ 265.640493][T15767] ? tomoyo_path_number_perm+0x18d/0x580 [ 265.640521][T15767] ? __pfx_binder_ioctl+0x10/0x10 [ 265.640545][T15767] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 265.640567][T15767] ? do_vfs_ioctl+0x128/0x14f0 [ 265.640587][T15767] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 265.640607][T15767] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 265.640637][T15767] ? hook_file_ioctl_common+0x144/0x410 [ 265.640667][T15767] ? selinux_file_ioctl+0x180/0x270 [ 265.640687][T15767] ? selinux_file_ioctl+0xb4/0x270 [ 265.640709][T15767] ? __pfx_binder_ioctl+0x10/0x10 [ 265.640728][T15767] __x64_sys_ioctl+0x18e/0x210 [ 265.640747][T15767] do_syscall_64+0xcd/0xf80 [ 265.640771][T15767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.640785][T15767] RIP: 0033:0x7fb93738f7c9 [ 265.640800][T15767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.640815][T15767] RSP: 002b:00007fb9381bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 265.640829][T15767] RAX: ffffffffffffffda RBX: 00007fb9375e5fa0 RCX: 00007fb93738f7c9 [ 265.640838][T15767] RDX: 0000200000004a40 RSI: 00000000c0306201 RDI: 0000000000000005 [ 265.640848][T15767] RBP: 00007fb9381bd090 R08: 0000000000000000 R09: 0000000000000000 [ 265.640859][T15767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.640868][T15767] R13: 00007fb9375e6038 R14: 00007fb9375e5fa0 R15: 00007ffdc0198b38 [ 265.640892][T15767] [ 265.640901][T15767] binder: 15766:15767 ioctl c0306201 200000004a40 returned -14 [ 265.767608][T15770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.772180][T15770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.791951][T15774] comedi comedi3: comedi_config --init_data is deprecated [ 266.099551][T15791] nfs: Unknown parameter 'l.' [ 266.434589][ T61] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 266.459311][T15798] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3187'. [ 266.573667][ T61] usb 11-1: device descriptor read/64, error -71 [ 266.688764][ T40] kauditd_printk_skb: 353 callbacks suppressed [ 266.688775][ T40] audit: type=1400 audit(2000000392.775:6997): avc: denied { read } for pid=15799 comm="syz.2.3188" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 266.698469][ T40] audit: type=1400 audit(2000000392.775:6998): avc: denied { open } for pid=15799 comm="syz.2.3188" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 266.708489][T15800] fuse: Unknown parameter 'defB' [ 266.711886][ T40] audit: type=1400 audit(2000000392.784:6999): avc: denied { prog_load } for pid=15799 comm="syz.2.3188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 266.720640][ T40] audit: type=1400 audit(2000000392.784:7000): avc: denied { perfmon } for pid=15799 comm="syz.2.3188" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 266.729401][ T40] audit: type=1400 audit(2000000392.784:7001): avc: denied { create } for pid=15799 comm="syz.2.3188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 266.738499][ T40] audit: type=1400 audit(2000000392.784:7002): avc: denied { read write } for pid=15799 comm="syz.2.3188" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 266.748156][ T40] audit: type=1400 audit(2000000392.784:7003): avc: denied { open } for pid=15799 comm="syz.2.3188" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 266.757702][ T40] audit: type=1400 audit(2000000392.784:7004): avc: denied { mount } for pid=15799 comm="syz.2.3188" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 266.766601][ T40] audit: type=1400 audit(2000000392.784:7005): avc: denied { mounton } for pid=15799 comm="syz.2.3188" path="/187/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 266.775695][ T40] audit: type=1400 audit(2000000392.803:7006): avc: denied { create } for pid=15799 comm="syz.2.3188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 266.822934][T15803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3189'. [ 266.830307][ T61] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 266.836380][T15803] ufs: You didn't specify the type of your ufs filesystem [ 266.836380][T15803] [ 266.836380][T15803] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 266.836380][T15803] [ 266.836380][T15803] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 266.846072][T15803] ufs: failed to set blocksize [ 266.851036][T15803] wg2: entered promiscuous mode [ 266.853252][T15803] wg2: entered allmulticast mode [ 266.980087][ T61] usb 11-1: device descriptor read/64, error -71 [ 267.108912][ T61] usb usb11-port1: attempt power cycle [ 267.329699][T15805] FAULT_INJECTION: forcing a failure. [ 267.329699][T15805] name failslab, interval 1, probability 0, space 0, times 0 [ 267.333704][T15805] CPU: 1 UID: 0 PID: 15805 Comm: syz.4.3190 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.333728][T15805] Tainted: [L]=SOFTLOCKUP [ 267.333734][T15805] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 267.333743][T15805] Call Trace: [ 267.333749][T15805] [ 267.333756][T15805] dump_stack_lvl+0x16c/0x1f0 [ 267.333780][T15805] should_fail_ex+0x512/0x640 [ 267.333802][T15805] ? __kmalloc_cache_noprof+0x5f/0x800 [ 267.333828][T15805] should_failslab+0xc2/0x120 [ 267.333848][T15805] __kmalloc_cache_noprof+0x80/0x800 [ 267.333871][T15805] ? binder_transaction+0x6d8/0x9d50 [ 267.333893][T15805] ? binder_transaction+0x6d8/0x9d50 [ 267.333910][T15805] ? _raw_spin_unlock+0x28/0x50 [ 267.333925][T15805] binder_transaction+0x6d8/0x9d50 [ 267.333962][T15805] ? __lock_acquire+0x436/0x2890 [ 267.333984][T15805] ? __pfx_binder_transaction+0x10/0x10 [ 267.334008][T15805] ? find_held_lock+0x2b/0x80 [ 267.334032][T15805] ? bpf_ksym_find+0x127/0x1c0 [ 267.334056][T15805] ? __lock_acquire+0x436/0x2890 [ 267.334073][T15805] ? unwind_get_return_address+0x59/0xa0 [ 267.334095][T15805] ? arch_stack_walk+0xa6/0x100 [ 267.334120][T15805] ? find_held_lock+0x2b/0x80 [ 267.334140][T15805] ? __might_fault+0xe3/0x190 [ 267.334153][T15805] ? __might_fault+0xe3/0x190 [ 267.334171][T15805] ? __might_fault+0x13b/0x190 [ 267.334193][T15805] binder_thread_write+0x13ea/0x4e40 [ 267.334220][T15805] ? __lock_acquire+0x436/0x2890 [ 267.334236][T15805] ? __pfx_binder_thread_write+0x10/0x10 [ 267.334255][T15805] ? binder_debug+0xde/0x1a0 [ 267.334277][T15805] ? find_held_lock+0x2b/0x80 [ 267.334298][T15805] ? __might_fault+0xe3/0x190 [ 267.334310][T15805] ? __might_fault+0x13b/0x190 [ 267.334334][T15805] binder_ioctl+0x2916/0x7360 [ 267.334361][T15805] ? tomoyo_path_number_perm+0x18d/0x580 [ 267.334386][T15805] ? __pfx_binder_ioctl+0x10/0x10 [ 267.334407][T15805] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 267.334426][T15805] ? do_vfs_ioctl+0x128/0x14f0 [ 267.334444][T15805] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 267.334461][T15805] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 267.334489][T15805] ? hook_file_ioctl_common+0x144/0x410 [ 267.334516][T15805] ? selinux_file_ioctl+0x180/0x270 [ 267.334534][T15805] ? selinux_file_ioctl+0xb4/0x270 [ 267.334553][T15805] ? __pfx_binder_ioctl+0x10/0x10 [ 267.334572][T15805] __x64_sys_ioctl+0x18e/0x210 [ 267.334591][T15805] do_syscall_64+0xcd/0xf80 [ 267.334613][T15805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.334628][T15805] RIP: 0033:0x7f7e94d8f7c9 [ 267.334640][T15805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.334655][T15805] RSP: 002b:00007f7e95b88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.334671][T15805] RAX: ffffffffffffffda RBX: 00007f7e94fe5fa0 RCX: 00007f7e94d8f7c9 [ 267.334681][T15805] RDX: 0000200000004a40 RSI: 00000000c0306201 RDI: 0000000000000005 [ 267.334690][T15805] RBP: 00007f7e95b88090 R08: 0000000000000000 R09: 0000000000000000 [ 267.334700][T15805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.334709][T15805] R13: 00007f7e94fe6038 R14: 00007f7e94fe5fa0 R15: 00007fff244ca4c8 [ 267.334731][T15805] [ 267.493586][ T61] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 267.515444][ T61] usb 11-1: device descriptor read/8, error -71 [ 267.771526][ T5940] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 267.791172][T15811] netlink: 'syz.2.3193': attribute type 1 has an invalid length. [ 267.792868][ T61] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 267.801949][T15811] openvswitch: netlink: IP tunnel dst address not specified [ 267.815001][ T61] usb 11-1: device descriptor read/8, error -71 [ 267.935895][ T5940] usb 9-1: device descriptor read/64, error -71 [ 267.938412][ T61] usb usb11-port1: unable to enumerate USB device [ 267.942031][ T5943] usbhid 6-1:1.0: can't add hid device: -71 [ 267.944366][ T5943] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 267.951635][ T5943] usb 6-1: USB disconnect, device number 35 [ 268.200325][ T5940] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 268.338304][ T5940] usb 9-1: device descriptor read/64, error -71 [ 268.456703][ T5940] usb usb9-port1: attempt power cycle [ 268.819611][ T5940] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 268.841425][ T5940] usb 9-1: device descriptor read/8, error -71 [ 268.954839][T15821] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.959307][T15821] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.108461][ T5940] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 269.116977][T15833] FAULT_INJECTION: forcing a failure. [ 269.116977][T15833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.122046][T15833] CPU: 2 UID: 0 PID: 15833 Comm: syz.2.3200 Tainted: G L syzkaller #0 PREEMPT(full) [ 269.122063][T15833] Tainted: [L]=SOFTLOCKUP [ 269.122068][T15833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 269.122074][T15833] Call Trace: [ 269.122079][T15833] [ 269.122085][T15833] dump_stack_lvl+0x16c/0x1f0 [ 269.122108][T15833] should_fail_ex+0x512/0x640 [ 269.122134][T15833] _copy_to_user+0x32/0xd0 [ 269.122159][T15833] binder_ioctl+0x28cf/0x7360 [ 269.122189][T15833] ? tomoyo_path_number_perm+0x18d/0x580 [ 269.122210][T15833] ? __pfx_binder_ioctl+0x10/0x10 [ 269.122224][T15833] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 269.122238][T15833] ? do_vfs_ioctl+0x128/0x14f0 [ 269.122255][T15833] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 269.122267][T15833] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 269.122286][T15833] ? hook_file_ioctl_common+0x144/0x410 [ 269.122306][T15833] ? selinux_file_ioctl+0x180/0x270 [ 269.122318][T15833] ? selinux_file_ioctl+0xb4/0x270 [ 269.122332][T15833] ? __pfx_binder_ioctl+0x10/0x10 [ 269.122345][T15833] __x64_sys_ioctl+0x18e/0x210 [ 269.122358][T15833] do_syscall_64+0xcd/0xf80 [ 269.122378][T15833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.122394][T15833] RIP: 0033:0x7fb93738f7c9 [ 269.122409][T15833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.122426][T15833] RSP: 002b:00007fb9381bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 269.122444][T15833] RAX: ffffffffffffffda RBX: 00007fb9375e5fa0 RCX: 00007fb93738f7c9 [ 269.122453][T15833] RDX: 0000200000004a40 RSI: 00000000c0306201 RDI: 0000000000000005 [ 269.122463][T15833] RBP: 00007fb9381bd090 R08: 0000000000000000 R09: 0000000000000000 [ 269.122472][T15833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.122479][T15833] R13: 00007fb9375e6038 R14: 00007fb9375e5fa0 R15: 00007ffdc0198b38 [ 269.122493][T15833] [ 269.122499][T15833] binder: 15832:15833 ioctl c0306201 200000004a40 returned -14 [ 269.199494][ T5940] usb 9-1: device descriptor read/8, error -71 [ 269.282009][T15043] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 269.311770][ T5940] usb usb9-port1: unable to enumerate USB device [ 269.336956][T15840] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 269.609666][T15864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.730689][T15868] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 269.736623][T15868] netlink: 700 bytes leftover after parsing attributes in process `syz.6.3209'. [ 269.824090][T15873] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3211'. [ 269.990851][T15879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3213'. [ 270.235129][T15898] binder: 15894:15898 ioctl c0306201 0 returned -14 [ 270.239160][T15898] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3218'. [ 270.606570][T15918] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4 [ 270.647158][T15926] Process accounting resumed [ 270.672288][T15929] 9p: Bad value for 'wfdno' [ 270.701996][ T61] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 270.752580][T15932] bridge3: entered allmulticast mode [ 270.760996][T15932] overlay: ./file0 is not a directory [ 270.765342][T15932] overlayfs: missing 'lowerdir' [ 270.768938][ T5946] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 270.771509][ T5946] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 270.862395][ T61] usb 6-1: Using ep0 maxpacket: 16 [ 270.864763][ T61] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 270.868926][ T61] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.875653][ T61] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.879906][ T61] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.884144][ T61] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.888270][ T61] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.892373][ T61] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.901045][T15942] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 270.905387][ T61] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.910865][ T61] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.923182][ T61] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 270.928886][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 270.932506][ T61] usb 6-1: SerialNumber: syz [ 270.936948][ T61] usb 6-1: config 0 descriptor?? [ 270.944585][ T61] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input67 [ 270.984492][T15947] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3233'. [ 270.987289][T15947] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3233'. [ 271.160789][T15905] input: syz1 as /devices/virtual/input/input68 [ 271.171426][ T5328] bcm5974 6-1:0.0: could not read from device [ 271.203953][T15951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3234'. [ 271.218984][ T61] usb 6-1: USB disconnect, device number 36 [ 271.457592][T15957] binder: 15956:15957 ioctl c018620c 200000000200 returned -1 [ 271.772346][T15978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15978 comm=syz.1.3244 [ 271.777209][T15978] netlink: 'syz.1.3244': attribute type 1 has an invalid length. [ 271.797869][T15979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3243'. [ 271.809858][T15978] bond1: (slave bridge1): making interface the new active one [ 271.813408][T15978] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 271.817875][T15979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3243'. [ 272.009487][T15993] input: syz0 as /devices/virtual/input/input69 [ 272.039015][ T40] kauditd_printk_skb: 206 callbacks suppressed [ 272.039031][ T40] audit: type=1400 audit(2000000397.777:7213): avc: denied { open } for pid=15991 comm="syz.1.3249" path="/123/file0/file0" dev="9p" ino=76546159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 272.071013][ T40] audit: type=1400 audit(2000000397.796:7214): avc: denied { recv } for pid=15994 comm="dhcpcd-run-hook" saddr=10.0.2.2 src=49472 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 272.090847][T15985] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3246'. [ 272.094928][ T40] audit: type=1400 audit(2000000397.796:7215): avc: denied { search } for pid=15994 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.116542][ T40] audit: type=1400 audit(2000000397.796:7216): avc: denied { search } for pid=15994 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1897 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.138634][ T40] audit: type=1400 audit(2000000397.796:7217): avc: denied { search } for pid=15994 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.155614][ T40] audit: type=1400 audit(2000000397.796:7218): avc: denied { search } for pid=15994 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.178417][ T40] audit: type=1400 audit(2000000397.805:7219): avc: denied { read open } for pid=15995 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.208368][ T40] audit: type=1400 audit(2000000397.805:7220): avc: denied { getattr } for pid=15995 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.225033][ T40] audit: type=1400 audit(2000000397.814:7221): avc: denied { create } for pid=15996 comm="syz.4.3250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 272.240438][ T40] audit: type=1400 audit(2000000397.814:7222): avc: denied { add_name } for pid=15994 comm="dhcpcd-run-hook" name="resolv.conf.lapb5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.656813][T16053] Falling back ldisc for ttynull. [ 272.852011][ T29] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 272.951221][T16079] cgroup: Name too long [ 272.957207][T16079] netlink: 'syz.6.3265': attribute type 13 has an invalid length. [ 273.022835][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 273.026959][ T29] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 273.031142][ T29] usb 6-1: config 0 has no interface number 0 [ 273.038255][ T29] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 273.041155][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.043830][ T29] usb 6-1: Product: syz [ 273.046769][ T29] usb 6-1: Manufacturer: syz [ 273.049275][ T29] usb 6-1: SerialNumber: syz [ 273.052563][ T29] usb 6-1: config 0 descriptor?? [ 273.056873][ T29] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 273.059728][ T29] usb 6-1: selecting invalid altsetting 1 [ 273.061595][ T29] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 273.069761][ T29] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 273.074139][ T29] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 273.077781][ T29] usb 6-1: media controller created [ 273.085706][T16084] veth0_to_bond: entered allmulticast mode [ 273.089048][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 273.336961][T16100] netlink: 'syz.6.3271': attribute type 5 has an invalid length. [ 273.431149][T16107] SELinux: policydb magic number 0x25894f55 does not match expected magic number 0xf97cff8c [ 273.435320][T16107] SELinux: failed to load policy [ 273.481552][T16109] binder: 16108:16109 ioctl c018620c 200000000040 returned -22 [ 273.528609][T16111] 9pnet_fd: Insufficient options for proto=fd [ 273.569073][T16115] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 273.585551][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 273.604588][T16115] binder: BINDER_SET_CONTEXT_MGR already set [ 273.606630][T16115] binder: 16113:16115 ioctl 4018620d 200000004a80 returned -16 [ 274.219504][T16138] sctp: [Deprecated]: syz.2.3284 (pid 16138) Use of struct sctp_assoc_value in delayed_ack socket option. [ 274.219504][T16138] Use struct sctp_sack_info instead [ 274.263919][ T29] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 274.267758][ T29] zl10353_read_register: readreg error (reg=127, ret==-110) [ 274.269378][T16051] usb 6-1: dvb_usb_ce6230: I2C read not implemented [ 274.286575][ T29] usb 6-1: USB disconnect, device number 37 [ 274.430905][T16146] netlink: 'syz.2.3287': attribute type 30 has an invalid length. [ 274.442118][T16146] bond2: option arp_missed_max: invalid value (0) [ 274.444330][T16146] bond2: option arp_missed_max: allowed values 1 - 255 [ 274.447722][T16146] bond2 (unregistering): Released all slaves [ 274.830047][T16172] netlink: 'syz.2.3296': attribute type 10 has an invalid length. [ 274.862428][ T5946] Bluetooth: hci4: command 0x0405 tx timeout [ 274.865179][ T6465] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 274.867722][ T6465] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 275.147671][T16204] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 275.297365][T16207] binder: 16206:16207 ioctl 50009417 200000001040 returned -22 [ 275.324103][T16209] __nla_validate_parse: 12 callbacks suppressed [ 275.324121][T16209] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3308'. [ 275.715026][T16219] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.3311'. [ 275.718205][T16219] netlink: ct family unspecified [ 275.899098][T16229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.902529][T16229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.905229][T16229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.144016][T16249] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 276.249160][T16256] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 276.252361][T16256] SELinux: failed to load policy [ 276.317942][T15041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.381185][ C0] sr 2:0:0:0: [sr0] tag#17 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 276.384928][ C0] sr 2:0:0:0: [sr0] tag#17 CDB: Test Unit Ready [ 276.599884][T16272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16272 comm=syz.6.3329 [ 276.608598][T16272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16272 comm=syz.6.3329 [ 276.684481][T16277] macsec1: entered promiscuous mode [ 276.686185][T16277] macsec1: entered allmulticast mode [ 276.773026][T16279] sctp: [Deprecated]: syz.6.3331 (pid 16279) Use of struct sctp_assoc_value in delayed_ack socket option. [ 276.773026][T16279] Use struct sctp_sack_info instead [ 276.892096][T16283] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3333'. [ 276.912042][T16283] 8021q: adding VLAN 0 to HW filter on device bond1 [ 276.927033][T15051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.947065][T16283] bond1: (slave batadv1): Opening slave failed [ 277.183293][ T5946] Bluetooth: hci2: command 0x0c1a tx timeout [ 277.183903][ T6465] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 277.188112][ T6465] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 277.278676][T16299] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 277.281574][T16299] IPv6: NLM_F_CREATE should be set when creating new route [ 277.283930][T16299] IPv6: NLM_F_CREATE should be set when creating new route [ 277.286943][T16299] IPv6: NLM_F_CREATE should be set when creating new route [ 277.292222][T16299] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 277.408828][ T40] kauditd_printk_skb: 440 callbacks suppressed [ 277.408850][ T40] audit: type=1400 audit(2000000402.807:7663): avc: denied { mounton } for pid=16308 comm="syz.6.3341" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 277.409450][T16309] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 277.423840][T16309] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 277.427741][T16309] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 277.430601][ T40] audit: type=1400 audit(2000000402.817:7664): avc: denied { execmem } for pid=16310 comm="syz.2.3342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 277.430848][T16309] UDF-fs: Scanning with blocksize 512 failed [ 277.440690][ T40] audit: type=1400 audit(2000000402.826:7665): avc: denied { read write } for pid=16310 comm="syz.2.3342" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 277.450915][ T40] audit: type=1400 audit(2000000402.826:7666): avc: denied { open } for pid=16310 comm="syz.2.3342" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 277.452680][T16309] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 277.460882][ T40] audit: type=1400 audit(2000000402.826:7667): avc: denied { ioctl } for pid=16310 comm="syz.2.3342" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 277.465198][T16309] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 277.473092][T16312] fuse: Bad value for 'user_id' [ 277.473110][T16312] fuse: Bad value for 'user_id' [ 277.475200][ T40] audit: type=1400 audit(2000000402.854:7668): avc: denied { read write } for pid=16308 comm="syz.6.3341" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 277.477875][T16309] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 277.480003][ T40] audit: type=1400 audit(2000000402.854:7669): avc: denied { open } for pid=16308 comm="syz.6.3341" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 277.481557][T16309] UDF-fs: Scanning with blocksize 1024 failed [ 277.491608][ T40] audit: type=1400 audit(2000000402.854:7670): avc: denied { mounton } for pid=16308 comm="syz.6.3341" path="/163/file0" dev="tmpfs" ino=899 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 277.494949][T16309] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 277.515587][T16309] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 277.518476][T16309] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 277.520846][T16309] UDF-fs: Scanning with blocksize 2048 failed [ 277.523027][T16309] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 277.526582][T16309] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 277.530283][T16309] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 277.532639][T16309] UDF-fs: Scanning with blocksize 4096 failed [ 277.534558][T16309] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 277.587515][ T40] audit: type=1400 audit(2000000402.966:7671): avc: denied { read write } for pid=14455 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 277.596262][ T40] audit: type=1400 audit(2000000402.966:7672): avc: denied { open } for pid=14455 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 277.696998][T11085] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 277.864214][T11085] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.869622][T11085] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.873271][T11085] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 277.878102][T11085] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 277.884775][T11085] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.890636][T11085] usb 7-1: config 0 descriptor?? [ 278.330363][T11085] hid_parser_main: 73 callbacks suppressed [ 278.330375][T11085] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 278.342862][T11085] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 278.345767][T11085] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 278.348795][T11085] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 278.359722][T11085] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 278.361074][T16332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=16332 comm=syz.4.3350 [ 278.362106][T11085] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 278.368434][T11085] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 278.371511][T11085] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 278.373876][T11085] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 278.376193][T11085] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 278.404708][T11085] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 278.595671][T16311] netlink: 'syz.2.3342': attribute type 10 has an invalid length. [ 278.598305][T16311] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3342'. [ 278.635959][T16311] team0: Port device geneve0 added [ 278.641922][T11085] usb 7-1: USB disconnect, device number 39 [ 278.985156][T16352] netlink: 'syz.1.3355': attribute type 4 has an invalid length. [ 278.997085][T16354] ata1.00: invalid multi_count 128 ignored [ 279.001252][T16347] netlink: 'syz.1.3355': attribute type 4 has an invalid length. [ 279.043711][T16350] veth1_to_bond: entered allmulticast mode [ 279.053570][T16355] Cannot find del_set index 4 as target [ 279.397124][ T6465] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 279.397191][ T5946] Bluetooth: hci5: command 0x0419 tx timeout [ 279.399655][ T6465] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 279.546587][T16361] binder: 16360:16361 ioctl c0306201 200000000200 returned -14 [ 279.893564][T16348] veth1_to_bond: left allmulticast mode [ 279.990415][T11085] libceph: connect (1)[c::]:6789 error -101 [ 279.992535][T11085] libceph: mon0 (1)[c::]:6789 connect error [ 280.040337][T16371] ceph: No mds server is up or the cluster is laggy [ 280.388056][T16393] netlink: 'syz.6.3368': attribute type 14 has an invalid length. [ 280.498063][T16402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3369'. [ 280.632946][T16410] netlink: 'syz.6.3375': attribute type 10 has an invalid length. [ 280.645015][T16410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.652202][T16410] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 280.795182][ T65] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 280.946505][T16425] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3380'. [ 281.119315][T15051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.597627][T16437] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3384'. [ 281.603050][T16437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42016 sclass=netlink_route_socket pid=16437 comm=syz.2.3384 [ 281.707605][T15035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.793221][ T218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.805616][ T6465] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 281.806842][ T5946] Bluetooth: hci1: command 0x0c1a tx timeout [ 281.807657][ T6465] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 282.067486][T16450] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3387'. [ 282.317291][T15051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.477468][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.604181][T16467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3392'. [ 282.682594][T16471] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 282.685352][T16471] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 282.688255][T16471] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 282.692370][T16471] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 282.696373][T16471] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 282.698835][T16471] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 282.701451][T16471] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 282.704137][T16471] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 282.919505][ T40] kauditd_printk_skb: 217 callbacks suppressed [ 282.919520][ T40] audit: type=1400 audit(2000000407.950:7890): avc: denied { prog_load } for pid=16475 comm="syz.2.3395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 282.930604][ T40] audit: type=1400 audit(2000000407.959:7891): avc: denied { prog_run } for pid=16475 comm="syz.2.3395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 282.941261][ T40] audit: type=1400 audit(2000000407.968:7892): avc: denied { connect } for pid=16475 comm="syz.2.3395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 282.949766][ T40] audit: type=1400 audit(2000000407.968:7893): avc: denied { create } for pid=16475 comm="syz.2.3395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 282.958186][ T40] audit: type=1400 audit(2000000407.968:7894): avc: denied { ioctl } for pid=16475 comm="syz.2.3395" path="socket:[64328]" dev="sockfs" ino=64328 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 282.969318][ T40] audit: type=1400 audit(2000000407.996:7895): avc: denied { sys_module } for pid=16475 comm="syz.2.3395" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 282.978215][ T40] audit: type=1400 audit(2000000407.996:7896): avc: denied { module_request } for pid=16475 comm="syz.2.3395" kmod="veth0_vlan" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 282.986220][ T40] audit: type=1400 audit(2000000408.015:7897): avc: denied { ioctl } for pid=16475 comm="syz.2.3395" path="socket:[64327]" dev="sockfs" ino=64327 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 282.994098][ T40] audit: type=1400 audit(2000000408.015:7898): avc: denied { setopt } for pid=16475 comm="syz.2.3395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 283.111249][ T40] audit: type=1400 audit(2000000408.137:7899): avc: denied { read } for pid=16484 comm="syz.2.3397" dev="nsfs" ino=4026533623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 283.237985][T16490] FAULT_INJECTION: forcing a failure. [ 283.237985][T16490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.242608][T16490] CPU: 0 UID: 0 PID: 16490 Comm: syz.2.3398 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.242637][T16490] Tainted: [L]=SOFTLOCKUP [ 283.242641][T16490] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 283.242647][T16490] Call Trace: [ 283.242651][T16490] [ 283.242656][T16490] dump_stack_lvl+0x16c/0x1f0 [ 283.242673][T16490] should_fail_ex+0x512/0x640 [ 283.242691][T16490] _copy_from_user+0x2e/0xd0 [ 283.242707][T16490] copy_msghdr_from_user+0x98/0x160 [ 283.242718][T16490] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 283.242735][T16490] ___sys_sendmsg+0xfe/0x1d0 [ 283.242746][T16490] ? __pfx____sys_sendmsg+0x10/0x10 [ 283.242801][T16490] __sys_sendmsg+0x16d/0x220 [ 283.242814][T16490] ? __pfx___sys_sendmsg+0x10/0x10 [ 283.242840][T16490] do_syscall_64+0xcd/0xf80 [ 283.242859][T16490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.242872][T16490] RIP: 0033:0x7fb93738f7c9 [ 283.242884][T16490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.242899][T16490] RSP: 002b:00007fb93819c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.242911][T16490] RAX: ffffffffffffffda RBX: 00007fb9375e6090 RCX: 00007fb93738f7c9 [ 283.242918][T16490] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 283.242924][T16490] RBP: 00007fb93819c090 R08: 0000000000000000 R09: 0000000000000000 [ 283.242930][T16490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.242936][T16490] R13: 00007fb9375e6128 R14: 00007fb9375e6090 R15: 00007ffdc0198b38 [ 283.242950][T16490] [ 283.975993][T16493] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 284.173511][T16504] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 284.188667][ T6465] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 284.188678][ T5946] Bluetooth: hci0: command 0x0c1a tx timeout [ 284.190637][ T6465] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 284.338364][ T61] usb 11-1: new full-speed USB device number 10 using dummy_hcd [ 284.500829][ T61] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.505037][ T61] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 284.508587][ T61] usb 11-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 284.512397][ T61] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.514251][T16520] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3407'. [ 284.522646][ T61] usb 11-1: config 0 descriptor?? [ 284.530617][ T61] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 284.534199][ T61] dvb-usb: bulk message failed: -22 (3/0) [ 284.538397][ T61] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 284.543528][ T61] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 284.546405][ T61] usb 11-1: media controller created [ 284.549491][ T61] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 284.559725][ T61] dvb-usb: bulk message failed: -22 (6/0) [ 284.561668][ T61] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 284.570548][ T61] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb11/11-1/input/input70 [ 284.577620][ T61] dvb-usb: schedule remote query interval to 150 msecs. [ 284.580492][ T61] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 284.717821][T16525] dlm: no locking on control device [ 284.745961][ T61] dvb-usb: bulk message failed: -22 (1/0) [ 284.749110][ T61] dvb-usb: error while querying for an remote control event. [ 284.915856][ T61] dvb-usb: bulk message failed: -22 (1/0) [ 284.918197][ T61] dvb-usb: error while querying for an remote control event. [ 285.086943][ T61] dvb-usb: bulk message failed: -22 (1/0) [ 285.089856][ T61] dvb-usb: error while querying for an remote control event. [ 285.117306][T16531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3412'. [ 285.258169][ T61] dvb-usb: bulk message failed: -22 (1/0) [ 285.260562][ T61] dvb-usb: error while querying for an remote control event. [ 285.271106][T16539] ipt_REJECT: TCP_RESET invalid for non-tcp [ 285.279263][T16539] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 285.286338][T16539] overlayfs: failed lookup in lower (newroot/219, name='file0', err=-40): overlapping layers [ 285.286893][T16541] vxlan0: entered promiscuous mode [ 285.291848][T16541] vxlan0: entered allmulticast mode [ 285.294236][ T6044] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.300461][ T6044] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.306538][ T6044] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.310056][ T6044] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.327897][T16543] usb usb8: usbfs: process 16543 (syz.2.3417) did not claim interface 0 before use [ 285.430252][ T61] dvb-usb: bulk message failed: -22 (1/0) [ 285.432290][ T61] dvb-usb: error while querying for an remote control event. [ 285.452329][T16558] SELinux: syz.2.3420 (16558) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 285.545878][T16561] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3421'. [ 285.597024][T16561] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3421'. [ 285.601081][ T61] dvb-usb: bulk message failed: -22 (1/0) [ 285.603587][ T61] dvb-usb: error while querying for an remote control event. [ 285.608506][T16561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16561 comm=syz.4.3421 [ 285.722555][T16566] usb usb4: usbfs: process 16566 (syz.4.3422) did not claim interface 0 before use [ 285.771699][ T61] dvb-usb: bulk message failed: -22 (1/0) [ 285.773528][ T61] dvb-usb: error while querying for an remote control event. [ 285.858518][T16575] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3425'. [ 285.863810][T16575] autofs: Unknown parameter './file0' [ 285.890904][T16575] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3425'. [ 285.894370][T16575] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 285.942553][ T61] dvb-usb: bulk message failed: -22 (1/0) [ 285.944889][ T61] dvb-usb: error while querying for an remote control event. [ 286.113750][ T61] dvb-usb: bulk message failed: -22 (1/0) [ 286.116140][ T61] dvb-usb: error while querying for an remote control event. [ 286.284826][ T61] dvb-usb: bulk message failed: -22 (1/0) [ 286.287308][ T61] dvb-usb: error while querying for an remote control event. [ 286.456883][ T61] dvb-usb: bulk message failed: -22 (1/0) [ 286.459355][ T61] dvb-usb: error while querying for an remote control event. [ 286.498829][ T65] Bluetooth: hci3: command 0x1003 tx timeout [ 286.500269][ T5946] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 286.539830][T16581] openvswitch: netlink: Key type 761 is out of range max 32 [ 286.627183][ T6020] dvb-usb: bulk message failed: -22 (1/0) [ 286.629683][ T6020] dvb-usb: error while querying for an remote control event. [ 286.799165][ T6020] dvb-usb: bulk message failed: -22 (1/0) [ 286.801602][ T6020] dvb-usb: error while querying for an remote control event. [ 286.969689][T11085] dvb-usb: bulk message failed: -22 (1/0) [ 286.972160][T11085] dvb-usb: error while querying for an remote control event. [ 287.141378][ T6020] dvb-usb: bulk message failed: -22 (1/0) [ 287.144470][ T6020] dvb-usb: error while querying for an remote control event. [ 287.269768][ T6044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.273142][ T6044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.280309][ T29] usb 11-1: USB disconnect, device number 10 [ 287.312197][T16607] [U] ɍ 6YOm`"[.ݢdn [ 287.315527][T16607] [U] `ׂ o@*$Kt |&Aa [ 287.327366][T16608] [U] $m1 N2Eyx> ^Gg!%򀔽 [ 287.370608][ T29] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 287.672743][T16618] bridge2: entered promiscuous mode [ 287.674460][T16618] bridge2: entered allmulticast mode [ 287.678706][T16618] team0: Port device bridge2 added [ 287.953832][ T35] block nbd0: Possible stuck request ffff888028500000: control (read@0,4096B). Runtime 180 seconds [ 287.954097][ T6044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.956088][T16623] __nla_validate_parse: 1 callbacks suppressed [ 287.956102][T16623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3439'. [ 287.956115][T16623] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3439'. [ 287.971740][ T6044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.295743][ T40] kauditd_printk_skb: 193 callbacks suppressed [ 288.295760][ T40] audit: type=1400 audit(2000000412.971:8093): avc: denied { recv } for pid=5849 comm="syz-executor" saddr=127.0.0.1 src=43486 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 288.311768][ T40] audit: type=1400 audit(2000000412.980:8094): avc: denied { unmount } for pid=14455 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 288.324374][ T40] audit: type=1400 audit(2000000413.008:8095): avc: denied { read write } for pid=14455 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 288.335172][ T40] audit: type=1400 audit(2000000413.008:8096): avc: denied { open } for pid=14455 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 288.346079][ T40] audit: type=1400 audit(2000000413.008:8097): avc: denied { ioctl } for pid=14455 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 288.357665][ T40] audit: type=1400 audit(2000000413.017:8098): avc: denied { connect } for pid=16629 comm="syz.6.3440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 288.366630][ T40] audit: type=1400 audit(2000000413.017:8099): avc: denied { name_connect } for pid=16629 comm="syz.6.3440" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 288.376680][ T40] audit: type=1400 audit(2000000413.017:8100): avc: denied { allowed } for pid=16629 comm="syz.6.3440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 288.386290][ T40] audit: type=1400 audit(2000000413.027:8101): avc: denied { create } for pid=16629 comm="syz.6.3440" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 288.395908][ T40] audit: type=1400 audit(2000000413.027:8102): avc: denied { map } for pid=16629 comm="syz.6.3440" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=69164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 288.506624][ C1] sr 2:0:0:0: [sr0] tag#31 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 288.510088][ C1] sr 2:0:0:0: [sr0] tag#31 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 288.545854][T16638] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3443'. [ 288.571585][T16639] netlink: 'syz.1.3442': attribute type 3 has an invalid length. [ 289.582640][T16680] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3458'. [ 289.643439][ T5940] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 289.735385][T16685] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3459'. [ 289.741434][T16685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3459'. [ 289.814280][ T5940] usb 11-1: Using ep0 maxpacket: 16 [ 289.818966][ T5940] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 289.825844][ T5940] usb 11-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 289.829770][ T5940] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.833136][ T5940] usb 11-1: Product: syz [ 289.835061][ T5940] usb 11-1: Manufacturer: syz [ 289.836879][ T5940] usb 11-1: SerialNumber: syz [ 289.841243][ T5940] usb 11-1: config 0 descriptor?? [ 289.847611][ T5940] em28xx 11-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 289.851592][ T5940] em28xx 11-1:0.0: DVB interface 0 found: bulk [ 289.958256][T15050] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.961296][T15050] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.004100][T16693] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 290.490131][ T5940] em28xx 11-1:0.0: unknown em28xx chip ID (0) [ 290.907316][T16701] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3466'. [ 290.931647][ T5940] em28xx 11-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 290.935010][ T5940] em28xx 11-1:0.0: board has no eeprom [ 290.966384][T16701] sp0: Synchronizing with TNC [ 290.970687][T16701] sp0: Found TNC [ 290.976404][T16700] [U] ` [ 291.094425][T16709] Unknown options in mask b7f2 [ 291.159079][T16711] netlink: 'syz.2.3469': attribute type 1 has an invalid length. [ 291.173766][T16711] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3469'. [ 291.215302][ T5940] em28xx 11-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 291.217530][ T5940] em28xx 11-1:0.0: dvb set to bulk mode. [ 291.219445][ T61] em28xx 11-1:0.0: Binding DVB extension [ 291.228250][ T5940] usb 11-1: USB disconnect, device number 11 [ 291.230624][ T5940] em28xx 11-1:0.0: Disconnecting em28xx [ 291.249165][ T61] em28xx 11-1:0.0: Registering input extension [ 291.252465][ T5940] em28xx 11-1:0.0: Closing input extension [ 291.277655][ T5940] em28xx 11-1:0.0: Freeing device [ 291.283208][T16714] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3469'. [ 291.290924][T16714] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3469'. [ 291.336870][ T6020] IPVS: starting estimator thread 0... [ 291.439926][T16720] IPVS: using max 46 ests per chain, 110400 per kthread [ 291.472026][T16729] netlink: 'syz.1.3473': attribute type 10 has an invalid length. [ 291.474580][T16729] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 291.476893][T16729] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 291.479276][T16729] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 291.750986][ T5940] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 291.910770][ T5940] usb 6-1: Using ep0 maxpacket: 32 [ 291.914972][ T5940] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 291.919410][ T5940] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 291.924388][ T5940] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 291.929051][ T5940] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 291.937036][ T5940] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 291.940898][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.944362][ T5940] usb 6-1: Product: syz [ 291.946252][ T5940] usb 6-1: Manufacturer: syz [ 291.948237][ T5940] usb 6-1: SerialNumber: syz [ 291.959673][ C2] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 291.967956][ T5940] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input73 [ 292.170789][T16729] bridge0: port 3(team0) entered blocking state [ 292.173259][T16729] bridge0: port 3(team0) entered disabled state [ 292.175589][T16729] team0: entered allmulticast mode [ 292.177696][T16729] team_slave_0: entered allmulticast mode [ 292.179760][T16729] team_slave_1: entered allmulticast mode [ 292.183233][T16729] team0: entered promiscuous mode [ 292.184960][T16729] team_slave_0: entered promiscuous mode [ 292.186951][T16729] team_slave_1: entered promiscuous mode [ 292.209922][ T5940] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 292.212580][ T5940] (id 0x00) [ 292.263666][ T5940] rc_core: IR keymap rc-imon-pad not found [ 292.267160][ T5940] Registered IR keymap rc-empty [ 292.269420][ T5940] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 292.273672][ T5940] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 292.425110][ T5940] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 292.429977][ T5940] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input74 [ 292.446873][ T5940] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:38> initialized [ 292.655427][T16758] binder: 16756:16758 ioctl c0306201 2000000003c0 returned -14 [ 292.681920][ T6020] usb 6-1: USB disconnect, device number 38 [ 292.682770][T16729] imon:send_packet: packet tx failed (-71) [ 292.689875][T16760] qnx4: no qnx4 filesystem (no root dir). [ 292.702212][T16729] imon:vfd_write: send packet #0 failed [ 292.755718][T15041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.094010][T16777] netlink: 'syz.6.3486': attribute type 1 has an invalid length. [ 293.441030][ T218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.535122][T16787] __nla_validate_parse: 5 callbacks suppressed [ 293.535132][T16787] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3490'. [ 293.583177][T16791] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 293.591485][T16791] binder: 16790:16791 ioctl c02064b9 2000000002c0 returned -22 [ 293.594983][T16791] binder: 16790:16791 ioctl c01064c8 200000000340 returned -22 [ 293.597471][T16793] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 293.609226][T16791] binder: 16790:16791 ioctl c0306201 2000000004c0 returned -14 [ 293.614181][T16791] binder: 16790:16791 ioctl c0306201 2000000001c0 returned -14 [ 293.617706][T16791] binder: 16790:16791 ioctl c0306201 200000000180 returned -14 [ 293.621398][T16791] binder: 16790:16791 ioctl c0306201 200000004a40 returned -14 [ 293.654758][ T40] kauditd_printk_skb: 306 callbacks suppressed [ 293.654769][ T40] audit: type=1400 audit(2000000417.992:8409): avc: denied { create } for pid=16794 comm="syz.1.3494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 293.664168][ T40] audit: type=1400 audit(2000000417.992:8410): avc: denied { ioctl } for pid=16794 comm="syz.1.3494" path="socket:[70136]" dev="sockfs" ino=70136 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 293.694777][ T40] audit: type=1400 audit(2000000418.020:8411): avc: denied { read write } for pid=16796 comm="syz.1.3495" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 293.698295][T16797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.702890][ T40] audit: type=1400 audit(2000000418.020:8412): avc: denied { open } for pid=16796 comm="syz.1.3495" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 293.705861][T16797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.713362][ T40] audit: type=1400 audit(2000000418.020:8413): avc: denied { ioctl } for pid=16796 comm="syz.1.3495" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 293.781855][ T40] audit: type=1400 audit(2000000418.104:8414): avc: denied { read write } for pid=16800 comm="syz.2.3496" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 293.783723][T16801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.792200][ T40] audit: type=1400 audit(2000000418.104:8415): avc: denied { open } for pid=16800 comm="syz.2.3496" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 293.836340][ T40] audit: type=1400 audit(2000000418.160:8416): avc: denied { create } for pid=16802 comm="syz.2.3497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 293.838124][T16803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3497'. [ 293.842736][ T40] audit: type=1400 audit(2000000418.160:8417): avc: denied { write } for pid=16802 comm="syz.2.3497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 293.851756][ T40] audit: type=1400 audit(2000000418.160:8418): avc: denied { module_request } for pid=16802 comm="syz.2.3497" kmod="rdma-client-umad" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 293.953750][ T6854] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 294.063663][T16813] program syz.6.3501 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 294.071113][T16813] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3501'. [ 294.078660][T16815] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 294.085086][T16815] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 294.108687][T16815] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 294.113389][T16815] overlayfs: failed to look up (tracing) for ino (-66) [ 294.116907][T15061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.119943][ T218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.137955][ T6854] usb 6-1: unable to get BOS descriptor or descriptor too short [ 294.143002][ T6854] usb 6-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.147446][ T6854] usb 6-1: config 1 interface 0 has no altsetting 0 [ 294.152040][ T6854] usb 6-1: string descriptor 0 read error: -22 [ 294.154030][ T6854] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 294.164314][ T6854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.313564][ T5946] block nbd4: Receive control failed (result -32) [ 294.314375][T16782] block nbd4: shutting down sockets [ 294.372188][T16827] bond0: (slave bond_slave_0): Releasing backup interface [ 294.390729][ T6854] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 294.398619][ T6854] usb 6-1: USB disconnect, device number 39 [ 294.677487][T16838] sp0: Synchronizing with TNC [ 294.685271][T16838] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3509'. [ 294.692199][T16837] [U] [ 294.965935][T16849] overlayfs: failed to resolve './file1': -2 [ 295.173273][ T6854] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 295.207434][T16861] team0: Device gtp0 is up. Set it down before adding it as a team port [ 295.809305][T16879] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3522'. [ 295.813536][T16879] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3522'. [ 296.170838][T16885] x_tables: duplicate underflow at hook 1 [ 296.187803][T16891] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3526'. [ 296.204115][T16890] kvm: kvm [16887]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000030) = 0x6 [ 296.247661][T16896] netlink: 396 bytes leftover after parsing attributes in process `syz.2.3525'. [ 296.254693][T16892] x_tables: duplicate underflow at hook 2 [ 296.257313][T16891] x_tables: duplicate underflow at hook 2 [ 296.374634][T16905] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3530'. [ 296.382906][T16905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=16905 comm=syz.1.3530 [ 296.434493][T16912] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3532'. [ 296.437733][T16912] netlink: 'syz.6.3532': attribute type 18 has an invalid length. [ 296.575774][T16921] fuse: Invalid rootmode [ 297.345572][T16954] syzkaller0: entered promiscuous mode [ 297.347292][T16954] syzkaller0: entered allmulticast mode [ 297.771635][ T5943] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 297.785866][T16977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16977 comm=syz.4.3552 [ 297.790961][T16976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16976 comm=syz.4.3552 [ 297.859510][T16981] bridge0: entered promiscuous mode [ 297.934718][ T5943] usb 11-1: config index 0 descriptor too short (expected 45, got 36) [ 297.937692][ T5943] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 297.941366][ T5943] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 297.948883][ T5943] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 297.952729][ T5943] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 297.965235][ T5943] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 297.968018][ T5943] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.972400][ T5943] usb 11-1: config 0 descriptor?? [ 297.977598][T16964] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 297.985781][T16991] program syz.4.3557 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.018205][T16997] [syz.4.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 298.192717][T17013] netlink: 'syz.4.3562': attribute type 1 has an invalid length. [ 298.216727][T17013] 8021q: adding VLAN 0 to HW filter on device bond1 [ 298.413550][ T5943] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 298.423222][ T5943] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 298.445689][ T5343] udevd[5343]: worker [15254] terminated by signal 33 (Unknown signal 33) [ 298.448571][ T5343] udevd[5343]: worker [15254] failed while handling '/devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:047F:FFFF.0008/hidraw/hidraw1' [ 298.648450][T17024] vxcan1: entered allmulticast mode [ 298.652221][T17022] [U] ^H [ 298.719443][T17034] bridge_slave_0: left allmulticast mode [ 298.721977][T17034] bridge_slave_0: left promiscuous mode [ 298.726936][T17034] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.747144][T17034] bridge_slave_1: left allmulticast mode [ 298.751451][T17034] bridge_slave_1: left promiscuous mode [ 298.752652][ T5943] usb 11-1: USB disconnect, device number 12 [ 298.753942][T17034] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.769628][T17036] netlink: 'syz.2.3568': attribute type 10 has an invalid length. [ 298.780742][T17034] bond0: (slave bond_slave_0): Releasing backup interface [ 298.820145][T17034] bond_slave_0: left promiscuous mode [ 298.826933][T17034] bond0: (slave bond_slave_1): Releasing backup interface [ 298.895760][T17034] bond_slave_1: left promiscuous mode [ 298.904082][T17034] team0: Port device team_slave_0 removed [ 298.912471][ T6044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.920329][T17034] team0: Port device team_slave_1 removed [ 298.923489][T17034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.927290][T17034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.932034][T17034] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 298.942017][T17036] bond0: (slave wlan1): Opening slave failed [ 299.154580][ T40] kauditd_printk_skb: 262 callbacks suppressed [ 299.154595][ T40] audit: type=1400 audit(2000000423.134:8681): avc: denied { read write } for pid=13162 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 299.166369][ T40] audit: type=1400 audit(2000000423.134:8682): avc: denied { open } for pid=13162 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 299.177300][ T40] audit: type=1400 audit(2000000423.134:8683): avc: denied { ioctl } for pid=13162 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 299.188191][ T40] audit: type=1400 audit(2000000423.153:8684): avc: denied { wake_alarm } for pid=17039 comm="syz.4.3570" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 299.197028][ T40] audit: type=1400 audit(2000000423.162:8685): avc: denied { write } for pid=17043 comm="syz.1.3571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 299.206129][ T40] audit: type=1400 audit(2000000423.162:8686): avc: denied { read } for pid=17043 comm="syz.1.3571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 299.251327][ T40] audit: type=1400 audit(2000000423.218:8687): avc: denied { mounton } for pid=17043 comm="syz.1.3571" path="/184" dev="tmpfs" ino=985 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 299.253283][T17046] 9pnet_fd: p9_fd_create_tcp (17046): problem connecting socket to 127.0.0.1 [ 299.262737][ T6020] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 299.389969][ T40] audit: type=1400 audit(2000000423.349:8688): avc: denied { perfmon } for pid=17047 comm="syz.6.3572" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 299.399032][ T40] audit: type=1400 audit(2000000423.349:8689): avc: denied { prog_run } for pid=17047 comm="syz.6.3572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 299.405972][ T40] audit: type=1400 audit(2000000423.358:8690): avc: denied { name_bind } for pid=17047 comm="syz.6.3572" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 299.451188][ T6020] usb 7-1: Using ep0 maxpacket: 16 [ 299.454160][ T6020] usb 7-1: too many configurations: 123, using maximum allowed: 8 [ 299.458720][ T6020] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.464825][ T6020] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.470126][ T6020] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.475759][ T6020] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.481071][ T6020] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.489140][ T6020] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.494858][ T6020] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.500389][ T6020] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.506692][ T6020] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 299.510519][ T6020] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 299.513916][ T6020] usb 7-1: SerialNumber: syz [ 299.515245][T15055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.519448][ T6020] usb 7-1: config 0 descriptor?? [ 299.529954][ T6020] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input78 [ 299.534301][T17060] program syz.4.3575 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 299.537480][T17060] ata1.00: invalid command format 0 [ 299.600840][T15050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.729348][T17062] netlink: 'syz.4.3576': attribute type 10 has an invalid length. [ 299.733707][T17062] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.737073][T17062] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.758412][T17038] input: syz1 as /devices/virtual/input/input79 [ 299.776614][ T5328] bcm5974 7-1:0.0: could not read from device [ 299.793261][T17064] __nla_validate_parse: 69 callbacks suppressed [ 299.793272][T17064] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3577'. [ 299.805729][ T6020] usb 7-1: USB disconnect, device number 40 [ 299.860584][T17064] IPVS: Scheduler module ip_vs_sip not found [ 300.186706][T17082] FAULT_INJECTION: forcing a failure. [ 300.186706][T17082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.191710][T17082] CPU: 3 UID: 0 PID: 17082 Comm: syz.4.3581 Tainted: G L syzkaller #0 PREEMPT(full) [ 300.191735][T17082] Tainted: [L]=SOFTLOCKUP [ 300.191741][T17082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 300.191751][T17082] Call Trace: [ 300.191757][T17082] [ 300.191764][T17082] dump_stack_lvl+0x16c/0x1f0 [ 300.191810][T17082] should_fail_ex+0x512/0x640 [ 300.191844][T17082] _copy_to_user+0x32/0xd0 [ 300.191871][T17082] simple_read_from_buffer+0xcb/0x170 [ 300.191896][T17082] proc_fail_nth_read+0x197/0x240 [ 300.191916][T17082] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 300.191936][T17082] ? rw_verify_area+0xcf/0x6c0 [ 300.191955][T17082] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 300.191974][T17082] vfs_read+0x1e4/0xcf0 [ 300.191995][T17082] ? __pfx___mutex_lock+0x10/0x10 [ 300.192021][T17082] ? __pfx_vfs_read+0x10/0x10 [ 300.192049][T17082] ? __fget_files+0x20e/0x3c0 [ 300.192082][T17082] ksys_read+0x12a/0x250 [ 300.192102][T17082] ? __pfx_ksys_read+0x10/0x10 [ 300.192131][T17082] do_syscall_64+0xcd/0xf80 [ 300.192155][T17082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.192173][T17082] RIP: 0033:0x7f7e94d8e1dc [ 300.192187][T17082] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 300.192204][T17082] RSP: 002b:00007f7e95b67030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 300.192221][T17082] RAX: ffffffffffffffda RBX: 00007f7e94fe6090 RCX: 00007f7e94d8e1dc [ 300.192232][T17082] RDX: 000000000000000f RSI: 00007f7e95b670a0 RDI: 0000000000000004 [ 300.192242][T17082] RBP: 00007f7e95b67090 R08: 0000000000000000 R09: 0000000000000000 [ 300.192253][T17082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.192263][T17082] R13: 00007f7e94fe6128 R14: 00007f7e94fe6090 R15: 00007fff244ca4c8 [ 300.192289][T17082] [ 300.283383][T17085] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3583'. [ 300.286228][T15051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.372049][T17095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3587'. [ 300.426903][T17099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20496 sclass=netlink_route_socket pid=17099 comm=syz.1.3587 [ 300.431409][T17099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=17099 comm=syz.1.3587 [ 300.436154][T17099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=17099 comm=syz.1.3587 [ 300.488885][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 300.557166][T17111] tipc: Failed to obtain node identity [ 300.559259][T17111] tipc: Enabling of bearer rejected, failed to enable media [ 301.543561][T17124] CIFS mount error: No usable UNC path provided in device string! [ 301.543561][T17124] [ 301.543703][T17126] CIFS mount error: No usable UNC path provided in device string! [ 301.543703][T17126] [ 301.547764][T17124] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 301.553730][T17126] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 301.734708][T17143] ------------[ cut here ]------------ [ 301.736937][T17143] WARNING: mm/page_alloc.c:5186 at __alloc_frozen_pages_noprof+0x309/0x2430, CPU#3: syz.2.3601/17143 [ 301.742556][T17143] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 301.744222][T17143] CPU: 3 UID: 0 PID: 17143 Comm: syz.2.3601 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.748495][T17143] Tainted: [L]=SOFTLOCKUP [ 301.750367][T17143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 301.754193][T17143] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2430 [ 301.756377][T17143] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 01 40 60 09 83 fe 0a 0f 86 0c fe ff ff 80 3d 49 4a 56 0e 00 75 0b c6 05 40 4a 56 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 301.763087][T17143] RSP: 0018:ffffc90004f5f7a8 EFLAGS: 00010246 [ 301.765474][T17143] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 301.768572][T17143] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000040cc0 [ 301.771937][T17143] RBP: 0000000000000014 R08: 0000000000000005 R09: 0000000000000009 [ 301.775173][T17143] R10: 0000000000000014 R11: ffff88804f972ff0 R12: 0000000000040cc0 [ 301.778493][T17143] R13: 1ffff920009ebf0b R14: ffffffff9ac42ac4 R15: 0000000000000014 [ 301.781855][T17143] FS: 00007fb9381bd6c0(0000) GS:ffff8880d6bf5000(0000) knlGS:0000000000000000 [ 301.785694][T17143] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.788569][T17143] CR2: 0000001b2f663fff CR3: 000000004be97000 CR4: 0000000000352ef0 [ 301.791749][T17143] Call Trace: [ 301.793285][T17143] [ 301.794526][T17143] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 301.796676][T17143] ? is_bpf_text_address+0x94/0x1a0 [ 301.798331][T17143] ? kernel_text_address+0x8d/0x100 [ 301.800043][T17143] ? __kernel_text_address+0xd/0x40 [ 301.802382][T17143] ? unwind_get_return_address+0x59/0xa0 [ 301.804304][T17143] ? arch_stack_walk+0xa6/0x100 [ 301.805986][T17143] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 301.808348][T17143] ? stack_depot_save_flags+0x29/0x9b0 [ 301.810325][T17143] ? __lock_acquire+0x436/0x2890 [ 301.812349][T17143] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 301.814894][T17143] ? policy_nodemask+0xea/0x4e0 [ 301.816930][T17143] alloc_pages_mpol+0x1fb/0x550 [ 301.818965][T17143] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 301.821383][T17143] ___kmalloc_large_node+0x10c/0x150 [ 301.823641][T17143] ? avc_has_extended_perms+0x33a/0x1090 [ 301.826144][T17143] __kmalloc_large_node_noprof+0x1c/0x70 [ 301.828469][T17143] __kmalloc_noprof.cold+0xc/0x62 [ 301.830565][T17143] ? drm_syncobj_array_find+0x35/0x3c0 [ 301.833028][T17143] ? drm_syncobj_array_find+0x35/0x3c0 [ 301.835372][T17143] drm_syncobj_array_find+0x35/0x3c0 [ 301.837812][T17143] ? lockdep_hardirqs_on+0x7c/0x110 [ 301.840011][T17143] drm_syncobj_timeline_signal_ioctl+0x226/0x870 [ 301.842696][T17143] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 301.845505][T17143] ? drm_dev_exit+0x41/0x60 [ 301.847505][T17143] drm_ioctl_kernel+0x1f4/0x3e0 [ 301.849535][T17143] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 301.852342][T17143] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 301.854571][T17143] drm_ioctl+0x5c9/0xc30 [ 301.856396][T17143] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 301.859351][T17143] ? __pfx_drm_ioctl+0x10/0x10 [ 301.861348][T17143] ? selinux_file_ioctl+0x180/0x270 [ 301.863541][T17143] ? selinux_file_ioctl+0xb4/0x270 [ 301.865667][T17143] ? __pfx_drm_ioctl+0x10/0x10 [ 301.867801][T17143] __x64_sys_ioctl+0x18e/0x210 [ 301.869805][T17143] do_syscall_64+0xcd/0xf80 [ 301.871716][T17143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.874178][T17143] RIP: 0033:0x7fb93738f7c9 [ 301.876173][T17143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.884262][T17143] RSP: 002b:00007fb9381bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 301.887758][T17143] RAX: ffffffffffffffda RBX: 00007fb9375e5fa0 RCX: 00007fb93738f7c9 [ 301.891118][T17143] RDX: 0000200000000200 RSI: 00000000c01864cd RDI: 0000000000000003 [ 301.894382][T17143] RBP: 00007fb937413f91 R08: 0000000000000000 R09: 0000000000000000 [ 301.897643][T17143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.900989][T17143] R13: 00007fb9375e6038 R14: 00007fb9375e5fa0 R15: 00007ffdc0198b38 [ 301.904290][T17143] [ 301.905585][T17143] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 301.908589][T17143] CPU: 3 UID: 0 PID: 17143 Comm: syz.2.3601 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.913062][T17143] Tainted: [L]=SOFTLOCKUP [ 301.914854][T17143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 301.919214][T17143] Call Trace: [ 301.920631][T17143] [ 301.921884][T17143] dump_stack_lvl+0x3d/0x1f0 [ 301.923850][T17143] vpanic+0x640/0x6f0 [ 301.925537][T17143] ? __alloc_frozen_pages_noprof+0x309/0x2430 [ 301.928064][T17143] panic+0xca/0xd0 [ 301.929655][T17143] ? __pfx_panic+0x10/0x10 [ 301.931520][T17143] check_panic_on_warn+0xab/0xb0 [ 301.933577][T17143] __warn+0x108/0x3c0 [ 301.935249][T17143] __report_bug+0x2a0/0x520 [ 301.937119][T17143] ? __alloc_frozen_pages_noprof+0x309/0x2430 [ 301.939632][T17143] ? __pfx___report_bug+0x10/0x10 [ 301.941729][T17143] ? __lock_acquire+0x436/0x2890 [ 301.943810][T17143] ? __alloc_frozen_pages_noprof+0x309/0x2430 [ 301.946305][T17143] report_bug+0xb2/0x220 [ 301.948100][T17143] ? __alloc_frozen_pages_noprof+0x309/0x2430 [ 301.950550][T17143] handle_bug+0x127/0x260 [ 301.952317][T17143] exc_invalid_op+0x17/0x50 [ 301.954167][T17143] asm_exc_invalid_op+0x1a/0x20 [ 301.956159][T17143] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2430 [ 301.958848][T17143] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 01 40 60 09 83 fe 0a 0f 86 0c fe ff ff 80 3d 49 4a 56 0e 00 75 0b c6 05 40 4a 56 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 301.965747][T17143] RSP: 0018:ffffc90004f5f7a8 EFLAGS: 00010246 [ 301.968132][T17143] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 301.971356][T17143] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000040cc0 [ 301.974619][T17143] RBP: 0000000000000014 R08: 0000000000000005 R09: 0000000000000009 [ 301.977780][T17143] R10: 0000000000000014 R11: ffff88804f972ff0 R12: 0000000000040cc0 [ 301.980957][T17143] R13: 1ffff920009ebf0b R14: ffffffff9ac42ac4 R15: 0000000000000014 [ 301.984199][T17143] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 301.986815][T17143] ? is_bpf_text_address+0x94/0x1a0 [ 301.989019][T17143] ? kernel_text_address+0x8d/0x100 [ 301.991215][T17143] ? __kernel_text_address+0xd/0x40 [ 301.992908][T17143] ? unwind_get_return_address+0x59/0xa0 [ 301.994799][T17143] ? arch_stack_walk+0xa6/0x100 [ 301.996442][T17143] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 301.998483][T17143] ? stack_depot_save_flags+0x29/0x9b0 [ 302.000238][T17143] ? __lock_acquire+0x436/0x2890 [ 302.001857][T17143] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 302.004033][T17143] ? policy_nodemask+0xea/0x4e0 [ 302.006003][T17143] alloc_pages_mpol+0x1fb/0x550 [ 302.007994][T17143] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 302.010165][T17143] ___kmalloc_large_node+0x10c/0x150 [ 302.012355][T17143] ? avc_has_extended_perms+0x33a/0x1090 [ 302.014665][T17143] __kmalloc_large_node_noprof+0x1c/0x70 [ 302.016965][T17143] __kmalloc_noprof.cold+0xc/0x62 [ 302.019047][T17143] ? drm_syncobj_array_find+0x35/0x3c0 [ 302.021254][T17143] ? drm_syncobj_array_find+0x35/0x3c0 [ 302.023531][T17143] drm_syncobj_array_find+0x35/0x3c0 [ 302.025678][T17143] ? lockdep_hardirqs_on+0x7c/0x110 [ 302.027789][T17143] drm_syncobj_timeline_signal_ioctl+0x226/0x870 [ 302.030385][T17143] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 302.033151][T17143] ? drm_dev_exit+0x41/0x60 [ 302.035059][T17143] drm_ioctl_kernel+0x1f4/0x3e0 [ 302.037064][T17143] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 302.039848][T17143] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 302.042053][T17143] drm_ioctl+0x5c9/0xc30 [ 302.043810][T17143] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 302.046620][T17143] ? __pfx_drm_ioctl+0x10/0x10 [ 302.048604][T17143] ? selinux_file_ioctl+0x180/0x270 [ 302.050771][T17143] ? selinux_file_ioctl+0xb4/0x270 [ 302.052852][T17143] ? __pfx_drm_ioctl+0x10/0x10 [ 302.054856][T17143] __x64_sys_ioctl+0x18e/0x210 [ 302.056870][T17143] do_syscall_64+0xcd/0xf80 [ 302.058769][T17143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.061190][T17143] RIP: 0033:0x7fb93738f7c9 [ 302.063096][T17143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.070918][T17143] RSP: 002b:00007fb9381bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.074300][T17143] RAX: ffffffffffffffda RBX: 00007fb9375e5fa0 RCX: 00007fb93738f7c9 [ 302.077601][T17143] RDX: 0000200000000200 RSI: 00000000c01864cd RDI: 0000000000000003 [ 302.080915][T17143] RBP: 00007fb937413f91 R08: 0000000000000000 R09: 0000000000000000 [ 302.084215][T17143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.087234][T17143] R13: 00007fb9375e6038 R14: 00007fb9375e5fa0 R15: 00007ffdc0198b38 [ 302.089871][T17143] [ 302.091578][T17143] Kernel Offset: disabled [ 302.092969][T17143] Rebooting in 86400 seconds..