last executing test programs: 2m9.667471139s ago: executing program 3 (id=215): r0 = gettid() process_vm_writev(r0, &(0x7f0000000300)=[{&(0x7f0000000940)=""/248, 0xf8}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/227, 0xe3}], 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000000c0)={0x29, 0x1, 0x1, "00000000bf2b000005000104000000e4f4ffff0000ea00000d00", 0x32344d59}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000004c0)={'bridge0\x00', &(0x7f00000006c0)=@ethtool_rx_ntuple={0x35, {0x3, @usr_ip4_spec={@loopback, @multicast1, 0x1, 0x8, 0x1, 0x6}, @sctp_ip4_spec={@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x15}, 0x4e24, 0x4e23, 0xb}, 0x9, 0x9, 0xffff, 0x3, 0xffffffffffffffff}}}) getpid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0xea22, 0x200, {0xffffffffffffffff}, {0xee00}, 0x80000000, 0x80000000}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000002000/0x4000)=nil) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000000440)={0x808000, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000240), {0x3}, &(0x7f0000000a40)=""/4096, 0x1000, &(0x7f00000005c0)=""/234, &(0x7f00000002c0), 0x0, {r6}}, 0x58) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r7) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r8 = creat(&(0x7f0000000300)='./file0\x00', 0x1df) close(r8) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) 2m9.666513807s ago: executing program 3 (id=217): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x3c, &(0x7f00000001c0)={0x2, {{0xa, 0x4e20, 0x4, @mcast1, 0x39}}, {{0xa, 0x4e22, 0x6, @mcast2, 0x4}}}, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x202}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0xd}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x3c, &(0x7f00000001c0)={0x2, {{0xa, 0x4e20, 0x4, @mcast1, 0x39}}, {{0xa, 0x4e22, 0x6, @mcast2, 0x4}}}, 0x108) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x202}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0xd}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) 2m9.390966071s ago: executing program 3 (id=221): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) (async) mount$afs(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x1, &(0x7f0000000b80)={[{}]}) close(r0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0x2, 0x4) (async) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f0000000280)=""/120, 0x78}, {&(0x7f0000000140)=""/18, 0x12}], 0x3, 0xe, 0xfffffffd) listen(r0, 0x9) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="23cd9ae4f31abfe69d0fbfb4996a"]) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0xf000, 0x100, 0x1ff, 0x6, 0x0, [{0x4, 0xbd, 0x5, '\x00', 0x81}, {0x3, 0x71, 0x5, '\x00', 0xc7}, {0x95, 0xc4, 0x6, '\x00', 0x68}, {0x9, 0xf9, 0x4, '\x00', 0x72}, {0x9, 0xfc, 0x10, '\x00', 0x81}, {0xd, 0x8, 0x3, '\x00', 0x8}, {0x9, 0x20, 0x10, '\x00', 0xed}, {0x0, 0x4, 0x5, '\x00', 0xa1}, {0x3, 0x2, 0x7, '\x00', 0x8}, {0x8, 0xe1, 0x7f, '\x00', 0x8}, {0x1, 0xff, 0x2, '\x00', 0x2}, {0xfa, 0x6, 0x10, '\x00', 0xca}, {0x6, 0xe, 0xc, '\x00', 0x7}, {0x3, 0x5, 0x1, '\x00', 0xf0}, {0x7, 0x7, 0xfa, '\x00', 0x9}, {0xff, 0x8, 0x5, '\x00', 0x8f}, {0x80, 0x9, 0x2, '\x00', 0x8}, {0x6, 0x7, 0x8, '\x00', 0x1}, {0x8, 0x3, 0x9, '\x00', 0x7}, {0x5, 0xd, 0xa2, '\x00', 0x3}, {0x1, 0x0, 0x8, '\x00', 0x2}, {0x2, 0x0, 0x7, '\x00', 0x10}, {0x10, 0xf7, 0x8, '\x00', 0x7f}, {0x5, 0x80, 0x8d, '\x00', 0x8}]}}) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a090400000000110b464e2597683000000000020000000900010073797a30000000000900020073797a3200000000200004800c0001800700010063740000100001800b00010072656a6563740000140000001100010000000000"], 0x74}}, 0x0) 2m9.310953967s ago: executing program 3 (id=222): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') syz_open_dev$loop(&(0x7f0000000100), 0xffffffffffffffff, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x501a, 0x3, 0x3}, 0x18, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xf0cb2f4a0c2cfc5d, 0x0) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000001200)={0x50, 0x0, r2, {0x7, 0x2b, 0x3, 0x200c0400, 0x0, 0x0, 0x0, 0xe382, 0x0, 0x0, 0x8}}, 0x50) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302ca67365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r4, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0xfffffffffffffffe, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x2000, 0x0, r5, 0x0, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r3, r5) read$FUSE(r4, &(0x7f0000003080)={0x2020, 0x0, 0x0}, 0x2020) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000480)={0x10, 0xffffffffffffffda, r6}, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) close(r7) r8 = socket$unix(0x1, 0x2, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r9, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) read$snapshot(r9, &(0x7f0000000400)=""/249, 0xf9) landlock_restrict_self(r0, 0x0) bind$unix(r8, &(0x7f0000003000)=@file={0x1}, 0x6e) connect$unix(r7, &(0x7f0000000640)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x200, 0x70bf2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x5}, {0x9, 0xb}, {0x5, 0xd}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0xc0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 2m8.465486215s ago: executing program 3 (id=231): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xf, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x2, 0xfffffffd, 0x6}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffd, 0x3, 0x8, 0x80}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r9 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getresuid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) fstat(r0, &(0x7f0000000340)) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r9, 0x1, 0x53, &(0x7f0000000580)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000005c0)=0x28) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r11, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_cpu$x86(r11, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x3, 0x0, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r12}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 2m8.161199611s ago: executing program 3 (id=232): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) r2 = accept4(r0, &(0x7f0000000100)=@ax25={{0x3, @netrom}, [@bcast, @default, @remote, @bcast, @default, @netrom, @rose, @null]}, &(0x7f0000000180)=0x80, 0x80000) connect$can_j1939(r2, &(0x7f0000000200)={0x1d, r1, 0x2, {0x1}, 0x1}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r1, {0x2}}}, 0x24}}, 0x0) 2m8.160408488s ago: executing program 32 (id=232): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) r2 = accept4(r0, &(0x7f0000000100)=@ax25={{0x3, @netrom}, [@bcast, @default, @remote, @bcast, @default, @netrom, @rose, @null]}, &(0x7f0000000180)=0x80, 0x80000) connect$can_j1939(r2, &(0x7f0000000200)={0x1d, r1, 0x2, {0x1}, 0x1}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r1, {0x2}}}, 0x24}}, 0x0) 1m52.030753921s ago: executing program 4 (id=506): socket$inet6(0xa, 0x2, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000580)={0x0}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0xffffffff, 0xfffffffd}) socket$inet(0x2, 0x1, 0x2) (async) r4 = socket$inet(0x2, 0x1, 0x2) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000140)="441f08d600270bee724ef54e91eeffbe1e68d5040d73161feeb0f24cb1", 0x1d) (async) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000140)="441f08d600270bee724ef54e91eeffbe1e68d5040d73161feeb0f24cb1", 0x1d) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000002040)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000003c0)={r3}) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000003c0)={r3}) bind$tipc(r1, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x2}}, 0x10) (async) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x2}}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x80) (async) mkdir(&(0x7f00000001c0)='./file0\x00', 0x80) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000080)='./file1\x00', 0x628) mount$overlay(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) mount$overlay(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x200000d, 0x1010, r7, 0x7855c000) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) r8 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x44080, 0x0) ioctl$DVD_AUTH(r8, 0x5390, &(0x7f00000000c0)=@lrpcs={0x1, 0x0, 0x5, 0xf9, 0xa9}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1, 0x1}, 0x10) 1m51.860766832s ago: executing program 4 (id=507): syz_emit_ethernet(0x9a, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e22"], 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa1e7e2a1260da08004e26008c006700000201907864010101640101028303e289032e44182df000000000000000090000003000000004000000064444b1c1ffffffff00000007ac1414aa00000009e000000200000009ac1414bb000001017f000001000000070000000000000005ac14143f00000001ac1414aa0000000900000e009078008100080000099f0001000000000002ab689b5cf6ac8b964172d444f8aae475583b696d4fb61fe5fd5f786384580ab612b01806d9eb964b681446e6520458b735349c6cd35f2adfb830a725c0a28c035600000000000000"], 0x0) 1m51.860317496s ago: executing program 4 (id=508): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000002c"], 0xfdef) r6 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000140)=[@request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f0000000080)) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0xd85fd000) r8 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000646000/0x2000)=nil, 0x2000, 0xb635773f07ebbeee, 0x12, r8, 0x0) mlock2(&(0x7f0000153000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r9, &(0x7f0000000000)='+\fER', 0x4) write$binfmt_misc(r9, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000400)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x9]}}) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x20000000, {0x2c}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x2c}}, 0x0) 1m51.720863376s ago: executing program 4 (id=509): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)=0xc) (async) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)=0xc) chdir(&(0x7f0000000080)='./file1\x00') mount$fuse(0x0, 0x0, 0x0, 0x4001, &(0x7f0000000180)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000600)='./file0\x00', 0xe8) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='securityfs\x00', 0x11, 0x0) (async) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='securityfs\x00', 0x11, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, 0x0}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m51.570781863s ago: executing program 4 (id=511): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@RTM_DELMDB={0x38, 0x55, 0x701, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x0, {@in6_addr=@loopback}}}]}, 0x38}}, 0x40080) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r2, 0x3b87, &(0x7f0000000040)={0x18, 0x1, 0x0, 0x0, 0x0, 0x6}) write$uinput_user_dev(r1, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}, 0x45c) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) r3 = dup(r1) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a3f3f00000f040b067c55a1bc000900b80006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e07000000", 0xd4}, {&(0x7f0000000100)="d8bcf4de", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x10000, 0x0, 0x0, 0x0, 0x8001], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]], '\x00', [{}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x80000001, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {}, {0x8000000, 0x8f96}], '\x00', 0x1000}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r3, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xfffff5ee, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x7, 0xfffffff9, 0xa, 0x2, 0x5, 0x0, 0x4, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x8000101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x9, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdaa, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x10, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8000008, 0x3, 0x2, 0x3a6, 0x27f8, 0xc0d, 0xfffffffd, 0x4, 0xc, 0xfffffffb], [0xa3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adeb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x10000, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x6, 0x5ef, 0x8000, 0xc, 0x2, 0x401, 0x1, 0x5, 0x8, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000080)={0x9f0000, 0x5, 0x100, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x390abf, 0xc11, '\x00', @p_u32=&(0x7f0000000000)=0x5}}) 1m51.220701264s ago: executing program 4 (id=513): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x40202, 0x0) write$FUSE_WRITE(r0, &(0x7f0000002500)={0x18, 0x0, 0x0, {0x4}}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) chdir(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r1, 0x24, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'pcl730\x00', [0xb013, 0x5, 0x0, 0x2, 0x4, 0x8f, 0x1007, 0x10, 0xc13, 0xffffffff, 0x200, 0x7, 0x10000009, 0x1, 0x5, 0x401, 0x8, 0x3, 0x9, 0x8e, 0x108, 0x3, 0x7, 0xa, 0x5, 0x2, 0xb0c4, 0xc, 0x8, 0x400002, 0x2]}) syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/image_size', 0x169a82, 0x100) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendfile(r3, 0xffffffffffffffff, 0x0, 0x30) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x6, 0x6, 0x13, 0xc, 0x93, 0x9, 0x5}, 0x9c) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) write$binfmt_aout(r6, 0x0, 0xffffffdb) r7 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) read(r7, &(0x7f00000002c0)=""/215, 0xd7) ioctl$VIDIOC_STREAMOFF(r7, 0x40045613, &(0x7f0000000000)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) 1m51.208157214s ago: executing program 33 (id=513): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x40202, 0x0) write$FUSE_WRITE(r0, &(0x7f0000002500)={0x18, 0x0, 0x0, {0x4}}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) chdir(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r1, 0x24, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'pcl730\x00', [0xb013, 0x5, 0x0, 0x2, 0x4, 0x8f, 0x1007, 0x10, 0xc13, 0xffffffff, 0x200, 0x7, 0x10000009, 0x1, 0x5, 0x401, 0x8, 0x3, 0x9, 0x8e, 0x108, 0x3, 0x7, 0xa, 0x5, 0x2, 0xb0c4, 0xc, 0x8, 0x400002, 0x2]}) syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/image_size', 0x169a82, 0x100) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendfile(r3, 0xffffffffffffffff, 0x0, 0x30) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x6, 0x6, 0x13, 0xc, 0x93, 0x9, 0x5}, 0x9c) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) write$binfmt_aout(r6, 0x0, 0xffffffdb) r7 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) read(r7, &(0x7f00000002c0)=""/215, 0xd7) ioctl$VIDIOC_STREAMOFF(r7, 0x40045613, &(0x7f0000000000)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) 1m35.950017293s ago: executing program 1 (id=724): openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_setup(0x8, 0x0) io_setup(0x3083, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) (async) lseek(r0, 0x8, 0x2) socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x6, 0x0, 0x40}}, 0x50) (async) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) dup3(r5, r3, 0x0) (async) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f00000001c0)={0x0, 0x5, 0x6, 0x80000001, 0x800, 0xa6f3}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=r6, @ANYBLOB="83040500000000002800128008000100677265001c00028008000600ac1414bb06000e00020000ed05000f0001000001"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) gettid() (async) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r8, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r7) (async) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1m35.906121721s ago: executing program 1 (id=726): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mlockall(0x7) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) write$nci(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="33020457113ea9"], 0x7) capset(&(0x7f0000000000)={0x19980330}, &(0x7f00000002c0)={0x0, 0xefd6, 0x9, 0xffffffff, 0x4}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$P9_RLERRORu(r6, 0x0, 0x18) 1m35.010930277s ago: executing program 1 (id=731): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000}, &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x100, &(0x7f0000000000)=0x101, 0x0, 0x4) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) 1m35.010365741s ago: executing program 1 (id=732): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = inotify_init1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mount$fuse(0x0, 0x0, 0x0, 0x4001, &(0x7f0000000180)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000600)='./file0\x00', 0xe8) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='securityfs\x00', 0x11, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) inotify_add_watch(r0, &(0x7f00000002c0)='.\x00', 0x600010c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={[&(0x7f00000001c0)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1m34.760964706s ago: executing program 0 (id=733): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="1201b6008000", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) (async, rerun: 64) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) (rerun: 64) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (rerun: 64) r3 = syz_io_uring_setup(0x49b, &(0x7f0000000400)={0x0, 0xcc90, 0x100, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}) (async) io_uring_enter(r3, 0x3513, 0x217, 0xa1, 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)=@chain={'key_or_keyring:', r7}) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x11, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x2c}}, 0x0) 1m34.130392466s ago: executing program 1 (id=737): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff03076844268cb8be14f0884703", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003"], 0xfc}}, 0x0) 1m33.850664209s ago: executing program 1 (id=738): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)={0x2c, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000047c000004000000140001"], 0x2c}}, 0x8004) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d300", 0x38}], 0x2}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES16=r3, @ANYRES64=0x0], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 1m33.850140755s ago: executing program 34 (id=738): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)={0x2c, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000047c000004000000140001"], 0x2c}}, 0x8004) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d300", 0x38}], 0x2}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES16=r3, @ANYRES64=0x0], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 1m33.849818949s ago: executing program 0 (id=741): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0xa3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000100)={0x63, 0x0, 0x10001}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_emit_ethernet(0x6a, &(0x7f00000007c0)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x33, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x6, 0x0}, 0x10000}, {@private}, {@local}, {@remote}]}]}}}}}}}, 0x0) syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) 1m33.619934009s ago: executing program 0 (id=745): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="05a3fde20e0000803e0000001568"], 0x14}, 0x1, 0x0, 0x0, 0x24004804}, 0x20000000) r2 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$sock_int(r5, 0x1, 0xc, &(0x7f0000000000)=0x4806, 0x4) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x68, r4, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x8, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}}, 0x8000) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000680)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x4000000) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) 1m33.360892655s ago: executing program 0 (id=748): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x600}, 0x10) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x103c41, 0x10) flock(r4, 0x2) truncate(&(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, 0x0) setpgid(0x0, r5) mount$tmpfs(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) rmdir(&(0x7f0000000000)='./file1\x00') syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 1m33.360403936s ago: executing program 0 (id=749): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x4, 0x8, 0x801}, 0x14}}, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x4, 0x8, 0x801}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100006000d0085a168d0bf46d32345653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a", 0x65, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r2) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000080)='net_prio.prioidx\x00', 0x0, 0x0) (async) r6 = openat$cgroup_ro(r4, &(0x7f0000000080)='net_prio.prioidx\x00', 0x0, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0xe, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) timer_settime(r7, 0x1, &(0x7f0000000200)={{0x77359400}}, 0x0) preadv2(r6, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x2, 0x0, 0x1) setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, &(0x7f0000000100)={0x9, {{0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00', 0x9}}, {{0xa, 0x4e24, 0x2, @loopback, 0x2}}}, 0x108) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 1m32.930971034s ago: executing program 0 (id=750): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = fanotify_init(0x0, 0x0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x641, 0x48001018, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0x100, 0x10000000, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "186856f3"}}) read$msr(r2, &(0x7f0000000180)=""/174, 0xae) mount(&(0x7f0000000240)=@sr0, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='gfs2\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, &(0x7f0000000080)) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) process_mrelease(r6, 0x0) mount(&(0x7f0000000540)=@filename='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x1200495, 0x0) recvmsg$can_raw(r2, &(0x7f0000000500)={&(0x7f00000000c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)=""/244, 0xf4}, {&(0x7f0000000040)=""/35, 0x23}, {&(0x7f0000000380)=""/125, 0x7d}], 0x3, &(0x7f0000000440)=""/163, 0xa3}, 0x457962201cf30d25) 1m32.930620612s ago: executing program 35 (id=750): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = fanotify_init(0x0, 0x0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x641, 0x48001018, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0x100, 0x10000000, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "186856f3"}}) read$msr(r2, &(0x7f0000000180)=""/174, 0xae) mount(&(0x7f0000000240)=@sr0, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='gfs2\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, &(0x7f0000000080)) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) process_mrelease(r6, 0x0) mount(&(0x7f0000000540)=@filename='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x1200495, 0x0) recvmsg$can_raw(r2, &(0x7f0000000500)={&(0x7f00000000c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)=""/244, 0xf4}, {&(0x7f0000000040)=""/35, 0x23}, {&(0x7f0000000380)=""/125, 0x7d}], 0x3, &(0x7f0000000440)=""/163, 0xa3}, 0x457962201cf30d25) 1m11.360515418s ago: executing program 5 (id=979): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010"], 0x3c}, 0x1, 0x1200}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x501882, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8010aebb, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0xff, 0x4}}) fallocate(r0, 0x10, 0xffff, 0x751) 1m11.359544495s ago: executing program 5 (id=980): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0x0, 0x4fcb6233, {0x0, 0x0, 0x0, '\x00', {0x7ff, 0x801, 0xadf, 0x804, 0xee01, 0x0, 0x2000, '\x00', 0x6, 0x81, 0x1, 0x3, {0x8, 0x8}, {0x4000000000006, 0x9}, {0x1, 0x7}, {0x1000000000, 0xa00}, 0x80008003, 0xa, 0xfffffffe, 0x6}}}}) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r5, 0x1, 0x0, 0x0, {0x22}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12, 0xf1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44010}, 0x0) (async) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) (async) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) (async) recvmmsg(r8, &(0x7f0000007700), 0x318, 0xfc0, 0x0) (async) read$FUSE(r7, &(0x7f00000019c0)={0x2020}, 0x2020) (async) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES16=r11, @ANYBLOB="0700000180060001"], 0x28}}, 0x4000) 1m11.307121302s ago: executing program 5 (id=981): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000003200), 0x100800, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff9, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f00000033c0)={"6b63029971f03ef09383b6cd", &(0x7f0000003240)="550d1c4a06", 0x5, 0x4, 0x0, 0x1, 0x3, 0x2, 0x0}) 1m11.231451833s ago: executing program 5 (id=982): ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) socket$phonet_pipe(0x23, 0x5, 0x2) chdir(&(0x7f0000000140)='./file0\x00') syz_open_dev$I2C(0x0, 0x1f, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x8031, 0xffffffffffffffff, 0x40ead000) openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) syz_open_dev$tty1(0xc, 0x4, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x900a000, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) syz_open_dev$I2C(0x0, 0x1f, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x8031, 0xffffffffffffffff, 0x40ead000) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) (async) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) syz_clone(0x900a000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) (async) 1m11.103630025s ago: executing program 5 (id=983): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x3}) syz_open_dev$vim2m(0x0, 0x1fffffffc, 0x2) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 1m10.889941761s ago: executing program 5 (id=984): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000200)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) writev(r0, &(0x7f0000000880)=[{&(0x7f0000000340)="64e5fa06", 0x4}, {0x0, 0x3f}], 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket(0x2d, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) write$cgroup_int(r2, &(0x7f0000000300)=0x1ff, 0x12) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000002c0)={0x1}) syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) recvfrom(r5, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) syz_emit_ethernet(0x46, &(0x7f0000000240)={@broadcast, @multicast, @val={@val={0x88a8, 0x2, 0x1, 0x3}, {0x8100, 0x2, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x8, 0x3a, 0x0, @private1, @local, {[], @echo_reply}}}}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@ipv4}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000000000)=0xe8) 1m10.885592031s ago: executing program 36 (id=984): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000200)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) writev(r0, &(0x7f0000000880)=[{&(0x7f0000000340)="64e5fa06", 0x4}, {0x0, 0x3f}], 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket(0x2d, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) write$cgroup_int(r2, &(0x7f0000000300)=0x1ff, 0x12) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000002c0)={0x1}) syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) recvfrom(r5, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) syz_emit_ethernet(0x46, &(0x7f0000000240)={@broadcast, @multicast, @val={@val={0x88a8, 0x2, 0x1, 0x3}, {0x8100, 0x2, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x8, 0x3a, 0x0, @private1, @local, {[], @echo_reply}}}}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@ipv4}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000000000)=0xe8) 57.094851777s ago: executing program 8 (id=1190): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x4}, {0xc, 0x7}}}, 0x24}}, 0x40004) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000000)=0x8) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4) 56.987865625s ago: executing program 8 (id=1191): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4044040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x60000805) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 56.987413705s ago: executing program 8 (id=1192): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) write(r1, &(0x7f00000003c0)="41891c2e8f465a4a7f34d82599b347279744eef0d23a1b6186e24b2ce496580ee56b5152ea53434550afe5c36578f22895d7e8aa515a05174c6e84ab49e96685265b0884e2db8b3241ac0b9bb7195344371bd588ff6139acf685f5d40ae891e6cc1f5712ba2b5fd98b3f798ebfc7ec0d6d508425f47eca00d665707667eeb71d6dfe7f8a2ce43589713c97898bf523d4c38c4d878b82b28e6ba4acc61c790ab57a05fce596aa9acb39a503f81c50b9af914f0505fc667dfe5d8492a61fe6340a9a6c8f0c460a516394c842cf3e82b59f76f2c361f5a1fd7e", 0xd8) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f00000000c0)={0x40, 0x20, 0x3, 0x20, 0x6}, 0x48) write$char_usb(0xffffffffffffffff, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mkdir(0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r5, 0x112, 0xb, 0x0, &(0x7f00000000c0)) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x5) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYBLOB="070000000000000007000000ffffffff"]) r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r7, &(0x7f00000005c0)={'#! ', './file0', [{0x20, '(i^@'}, {0x20, ','}, {}, {}, {0x20, '-'}, {0x20, 'f@'}, {0x20, '@.*'}, {0x20, '\xfb&\''}, {0x20, '+[{'}, {}], 0xa, "5ca1cc79652005da16718aa1a126d8448f4b877b79af2804152683d787b3920e5ab2c9509764e5cd18c3ea6f5de1bec881601b97461efa3d405296a077a8ce5db56accbf6784ed06d13e1772c70de6760c8eded40f0ee1bd8f55b079a5fb6eaae2ac36cc3c5298785c1d6c1ead7fd522debb63ca563da52a4e7703733ef9981685035da8bd98b433567bf95fc48894b16c6ea7e9c02cb43f159efc31a93a35ee6d65cd863255e4a4db90e4e6267c109f"}, 0xd6) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xfffffffffffffd56, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x40, 0x30, 0x12, {0x12, 0xf, "2ad8b7e1657aa86bf51bcdf2d683f5aa"}}, &(0x7f0000000080)={0x0, 0x3, 0x31, @string={0x31, 0x3, "23cff4613ee1d89d1ccdb7cc89bcee95ba2b831f9f1287be1ea22954ce8ea131e2a22fb0702994c64d33ef44acad36"}}, &(0x7f0000000100)={0x0, 0x22, 0xd, {[@main=@item_4={0x3, 0x0, 0x9, "b8db291a"}, @main=@item_4={0x3, 0x0, 0x9, "fd32a13a"}, @local=@item_012={0x2, 0x2, 0x8, 'A%'}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfff7, 0x5, 0x1, {0x22, 0x9dd}}}}, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)={0x0, 0x10, 0x2f, "5fccada62e987d10a095fcee6270fba712d2fc6a468c5e8d137020fb84e54b49f4d276f03d00a098e09981b9f27d48"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xba}, &(0x7f0000000280)={0x20, 0x1, 0xb3, "14ad41472fc4b5d0d0e5922acd46b63a0f9daedc33efaf497a1edd935eccdddfff648b6dde05a20676f3625e0b9653e7db00c9d9f8aaa5a90ff0eb9ee8d259a422fe48afa0442ee9cc83f0857f915abe051c0eb0e873a09cd9403b326c1a04c842567f8ae970ec850c368b20cd623cb2c065fc526554b726f061a5bb53846ba5dd8ac7be105ee64d350863768d72db77f4ee442e345586bfee4a96d74b9debadbe0967a2ba929886f349915365ec494b450339"}, &(0x7f0000000340)={0x20, 0x3, 0x1, 0x1}}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r9, 0xc0145b0d, &(0x7f0000000040)) ioctl$FS_IOC_GETFSUUID(r5, 0x80111500, &(0x7f00000004c0)) 53.661970767s ago: executing program 8 (id=1247): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d0800090002", 0x17}], 0x1}, 0x24044880) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="9884e8cc7dc5"}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000080)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1}, './bus\x00'}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f0000000380)=0x1c) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0x100, 0x1, 0x1ff, 0x120, 0x6000, 0x0, 0x0, r3, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchownat(r0, &(0x7f0000000000)='./bus\x00', 0x0, r4, 0x400) 52.753145971s ago: executing program 8 (id=1258): socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x11) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@wrmsr={0x1e, 0x20, {0x1b, 0xfffff000}}], 0x20}) socket$kcm(0x10, 0x2, 0x4) (async) r4 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, r3, 0x0) syz_kvm_assert_syzos_uexit$x86(r4, 0xffffffffffffffff) (async, rerun: 64) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r6]) (async) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f0000000080)) 52.623263607s ago: executing program 8 (id=1266): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xc) openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x11, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @alu={0x4, 0x1, 0x2, 0x4, 0x6, 0xfffffffffffffff8, 0x4}]}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x3, 0x2, 0x7, 0x10001}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000200)=[r1, r1, r1, r1, r1, r1, r1, r1, r1], &(0x7f0000000240)=[{0x1, 0x3, 0x3, 0x7}], 0x10, 0xab363be7}, 0x94) readv(r2, &(0x7f0000000140)=[{&(0x7f0000001240)=""/223, 0xdf}], 0x1) 52.572620012s ago: executing program 37 (id=1266): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xc) openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x11, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @alu={0x4, 0x1, 0x2, 0x4, 0x6, 0xfffffffffffffff8, 0x4}]}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x3, 0x2, 0x7, 0x10001}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000200)=[r1, r1, r1, r1, r1, r1, r1, r1, r1], &(0x7f0000000240)=[{0x1, 0x3, 0x3, 0x7}], 0x10, 0xab363be7}, 0x94) readv(r2, &(0x7f0000000140)=[{&(0x7f0000001240)=""/223, 0xdf}], 0x1) 4.433904155s ago: executing program 7 (id=1951): r0 = io_uring_setup(0x5be0, &(0x7f0000000000)={0x0, 0x400067c1, 0x2, 0x4000000, 0x20c}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x28}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000180)=""/244, 0xf4}], 0x1, 0xfffffff5, 0x6) syz_usb_control_io(r1, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.357184907s ago: executing program 9 (id=2000): personality(0x500006) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x2c, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, r1, 0x0) uname(&(0x7f0000000000)=""/182) personality(0x500006) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x2c, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, r1, 0x0) (async) uname(&(0x7f0000000000)=""/182) (async) 1.35188058s ago: executing program 9 (id=2001): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000002040), &(0x7f0000002280), 0x2, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0'}, 0xb) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0xf79a, 0x0, 0x2000004, 0x3ce}, &(0x7f0000000000), 0x0) socket$kcm(0xa, 0x2, 0x73) recvmmsg(r2, 0x0, 0x0, 0x122, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) readlink(&(0x7f0000002000)='./file0/file3\x00', &(0x7f00000021c0)=""/151, 0x97) syz_fuse_handle_req(r3, &(0x7f0000004380)="b472658eb4def9dc4737a24314c2034499f98347d1fd41684c0a8bce249f6928c5f504c222e06980549e96927c63b95323810e996f1dc19ed694caf77c54bd6d89422da1f029129e12d5bcc90cafb1d4237fe9f7044a88170eda946ab462c3d7e7ce2f1c59524bb1d34d38f4aba5de6a37962f176cf576076d04c75638f940a8f85210eb5a2b8e275d7176302d8a3beef2db52855e130a7990e47ae0b65cef34a98af6221bf56de6057a8f5e6532e863a5fb45bbfdbdc817ffb52aac35cfe4fdcb30c7937cd766c6e810bf8c3918f297d410c8de7619fbec9e89c20063679a5864cba1803e2290267e87f9ebfdf02e6d3da9b53b33c46c6bed7a5d7d925ab0c44533a0ff041bfd2554827e21033aac94dcd83e91f6fbe90e91e1d4d0bd1ae287220438e585e1b91874a1d91e4c1ef469b2d9d493972f3acb29682fbecadd83891ab28c8011be50c5515ae1f904426f72ab36402bd23cdbbe167d2c8297dfdd2a555d4d3a0dfdba824c928a29bf69fc2c25faa674a5a1a35499d70e84a8fd82c15e68611873cecc0f7ac55a249c3d9aeb3ff4576227ec18d9cfa0593abf8943ed40c0221eace3da737d42702b41a33ec51cfb1cb4ea5286269fff34deeeeab6787b9716e626b2d493a04e0b9b80d848812dbd9c67bf51e6220f8c18dfa08bc20d435597ac1bad3b94d474bf1e388a14ee80ae736b60e720fe32711ad78308e41a7b88c9064dead9d4fdb3b2178e1cf2f6692a51c8598ddd19e7dd98e4adf9d358251925b21ba1956dda1c92be7fc22d9090d9944de5eb4b3589f8757fd25a1839a3ba76f751373f826d3b289ff4c996cfc89a94ccca67a1f0ff4b5138f8340123e510c4f409cc1823f5b8c041449a237624d9a51e374f66068dd861afc92891c12129bdc9540f22f8f3306a8ae86151a6426d01d036346da2a344bcd67859aa232d6d95478b398a2aae8b6a65e9715e666d29b8276935fae94d11ac248d047b26934c17760736045a74d7f4e083cc54ee0eabae82db9cb9429868a44495c08040d43ea8f7924d79449486bd456adc79b5e895dbf6c02627cb794e55767a27bebe7876d18e60cdce2578c2cf7f096b6c8915c043c6c31601d9892860e8e7721abd2630becd9fbf53c62aa66ad1fca091a768eef89bcb168d34f79d1df525191b915b325ad36f7612cabd83e4736f01c856e258f6aabcbda32dfccab8bbfaa48ddc02699a99e8c78df6737d6c5472a5c9ddfc23a2bbeff3dbaa04ca897e5b2622467b5dbe2b00f167dba867f7adcdbe92439bf5bd54f98fda4b6023ee34676beb6b58ceed128f86f9befc843ec119e7cc56596d98688367f7a0a7da0d0144c79bb3c4bb64c52523b7477bd83b6b8d8a30a1203ac0bd17aa8b9d32825c9cdd068eb2566fc32251a7ac3307f28c41812facc0342ba0cfe3aa2748e5eec07dcfaecab9760bb487da9b9aa40de97a961ab9eddbba942bbce1e7f46e25aca1be69c0e3e7212ca6697897a9a22795c4e1c030f4487bc2987e1f86e2625242860b5cbfadd4fc009b144906ab62a8b7bb557f3a079b3fcf9dbabb9075443bd75a677b541b43deac5e44949591a1e1afe246d7ec9bf6075332f326c5e174d40b621a4e46fdeef621d5bd5c8560b5c69688084088b6b21f10aaa4174c27f1d31ee6ca07e6f735fe12ed0e8c3811478689c2e3fefe3bb406ed9bb87a3177f90a4dbd36f51a0bb1661e62a2349c8bed59681b529b683ec08d6ada9b148b2a451fdd8704941e4c52cade0315cc39a27ece9c0d44fe2eacd1205840f957be4a4f78c3c9049a2b53da2dca732c096dd5d5d44f53aaee2d1438e32e321dbcd584e7b5b90d079b95df8128d20a32f2e5426945198c248bbeaff292d0ae820632d9410accd959a24170c88623b92bcb98ca77e91088f1e8d674966ad8f75b3b70d124b1fd2d367d3df88012105efe8889b5ed070a5764d3e8de30032272225a966e1bc94197c9b8f2aac127c521d1b37a8c0b1b3edc5ebadfed66ddefbda0d4eab95852e38bae225c1a12e479e31a1b2916e474b79155cbd03cda8ef5bca9cb2f650d123e44bd878bda3d1ea086847f0728ea7676a230dcbef808d509d952950f468fb8e2e67779bdaeb91d4b96da8d7c67d3ac168a54c22762e8488732fca4a78503a1bdd174b0e99a04a00d6acf7f517d46d4b684e2ec6681ad48c632f794010e7cafe15098718ae1d9f347f45841741c00bff1259a92cc3600bbe88f22dd7d8374eba2b56a2b1970066155f2ff29b266e033960d5a894e01a5f426f39cd6f3e1af65a98d589fb290eaa11e5fd1f7d514df0d2b9347f06a19b3153ecc3fe57cf7db9aa8c9c124b7d0ff5caa8bebb9043896b08d2257f9ad3a2584c043415795dcdf4ea24a391e68b4ea66780306a77f4c620f0e390be92af859e182349faa906e51bcce1f0daae6141b86ed39513e5dd047bdf4851caa2382e1915094ad4a617bfcf6d991f076d9adef29aac736d7f6c50d2641eb27ff2f70cecac8efad26b46d3af192e0923bba5c61fa3596bf35b5ee0c8c64a0d073eb9ea0f13bc6e400f74a879492ed79fdf818e8cbaa6966931fee67e5cb34ec00b04a6e44cde309e46cb93bdd47f5bab9de1e01dfbffd5c5b80fc5211f8e6b399d7ea915ea14f4abe7302dea4fc9ba886dc282f6f6752fc0aabc8b5feb8547b86b4ea7319d43b1ba67bbcca991b332fddd0eb41852070bf2527e53df427cd547fd3a962d00b2c921e924643628ae7c4986a75c0493deb0fda220cc6efd793321092fe1ec25dd43e7779a4fe603c44b649e2aa0b6a4080bc28607d755c1333f2f58817183df90f94e8ad789a8854be3e0e55e4aaa7b3214727d66d973bd2374bd0643f8adee74b9b20914e17f1b2ef0d8319425548aee20ad63c99e2f283e8ab627894ea56b7de61ee9bc3014bd122285b4d29bc4178c046ec29e2c1fe36c2c938f500edf1a4fdfe76daafa74acb42adaaaf6968badaa771854b3f6652679cb8e11bc7668912bca103e1849e0fe36d979d34dc8a9fc971cf9b3bbad79528df870e078970f6a25ee7fd192878974f50c505688edebb0e2c7d90c27b7cbbbeb5c5fb14d0a72a14424e3ca99cd1dfaa92f96df0da0ab8c20a5644847379d970e471139a1069e73cdac202bbd171707c2f33e4a07d9f3d222fcb138b58b229f48435216295bf4937806639203b171e25d557aac58774c2c9e4c89821442928abacb8eb487b686aeaf479dc04b5bb39850c55b3844fa602e1eef21b6df45d252abdd9387c7324d77c4d8c9a448e56b11290929276931ad78f091dbebfe280f6d0edcc4bde2fbb0cd5260aa76725d89a8f2639a2e5e42a97b9dbd5f53be7d5e836f342dd1a7d3430aa88ce26f28631f933f9d7733d7dc29b1fd1f257f2ed1103afb3e0823cd4cec665ad72c6e5c24e6982a2dc8026f0551b5f09f206ec810d43cb3b517550d6d2ab9f1711e94afe58c4b1796ea41a15b06727709ece39fbadcac65e2bd1588138ac080cc9ca4763177675186a4d3cca80d13a39e56dca71d02ac4f7b5e7cf149774783ed546d055f1cd5d2361050ca31adfbaf6a58e1f5e2f3fec79542b5328577fef5b035bde64a6b4107044236009c4a656facf9be9cba493cdb71ce8b2a31204d720656cbf6b549a6ae006bbe287dd64573976ed18baea6ae404861aa98ed014e724f2cb375a6bd4b50efc222f89d76e2e1c4ee015ff61abd1dbf69ee26fc311e354fc664353d887d844765c1f6fc5e213b55e0bbfd578b4e1df5b4f0728d3797a80c08d1af338e225d70f2eacf8164686ab9a9ba9a6c1842c4bdbd18014e2fa185e7fcdb593cbd98679e500dfb891ad53109c5c29b051c0606a5a8a6b809ec223c9747f52d70b90375efc5fade220011ed7a704841ef84055fd2772d7adc022302137fe9643081f7b89fd1e75adcfa5a1f5ce98c24c11b082231e75d6b4ce2f2208334f2af03edad1e5e744055ee11a8a45a087cf583e16988183df33caf0018018fd8b6d5b3b20c2009cbc6652e03433a233f1c47295481e9f016950a2d115e4be72962830d8103f3caf4ca21d519af9afbc130f618216806ef9459d98f3c263a7f95295d138e6b7278f7bed8972a500d670695ba0790345b17cf3cf43474230a04fa39915868a457471d2e322006383973f7f709aea09d0f223ed5d6704eb6d905302c1814050ab65eec0b6aaab9bd5ed53bbb58a7c02ccc856007d14e93b3521368fe25aa984b938dd98082d1cbe931521666d63dbba4318e138347ca985af919e8dc7d3877be3327d4e622cc8202b2327237fa487d45bcdff4df447596fbcb2df18961b11c329f1c8388b861bf6a0c0d76c4bd8bb0538fcb63fc53e0be927530fe7eae7cfb32f03cfbfa9b39b2a3b6586c8fc3d86ff1878e76cd1fec6587209e90447b63ff36b80a40e0d6b828b0c8a4c92f5576fc48a93670275fa9c40f5fc0b9b78b6159286c5915a4e623e4abc3343e31d3964059ed410411e008e49c566422fd5af3be4e34b6c5f7aada89e7ba68d685e84806a8fcc8f1a61b336e787756277dadb6f9f18cc15537735d53308bb706801222d122ca204d1307abc8fefd154960f8e1255464325767043f6fcf0942df6645b0f8a631587e5c1dba7963f53a33b59a546019253468d304ac22f31492c47348857b4c7be03fd624426e17eabf0ddb74a7e0d4d41cddf0586f4ac7f590e08c8e7db712d837c34b92a483ec0143f2a445668f363345c6322e53f29c0cf589406e32725b05676a66d6ad5cb4b72631c0b055d018915965c1aa0a3674e41a1ab515966c2168af67bc3db9aa4943fda7683333241aa71d76d61561527869583daf4b6cdae130aa5c5243e63bf62b9beb13e585a26053b907793fe34c1ebf95806a16bf75a83e5b5bd014cc38c5cee3db5983795bfa63e193238b24e2f97448972d85cf1f00e1111b2eb6bf739da020e06393a09e43abb1df25ba21fbd655f3baf3788915706c237f4b9b785269d4038c70ceae654ffd5e86a07c23e2b2e7ed313d644af16f3b541a4f4353630c0844beec974d9021ab67ebaa80edffccfd266a568344d4ad6a4414bf3efc12aceb6e8f062716c94a90a1c8462d5e8dc54e17aac8e1f11ac0b446c90dfcc6befba5f5c1f678e5f0a572da4d9d3358a01ee7396e3c192dab8ce89638ba4731060192d5937c7621c90b4dec38101ded13b646cac254f3e386a3d60b19dac6c403c7a967d6ec1c36afcb2e2ca4f78c0699f25e881bbefc458729feda761755957a7cbd5fd9fbde15e63da28f4c22884d7cf17a980320d08fc1f520e418e2cd5f3432ca2df0128eeef78b69f6c5f142ab5b36c1ee52c3f9d3fa8b84afd3cf2e9ece523a88f105f736d75a37322b1a2625600cd2aa8964b8c5575218ef0491e3eaac6a190f6aeee46e4c7e30909b8d9ca683feb30ec4c10f68705a51e87af34659dcfcd236975347a89938efb1ab28eeaecb1befcac4d4c71fcd0aa31f0dd60096c2730f71dd452d420a30052d29ddba2fb9c39e7a691a8bf4226c95b2b061efa1709acdf504d2d3f9f28f99c68691199208fb92735221fa2d3491430127cab4a1d914fa496f07bb7319b9f9ac4d483ec95010cd32a8352e9e81a52288937b94e8bb41189058cc14cc6e188364ac10219c1a6e86c814ef824a374eed0a4b79dc3286c0ef12003653f49a6902a7ca2e542fc79d9b07dd3b8f59d02825b64919e78ea186d2acf248599c445e349c2903b27abd8df7caf317b56cdf05b583023fd65eeb3ef0ae041cde14bfbb43ac128fc6c6e410a2a02cf0ae036f2d9f4bbf423d0044342f93625861adbc1c1c210e2525423032f09d3a1fec5d29056c5f0d469131189f2f6c3b83832c6fca5929bf89f9f359aa6040bf41902ea145941f7c6d312d2bb2084d56f0582c25cdc4815d414fef6e6dc1385b8827b8a76cc3be75c58d3c4ef45a21898948b377c5430b5745293267273ca5125108d643de00b2ba3a0efdb506069f39212b1f44048f6025d6d444f7a28a76cc71f9b05956aebc2ef351279dad442a448b015b45753b152a5966ffe8dd9ba166f429eaa870642c8280e257f770f561f3e9722f14fe54caadd5107171001eee6bee9dd0c64338aab37ea93cf76addc1b6c13d9baa8194f1a59a8d534065c6f3ced4aca009e09f6c8edfdf0b09ae4ea2c2bbdf958ed924554d01fd8847062272576c3c6c2940cbfff03cc3e3a47abbf1932146b3a760478779336bf14deb49b8d0f448da8e88a95dbba364965d62b9cb2f93afdc9cd1d62f9d1913b51beec0dd1e6668d88677a64f74a3ab2cdc40a4589b9330b0e1872e7ed7647448582ebf1f0650a905ce1ae440e167ebeba5669909fa4f93130648fb2a906469b8b143806fa9b5154d7bd9b74fd2057844dfc5979f59a06bfc3ff31d354d48955a233020a64c3ea845ec888662efdefb3004e326fab9227733a4922ca164c14a4268b4a3ada7128803d44786f83642bdcbc2999067ba70bafbe959a7d4cae50ac39b7e22e2b1490b64ea878bd07b81cd04243f77c73a22d947090c98598ae30fa69894b61bde5205afcdb48f6d7f2480af0f19b314caa10870ca6dece503a2b771619c35af19589e15c95cf359c75f9257203e994dc5bf090885d224bbed827a58b70012e6bbcda71efa2c2d9571ca2957f94b723335801414f492a8b46499e5db5fdcedde6877e069c65de63bb578a59ce7779aeaa2897d08d01744a3cadb5b459615a7484b8a6e4468aa587797c191957ac990d76001d13b0b405b149121e4e6b290fde3177159135903b192fada74d45e8d61ba2f84f2201b3f93edb8091152573198495bc1f8bb11a554d6eb63bf0f586f43dccec231cc0863a7accf0a87b57e5d006ce9a42104428805c6d81c1ca860ef98677dc2a450da15acb639d271b5e1bfe0eebb640d71b76d392aea7d3af7279e06aa0550812aae228f3d428fa601af1e081f035871deb3f3189063acefaedc4f6dfc6046f448976e5ea8e444b2e2bcf7325822725f02e9253eb39bcc8d7406f5a2e5929b6335e82e816a977f52606e1bcdd99f61fc4d65b08298f1387d9a560bce710fbf3b97ca0dd55f6f2179f37821206beeeb63fb91797500473f71b8b84fd0c6ebfb570b263ec9f580bb86bd744b96bf4dd8da67a2b18fcfb83c4ec13756f9897658324a9a778289077f22ccf30dac680ad89ab04aff80754593f4c6b8f04b8298eed50f041cdfe54b552c6042d8deed91d41fbd95bfa389b2475f678b05ec6a0d459061076fbd530f6d764fd89185e4a6260890e960788c953502869918ba9a0132a7b203e41e9dec34cf93abdb3bbdbc8d545562251ac570005b789b4f85b29fce446b286bd7d3857e708b1cff322f457babdec0234eca2ab158d71224be7c8b0bb9581f818ec996ab632608bd117137984b30ea678bf09f281e518a2130887aa7d2c6ab42a5864ba8a9ef268bbad7d99dd504e4bd57acbef178aa22117ef62ae7e3f9cdb6355282b18828b8cb269c84830a513743d44bbfaa137ff8f67ecc3f51edcf0a4b75f469ae17ae9e1535620166b1f89880a34801ad0c0a349df84ef177e16ad78f935b50a0e98adc6048970d07233da96c8467b6dceaa739e3b03eff731f2afde0c434ab972e020878e903eb6658f974b8f2b83d8431c4cd4a4bb569a84623c07d4e2085b68769c82152065c09fdb95758baf9f19b342802ffa80a8ffe595cb909d1d9d007b5c9c5abac6f66c0d296e33e22afff9216d16ab566afe1e9cc85f47ce9789cac673a96f30379d0987d70c548ac7946d1928ab41f5716d1b8b2e95379a4de804529cd7f823043d0fc7696c9b3d319332b57762e84782b1ecdd67c6333564be161d435916469a16879fadd1efc79d11f10359f2e5bb0b927f7b8e27fc8be6bbb121a719bb6c01e3e3b9f538f9ce4772ce7386dba6c9635114cfe8c067de012697b90843b5509d72a557372e44c8fea8ac26991cabd2724826402597c735205233d8a6ee2d092fe07c9dac1dc7db08c70ea686568f2026f5c2db0f37107420a37504134d269a2568df468911350f283c48a7d405a03a3faf53118f1c6374df64f1e0b86f0d1ed49ee9fabef1c5c8384212f6f40cfb205b9b50731d9f6a091320d75d1ff72f09a1cc5fa7ab5e67cf97eadaf22f053419d14ac884a7154d3e688ae06654e55ffcd13a4261e151e7e3f24dedbcdb51d0544d00225579ef291975887b3a6747560a3cd96caaca6afb20d80fd4a48f66a5fe0f4ad11c20a5eadc6107c82364e4c3fdce8517328a35a0bb95d83d9739492dc3f3ac600f24a962513201fc6c65ef965446fd2e641d3496e1a9f03e225c295aa4b24cf1e4f3139299f129c12fb125cf149bbb78cb539ad40bf11bf36bd735561acc25ff588d50d52621a2a8889067aae5413d61e164984144f43b7335a75c2cab8a3ce6f6f3010b6ac4334ae0559a092aab0f2287ec25e4aaef4d339c5356ab110dcbcfdba99dfd0913f2b4f3167b9b8b5f1201df0a682f968ceb64f4a9f49cea603c51c1e4b33349d8f253508eb21b557f92e9a3191da0fddd823d22e783e0dfa4d01fd72c72ee0580f2c94959360c974bb90d4bc4add254196faae851129ec0095a763409113893a9a2d5484dfe97dd9c18d1a8297530b170ce21f1cfa5d9356aea1145c8c2cfeda39a2bda6e326d31010373c97bbfe794e565b774cf4e36180533db962b516afaa0bf0e827c7370f5ba3aeb9eb6e3da2fabe22d1a2197e1daa71a3707f34f26bbc7a23d9a8493a158fdb0dff490861f1c98ef162f6336300d37560c49a2cc76436a8cf57c785dadca1e2f941d2438ca09127159e4fd006c7c72d24f471eb35b05fc2225d98a815fdbf189697bf9717906d021983b4aa69cc28021ed11161add4f3901f07741d08fc1534082dad319c25c86209a28562fed5a04d3a379c07d918062cf62f692f4a1b57d8ecbdec9f23b274793e8bd56545667329b2c2aeb2fb6e675f1cccae0801c3f8d6801229371e0d07d8494054d82186928649c79bd76b3993b503575d62ea1ab6fad4bf297afa5c23b9056072b3f87ba312458edb9a5d95c1d609f1ebc255972f272dea5002671420a74639de821717f3f8c560c44a0bf3c37730691fee495af60be4dc23c930bbb94053977e4b15695045ebf039df3d8521e955c7c1ef98a770b66bb2a7e38ad1f34a9af51a5d3025f160f148830b6d2bc33d4a00b0acc140838eb9da3e1f3bf4c21ef8efd0fe19b2c01f1e2f6cccf989ba878aa29a2f48bdeffe10252a9585fd18bad3697d36e7b19fe393676dcde83878fd101efc25f599869265a909fa42781cd956bb64c3e05af814c69757cc7fc4e1afc87ff39f1dfb57a347b36931bc542d1d9e576bf7c6a7d7bdf2ae6d5c6bab9c2d1d423b768d798fb1207b6975e74911b79731cf8b70e467b8f85786586b426b404dab03d37d6d2733e701c9a8bfaf2ccc849f1315ae662cd69a7e8b738b91be5dfbcb19c7ffe0d97113580817451300a5964d537d81a009a710415840c81af56bfdfa8a952e2589878283bc38487beb7d50a2cca541290abe6fce67ce8334ddf422b2bc516c9bd9901aecb6b0be67d9e60eec2a2eba7bc2270f391f307ae87ef5e8a1290b03999dde0e6737debec308bbfa70d5fd302c3340c2ba51e209bc95e8029aff58038994992575aafa7e796f8e9b5fff02fdccc6ab96d7844faaa23a3f36ff637ac19f738eac863e6f5cdcc70b337d1a5d6b460d668459251706bff43c25027474e3dbebdfebafeff972341d95df92b52a4c2db6b9f8bc73329dfd6617e6f06119a6c8bd4476e4e6ba1adfbb99dc23004939f086da0695b4b51716fe398922a714d9a73cbcf8b3a599808379f7ae50933b5e82771338bf3f7350d8d8040ce3b04d88389ade6639bc42acebd40acc60ae7300d147cf166e1e09ce1a51f57f3c65123c70502898cfc0ded2b3dc143e0134c36950849f00df26b2b471ef1a5f2eda7389b077a6f322f25ffc3428c29d66ec4e7463ef79ce38466563e0ac6e73bc507ea4b0d29ef36a9decc3fd0730dd2cf83f7e04fa95e1a881081631a6a99f4bfcc053715b8085d4f6b0447cc1331f07ed7d3d91ae91be194327e9176451adcd9c531b4b342d9baefeab042f6ac7a5a2496c2673bf7f47596dc821eb213db4dbc8bac3d2c02c52f2b6c5aaaac6ccc34bc441649eed83ebcea1567efc8f7419cfb22e4491a3de9d7fd7611934349c90f52a6dccb1652f6b560011451cb09749d9c710a4de43979e922516bc62906f45dc7f3121fff19335fc921785083c11a5c0442be028153ec0d016ddb8fad6d694824213786956ea9724435c709111d7ef47d934b432d1a7f708f67bd5b5277557a29c6c13935787e84b73ca6af19026cd27fc1a73fdeb61fd7a609ee14f5e0d113061a1a7af6f425d6b39211191f129e3897e54cb57a5057298693f7fe027b595b97ab73c15a85ab9a51571a8b372b9d44812e106db6fbcf8e5f801eaf1c35ed283cadc7f4e8c06d7fd90f867aa076d5294fa5cf5cb1ce4f4e243dc418179cc8da3dec6779a8e56f3e7426177e4ea0dbc36c695e0e82d8a1a1a2e0e234607b2e1241d1d6442082827b286de110d6059af156a0e49a88140cf4b4f724552b29039ff04034e6b884c5411d4b314227a776fa6e62609ef3468781ca6acf730a20844b6198e2c77021bc485952df4b72460093b972bcab5264f9e4cbdc3effa88b028728327b72b560a57267c4744adc9346907f02494ae61cdc1949e10a63efc6c977bab0cebbbccf1c01b842ea93344dd498652ae21f7d808122e3a1be4fdb63f3b285ce7a55ff6a5e4a95b1db15efa76d4702cf467b3ccab7dbbf511a5d1861010c0968754f6453de53f5b5be29760471b33026f8d51dd7f7175da54f56eeae49a4ad47851e050fe9d75fa5a1de83b19088a643247c31b042bfaa786de4918091599a404378f79eb936d4217159797a5808d773868a86fa3c7266d9b0d8bc515fbf8719071f917d89a3d03716d7690676bf2b9d7e60e87eb3f0ae77f5deaef4dc323f85ac4e7731027196325a976b4bbd806d45e1fc0459f8b9bf6be523943c565239953dd2fe48195ae6df2d0a091d299ff9327f60ac2e4ac7c3d38b9e51d0f00d8491214964197ba63bc1318e250a23cdba78b34f0fa8dd1d6e93d298019d95f8b99db0778e27f2c558abaacf6d5a587045d012a76f7edbeeb1520d2e8c4521960dc3087cf4ba4f6e176500335f853381cdb0a75405842b855de4cab409471877ce4aa1efc943aeaaaa6ebe6e698ce7e089f9fd006f5d386f6b56a4a35adc0c27331a047e02dd4a9416c403a50f2ec41288abadfa73c72c19b6f3d08d8e66a394b59f676e4af4791581ed54504f927aaf645675b9eee1cbade194502e7331e0b4ac9216264558bc2816c6f6437e8ab7499c9d932e2618d3a5527966ba139a5dff52438a027e87d52027a07bbc292f2dacf21d30c6e60b3cce520b3558330cbd19df2e1938e471706813f515b245c7cb5e6fe430158feb9b46100a353baea95584659c3f2470cbf0376f4ede44df01304f6b7549", 0x2000, &(0x7f0000007580)={&(0x7f0000004200)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x9, 0x40802140, 0xe, 0x6, 0x2, 0xffffffff, 0x0, 0x0, 0x80, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0x6, {0x3, 0x0, 0x820, 0xfffffffffffffff9, 0x400, 0xc, {0x0, 0xb, 0x7, 0x1, 0x1, 0x4, 0x8, 0x0, 0x4, 0xa000, 0x0, 0x0, 0x0, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r3, &(0x7f0000007640)={0x2020}, 0x2020) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x1, 0x5000003a, r4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x2c, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4081) 1.186104622s ago: executing program 7 (id=2002): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setrlimit(0x2, &(0x7f0000000040)={0x4, 0x23ffffd}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket(0xa, 0x3, 0x3a) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x80, r4, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x44000000) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd1, &(0x7f0000000080)=0xd, 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000500)) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, r1, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x3, 0x7, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xc}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48840}, 0x4011) 1.111392803s ago: executing program 7 (id=2006): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x174, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x160, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xc8, 0x3, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x174}}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) inotify_init() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000043000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="c4c27d2fa00058000066b81b010f00d0678b160000f30f017a00f00fc16842c4c18df4f866ba200066b8cb5566ef66ba420066b8800066efc4e27d1935060000000f7913", 0x44}], 0x1, 0x49, 0x0, 0x0) r5 = socket(0x11, 0xa, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1400000010000100000000000000000a28000000000a0101000300005e1afff50200aeaa0900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200d5e986c8000000d3d60100000000"], 0x7c}}, 0x1) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000000aa8000000060a0b04000000000000000002000000080009400000000161fd0480680001800b00020001000000000000005800028040000300cd4b6abe42031763d02899c77f963d140d7a9d3ac869f3a860917523679abf4579f9cd6564e64066681fb945bfe585ab6933a6f6514a0eebad4e35370a000100484d41400000000008000240000000000900010073797a3000000000140005800800024000000000080001400000006c2f0000001100010000000000000000000000000a00"/208], 0xd0}, 0x1, 0x0, 0x0, 0x20040000}, 0x8048050) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="142000000a0a05000000000000000000d04faae1a862554934fa1321f29284e1b8dd9254f0f5bf5e8a888961896b70bb5a0379a7acf7b818bd88aed6c0571708d59478158306156ff342b9206e2594e9607879ce6053260f1ae85a2436227bb863c8d264f7f0cb51a719d2acfa8d34240aa41216a8f1127432573a94acc448b17cbe272b55f8b5dc32fb7483baed7b9acbb631aeefae0f29eafdcb42d2d9bc142664b7b6ca6b23eb201f5b8315099fc3d1b594a18e33"], 0x14}, 0x1, 0x0, 0x0, 0x8010101}, 0x40858) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x1410, 0x8, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004001}, 0x804) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r5, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000240)={0x0, &(0x7f0000000940)=[@code={0xa, 0x62, {"490fc7a900180000430f20452e0f0826440f01dfb9140a00000f3248b8a054bb26000000000f23c80f21f835040030000f23f8b8010000000f01d90f20d835200000000f22d8c42299b810c4e3cdcf280b"}}, @wrmsr={0x1e, 0x20, {0xb4a, 0x85b}}, @uexit={0x0, 0x18}, @code={0xa, 0x57, {"64440f01c8440f20c03501000000440f22c0817e0300f00000642e0f01d1660fc7b00900000066ba4300ed0fc79b0d00000064470f01c566baa00066edc402752ebfaa450000"}}, @wr_crn={0x46, 0x20, {0x0, 0x8}}, @rdmsr={0x32, 0x18, {0x836}}, @cpuid={0x14, 0x18, {0x4, 0xb92}}, @wrmsr={0x1e, 0x20, {0x2f7, 0x8}}, @cpuid={0x14, 0x18, {0x10, 0x9}}, @uexit={0x0, 0x18, 0x1}, @cpuid={0x14, 0x18, {0x5, 0x3ff}}, @uexit={0x0, 0x18, 0x40}, @rdmsr={0x32, 0x18, {0x771}}, @rdmsr={0x32, 0x18, {0x40000104}}, @wr_crn={0x46, 0x20, {0x2, 0xa}}], 0x211}) ioctl$KVM_RUN(r7, 0xae80, 0x0) close_range(r4, r2, 0x0) 994.58098ms ago: executing program 7 (id=2007): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfa9, 0x81, &(0x7f00000000c0)=0x20) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000280)=0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa5a86dd60f900f500180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344], 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='io_uring_link\x00', r2, 0x0, 0x4}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='io_uring_link\x00', r3, 0x0, 0x4}, 0x18) r4 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0xfffffff8, 0x100}, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x44, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000022}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000004fdffffff0007000000000000", @ANYRES32=0x0, @ANYBLOB="07f7f9ff00000000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 671.715366ms ago: executing program 7 (id=2010): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000180)="76389e147583ddd0569ba56a655855", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x66100, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) write$qrtrtun(r3, &(0x7f0000000600)="303b2ffe779a579d", 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10, 0xa006}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) splice(r7, 0x0, r6, 0x0, 0x18, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r5, 0x0, 0x30, 0x14, @val=@netfilter={0x0, 0x0, 0x4}}, 0x20) ioctl$SIOCRSACCEPT(r8, 0x89e3) 576.70058ms ago: executing program 6 (id=2012): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$ndb(&(0x7f0000001700), 0x0, 0x2602) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x408006, 0x1f, 0x6}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYBLOB="1000"], 0x1c}, 0x1, 0x0, 0x0, 0x200488c1}, 0x850) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 491.436058ms ago: executing program 7 (id=2013): socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r0, 0x42a7d042}, &(0x7f0000000280)=0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xe6bed302604caac1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xffff}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000001300)=@newtfilter={0x1674, 0x2c, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xfff2, 0x1}, {0x7, 0x3}, {0x0, 0xb}}, [@f_tcindex={{0xc}, {0x18, 0x2, [@TCA_TCINDEX_ACT={0x4}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}]}}, @f_rsvp={{0x9}, {0x28, 0x2, [@TCA_RSVP_POLICE={0x24, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x100}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}]}]}}, @f_rsvp6={{0xa}, {0x914, 0x2, [@TCA_RSVP_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0xb, 0x3, 0x6, 0xb, 0x8, {0x2, 0x0, 0x200, 0xffff, 0x5ac, 0x3}, {0x7, 0x0, 0x0, 0xc452, 0x41}, 0x1, 0xfffffff7, 0xffff}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x6, 0x100, 0x3, 0x2, 0xae10, 0x7, 0x442, 0x4, 0xf1, 0x4, 0xfffff38a, 0x1, 0x2, 0x9, 0x5, 0x6, 0x9, 0x1, 0x9, 0x3c7d, 0x88, 0x3, 0x3, 0x3, 0x4, 0x42, 0x3ff, 0x9, 0xe3, 0x0, 0x5, 0x1000, 0xe1, 0x1, 0x800, 0xeb, 0x43, 0x2ddc, 0x22, 0x7ff, 0xfffffffb, 0x7ff, 0x80, 0x2, 0x9, 0x2, 0x1, 0x6, 0x81, 0x7, 0xfd, 0x5, 0xfffffff9, 0x2, 0x8, 0x1260, 0x9, 0x0, 0x8, 0xda3, 0x10001, 0x285, 0x7, 0x8, 0x4, 0x400000, 0x3, 0xffff, 0xf1, 0xfffffffa, 0x4, 0x5, 0x1, 0x1c0ca5f0, 0x799, 0x1, 0x9, 0x8, 0xfffffffe, 0x8, 0x5, 0x3, 0x8001, 0xf, 0x0, 0x3, 0x9, 0x80000000, 0x7, 0x0, 0x6, 0x1a92, 0x17d6000, 0x4, 0x7, 0x4, 0x0, 0xfffeffff, 0x5, 0x7fff, 0x4, 0x6, 0xe, 0x2, 0x21, 0x5, 0x18c91235, 0x8b1, 0x2, 0x2bb42c66, 0x100, 0x7, 0x480000, 0x3bf7, 0x3, 0x1ff, 0x1ff, 0x9455, 0x400, 0x400, 0x10, 0xa, 0x1, 0x8, 0x5, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x3f, 0xfffffffb, 0xcc, 0xfffffff7, 0x6, 0xfffffff7, 0x3, 0x5e, 0x9, 0x0, 0x9, 0x6, 0x200, 0x8, 0xbd, 0x2, 0xaebe, 0x3, 0x7, 0x2, 0x3, 0x10000, 0x6, 0x5, 0x8, 0x80000000, 0x3, 0x4, 0x9, 0xfffffffe, 0xfffff2f7, 0xf08, 0xfffff001, 0x9, 0x8, 0x1, 0x4, 0x9, 0x3ff, 0x9, 0x3, 0x4, 0x8, 0x401, 0x8, 0x9, 0x985, 0x9, 0x0, 0x9, 0x40000000, 0x2, 0x966c, 0xffffffff, 0x1, 0xfff, 0x7f, 0x100, 0x7f, 0x4, 0x5, 0x1, 0x3, 0x8, 0x2, 0x7f, 0x8, 0x10001, 0x5, 0x9f, 0xd347, 0x1, 0x2, 0x9, 0x9d26, 0x4, 0x40000000, 0xffffffff, 0x6a, 0xb, 0x8, 0x2, 0x10, 0x8, 0x2, 0xbc, 0x1, 0x4, 0x3, 0x1, 0x7fff, 0x8, 0x3, 0x80000000, 0x5, 0xfff, 0x5, 0x7, 0x7fffffff, 0x9, 0x7ff, 0x5, 0x9, 0x80000001, 0x0, 0x71, 0x0, 0x336a, 0x4, 0x1b64, 0x7, 0x0, 0x0, 0x3ff, 0x3ff, 0xc, 0x3d, 0xbff1, 0xf47, 0x6, 0x9f60, 0x5, 0x6, 0x960, 0x3, 0x6]}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xffe0, 0x5ce84fc625f70e28}}, @TCA_RSVP_SRC={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_RSVP_SRC={0x14, 0x3, @mcast2}, @TCA_RSVP_POLICE={0x47c, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x80}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x6, 0x5, 0x7, 0x1, {0xa9, 0x1, 0x6, 0x9, 0x6f48, 0x6}, {0x6, 0x0, 0x8, 0xfffc, 0x1, 0x4a08d37e}, 0x9, 0x6, 0x80000001}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x49aa41e4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffc, 0x8, 0xffffffcc, 0x5, 0x95a, 0x2, 0x80000000, 0x235, 0xef, 0x7fff, 0x8c5d, 0x0, 0x7f, 0x9, 0x4, 0xda, 0x240, 0x100, 0x700e, 0x5, 0x2, 0x2b, 0x401, 0x7, 0x6, 0x9, 0x1c14, 0x8000, 0x0, 0x1, 0x8, 0x3ff, 0x0, 0x7, 0x8, 0x3, 0xfffffff8, 0x14, 0x7, 0x4, 0x100000, 0x1c17, 0x7f, 0x294c, 0x1, 0x9, 0x2, 0x2, 0x6ed, 0x2, 0x401, 0xe2dc, 0x9, 0x1, 0xa, 0x9, 0x0, 0x80000000, 0x9, 0x6b2, 0x5, 0x7, 0x6, 0x7, 0xffff4af7, 0x0, 0x7, 0x200, 0x7, 0x1, 0x200, 0x985b, 0x1e0c, 0x7fff, 0x39, 0x3, 0x0, 0x1, 0x10000, 0x3, 0x9, 0xfe, 0x8, 0x1, 0xc, 0xfffffffb, 0xc24, 0x1ff, 0x7, 0x6c2f, 0x27bf, 0x9, 0x2, 0x335, 0xfffff801, 0x10, 0x92a9, 0x1, 0x90, 0xe606, 0xc, 0x0, 0x1, 0x62a, 0x400, 0x1, 0x68da, 0x81, 0x9, 0x81, 0x1, 0x1, 0xc555, 0xa5d, 0x3, 0xe68, 0x3, 0x7, 0xfff, 0x9, 0x2a30, 0x11, 0xfffffffc, 0x6, 0x2, 0x9, 0x1, 0x8a, 0x1, 0x2, 0x40000000, 0x4, 0x647e, 0x6, 0x43, 0x0, 0xb, 0x5, 0x9, 0x3, 0xfffffffe, 0x0, 0x9, 0x0, 0xff, 0xb, 0x3, 0x7, 0x8, 0x100, 0x8, 0xd74, 0x2d09, 0x1, 0x7f, 0x4, 0x1, 0x0, 0xfffffffe, 0x8000, 0xfffffffd, 0x5, 0x2, 0xfffffffa, 0xa, 0x906, 0xe90, 0xffff1bef, 0x1000, 0x7, 0x7, 0xb, 0x80, 0x300, 0x0, 0x80, 0x0, 0x3, 0x0, 0x8, 0x9, 0x9, 0x5, 0x10000, 0x8, 0x6, 0x3, 0x6, 0x0, 0x3, 0xffff, 0x4, 0x80, 0xffff8000, 0x4, 0x2, 0xa047, 0x9, 0x0, 0x40, 0x40, 0x823, 0x833c, 0x2, 0xfff, 0x8d8d, 0x7, 0x800, 0x9, 0xfa80, 0x4, 0x1000, 0xf, 0xa6e9, 0x4, 0x9, 0xfffffffe, 0x1, 0x5, 0xfff, 0x6, 0x1, 0x0, 0x10, 0x1, 0x9, 0xef4, 0x3, 0x81, 0xe6ed, 0x5, 0xfffffffc, 0x335, 0x8, 0x6, 0xffffffff, 0x9, 0x79, 0x8001, 0xfff, 0x3, 0x8, 0x200, 0xdbd, 0xea, 0x3, 0x6, 0x9, 0x5, 0x40, 0x1, 0x6, 0x4, 0xad, 0x8, 0x29]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80000001}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xc, 0x8, 0x28bf}, {0x3, 0x8, 0x7}, 0x2f, 0x5, 0xc7}}]}}, @f_tcindex={{0xc}, {0x884, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0xfffffff7}, @TCA_TCINDEX_POLICE={0x870, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xefca, 0xc9a9, 0x5f, 0x920a, 0xb33f, 0xffffff56, 0x2, 0x993, 0x3ff, 0x3, 0x8, 0x8, 0x800, 0x7, 0x7, 0xf, 0x7f, 0xffffffff, 0x9, 0x4, 0x81, 0x1, 0x9, 0x2, 0x401, 0x5, 0xd4, 0x213530ec, 0x3, 0x81, 0x8, 0x3, 0x7, 0x1, 0x8, 0xf, 0x2, 0x8, 0x7, 0x9, 0x2, 0x0, 0x8b27, 0x5, 0x2, 0x6, 0x3, 0x4, 0x1, 0x2, 0x6, 0xf, 0x2, 0x1, 0x5, 0x6, 0x9, 0xc, 0x0, 0x1, 0x0, 0x6, 0x9, 0x8, 0x3ff, 0x5, 0x3, 0x9, 0x7ff, 0xff, 0xf8, 0x5, 0x3, 0x3, 0x0, 0x9, 0xb1, 0x0, 0x9, 0x3, 0x6, 0xfffff115, 0x1, 0x101, 0x3, 0x800, 0x9, 0xc502cf9, 0x7d, 0x1000, 0x54ef6cdb, 0x401, 0x47a6a8b2, 0x6, 0x4, 0x9, 0x6, 0x247d8eb9, 0x97b, 0x4, 0x4, 0x9, 0xfffff88f, 0xffffffff, 0x8, 0x4, 0x4, 0x2, 0x33764fc1, 0x5, 0x1, 0x2, 0x6, 0x7, 0x101, 0x1, 0x401, 0xcb7a6f0, 0x3, 0x9, 0x2, 0x7, 0x5, 0x78e1, 0x9, 0x7, 0x4, 0x4, 0x0, 0x0, 0x3, 0xd, 0xab, 0x4, 0xd7, 0x7, 0x3ff, 0xe, 0xe, 0x3, 0x8000, 0x4322, 0x1, 0x5, 0x101, 0xe2d, 0x9, 0xdcf, 0xfff, 0xffff, 0x0, 0x7, 0x6, 0x81, 0xb14, 0x2, 0x5, 0x0, 0x6, 0x9b, 0x6, 0x0, 0x0, 0x8, 0x80000000, 0x9, 0x3, 0xa, 0x8000, 0x5, 0x2, 0x6, 0x64e4, 0x10000000, 0x0, 0xf, 0x6, 0x0, 0x5, 0x1, 0xfffffeff, 0x1, 0x17, 0x8, 0x9, 0x0, 0x80000000, 0x82, 0x7fff, 0x6, 0x7, 0x0, 0x3ff, 0x5, 0xfffffff9, 0x1, 0x8, 0x1255, 0xc, 0x1, 0x10000, 0x6, 0x7fffffff, 0x3, 0x3f, 0x8000, 0x1, 0x6, 0x0, 0x3, 0x7, 0x2, 0x6, 0x3, 0x80, 0x5, 0x1, 0x81, 0x5db, 0x4, 0xe, 0x9, 0x0, 0x80000001, 0x7, 0x6, 0x8, 0x9, 0x4, 0x9, 0xffff, 0xfffffffa, 0xa6c1, 0x3, 0x1, 0x5, 0x8, 0x401, 0x8000, 0x9, 0xfffffff8, 0xb7, 0x2, 0x61f, 0x1, 0xfffffffd, 0x5f1, 0x0, 0x10, 0xff, 0xfffffffe, 0x321, 0x6, 0x7, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x8001, 0xfffffff8, 0x4, 0x9, 0xe9460, 0x5d, 0x40, 0x634, 0x6, 0xffffff36, 0x8bb4, 0x0, 0xc67d, 0x0, 0xc, 0xbc, 0x6, 0x4, 0x1000, 0x0, 0x10000, 0x7, 0xfffffffd, 0x7fffffff, 0x8, 0x2, 0x70000000, 0x3, 0x0, 0x3, 0x0, 0x4, 0x8, 0x9, 0x1, 0x4, 0x1000, 0x6, 0x7, 0x1, 0x7, 0x0, 0xffff38d7, 0x40, 0x95f, 0xd1000000, 0x9, 0x30e1, 0xa, 0x5, 0x5, 0x4, 0x800, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x3, 0x9, 0x1, 0x1, 0x7, 0x2, 0x401, 0x1ff, 0x2, 0x1e52, 0x6, 0x9, 0x1, 0x9, 0xd8b, 0x9, 0xc41, 0xdd, 0x4, 0xfffffe01, 0x8, 0x0, 0x2, 0x8, 0xfffff000, 0x6, 0x7, 0x42e, 0x6, 0x4292, 0x10, 0x8, 0x3, 0x401, 0xfffffffc, 0x65, 0x3, 0x4, 0x8001, 0x0, 0x1, 0x1, 0x0, 0x5, 0xc, 0xd, 0x256, 0x2, 0x7fffffff, 0x8, 0x9, 0x6, 0x1, 0x1, 0x3, 0x9, 0x6bb80ae0, 0xff21, 0xb, 0x80000001, 0x3, 0x1, 0x1000, 0x3, 0x5, 0x7, 0xe, 0x3, 0x35, 0x7, 0x9, 0x10001, 0x8001, 0x1, 0x778, 0x0, 0x56, 0x5, 0x81, 0xde2, 0x40000, 0xbe98, 0x0, 0x1a7, 0x81f4, 0xc52c, 0xa, 0x5, 0x1, 0x1, 0x4, 0x4, 0x5, 0x1ff, 0x479, 0x4, 0x800, 0x3, 0x8000, 0x8, 0xf, 0x6, 0x40, 0x6, 0xfff, 0x8a, 0xc1d, 0x9, 0x9, 0x2, 0x74, 0xac, 0x6, 0x8, 0x9, 0x7, 0x0, 0x6, 0xffffff42, 0x5, 0x100, 0xa, 0x6, 0x8, 0xb, 0x6, 0x1ff, 0x2, 0x8, 0xfffffff9, 0x5, 0x400, 0x0, 0x0, 0x8, 0x74b, 0x7, 0x6932, 0x0, 0x0, 0xf324, 0x101, 0x0, 0x3, 0x8001, 0x5, 0xecd, 0x6, 0x1, 0x8, 0xc1, 0x9, 0x4, 0x5, 0x7f, 0x3, 0xffffffff, 0x7, 0xfffffe01, 0x4, 0x7, 0x6, 0x3, 0x3, 0x5, 0x9, 0x8, 0x80000000, 0x1, 0x400000, 0x80000000, 0x40, 0xffffffff, 0x8, 0x5, 0xffffffff, 0x5, 0x3, 0x9, 0x9, 0x1000, 0x10, 0x1ff, 0x5, 0x4, 0xfffffffc, 0x5, 0x1c3, 0x4000, 0x2, 0x4, 0x7f, 0x6edb, 0x8000, 0x1, 0x7]}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0xbb1, 0x2, 0x5, 0x1f7, 0x2, {0x5, 0x0, 0xff8e, 0xd, 0x8, 0x5}, {0x1, 0x0, 0x1, 0x7, 0xe1be, 0x4}, 0x2, 0xffffffff, 0x9}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0xfffffffb}]}}, @f_rsvp6={{0xa}, {0x43c, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @mcast2}, @TCA_RSVP_POLICE={0x424, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xf}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7bb9a99a}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x6a, 0x6, 0x3, 0x6, 0x7, 0xfffff95a, 0x6, 0x7f, 0xfffffffb, 0x7, 0x1, 0xfff, 0x8, 0x0, 0xfffffff5, 0x2, 0x9, 0x7, 0x3, 0x5ab, 0x0, 0x0, 0x1, 0x4, 0x64, 0x800, 0x563, 0x8, 0xa5a0, 0x9, 0x80000000, 0x9, 0x80000000, 0x1000, 0x81, 0x91, 0x4, 0x0, 0x80000001, 0xfffffff9, 0xfffffff7, 0x2, 0x8, 0x1, 0x7, 0x6, 0x7da8e6d8, 0xb3c3, 0xffffe181, 0x80000001, 0x4, 0x83, 0x5, 0x7ff, 0xfffffffa, 0xfffffff7, 0x7, 0x80000001, 0x0, 0x7, 0x4, 0x9, 0x7, 0x6, 0x6, 0x8001, 0x6, 0x7f, 0x3, 0x1c60aa61, 0xa, 0x6, 0x0, 0x2, 0xfffff97c, 0x80000001, 0x100, 0x4bc, 0x1, 0xfff, 0x80000001, 0x6, 0x8001, 0x5, 0x0, 0x1, 0x4, 0x3, 0x8, 0x8aa, 0x0, 0x4, 0x0, 0x7, 0x2, 0x157, 0x2, 0x78110b6e, 0x3ff, 0x1, 0xc, 0x9, 0x2, 0xa, 0x6, 0x53a, 0xb0b4, 0x408, 0x8, 0x4, 0x8001, 0x0, 0x1, 0x50c, 0xfffffff8, 0x0, 0x1, 0x1, 0x21e6, 0xd8, 0x169, 0xea, 0x2, 0x101, 0x200, 0x10000, 0x6, 0x7, 0x9, 0x0, 0x1ad, 0x3, 0x2, 0x8, 0x3, 0x8, 0x7f, 0x6, 0x4, 0x7, 0x140000, 0x10001, 0xfffffff9, 0x9, 0xfffffffc, 0x7, 0xfffffff9, 0x9, 0x1, 0x0, 0x4, 0xb4d5, 0x80000001, 0x5, 0x1, 0x3, 0x9, 0x8, 0x2, 0x1, 0x0, 0x6, 0x7, 0x8, 0x7, 0xffffff92, 0x6, 0x0, 0x6, 0x2, 0x0, 0x7d, 0x2, 0xe17b, 0xff, 0x1, 0x7, 0x1, 0x8000, 0x5a59, 0x3ff, 0x7fffffff, 0x81, 0x8, 0x3, 0xf9f, 0x0, 0x400, 0x5, 0x1, 0xe, 0x6, 0x0, 0x4, 0x1, 0x3, 0x1ff, 0x3, 0x968d, 0x6, 0x6, 0x1, 0x5, 0x4, 0x4, 0xffffffff, 0xd486, 0x8eb6, 0xb, 0xd, 0x9, 0x10001, 0x6, 0x4, 0x3, 0xfff, 0x5, 0x8, 0x5, 0x2, 0xfffffff7, 0x400, 0x3fb, 0x8, 0xffffffe6, 0xf, 0xf7e0, 0x0, 0x1, 0x4, 0x6, 0x3, 0x8, 0x3, 0x10, 0xbb, 0xfffffffb, 0xd, 0x8, 0x1, 0x4, 0x9, 0x3f0, 0x5, 0x1000, 0x3, 0x5, 0x90e, 0x6, 0x8, 0xfffffffa, 0x9, 0x3, 0x9, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}]}]}}]}, 0x1674}}, 0x20048040) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={r1, @in={{0x2, 0x4e23, @broadcast}}}, &(0x7f0000000380)=0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000001c0)={0x0}) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r5, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007"], 0x6c}}, 0x840) r6 = creat(&(0x7f0000000580)='./bus\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') close(0x3) r7 = fanotify_init(0xf00, 0x2) fanotify_mark(r7, 0x105, 0x8971, r6, 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000100)) rename(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./bus\x00') readv(r7, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/88, 0xfffffdf1}], 0x1) 383.208678ms ago: executing program 9 (id=2014): r0 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) (async) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000040)={0x0, r0, 0x31, {0x5, 0x10001}, 0x6}, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r3, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x800000, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=virtio,accesC@/Ement,ve\x00'/45]) 382.786002ms ago: executing program 9 (id=2015): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x44084) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r3) getrusage(0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) 380.97156ms ago: executing program 6 (id=2016): r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000001040)={0xfc, {"a2e3ad09ed1a09f91b37090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f383b6c090890e0879b0a0ac6e70a9b3361959b509a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07640936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) socket$qrtr(0x2a, 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) (async, rerun: 64) close(0x3) (async, rerun: 64) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x7) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, '\x00', @raw_data=[0x0, 0x4, 0xb5, 0x5, 0xd13, 0x5, 0x8, 0x9fad, 0x4, 0x1e, 0x4, 0x7, 0xffff18bd, 0x5, 0x2, 0x1, 0x3, 0x7fffffff, 0x0, 0x87, 0x1, 0x8, 0x18000, 0xef, 0x6, 0x6, 0x7f, 0x401, 0x3, 0x83, 0x0, 0x6]}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}}, {0xa, 0x0, 0x0, @remote}, 0xffffffffffffffff, 0xfffffffc}}, 0x48) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) (async, rerun: 32) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (rerun: 32) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000140), r6) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000400)={@my=0x0}) (async, rerun: 64) r7 = socket(0x28, 0x5, 0x0) (rerun: 64) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) (async) close_range(r4, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000000)={0x2d008400, 0x0, 0x0, 0x0, {0x1000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000006) 380.040675ms ago: executing program 9 (id=2017): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0502460c"], 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x4515, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x9e3a, 0x2900, 0x80000, 0x1f6}, &(0x7f0000002000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200, 0x48) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sysfs$2(0x2, 0x0, &(0x7f0000000180)=""/222) r1 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0xffff, 0xffffffff, @loopback, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001840), 0x3b, 0x0) 320.787797ms ago: executing program 6 (id=2018): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602001f00000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x60046000) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r2, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x81) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r1) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r5, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '^[/\xef\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) (async) mkdir(&(0x7f0000000080)='./file0\x00', 0x94) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602001f00000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x60046000) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r2, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x81) (async) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r1) (async) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r5, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '^[/\xef\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) 316.905153ms ago: executing program 6 (id=2019): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000ece65fbcee5586dd6001010000161100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e220016"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 313.769532ms ago: executing program 6 (id=2020): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x420100, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000380)={0xf0f00a, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000c7f000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000590ffe)='v4') 256.309023ms ago: executing program 6 (id=2021): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0), 0x10) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002280)=@newtaction={0xf70, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xf5c, 0x1, [@m_pedit={0xf58, 0x1, 0x0, 0x0, {{0xa}, {0xf2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xf10, 0x2, {{{0x101, 0x5c, 0x0, 0xb, 0x9}, 0x8, 0x7, [{0xa24e, 0x80000000, 0x80000000, 0xfffffff7, 0x5, 0x6}, {0x6, 0x1, 0x8, 0x80, 0x0, 0xfffff23e}, {0x2, 0xe, 0x5c, 0x7, 0x9, 0x2}, {0x3, 0x2, 0x9, 0x2, 0x10, 0x34}, {0x101, 0xce1f, 0x2, 0x80000001, 0x10000}, {0xb336, 0x90, 0x0, 0x2, 0xf}, {0xd6, 0x3, 0x400, 0x80000001, 0x8}, {0x4, 0x6, 0x2, 0x58351850, 0x4, 0x9}, {0x727, 0x76dc, 0x2, 0x3ff, 0x73, 0x5b1d}, {0x7fffffff, 0x0, 0x1, 0x1, 0x5, 0x8}]}, [{0x7, 0x8, 0xb6f8, 0x8, 0x101, 0x3}, {0x9, 0x6, 0x6, 0xfffffff7, 0xd, 0xed7}, {0xaabee86, 0x100, 0x4, 0x8, 0x8, 0xb6d}, {0x66, 0x80000000, 0xfffffffd, 0x2, 0x10000, 0x9}, {0x2, 0xfffffffc, 0x9, 0x1, 0x9}, {0x3, 0x8, 0x9, 0x402, 0xf, 0x939b}, {0xdc11, 0xfffffff9, 0x3ff, 0xfada, 0x401, 0x10000}, {0x15, 0x9, 0x40000, 0x100, 0x7, 0x1}, {0x5, 0x1, 0x2, 0x80000001, 0xfff, 0x8}, {0xb73, 0x5, 0x3, 0xfffffff7, 0x0, 0xd}, {0xffffff80, 0x3, 0x1, 0x80000001, 0x4, 0x4}, {0x519, 0xf0, 0x66, 0x3, 0x5, 0xfffffff7}, {0x400, 0x200, 0x1fe, 0x3, 0x5, 0x5}, {0x3, 0x5, 0x1, 0x101, 0x200}, {0x4, 0x7, 0x7, 0x9, 0xf, 0x1}, {0x401, 0x433, 0x7, 0xffffff7f, 0x9, 0x7}, {0x12, 0x6, 0x9, 0x0, 0x5, 0x2}, {0x5, 0x1, 0x8, 0x3, 0xa9, 0xfffffffc}, {0x0, 0x80000000, 0x2, 0xce6, 0x1ff, 0x2}, {0x1400, 0x8, 0x5, 0x3ff, 0xfffffffe, 0x8}, {0xa177, 0x8, 0x1, 0x7, 0x9, 0x8000}, {0xce0, 0x4, 0x1ff, 0xd7, 0x7, 0x6}, {0xffff4234, 0x4f9, 0xfffffff9, 0x1, 0x9, 0xffffffdd}, {0x81, 0x2c, 0xc13, 0x7d1, 0x4, 0x6}, {0x5, 0x7, 0x7, 0x1000, 0x2, 0x7f}, {0x400, 0x6, 0x7, 0x6, 0x120, 0x6}, {0x6, 0x3, 0x4, 0x7ff, 0x0, 0x3}, {0x6, 0x0, 0x3, 0x2, 0xfff, 0x2}, {0x8, 0x3, 0x6, 0x5c6a, 0x5, 0x9}, {0x8, 0x1, 0x8, 0x8, 0x8, 0x95}, {0xf80, 0x8, 0x10000, 0x8, 0xe, 0xfffeffff}, {0x4, 0x8000, 0x3, 0x8aa6, 0xfffffff7, 0x5}, {0x8, 0x7, 0xfffffff7, 0x3ff, 0xd7d, 0x5}, {0xd50, 0x2, 0x8, 0x4, 0x8, 0x5}, {0x1, 0x6, 0x7f, 0x9, 0xfffffff9, 0x1}, {0x162, 0x0, 0xfffff507, 0xcb5, 0x5, 0x7fffffdf}, {0x80000000, 0x0, 0x1, 0x2, 0x100, 0x7}, {0x8, 0x8, 0x1, 0xffffffff, 0x3ff, 0x5d1}, {0x3, 0xd054, 0x9, 0x5, 0xfffff801, 0x1}, {0x7, 0x8, 0x983, 0x0, 0x6, 0x200}, {0x47, 0x202, 0x8, 0x9, 0x2, 0x9}, {0x1, 0xfffffff9, 0x2, 0x7, 0x7, 0x1000}, {0x10000, 0x24056a58, 0x8, 0x8, 0x0, 0x8}, {0x2, 0x1ff, 0x3fc, 0x0, 0x2, 0x40000000}, {0x7ff, 0x7ff, 0x0, 0x3, 0x9ca, 0xffffffff}, {0x80000000, 0x9, 0x2, 0x2, 0xdd9f, 0x40}, {0xa, 0x9, 0x3, 0x0, 0xe00, 0x7fff}, {0x4, 0x7, 0x3, 0x0, 0x7f, 0x8}, {0x7, 0x8, 0x101, 0x4, 0x0, 0x80000000}, {0x7, 0x5, 0xfffff801, 0x1ff, 0x1, 0x10000}, {0x80000001, 0x2, 0x2, 0x3, 0x4}, {0x40, 0x0, 0x7, 0xc, 0x1, 0xffff0001}, {0x6, 0x0, 0x2, 0x5, 0x742}, {0x4, 0x401, 0xc0, 0xffffffff, 0x8, 0x2}, {0x7, 0x6, 0x5, 0x4d2b, 0x4, 0x8001}, {0x6, 0xf731, 0x2b1, 0xfffffffa, 0x1, 0x101}, {0x5, 0x0, 0x101, 0x0, 0x7, 0x8}, {0x3, 0x7, 0x8, 0x8, 0x7, 0xa0}, {0x1a, 0xe, 0x3ff, 0x0, 0x3, 0xfe}, {0x2, 0x7, 0xcf0, 0x5, 0x7ff, 0x6}, {0xfff, 0x6, 0x0, 0x1200, 0x0, 0xf}, {0x9, 0xfffffbff, 0x2, 0x5, 0x0, 0x95}, {0x0, 0x22f, 0x2, 0xe7b, 0xba, 0x7ff}, {0x1, 0x7b7, 0x0, 0xcb2d, 0xe, 0x6}, {0x0, 0x30000, 0x50, 0x5, 0x5, 0x8000}, {0xf9, 0x5b, 0x8, 0x3, 0x3, 0xff36}, {0x2de, 0x6, 0x5, 0xa4, 0x6, 0x7}, {0x8, 0x9, 0xd32, 0xd4, 0x100, 0x1d}, {0x0, 0xb, 0xec36, 0x52, 0xa, 0xe}, {0x80000000, 0x7f, 0x80, 0x4, 0x35b3, 0x5}, {0x8, 0x7, 0x44c9bfe0, 0x40, 0x4, 0x1}, {0xffff7fff, 0xf7af, 0x1ff, 0x21, 0x81, 0xa}, {0x2, 0x4, 0x7fffffff, 0x3, 0x1ff, 0x800}, {0x9, 0x9, 0x8, 0x2, 0x9, 0x6}, {0x6, 0x9, 0xafb, 0x3, 0x9, 0x5}, {0x2b20, 0x9, 0x7fffffff, 0x7c86, 0x7f, 0x8}, {0x1ff, 0x0, 0x0, 0x6, 0x8, 0x2}, {0x3, 0x6, 0x1c97600f, 0x6, 0xd, 0x800}, {0x1, 0x0, 0x0, 0x9, 0x19, 0x2}, {0x3, 0x7, 0xd, 0x7fffffff, 0x4}, {0x7f, 0x3, 0x5, 0x1, 0x75, 0x100}, {0xfff, 0x1, 0x1d, 0x40, 0x472, 0x1}, {0xe, 0x48f, 0x7, 0xfffffffc, 0x6, 0x7}, {0x400, 0x9, 0x401, 0x6, 0x1ff, 0x1}, {0xdd4, 0x0, 0x9, 0x26, 0x7, 0x7e27a179}, {0x3134, 0xfffffff9, 0x7, 0x6, 0x2, 0x1ff}, {0x6, 0x9, 0x611, 0x3, 0x2, 0x1}, {0x9, 0x3, 0x2, 0x9e7, 0x6, 0x4}, {0x5, 0x7, 0x1, 0x10000, 0xa, 0x1}, {0x9, 0x8, 0x0, 0x5, 0x3, 0x80000001}, {0x8, 0x9, 0x2, 0x5, 0x6, 0xd888}, {0x1, 0xdc13, 0x8, 0x6, 0x5, 0x1}, {0xfffffff8, 0x7, 0xb13, 0x7f, 0x81, 0x3ff}, {0x2da, 0x0, 0x9, 0xf77, 0x4, 0x1}, {0x1, 0x5, 0x1, 0x6, 0x6, 0x4f}, {0x2a, 0x7, 0x1, 0x0, 0x2, 0x80000001}, {0x8, 0x2f, 0xfffffff9, 0x6, 0x200, 0x800}, {0x40, 0x6, 0xc, 0xa1f7, 0x9, 0x1000}, {0x4, 0x101, 0x3, 0x401, 0x0, 0xfff}, {0x1, 0x0, 0x9, 0xf, 0x1000, 0x3f}, {0x3, 0x3, 0x1, 0x8, 0x400, 0x8}, {0x2, 0x1000, 0x5, 0x8, 0x200, 0x66d4}, {0x7, 0x2b914a38, 0xda2, 0x0, 0x2, 0x6}, {0x95, 0x9, 0x6, 0x3, 0x5, 0xfffffffb}, {0x3ed, 0x9, 0x4, 0x2, 0xfffff801, 0x9}, {0xf48, 0x80000000, 0x1000, 0x1, 0x9, 0x3}, {0x5, 0xffffffff, 0x3, 0xf, 0x8, 0x2}, {0x10000000, 0xbc9, 0x0, 0x6, 0x1}, {0x3ff, 0x0, 0x6, 0x3, 0x892, 0xffff5833}, {0x2, 0x5, 0x8, 0x8, 0x8, 0x8}, {0x5, 0x3, 0x1, 0x7, 0x8, 0xfffffffb}, {0x6, 0x2, 0x8, 0x1, 0x9, 0x40}, {0x73d, 0x81, 0x4, 0x4c, 0x2, 0x10000}, {0x4, 0x1, 0x401, 0x4, 0x3}, {0x99, 0x1, 0x4, 0x2, 0xd, 0x4}, {0x100, 0xfffffffd, 0x5, 0xa, 0x7, 0x5cf4}, {0x8, 0x5, 0x9, 0x1000, 0x1ff, 0x80}, {0x800, 0x10000, 0x2, 0xd3, 0xff, 0xfffffffd}, {0x4, 0x3, 0x6, 0x727b, 0xc, 0x7f}, {0x6, 0x2bf3, 0x3, 0x35, 0xd, 0xf24}, {0x9, 0x890c, 0xcf3, 0x87ee, 0x5, 0xfffffffc}, {0x49424b5d, 0xf, 0x3, 0x4, 0x2d219f14, 0x1ff}, {0x3, 0x5, 0x9, 0x9, 0xffffffff, 0x4}, {0x6, 0x5, 0x4, 0x80, 0x7fffffff, 0x8000}, {0x5, 0xfffff404, 0x1, 0x8, 0x879, 0x3}, {0x5, 0xc, 0x6, 0xfffffffb, 0x8, 0x2}, {0x4, 0x600, 0x39846a8c, 0x1, 0x7fff, 0xb}, {0xfffffff1, 0x8, 0x3, 0x3, 0x2, 0x3}], [{0x5, 0x1}, {}, {0x5, 0x1}, {0x1}, {}, {0x1, 0x4fa8102eea1673da}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1a2b73033141e383}, {0x3, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x4}, {0x5}, {0x2}, {0x4}, {}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {}, {0x2, 0x1}, {}, {0x7}, {0x1, 0x1}, {0x2}, {0x2}, {0x1}, {0x8, 0x1}, {0x3}, {}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0xbfb90171edaf7461}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {}, {0x5}, {}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x5}, {0x3}, {0x3}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x500}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xf70}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r5 = inotify_init1(0x80800) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0x64000ba6) inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 191.432532ms ago: executing program 2 (id=2023): r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd0, r0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r1}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x48040) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x13, 0xffffffffffffffff, 0x8000000) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x10000000) r5 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0x0, 0x0, @my=0x0}, 0x10, 0x800) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x1, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1fd9863fe096d998, {0x0, r6}}) r7 = socket$netlink(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_LOGICAL_INO(r7, 0xc0389424, &(0x7f0000000340)={0x2cac22a6, 0x28, '\x00', 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket(0x11, 0x2, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x9d, "6de0f1f4132419a4a45631ec49d82caab1e09a1c80240945c899d24ae3d3a9968994076de39604950f9039dadcd2c9015c384ee1a8355d7b0ee4e58d083ff037cc373d930f0ce29c947d0df331a984a0b68dba38b50ef0e1e8058560bab4a4ef127e9e5c092e794c92791954f727044f12a2d877e78ee2edebaf5cd7abeede4ef98e7102d58298376f54864dfe08a60bfb05624550a75a071e219dfede"}, &(0x7f0000000440)=0xa5) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000480)={r9, 0x9}, 0x8) connect$vsock_stream(r8, &(0x7f00000004c0)={0x28, 0x0, 0xffffffff, @host}, 0x10) r10 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_mreqsrc(r10, 0x0, 0x28, &(0x7f0000000500)={@broadcast, @remote}, &(0x7f0000000540)=0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r7, 0x8983, &(0x7f0000000580)) connect$vsock_stream(r8, &(0x7f00000005c0)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x8}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x5}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008054}, 0x0) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000700)={0x1, 0x6}, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000001, 0x10010, 0xffffffffffffffff, 0x8000000) sendto$packet(r8, &(0x7f0000000740)="e3df5d1c7acb5b4f50240511703e7025984f5a6ffc82df67cef6c355ef5e001d8652a80e12ec2b4b7100f8d94c62d2b1fe325dd450a2f418619d4621469505a0d013df155f73200fbdb753e1cdd4137826353e058a59af5df65ec03cdf87e3091a2ab018dfef8971ff42905fef3c4e5c93fc905e470da61bddbcf3fb9008395f223d417f5d23d73395965ad4e071523341e7c878bc719be845ebfbb24d4cf53375281a8d75c8da496fa3c26393e2911f86f4d21bc36e68db721a66b122001979cdc5d2be", 0xc4, 0x4000, &(0x7f0000000840)={0x11, 0xf7, r1, 0x1, 0x8, 0x6, @random="90a764d95aa7"}, 0x14) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r7) sendmsg$TIPC_NL_NODE_GET(r7, &(0x7f0000000b80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b40)={&(0x7f0000000900)={0x214, r11, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa36e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9f26}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xea}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffc2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x14f8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x906}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3963}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffff9}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x5000}, 0x4000) r12 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r7) sendmsg$NL80211_CMD_NEW_KEY(r12, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x64, r13, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x12}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "3cb422108d"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x913fc18d78154096}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "cf7aa832a5d110da4ffa3477a4"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x64}, 0x1, 0x0, 0x0, 0x4046848}, 0x24080001) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@bloom_filter={0x1e, 0x2, 0x5, 0x401, 0x40, r12, 0x4, '\x00', 0x0, r12, 0x1, 0x0, 0x1, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000f00)={r14, &(0x7f0000000e00)="2dd55e0368fb26ef5542ed321dff063468a847844e8857defd441915cba1aba5ad00fa19d2e72d91a2c872d8ca79fb8a05284b05f37da840e64ffb6cd4528592239b0e9f81170e9cb1b3fa194fdb5ab74e5a1d22b4a57f567feeff0cee78c5b3d6faac23e087fb093b467e878dd193ec24e27c30c93d5e2066590f9924c896259c5fb2577547f4a30d34dc9da99457e6457bc2c2d71ab61013be3472ed48a143", &(0x7f0000000ec0)=@udp6=r8, 0x1}, 0x20) 191.056486ms ago: executing program 2 (id=2024): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000400121001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000083850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x4, @mcast2={0xff, 0x3}}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x6, 0x5}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e08092320"], 0xb) syz_emit_vhci(0x0, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) r9 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r9) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000001040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000200)={r11, 0x9, 0x14c2, 0xa, 0x8, 0x200009e}, 0x14) ioctl$KVM_SET_USER_MEMORY_REGION2(r8, 0x40a0ae49, &(0x7f0000000380)={0x10004, 0x6, 0xeeef0000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x5, r9}) 128.355653ms ago: executing program 2 (id=2025): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$ndb(&(0x7f0000001700), 0x0, 0x2602) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x408006, 0x1f, 0x6}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYBLOB="1000"], 0x1c}, 0x1, 0x0, 0x0, 0x200488c1}, 0x850) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 127.838016ms ago: executing program 2 (id=2026): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, r3, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x7fffffff}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_IOVA_RANGES(r1, 0x3b84, &(0x7f00000000c0)={0x20, r3, 0x0, 0x0, &(0x7f0000000040)}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001800010000000010000000000200000002000009f6"], 0x30}, 0x1, 0x0, 0x0, 0x10001}, 0x4000000) 117.32852ms ago: executing program 2 (id=2027): setfsuid(0xee00) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') preadv(r1, &(0x7f0000001240)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1, 0x0, 0xa3e) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1f}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e23, 0x7, 0x4e20, 0x0, 0x2, 0x80, 0x80, 0x11, 0x0, 0xee00}, {0x8000, 0x9, 0x4, 0x8, 0x1, 0x101, 0x6}, {0x58, 0x3, 0x6, 0x4}, 0x240, 0x6e6bc0, 0x1, 0x1, 0x0, 0x2}, {{@in=@multicast2, 0x4d5, 0x33}, 0x2, @in6=@rand_addr=' \x01\x00', 0x3502, 0x0, 0x3, 0x22, 0xfffffffd, 0x5, 0x6}}, 0xe8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x2, 0x21}]}, @restrict={0x0, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x3e}, 0x20) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet6_buf(r2, 0x29, 0x2d, &(0x7f0000000440)=""/156, &(0x7f0000000100)=0x9c) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0xfffffffffffffffe, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x2000, 0x0, r3, 0x0, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in6}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xe8) setresuid(0xffffffffffffffff, r3, 0x0) 116.546156ms ago: executing program 2 (id=2028): r0 = memfd_create(&(0x7f0000000140)='\vem\xda\x99[R@M\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) r1 = syz_open_dev$audion(&(0x7f0000000180), 0x10001, 0x14401) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000340)="50c42a28dc9ce69a71f5893680ff1f5b31d58e8cf9f938b51813dfc678a468f0a07c8331002511a29237f6bc94312b1c97689d3af08282d55c441d6b4a741021bae5db0a1d654fc72c1d10ffc33b07c0e339e9821b83e35db9c78bd478a44cc071c7a8a6cf947c5806832d06b6c8514e2f1ff9041b3be8f0f2caa638e832c0e831be70d3c9db5be0ba15f4d5e01cea1902251cd1290d1ff0c3f19cb741a085e065a3de5c1ccef5d7bda759226de1aa8246858882d79dd0968593f9e5b1cd3177950ea9791db020a28d7d83f10750903c4421bf2a24150f550334fd66183bc5c32a0d534a185ddb8152c811640b812d04654ffa97d284a0a730dc", 0xfa, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000200)={r2}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, &(0x7f0000000040)) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xd) r4 = gettid() timer_create(0x1, &(0x7f0000000040)={0x0, 0x1a, 0x4, @tid=r4}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x989680}}, 0x0) rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) sendmsg$can_raw(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@canfd={{0x4}, 0x39, 0x1, 0x0, 0x0, "e9706047e279096a7958cc3f9368bff8198743e38d82076d8a6a4891640a7a4e179c5f10e312eb3835683b3d8dc6ebb1a76d895ceea598959c6b02ae6a98dc6e"}, 0x48}, 0x1, 0x0, 0x0, 0x200040d5}, 0x4000000) 0s ago: executing program 9 (id=2029): setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x19, {{0x2, 0x0, @multicast2}}}, 0x88) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)=@chain={'key_or_keyring:', r2}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009405, &(0x7f0000000180)) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) close_range(0xffffffffffffffff, r0, 0x0) kernel console output (not intermixed with test programs): sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 122.280939][ T40] audit: type=1400 audit(1755858250.765:3096): avc: denied { connect } for pid=9701 comm="syz.2.1027" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 122.291062][ T40] audit: type=1400 audit(1755858250.765:3097): avc: denied { ioctl } for pid=9701 comm="syz.2.1027" path="socket:[35955]" dev="sockfs" ino=35955 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 122.300097][ T40] audit: type=1400 audit(1755858250.765:3098): avc: denied { write } for pid=9701 comm="syz.2.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 122.305984][ T40] audit: type=1400 audit(1755858250.765:3099): avc: denied { write } for pid=9701 comm="syz.2.1027" laddr=fe80::b lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 122.313010][ T40] audit: type=1400 audit(1755858250.793:3100): avc: denied { name_bind } for pid=9703 comm="syz.2.1028" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 122.537777][ T9722] tipc: Started in network mode [ 122.539338][ T9722] tipc: Node identity 521ee783b70b, cluster identity 4711 [ 122.541450][ T9722] tipc: Enabled bearer , priority 0 [ 122.549439][ T9722] syzkaller0: entered promiscuous mode [ 122.551296][ T9722] syzkaller0: entered allmulticast mode [ 122.565121][ T9722] tipc: Resetting bearer [ 122.695231][ T9739] tipc: Started in network mode [ 122.696862][ T9739] tipc: Node identity 2, cluster identity 4711 [ 122.698811][ T9739] tipc: Node number set to 2 [ 123.031763][ T9718] tipc: Resetting bearer [ 123.034827][ T9718] tipc: Disabling bearer [ 123.320716][ T9762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.325208][ T9762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.608484][ T60] usb 12-1: USB disconnect, device number 18 [ 123.622774][ T9775] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1053'. [ 123.689807][ T9778] SELinux: Context system_u:object_r:cpu_device_t:s0 is not valid (left unmapped). [ 123.763589][ T5328] Bluetooth: hci3: command tx timeout [ 123.917880][ T9795] program syz.6.1058 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.130406][ T9803] bond0: entered promiscuous mode [ 124.132160][ T9803] bond_slave_0: entered promiscuous mode [ 124.134356][ T9803] bond_slave_1: entered promiscuous mode [ 124.136201][ T9803] bond0: entered allmulticast mode [ 124.137898][ T9803] bond_slave_0: entered allmulticast mode [ 124.139801][ T9803] bond_slave_1: entered allmulticast mode [ 124.160370][ T9808] 9pnet_virtio: no channels available for device syz [ 124.223354][ T1332] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 124.368231][ T9828] new mount options do not match the existing superblock, will be ignored [ 124.375034][ T9829] hugetlbfs: Bad value for 'uid' [ 124.376930][ T9829] hugetlbfs: Bad value for 'uid' [ 124.394515][ T1332] usb 11-1: Using ep0 maxpacket: 8 [ 124.398013][ T1332] usb 11-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 124.401691][ T1332] usb 11-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.407343][ T1332] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 124.410558][ T1332] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.415050][ T1332] usbtmc 11-1:16.0: bulk endpoints not found [ 124.458677][ T5328] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 124.462215][ T5328] Bluetooth: hci2: Injecting HCI hardware error event [ 124.465494][ T5328] Bluetooth: hci2: hardware error 0x00 [ 124.599034][ T9834] geneve2: entered promiscuous mode [ 124.601141][ T9834] geneve2: entered allmulticast mode [ 124.698522][ T9840] netlink: 'syz.8.1073': attribute type 64 has an invalid length. [ 124.701131][ T9840] netlink: 'syz.8.1073': attribute type 4 has an invalid length. [ 124.703531][ T9840] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1073'. [ 124.804844][ T9849] fuse: Bad value for 'group_id' [ 124.806531][ T9849] fuse: Bad value for 'group_id' [ 125.013122][ T9870] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 125.016139][ T9870] ref_ctr increment failed for inode: 0x70 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888039d92040 [ 125.122932][ T9852] syz.7.1077 (9852): drop_caches: 2 [ 125.147028][ T9885] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1087'. [ 125.299880][ T9895] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1091'. [ 125.383968][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1094'. [ 125.561272][ T9918] syzkaller1: entered promiscuous mode [ 125.563077][ T9918] syzkaller1: entered allmulticast mode [ 125.581476][ T53] usb 12-1: new high-speed USB device number 19 using dummy_hcd [ 125.691421][ T9924] netlink: 'syz.8.1099': attribute type 13 has an invalid length. [ 125.693841][ T9924] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1099'. [ 125.698945][ T6469] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.699144][ T9924] netlink: 'syz.8.1099': attribute type 13 has an invalid length. [ 125.702525][ T6469] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.705320][ T9924] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1099'. [ 125.708190][ T6469] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.714395][ T6469] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.717655][ T9924] netlink: 'syz.8.1099': attribute type 13 has an invalid length. [ 125.720172][ T9924] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1099'. [ 125.723243][ T9924] netlink: 'syz.8.1099': attribute type 13 has an invalid length. [ 125.725725][ T9924] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1099'. [ 125.728597][ T9924] netlink: 'syz.8.1099': attribute type 13 has an invalid length. [ 125.731756][ T9924] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1099'. [ 125.734817][ T9924] netlink: 'syz.8.1099': attribute type 13 has an invalid length. [ 125.737305][ T9924] netlink: 'syz.8.1099': attribute type 13 has an invalid length. [ 125.739784][ T9924] netlink: 'syz.8.1099': attribute type 13 has an invalid length. [ 125.741868][ T53] usb 12-1: Using ep0 maxpacket: 8 [ 125.747316][ T53] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 125.751397][ T53] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 125.754659][ T53] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 125.758023][ T53] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.761977][ T53] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 125.764979][ T53] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.955440][ T9938] cgroup: No subsys list or none specified [ 125.990842][ T53] usb 12-1: usb_control_msg returned -71 [ 125.995009][ T53] usbtmc 12-1:16.0: can't read capabilities [ 125.998809][ T63] Bluetooth: hci3: command tx timeout [ 125.999772][ T53] usb 12-1: USB disconnect, device number 19 [ 126.053015][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 126.056243][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 126.059394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 126.127012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 126.344339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 126.672296][ T5328] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 126.753793][ T9954] F2FS-fs (nbd8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 126.756315][ T9954] F2FS-fs (nbd8): Can't find valid F2FS filesystem in 1th superblock [ 126.759880][ T9954] F2FS-fs (nbd8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 126.762498][ T9954] F2FS-fs (nbd8): Can't find valid F2FS filesystem in 2th superblock [ 126.858542][ T9961] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 127.178402][ T60] usb 11-1: USB disconnect, device number 8 [ 127.399744][ T1332] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 127.570558][ T1332] usb 13-1: Using ep0 maxpacket: 8 [ 127.573351][ T1332] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 127.576916][ T1332] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 127.580066][ T1332] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.583257][ T40] kauditd_printk_skb: 270 callbacks suppressed [ 127.583271][ T40] audit: type=1400 audit(1755858255.740:3371): avc: denied { getopt } for pid=9990 comm="syz.7.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 127.583369][ T1332] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.595995][ T1332] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 127.599732][ T1332] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.624012][ T60] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 127.784390][ T60] usb 11-1: Using ep0 maxpacket: 8 [ 127.787415][ T60] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.791331][ T60] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 127.794289][ T60] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.797700][ T60] usb 11-1: config 0 descriptor?? [ 127.822009][ T1332] usb 13-1: GET_CAPABILITIES returned 0 [ 127.823832][ T1332] usbtmc 13-1:16.0: can't read capabilities [ 127.972596][ T9991] net_ratelimit: 9 callbacks suppressed [ 127.972617][ T9991] Set syz1 is full, maxelem 65536 reached [ 128.036436][ T40] audit: type=1400 audit(1755858256.160:3372): avc: denied { write } for pid=9981 comm="syz.8.1117" name="usbtmc0" dev="devtmpfs" ino=3142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 128.046491][ T40] audit: type=1400 audit(1755858256.170:3373): avc: denied { mounton } for pid=9994 comm="syz.7.1122" path="/57/file0" dev="tmpfs" ino=328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 128.055295][ T40] audit: type=1400 audit(1755858256.170:3374): avc: denied { mount } for pid=9994 comm="syz.7.1122" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 128.103395][ T40] audit: type=1400 audit(1755858256.216:3375): avc: denied { create } for pid=9994 comm="syz.7.1122" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:fusefs_t tclass=blk_file permissive=1 [ 128.111624][ T40] audit: type=1400 audit(1755858256.216:3376): avc: denied { prog_run } for pid=9994 comm="syz.7.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 128.126113][ T40] audit: type=1400 audit(1755858256.235:3377): avc: denied { unmount } for pid=8729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 128.134550][ T40] audit: type=1400 audit(1755858256.245:3378): avc: denied { read write } for pid=8729 comm="syz-executor" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.144171][ T40] audit: type=1400 audit(1755858256.245:3379): avc: denied { open } for pid=8729 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.153887][ T40] audit: type=1400 audit(1755858256.245:3380): avc: denied { ioctl } for pid=8729 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.177491][ T9998] team0 (unregistering): Port device team_slave_0 removed [ 128.181670][ T9998] team0 (unregistering): Port device team_slave_1 removed [ 128.223000][ T5328] Bluetooth: hci3: command tx timeout [ 128.407531][ T9989] IPVS: Unknown mcast interface: nicvf0 [ 128.411931][ T60] iowarrior 11-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 128.416071][ T60] usb 11-1: USB disconnect, device number 9 [ 128.618583][ T9] usb 12-1: new high-speed USB device number 20 using dummy_hcd [ 128.757854][ T9] usb 12-1: device descriptor read/64, error -71 [ 129.021896][ T9] usb 12-1: new high-speed USB device number 21 using dummy_hcd [ 129.025084][T10038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10038 comm=syz.6.1133 [ 129.025998][T10038] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 129.127358][T10043] bridge_slave_0: left allmulticast mode [ 129.131931][T10043] bridge_slave_0: left promiscuous mode [ 129.134007][T10043] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.138656][T10043] bridge_slave_1: left allmulticast mode [ 129.141695][T10043] bridge_slave_1: left promiscuous mode [ 129.143714][T10043] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.147865][T10043] bond0: (slave bond_slave_0): Releasing backup interface [ 129.153451][T10043] bond0: (slave bond_slave_1): Releasing backup interface [ 129.158596][T10043] team0: Port device team_slave_0 removed [ 129.161920][T10043] team0: Port device team_slave_1 removed [ 129.164861][T10043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.167347][T10043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.170310][T10043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.172704][T10043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.181157][T10043] bond1: (slave bond2): Releasing backup interface [ 129.187933][ T9] usb 12-1: device descriptor read/64, error -71 [ 129.282990][T10048] __nla_validate_parse: 66 callbacks suppressed [ 129.283004][T10048] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.1135'. [ 129.287938][T10048] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1135'. [ 129.303342][ T9] usb usb12-port1: attempt power cycle [ 129.323715][T10051] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 129.677241][ T9] usb 12-1: new high-speed USB device number 22 using dummy_hcd [ 129.699396][ T9] usb 12-1: device descriptor read/8, error -71 [ 129.965953][ T9] usb 12-1: new high-speed USB device number 23 using dummy_hcd [ 129.987743][ T9] usb 12-1: device descriptor read/8, error -71 [ 130.105098][ T9] usb usb12-port1: unable to enumerate USB device [ 130.252916][T10062] validate_nla: 60 callbacks suppressed [ 130.252930][T10062] netlink: 'syz.6.1139': attribute type 4 has an invalid length. [ 130.365214][ T6192] usb 13-1: USB disconnect, device number 2 [ 130.371462][T10068] comedi comedi3: pcl818: I/O port conflict (0x7,16) [ 130.454458][T10086] netlink: 180 bytes leftover after parsing attributes in process `syz.8.1145'. [ 130.457568][T10086] NCSI netlink: No device for ifindex 0 [ 131.457014][T10153] overlayfs: failed to resolve './bus': -2 [ 131.491437][T10158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10158 comm=syz.2.1169 [ 131.634287][ T6127] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 131.805457][ T6127] usb 13-1: Using ep0 maxpacket: 8 [ 131.809753][ T6127] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 131.813293][ T6127] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 131.816662][ T6127] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.819899][ T6127] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.823983][ T6127] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 131.827215][ T6127] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.880160][ T8093] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 132.029812][ T6192] usb 12-1: new high-speed USB device number 24 using dummy_hcd [ 132.040475][ T8093] usb 11-1: Using ep0 maxpacket: 8 [ 132.043283][ T8093] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 132.045814][ T8093] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.048421][T10144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.048772][ T8093] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.048787][ T8093] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.048798][ T8093] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.048817][ T8093] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 132.051918][T10144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.054679][ T8093] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.062374][ T6127] usb 13-1: usb_control_msg returned -71 [ 132.071717][ T6127] usbtmc 13-1:16.0: can't read capabilities [ 132.074810][ T6127] usb 13-1: USB disconnect, device number 3 [ 132.190214][ T6192] usb 12-1: Using ep0 maxpacket: 8 [ 132.192943][ T6192] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.195940][ T6192] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.198956][ T6192] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.202073][ T6192] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.206073][ T6192] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 132.208919][ T6192] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.284758][ T8093] usb 11-1: usb_control_msg returned -32 [ 132.286674][ T8093] usbtmc 11-1:16.0: can't read capabilities [ 132.428765][ T6192] usb 12-1: GET_CAPABILITIES returned 0 [ 132.430580][ T6192] usbtmc 12-1:16.0: can't read capabilities [ 132.577972][T10198] overlayfs: failed to clone upperpath [ 132.633247][T10201] bridge_slave_0: left allmulticast mode [ 132.635099][T10201] bridge_slave_0: left promiscuous mode [ 132.636931][T10201] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.640357][T10201] bridge_slave_1: left allmulticast mode [ 132.642133][T10201] bridge_slave_1: left promiscuous mode [ 132.643985][T10201] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.644143][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.648964][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.651775][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.654766][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.657603][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.660394][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.663196][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.665956][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.669085][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.672036][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.675578][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.679014][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.681873][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.684639][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.687423][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.690172][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 132.694029][T10184] cgroup: subsys name conflicts with all [ 132.696095][T10201] bond0: (slave bond_slave_0): Releasing backup interface [ 132.696942][ T8093] usb 12-1: USB disconnect, device number 24 [ 132.703652][T10201] bond0: (slave bond_slave_1): Releasing backup interface [ 132.708991][T10201] team0: Port device team_slave_0 removed [ 132.712344][T10201] team0: Port device team_slave_1 removed [ 132.715316][T10201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.717605][T10201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.720333][T10201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.722650][T10201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.739664][T10203] team0: Mode changed to "loadbalance" [ 132.795085][T10207] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 133.008487][ T40] kauditd_printk_skb: 150 callbacks suppressed [ 133.008498][ T40] audit: type=1400 audit(1755858260.808:3531): avc: denied { read write } for pid=10220 comm="syz.8.1190" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 133.017884][ T40] audit: type=1400 audit(1755858260.808:3532): avc: denied { open } for pid=10220 comm="syz.8.1190" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 133.025380][ T40] audit: type=1400 audit(1755858260.817:3533): avc: denied { read } for pid=10220 comm="syz.8.1190" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 133.032433][ T40] audit: type=1400 audit(1755858260.817:3534): avc: denied { open } for pid=10220 comm="syz.8.1190" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 133.039867][ T40] audit: type=1400 audit(1755858260.817:3535): avc: denied { ioctl } for pid=10220 comm="syz.8.1190" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 133.050098][ T40] audit: type=1400 audit(1755858260.836:3536): avc: denied { read } for pid=10178 comm="syz.6.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 133.103100][ T40] audit: type=1400 audit(1755858260.901:3537): avc: denied { create } for pid=10224 comm="syz.8.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.109007][ T40] audit: type=1400 audit(1755858260.901:3538): avc: denied { ioctl } for pid=10224 comm="syz.8.1191" path="socket:[36515]" dev="sockfs" ino=36515 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.148566][ T40] audit: type=1400 audit(1755858260.939:3539): avc: denied { sys_module } for pid=10228 comm="syz.2.1193" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 133.176899][T10236] overlayfs: failed to clone upperpath [ 133.194312][ T40] audit: type=1400 audit(1755858260.976:3540): avc: denied { write } for pid=10239 comm="syz.2.1195" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.257539][T10241] tmpfs: User quota inode hardlimit too large. [ 133.377250][ T60] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 133.548427][ T60] usb 13-1: Using ep0 maxpacket: 8 [ 133.551237][ T60] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 133.554782][ T60] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 133.557861][ T60] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 133.561186][ T60] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.566537][ T60] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 133.569828][ T60] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.801898][T10227] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1192'. [ 133.805639][ T60] usb 13-1: GET_CAPABILITIES returned 0 [ 133.807431][ T60] usbtmc 13-1:16.0: can't read capabilities [ 134.223114][T10258] veth1_vlan: left promiscuous mode [ 134.227684][T10258] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1201'. [ 134.308326][T10265] lo: entered allmulticast mode [ 134.311121][T10264] lo: left allmulticast mode [ 134.350466][ T60] usb 12-1: new high-speed USB device number 25 using dummy_hcd [ 134.356398][T10271] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1205'. [ 134.465794][T10277] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1207'. [ 134.497077][T10281] __vm_enough_memory: pid: 10281, comm: syz.2.1208, bytes: 21200311189504 not enough memory for the allocation [ 134.544627][ T60] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.547678][ T60] usb 12-1: config 0 has no interfaces? [ 134.549348][ T60] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 134.552235][ T60] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.557259][ T60] usb 12-1: config 0 descriptor?? [ 134.739337][T10293] atomic_op ffff888055b50998 conn xmit_atomic 0000000000000000 [ 134.742720][T10293] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1212'. [ 134.776296][T10256] kAFS: unable to lookup cell '.,' [ 134.846754][ T6192] usb 11-1: USB disconnect, device number 10 [ 134.897731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 134.905808][T10315] 9pnet_virtio: no channels available for device syz [ 135.188546][T10340] ipvlan2: entered promiscuous mode [ 135.190368][T10340] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 135.334867][T10343] /dev/sr0: Can't open blockdev [ 135.441823][T10344] /dev/sr0: Can't open blockdev [ 135.492188][T10351] deleting an unspecified loop device is not supported. [ 135.772693][ T6024] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 135.955022][ T6024] usb 11-1: Using ep0 maxpacket: 8 [ 135.958231][ T6024] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 135.962182][ T6024] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.965276][ T6024] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 135.968265][ T6024] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 135.971274][ T6024] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.975273][ T6024] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 135.978338][ T6024] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.201903][ T6024] usb 11-1: usb_control_msg returned -32 [ 136.203805][ T6024] usbtmc 11-1:16.0: can't read capabilities [ 136.233476][T10385] netlink: 'syz.2.1242': attribute type 29 has an invalid length. [ 136.280950][T10389] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1244'. [ 136.284220][T10389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1244'. [ 136.337931][T10390] coredump: 1049(syz.2.1244): Core dump to core aborted: cannot preserve file permissions [ 136.417689][ T6024] usb 13-1: USB disconnect, device number 4 [ 136.555695][T10415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1251'. [ 136.566117][T10415] vlan0: entered allmulticast mode [ 136.567874][T10415] bridge0: entered allmulticast mode [ 136.570576][T10415] team0: left allmulticast mode [ 136.572239][T10415] team_slave_0: left allmulticast mode [ 136.574020][T10415] team_slave_1: left allmulticast mode [ 136.577094][T10415] bridge0: port 3(team0) entered disabled state [ 136.580948][T10415] bridge_slave_1: left allmulticast mode [ 136.582940][T10415] bridge_slave_1: left promiscuous mode [ 136.584806][T10415] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.589230][T10415] bridge_slave_0: left allmulticast mode [ 136.591074][T10415] bridge_slave_0: left promiscuous mode [ 136.592919][T10415] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.662407][T10417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1251'. [ 136.956748][T10427] usbtmc 11-1:16.0: usb_clear_halt returned -32 [ 136.960454][T10427] netlink: 292 bytes leftover after parsing attributes in process `syz.6.1234'. [ 137.173292][ T60] usb 11-1: USB disconnect, device number 11 [ 137.250986][ T839] usb 12-1: USB disconnect, device number 25 [ 137.270016][T10429] overlayfs: conflicting options: userxattr,redirect_dir=on [ 137.298218][T10432] bridge1: entered allmulticast mode [ 137.492483][T10452] openvswitch: netlink: Missing valid actions attribute. [ 137.495299][T10452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.498337][T10452] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1265'. [ 137.504501][T10452] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.511607][ T1143] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.515432][ T1143] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.524870][T10452] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 137.565346][ T1143] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.605137][ T1143] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.640945][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 137.643263][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 137.645884][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 137.648223][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 137.650518][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 137.710162][ T1143] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.713188][ T1143] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.742847][T10460] chnl_net:caif_netlink_parms(): no params data found [ 137.779135][ T1143] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.784513][ T1143] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.814156][T10460] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.818242][T10460] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.821216][T10460] bridge_slave_0: entered allmulticast mode [ 137.824767][T10460] bridge_slave_0: entered promiscuous mode [ 137.829351][T10460] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.831529][T10460] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.833723][T10460] bridge_slave_1: entered allmulticast mode [ 137.835795][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1279'. [ 137.840977][T10460] bridge_slave_1: entered promiscuous mode [ 137.849267][T10494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1279'. [ 137.871620][T10460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.876336][T10460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.898195][T10460] team0: Port device team_slave_0 added [ 137.903092][T10460] team0: Port device team_slave_1 added [ 137.933601][T10460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.933664][ T6032] usb 12-1: new full-speed USB device number 26 using dummy_hcd [ 137.935812][T10460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.947301][T10460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.955709][T10460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.958397][T10460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.968388][T10460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.050452][ T839] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 138.093173][ T6032] usb 12-1: device descriptor read/64, error -71 [ 138.180362][ T1143] bond0 (unregistering): Released all slaves [ 138.206169][T10460] hsr_slave_0: entered promiscuous mode [ 138.208280][T10460] hsr_slave_1: entered promiscuous mode [ 138.210250][T10460] debugfs: 'hsr0' already exists in 'hsr' [ 138.212313][T10460] Cannot create hsr debugfs directory [ 138.212486][ T839] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.218385][ T839] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.222060][ T839] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.225927][ T839] usb 11-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 138.228702][ T839] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.233707][ T839] usb 11-1: config 0 descriptor?? [ 138.237314][ T1143] tipc: Left network mode [ 138.275677][T10460] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 138.279166][T10460] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 138.283813][T10460] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 138.290614][T10460] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 138.309387][T10460] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.311582][T10460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.313812][T10460] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.316404][T10460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.332807][T10460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.338233][ T6472] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.341072][ T6472] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.346512][T10460] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.350036][ T6032] usb 12-1: new full-speed USB device number 27 using dummy_hcd [ 138.353898][ T6468] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.356523][ T6468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.359900][ T6468] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.362678][ T6468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.407564][ T40] kauditd_printk_skb: 252 callbacks suppressed [ 138.407578][ T40] audit: type=1400 audit(1755858265.858:3793): avc: denied { sys_module } for pid=10460 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 138.425541][ T40] audit: type=1400 audit(1755858265.876:3794): avc: denied { ioctl } for pid=10465 comm="syz.7.1273" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 138.441877][ T1143] hsr_slave_0: left promiscuous mode [ 138.444262][ T1143] hsr_slave_1: left promiscuous mode [ 138.448540][ T1143] veth1_macvtap: left promiscuous mode [ 138.450532][ T1143] veth0_macvtap: left promiscuous mode [ 138.452261][ T1143] veth1_vlan: left promiscuous mode [ 138.453911][ T1143] veth0_vlan: left promiscuous mode [ 138.489045][ T6032] usb 12-1: device descriptor read/64, error -71 [ 138.496933][ T40] audit: type=1400 audit(1755858265.942:3795): avc: denied { ioctl } for pid=10516 comm="syz.2.1284" path="socket:[37657]" dev="sockfs" ino=37657 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 138.507673][ T839] usbhid 11-1:0.0: can't add hid device: -71 [ 138.510319][ T839] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 138.515022][ T839] usb 11-1: USB disconnect, device number 12 [ 138.580065][T10460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.606694][ T6032] usb usb12-port1: attempt power cycle [ 138.677723][T10460] veth0_vlan: entered promiscuous mode [ 138.683894][T10460] veth1_vlan: entered promiscuous mode [ 138.689607][T10532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1286'. [ 138.694294][T10460] veth0_macvtap: entered promiscuous mode [ 138.698366][T10460] veth1_macvtap: entered promiscuous mode [ 138.706302][T10460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.711649][T10460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.714266][ T40] audit: type=1400 audit(1755858266.138:3796): avc: denied { read write } for pid=10534 comm="syz.6.1287" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 138.718678][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.723903][ T40] audit: type=1400 audit(1755858266.138:3797): avc: denied { open } for pid=10534 comm="syz.6.1287" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 138.726869][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.737104][ T40] audit: type=1400 audit(1755858266.138:3798): avc: denied { ioctl } for pid=10534 comm="syz.6.1287" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x55c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 138.741883][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.748033][ T40] audit: type=1400 audit(1755858266.138:3799): avc: denied { mounton } for pid=10534 comm="syz.6.1287" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 138.751356][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.758244][ T40] audit: type=1400 audit(1755858266.138:3800): avc: denied { mount } for pid=10534 comm="syz.6.1287" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 138.769754][ T40] audit: type=1400 audit(1755858266.147:3801): avc: denied { read write } for pid=10534 comm="syz.6.1287" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 138.777003][ T40] audit: type=1400 audit(1755858266.147:3802): avc: denied { open } for pid=10534 comm="syz.6.1287" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 138.794622][ T6472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.797404][ T6472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.805020][ T6472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.807425][ T6472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.847102][T10547] overlay: ./file0 is not a directory [ 138.897744][T10555] kernel profiling enabled (shift: 6) [ 138.970098][ T6032] usb 12-1: new full-speed USB device number 28 using dummy_hcd [ 138.991941][ T6032] usb 12-1: device descriptor read/8, error -71 [ 139.248793][ T6032] usb 12-1: new full-speed USB device number 29 using dummy_hcd [ 139.270405][ T6032] usb 12-1: device descriptor read/8, error -71 [ 139.336222][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.371566][T10573] binder: 10571:10573 ioctl 4018620d 0 returned -22 [ 139.397928][ T6032] usb usb12-port1: unable to enumerate USB device [ 139.524057][T10576] tipc: Started in network mode [ 139.526230][T10576] tipc: Node identity 7f000001, cluster identity 4711 [ 139.528784][T10576] tipc: Enabled bearer , priority 10 [ 139.545069][T10576] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 139.547861][T10576] tipc: Enabled bearer , priority 10 [ 139.759152][T10598] sctp: [Deprecated]: syz.6.1307 (pid 10598) Use of int in max_burst socket option. [ 139.759152][T10598] Use struct sctp_assoc_value instead [ 139.765335][T10598] futex_wake_op: syz.6.1307 tries to shift op by 32; fix this program [ 139.847175][ T5328] Bluetooth: hci3: command tx timeout [ 140.192335][T10621] netlink: 'syz.9.1316': attribute type 21 has an invalid length. [ 140.195724][T10621] __nla_validate_parse: 9 callbacks suppressed [ 140.195737][T10621] netlink: 128 bytes leftover after parsing attributes in process `syz.9.1316'. [ 140.201916][T10621] netlink: 'syz.9.1316': attribute type 6 has an invalid length. [ 140.204807][T10621] netlink: 3 bytes leftover after parsing attributes in process `syz.9.1316'. [ 140.627664][ T6052] tipc: Node number set to 2130706433 [ 140.890869][T10629] netlink: 75 bytes leftover after parsing attributes in process `syz.7.1319'. [ 140.919676][T10636] binder: 10634:10636 ioctl c0306201 200000000080 returned -14 [ 140.981468][T10641] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1321'. [ 141.132736][T10643] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 141.175640][T10646] input: syz1 as /devices/virtual/input/input25 [ 141.186215][T10645] delete_channel: no stack [ 141.282156][T10655] netlink: 'syz.7.1328': attribute type 27 has an invalid length. [ 141.296647][T10655] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.316937][T10655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.320965][T10655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.339943][T10655] veth1_macvtap: left allmulticast mode [ 141.341783][T10655] macsec0: left promiscuous mode [ 141.343346][T10655] macsec0: left allmulticast mode [ 141.357644][T10655] bridge1: left allmulticast mode [ 141.367513][T10656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.370954][T10656] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.375932][ T1143] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.379980][ T1143] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.384000][ T1143] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.387463][ T1143] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.472570][ T839] usb 14-1: new full-speed USB device number 2 using dummy_hcd [ 141.622230][ T839] usb 14-1: device descriptor read/64, error -71 [ 141.889506][ T839] usb 14-1: new full-speed USB device number 3 using dummy_hcd [ 142.028625][ T839] usb 14-1: device descriptor read/64, error -71 [ 142.040295][ T1113] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 142.042428][ T1113] ata1: failed to read log page 10h (errno=-5) [ 142.044485][ T1113] ata1.00: exception Emask 0x1 SAct 0x10000000 SErr 0x0 action 0x0 [ 142.046940][ T1113] ata1.00: irq_stat 0x40000000 [ 142.048445][ T1113] ata1.00: failed command: WRITE FPDMA QUEUED [ 142.050619][ T1113] ata1.00: cmd 61/60:e0:3e:09:10/00:00:00:00:00/40 tag 28 ncq dma 49152 out [ 142.050619][ T1113] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 142.055956][ T1113] ata1.00: status: { DRDY } [ 142.058117][ T1113] ata1.00: configured for UDMA/100 [ 142.059958][ T1113] ata1: EH complete [ 142.071431][ T5328] Bluetooth: hci3: command tx timeout [ 142.146281][ T839] usb usb14-port1: attempt power cycle [ 142.275003][T10679] program syz.6.1335 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.341549][T10683] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 142.343646][T10683] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 142.346122][T10683] vhci_hcd vhci_hcd.0: Device attached [ 142.348557][T10684] vhci_hcd: cannot find the pending unlink 1023 [ 142.351187][T10684] vhci_hcd: connection closed [ 142.351436][ T6468] vhci_hcd: stop threads [ 142.354389][ T6468] vhci_hcd: release socket [ 142.355825][ T6468] vhci_hcd: disconnect device [ 142.509751][ T839] usb 14-1: new full-speed USB device number 4 using dummy_hcd [ 142.542477][ T839] usb 14-1: device descriptor read/8, error -71 [ 142.713154][T10687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1337'. [ 142.809217][ T839] usb 14-1: new full-speed USB device number 5 using dummy_hcd [ 142.831116][ T839] usb 14-1: device descriptor read/8, error -71 [ 142.937772][T10703] netlink: 'syz.2.1341': attribute type 2 has an invalid length. [ 142.940643][T10703] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1341'. [ 142.943765][T10703] nbd: must specify a device to reconfigure [ 142.948471][ T839] usb usb14-port1: unable to enumerate USB device [ 143.066402][T10705] netlink: 'syz.2.1342': attribute type 10 has an invalid length. [ 143.119698][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1344'. [ 143.183520][ T34] usb 12-1: new full-speed USB device number 30 using dummy_hcd [ 143.235677][T10723] input: syz0 as /devices/virtual/input/input26 [ 143.241734][T10716] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 143.307591][T10735] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1351'. [ 143.356029][ T34] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 143.361270][ T34] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 143.367074][ T34] usb 12-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 143.371365][ T34] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.376698][ T34] usb 12-1: config 0 descriptor?? [ 143.379239][T10696] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 143.466008][T10747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1354'. [ 143.596337][T10696] comedi comedi0: Minor 3 could not be opened [ 143.599116][T10752] comedi comedi0: Minor 3 could not be opened [ 144.011634][ T34] usbhid 12-1:0.0: can't add hid device: -71 [ 144.013633][ T34] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 144.028314][ T34] usb 12-1: USB disconnect, device number 30 [ 144.266998][ T40] kauditd_printk_skb: 248 callbacks suppressed [ 144.267009][ T40] audit: type=1400 audit(1755858271.337:4051): avc: denied { allowed } for pid=10756 comm="syz.2.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 144.275215][ T40] audit: type=1400 audit(1755858271.337:4052): avc: denied { sqpoll } for pid=10756 comm="syz.2.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 144.281233][ T40] audit: type=1400 audit(1755858271.337:4053): avc: denied { create } for pid=10756 comm="syz.2.1356" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 144.287910][ T40] audit: type=1400 audit(1755858271.337:4054): avc: denied { map } for pid=10756 comm="syz.2.1356" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=37833 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 144.295310][ T40] audit: type=1400 audit(1755858271.337:4055): avc: denied { read write } for pid=10756 comm="syz.2.1356" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=37833 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 144.303482][ T40] audit: type=1400 audit(1755858271.337:4056): avc: denied { ioctl } for pid=10757 comm="syz.6.1357" path="socket:[37832]" dev="sockfs" ino=37832 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.306286][ T5328] Bluetooth: hci3: command tx timeout [ 144.314026][ T40] audit: type=1400 audit(1755858271.337:4057): avc: denied { connect } for pid=10757 comm="syz.6.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.323533][ T40] audit: type=1400 audit(1755858271.337:4058): avc: denied { write } for pid=10757 comm="syz.6.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.331829][ T40] audit: type=1400 audit(1755858271.337:4059): avc: denied { create } for pid=10757 comm="syz.6.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 144.333231][T10765] netlink: 'syz.2.1358': attribute type 23 has an invalid length. [ 144.338122][ T40] audit: type=1400 audit(1755858271.337:4060): avc: denied { getopt } for pid=10757 comm="syz.6.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 144.394509][T10768] kvm: MWAIT instruction emulated as NOP! [ 144.501766][T10784] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 144.619362][T10790] mac80211_hwsim hwsim24 syzkaller0: entered promiscuous mode [ 144.621762][T10790] mac80211_hwsim hwsim24 syzkaller0: entered allmulticast mode [ 144.704986][T10801] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1371'. [ 144.720255][T10801] team0: Port device team_slave_0 removed [ 144.825371][T10805] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(13) [ 144.827469][T10805] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 144.830689][T10805] vhci_hcd vhci_hcd.0: Device attached [ 144.835308][T10806] vhci_hcd: connection closed [ 144.835459][ T6469] vhci_hcd: stop threads [ 144.838428][ T6469] vhci_hcd: release socket [ 144.839911][ T6469] vhci_hcd: disconnect device [ 144.947954][ T34] usb 12-1: new high-speed USB device number 31 using dummy_hcd [ 145.108341][ T34] usb 12-1: Using ep0 maxpacket: 8 [ 145.112920][ T34] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 145.117362][ T34] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 145.121333][ T34] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.125234][ T34] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.130965][ T34] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 145.134749][ T34] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.356483][ T34] usb 12-1: GET_CAPABILITIES returned 0 [ 145.358256][ T34] usbtmc 12-1:16.0: can't read capabilities [ 145.393829][T10815] random: crng reseeded on system resumption [ 145.444909][T10827] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.448682][T10827] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 145.453507][T10827] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.497449][T10827] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.500762][T10827] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 145.504098][T10827] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.559083][T10848] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 145.579123][ T6472] wlan1: Trigger new scan to find an IBSS to join [ 145.583945][T10827] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.587910][T10827] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 145.592133][T10827] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.694594][T10856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.698326][T10856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.768931][ T6472] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.772058][ T6472] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 145.774613][ T6472] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.779956][ T6472] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.782703][ T6472] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 145.785235][ T6472] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.790351][ T6472] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.793104][ T6472] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 145.795649][ T6472] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.800650][ T6472] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.803483][ T6472] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 145.806113][ T6472] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.953186][ T53] usb 14-1: new full-speed USB device number 6 using dummy_hcd [ 146.115490][ T53] usb 14-1: not running at top speed; connect to a high speed hub [ 146.118787][ T53] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.122178][ T53] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.127132][ T53] usb 14-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.130975][ T53] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.133669][ T53] usb 14-1: Product: syz [ 146.136164][ T53] usb 14-1: Manufacturer: syz [ 146.138192][ T53] usb 14-1: SerialNumber: syz [ 146.361061][ T53] usb 14-1: 0:2 : does not exist [ 146.367904][ T53] usb 14-1: USB disconnect, device number 6 [ 146.376448][ T6413] udevd[6413]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb14/14-1/14-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.428417][T10860] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 146.429133][T10862] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 146.503475][T10874] __nla_validate_parse: 5 callbacks suppressed [ 146.503491][T10874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1394'. [ 146.520939][ T63] Bluetooth: hci3: command tx timeout [ 146.572700][T10885] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1397'. [ 146.577680][T10885] netlink: 'syz.2.1397': attribute type 7 has an invalid length. [ 146.580802][T10885] netlink: 'syz.2.1397': attribute type 8 has an invalid length. [ 146.584362][T10885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1397'. [ 146.635302][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1397'. [ 146.923222][T10906] mkiss: ax0: crc mode is auto. [ 146.947737][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.948284][ T5328] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 146.965699][T10913] misc userio: No port type given on /dev/userio [ 146.981567][T10914] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 147.116614][T10925] netlink: 700 bytes leftover after parsing attributes in process `syz.9.1409'. [ 147.220224][T10946] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 147.242127][T10948] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1417'. [ 147.242198][T10949] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1417'. [ 147.339173][T10956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1419'. [ 147.559336][T10970] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1425'. [ 147.584025][T10973] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1426'. [ 147.587635][T10973] tmpfs: Bad value for 'mpol' [ 147.611463][T10979] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(104) [ 147.613636][T10979] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 147.616379][T10979] vhci_hcd vhci_hcd.0: Device attached [ 147.723963][T10992] SELinux: policydb version -174158076 does not match my version range 15-35 [ 147.726894][T10992] SELinux: failed to load policy [ 147.732238][T10992] ipvlan2: entered promiscuous mode [ 147.735099][T10992] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 147.740170][T10992] sch_fq: defrate 0 ignored. [ 147.878058][ T6024] usb 49-1: new high-speed USB device number 3 using vhci_hcd [ 147.906479][ T9] usb 12-1: USB disconnect, device number 31 [ 147.942907][T11002] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 147.946136][T11002] overlayfs: missing 'lowerdir' [ 148.170162][T10983] vhci_hcd: connection reset by peer [ 148.172526][ T6472] vhci_hcd: stop threads [ 148.174026][ T6472] vhci_hcd: release socket [ 148.175116][T11039] netlink: 'syz.9.1449': attribute type 3 has an invalid length. [ 148.176253][ T6472] vhci_hcd: disconnect device [ 148.252149][T11059] cgroup: none used incorrectly [ 148.254648][T11057] vlan0: entered allmulticast mode [ 148.256298][T11057] bridge0: entered allmulticast mode [ 148.276140][T11063] ipvlan3: entered promiscuous mode [ 148.278356][T11063] bridge0: port 3(ipvlan3) entered blocking state [ 148.280450][T11063] bridge0: port 3(ipvlan3) entered disabled state [ 148.282592][T11063] ipvlan3: entered allmulticast mode [ 148.284879][T11063] bridge0: entered allmulticast mode [ 148.287220][T11063] ipvlan3: left allmulticast mode [ 148.288821][T11063] bridge0: left allmulticast mode [ 148.290689][T11068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.295750][T11068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.299267][T11068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.302644][T11068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.307086][T11068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.311033][T11068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.314397][T11068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.318271][T11068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.321614][T11068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.325844][T11068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.330609][T11068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.334508][T11068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.337896][T11068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.341202][T11068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.345018][T11067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.348395][T11068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.349584][T11067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.475166][T11093] binder_alloc: 11092: pid 11092 spamming oneway? 1 buffers allocated for a total size of 4096 [ 148.478705][T11093] binder_alloc: 11092: pid 11092 spamming oneway? 2 buffers allocated for a total size of 5120 [ 148.505860][T11097] ÿÿÿÿ: renamed from bridge_slave_0 (while UP) [ 148.703206][T11136] ipip0: entered promiscuous mode [ 148.963331][T11150] netlink: 'syz.9.1487': attribute type 6 has an invalid length. [ 148.966104][T11150] netlink: 'syz.9.1487': attribute type 6 has an invalid length. [ 149.010286][T11155] netlink: 'syz.9.1489': attribute type 10 has an invalid length. [ 149.014478][T11155] batman_adv: batadv0: Adding interface: team0 [ 149.016457][T11155] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.024843][T11155] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 149.029451][T11155] netlink: 'syz.9.1489': attribute type 10 has an invalid length. [ 149.032130][T11155] team0: Device dummy0 is up. Set it down before adding it as a team port [ 149.053381][T11157] binfmt_misc: register: failed to install interpreter file ./file1 [ 149.279826][T11179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.300813][T11183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11183 comm=syz.6.1500 [ 149.308143][T11183] netlink: 'syz.6.1500': attribute type 7 has an invalid length. [ 149.310849][T11183] netlink: 'syz.6.1500': attribute type 8 has an invalid length. [ 149.389919][ T9] hid-generic 000C:0007:000C.0007: unknown main item tag 0x3 [ 149.392273][ T9] hid-generic 000C:0007:000C.0007: unknown main item tag 0x0 [ 149.400900][ T9] hid-generic 000C:0007:000C.0007: unknown main item tag 0x0 [ 149.403213][ T9] hid-generic 000C:0007:000C.0007: unknown main item tag 0x0 [ 149.405530][ T9] hid-generic 000C:0007:000C.0007: unknown main item tag 0x0 [ 149.408167][ T9] hid-generic 000C:0007:000C.0007: unknown main item tag 0x0 [ 149.410514][ T9] hid-generic 000C:0007:000C.0007: unknown main item tag 0x0 [ 149.412793][ T9] hid-generic 000C:0007:000C.0007: unknown main item tag 0x0 [ 149.415084][ T9] hid-generic 000C:0007:000C.0007: unknown main item tag 0x0 [ 149.417429][ T9] hid-generic 000C:0007:000C.0007: unknown main item tag 0x0 [ 149.422220][ T9] hid-generic 000C:0007:000C.0007: hidraw1: HID v14.24 Device [syz1] on syz0 [ 149.616873][ T1473] IPVS: starting estimator thread 0... [ 149.623058][T11195] tipc: Enabling of bearer rejected, already enabled [ 149.633656][ T40] kauditd_printk_skb: 397 callbacks suppressed [ 149.633667][ T40] audit: type=1400 audit(1755858276.359:4458): avc: denied { create } for pid=11197 comm="syz.7.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 149.641751][ T40] audit: type=1400 audit(1755858276.359:4459): avc: denied { read write } for pid=11197 comm="syz.7.1505" name="video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 149.643430][T11198] Bluetooth: MGMT ver 1.23 [ 149.649266][ T40] audit: type=1400 audit(1755858276.359:4460): avc: denied { open } for pid=11197 comm="syz.7.1505" path="/dev/video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 149.657945][ T40] audit: type=1400 audit(1755858276.359:4461): avc: denied { ioctl } for pid=11197 comm="syz.7.1505" path="/dev/video0" dev="devtmpfs" ino=955 ioctlcmd=0x560f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 149.666148][ T40] audit: type=1400 audit(1755858276.359:4462): avc: denied { create } for pid=11197 comm="syz.7.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.673309][ T40] audit: type=1400 audit(1755858276.359:4463): avc: denied { bind } for pid=11197 comm="syz.7.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.679732][ T40] audit: type=1400 audit(1755858276.359:4464): avc: denied { write } for pid=11197 comm="syz.7.1505" path="socket:[42700]" dev="sockfs" ino=42700 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.687481][ T40] audit: type=1400 audit(1755858276.378:4465): avc: denied { write } for pid=11197 comm="syz.7.1505" path="socket:[43583]" dev="sockfs" ino=43583 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 149.706684][T11196] IPVS: using max 57 ests per chain, 136800 per kthread [ 149.857447][ T40] audit: type=1400 audit(1755858276.565:4466): avc: denied { read } for pid=11199 comm="syz.6.1506" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 149.864972][ T40] audit: type=1400 audit(1755858276.565:4467): avc: denied { open } for pid=11199 comm="syz.6.1506" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 150.021645][T11220] syzkaller0: entered promiscuous mode [ 150.023440][T11220] syzkaller0: entered allmulticast mode [ 150.030746][T11220] tmpfs: Bad value for 'huge' [ 150.282805][T11230] CUSE: unknown device info "ý<±5æç—‘ë\áïð«ºzöŒ0z,~XY©+A}sÎ…F'%ÓËó:„Ij!ó@Q…åmß‘RÞúGQãò––q 6*³5p)ÙxÙ?," [ 150.295218][T11230] CUSE: unknown device info "ÿŽ&b¬í%Z‰ñWú«)«×3\my­ åû" [ 150.297364][T11230] CUSE: unknown device info "Ò­Sû‡¨‚¨«€ýmMÀiÊ_¿Ä0˱°Ý¯;qÈ]Â{ìi¹ë79ñ©{Ò0Ôµßt•º~ø±>V¤ûÞÂZÀ\.9êÁOC‡«®U™&†qÿ…±Ïmsfûkž½cêð±"" [ 150.301518][T11230] CUSE: DEVNAME unspecified [ 150.842350][T11262] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 150.979472][ T12] wlan1: Trigger new scan to find an IBSS to join [ 151.235977][ T34] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 151.407049][ T34] usb 14-1: Using ep0 maxpacket: 16 [ 151.410614][ T34] usb 14-1: config 1 has an invalid descriptor of length 22, skipping remainder of the config [ 151.413999][ T34] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.417493][ T34] usb 14-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 151.422932][ T34] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.425947][ T34] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 151.428745][ T34] usb 14-1: SerialNumber: syz [ 151.434217][ T34] hub 14-1:1.0: bad descriptor, ignoring hub [ 151.436678][ T34] hub 14-1:1.0: probe with driver hub failed with error -5 [ 151.439654][ T34] cdc_ether 14-1:1.0: probe with driver cdc_ether failed with error -22 [ 151.625142][T11269] No source specified [ 151.644512][T11272] netlink: 'syz.6.1527': attribute type 4 has an invalid length. [ 151.952603][ T6465] wlan1: Creating new IBSS network, BSSID ae:98:76:1d:6f:7a [ 152.305334][ T53] usb 12-1: new high-speed USB device number 32 using dummy_hcd [ 152.477661][ T53] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 152.481292][ T53] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 152.484547][ T53] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 152.487716][ T53] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.491659][T11302] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 152.495980][ T53] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 152.714578][T11302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.717639][T11302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.727593][ T6005] usb 12-1: USB disconnect, device number 32 [ 153.049437][T11322] IPv6: Can't replace route, no match found [ 153.285062][T11335] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000004 [ 153.363722][T11339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=11339 comm=syz.7.1546 [ 153.374675][ T6024] vhci_hcd: vhci_device speed not set [ 153.401114][T11343] netlink: 'syz.7.1548': attribute type 7 has an invalid length. [ 153.403629][T11343] __nla_validate_parse: 12 callbacks suppressed [ 153.403638][T11343] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1548'. [ 153.540695][T11361] ptrace attach of "/syz-executor exec"[5964] was attempted by "/syz-executor exec"[11361] [ 153.567297][ T6052] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 153.577975][T11370] pimreg: entered allmulticast mode [ 153.593257][T11372] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1559'. [ 153.596266][T11373] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1559'. [ 153.632612][T11370] pimreg: left allmulticast mode [ 153.727710][ T6052] usb 11-1: Using ep0 maxpacket: 8 [ 153.730949][ T6052] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 153.734500][ T6052] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 153.737654][ T6052] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 153.741030][ T6052] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.745114][ T6052] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 153.747964][ T6052] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.815964][T11386] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 153.818201][T11386] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 153.820739][T11386] vhci_hcd vhci_hcd.0: Device attached [ 153.823270][T11387] vhci_hcd: cannot find the pending unlink 1023 [ 153.828507][T11387] vhci_hcd: connection closed [ 153.828664][ T12] vhci_hcd: stop threads [ 153.831624][ T12] vhci_hcd: release socket [ 153.833130][ T12] vhci_hcd: disconnect device [ 153.974065][T11337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.978518][T11337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.982039][ T6052] usb 11-1: GET_CAPABILITIES returned 0 [ 153.984050][ T6052] usbtmc 11-1:16.0: can't read capabilities [ 153.986502][T11392] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.080607][ T6192] usb 14-1: USB disconnect, device number 7 [ 154.199161][ T34] usb 11-1: USB disconnect, device number 13 [ 154.385722][T11403] netlink: 88 bytes leftover after parsing attributes in process `syz.9.1570'. [ 154.388618][T11403] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1570'. [ 154.390217][T11405] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 154.585840][T11422] dns_resolver: Unsupported content type (234) [ 154.588505][T11422] netlink: 'syz.9.1576': attribute type 32 has an invalid length. [ 154.678080][T11436] netlink: 'syz.2.1579': attribute type 10 has an invalid length. [ 154.684790][T11436] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 154.753226][T11440] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 154.757683][T11440] overlayfs: overlapping lowerdir path [ 154.899913][T11457] veth1_virt_wifi: mtu less than device minimum [ 154.902272][T11457] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 154.905792][T11457] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 154.917760][T11457] netlink: 228 bytes leftover after parsing attributes in process `syz.6.1586'. [ 155.021720][ T6052] usb 12-1: new high-speed USB device number 33 using dummy_hcd [ 155.075127][ T63] Bluetooth: hci3: command 0x0405 tx timeout [ 155.135623][ T40] kauditd_printk_skb: 280 callbacks suppressed [ 155.135634][ T40] audit: type=1400 audit(1755858281.502:4748): avc: denied { map_create } for pid=11461 comm="syz.6.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 155.143920][ T40] audit: type=1400 audit(1755858281.502:4749): avc: denied { map_read map_write } for pid=11461 comm="syz.6.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 155.150284][ T40] audit: type=1400 audit(1755858281.502:4750): avc: denied { perfmon } for pid=11461 comm="syz.6.1588" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 155.169442][ T40] audit: type=1400 audit(1755858281.530:4751): avc: denied { create } for pid=11463 comm="syz.6.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 155.175808][ T40] audit: type=1400 audit(1755858281.530:4752): avc: denied { write } for pid=11463 comm="syz.6.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 155.182818][ T40] audit: type=1400 audit(1755858281.540:4753): avc: denied { create } for pid=11463 comm="syz.6.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 155.188798][ T40] audit: type=1400 audit(1755858281.540:4754): avc: denied { create } for pid=11463 comm="syz.6.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 155.193118][ T6052] usb 12-1: Using ep0 maxpacket: 32 [ 155.195504][ T40] audit: type=1400 audit(1755858281.540:4755): avc: denied { create } for pid=11463 comm="syz.6.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.197768][ T6052] usb 12-1: config index 0 descriptor too short (expected 29220, got 36) [ 155.203184][ T40] audit: type=1400 audit(1755858281.540:4756): avc: denied { create } for pid=11463 comm="syz.6.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 155.206219][ T6052] usb 12-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 155.212193][ T40] audit: type=1400 audit(1755858281.540:4757): avc: denied { read } for pid=11463 comm="syz.6.1589" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 155.214919][ T6052] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 155.214943][ T6052] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 155.214954][ T6052] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 155.214966][ T6052] usb 12-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 155.214987][ T6052] usb 12-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 155.239210][ T6052] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.242890][ T6052] usb 12-1: config 0 descriptor?? [ 155.289964][T11472] trusted_key: encrypted_key: insufficient parameters specified [ 155.329586][T11476] overlayfs: failed to clone upperpath [ 155.461990][ T6052] usblp 12-1:0.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 155.464687][T11491] openvswitch: netlink: Flow key attribute not present in set flow. [ 155.466500][ T6052] usb 12-1: USB disconnect, device number 33 [ 155.470608][ T6052] usblp0: removed [ 155.524707][ T6024] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 155.529156][T11499] Malformed UNC in devname [ 155.529156][T11499] [ 155.531219][T11499] CIFS: VFS: Malformed UNC in devname [ 155.684552][ T6024] usb 11-1: Using ep0 maxpacket: 8 [ 155.687437][ T6024] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 155.690968][ T6024] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 155.694397][ T6024] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 155.698095][ T6024] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.702414][ T6024] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 155.705280][ T6024] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.791523][ T6052] usb 12-1: new full-speed USB device number 34 using dummy_hcd [ 155.929526][ T6024] usb 11-1: GET_CAPABILITIES returned 0 [ 155.931493][ T6024] usbtmc 11-1:16.0: can't read capabilities [ 155.964355][ T6052] usb 12-1: config index 0 descriptor too short (expected 29220, got 36) [ 155.967971][ T6052] usb 12-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 155.971730][ T6052] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 155.975785][ T6052] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 155.980132][ T6052] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 155.985122][ T6052] usb 12-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 155.990663][ T6052] usb 12-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 155.994819][ T6052] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.999560][ T6052] usb 12-1: config 0 descriptor?? [ 156.002668][T11445] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 156.222197][ T9] usb 11-1: USB disconnect, device number 14 [ 156.225141][ T6052] usblp 12-1:0.0: usblp1: USB Bidirectional printer dev 34 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 156.458971][ T6024] usb 12-1: USB disconnect, device number 34 [ 156.462962][ T6024] usblp1: removed [ 156.473996][T11517] bridge0: port 3(syz_tun) entered blocking state [ 156.477399][T11517] bridge0: port 3(syz_tun) entered disabled state [ 156.479667][T11517] syz_tun: entered allmulticast mode [ 156.481702][T11517] syz_tun: entered promiscuous mode [ 156.483560][T11517] bridge0: port 3(syz_tun) entered blocking state [ 156.485512][T11517] bridge0: port 3(syz_tun) entered forwarding state [ 156.489542][T11517] syz_tun: left allmulticast mode [ 156.491109][T11517] syz_tun: left promiscuous mode [ 156.492706][T11517] bridge0: port 3(syz_tun) entered disabled state [ 156.496121][T11517] bridge_slave_0: left allmulticast mode [ 156.499125][T11517] bridge_slave_0: left promiscuous mode [ 156.501023][T11517] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.504955][T11517] bridge_slave_1: left allmulticast mode [ 156.507422][T11517] bridge_slave_1: left promiscuous mode [ 156.510201][T11517] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.515388][T11517] bond0: (slave bond_slave_0): Releasing backup interface [ 156.524799][T11517] bond0: (slave bond_slave_1): Releasing backup interface [ 156.529034][T11517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.534181][T11517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.545146][T11520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.547853][T11520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.563597][T11532] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1612'. [ 156.832117][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1618'. [ 156.835834][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1618'. [ 156.841903][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1618'. [ 156.893171][ T6024] usb 12-1: new high-speed USB device number 35 using dummy_hcd [ 156.944131][T11555] loop6: detected capacity change from 0 to 7 [ 156.946675][T11555] Dev loop6: unable to read RDB block 7 [ 156.948716][T11555] loop6: AHDI p3 p4 [ 156.950014][T11555] loop6: partition table partially beyond EOD, truncated [ 156.952491][T11555] loop6: p3 start 1869967406 is beyond EOD, truncated [ 156.979575][T11520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.982419][T11520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.988531][ T6465] tipc: Subscription rejected, illegal request [ 156.988554][T11520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.993695][ T6465] Bluetooth: hci4: Frame reassembly failed (-84) [ 156.995808][T11520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.012337][T11563] netlink: 'syz.9.1623': attribute type 1 has an invalid length. [ 157.015141][T11563] netlink: 'syz.9.1623': attribute type 2 has an invalid length. [ 157.065661][ T6024] usb 12-1: config 0 has no interfaces? [ 157.069463][ T6024] usb 12-1: New USB device found, idVendor=7d25, idProduct=8e26, bcdDevice= 0.40 [ 157.073509][ T6024] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 157.078913][ T6024] usb 12-1: Product: syz [ 157.080913][ T6024] usb 12-1: Manufacturer: syz [ 157.086620][ T6024] usb 12-1: config 0 descriptor?? [ 157.119961][T11580] binder: 11579:11580 ioctl c0306201 2000000003c0 returned -14 [ 157.123267][T11581] binder: 11579:11581 ioctl c0306201 2000000003c0 returned -14 [ 157.152963][T11589] TCP: tcp_parse_options: Illegal window scaling value 218 > 14 received [ 157.256944][T11612] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 157.283617][T11616] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 157.283617][T11616] The task syz.2.1638 (11616) triggered the difference, watch for misbehavior. [ 157.324072][ T6192] usb 12-1: USB disconnect, device number 35 [ 157.446233][T11636] team0: Mode changed to "random" [ 157.448802][T11636] loop6: detected capacity change from 0 to 7 [ 157.455021][T11636] Dev loop6: unable to read RDB block 7 [ 157.456863][T11636] loop6: unable to read partition table [ 157.458734][T11636] loop6: partition table beyond EOD, truncated [ 157.461247][T11636] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œ²Ü%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 157.466892][T11636] netlink: 'syz.6.1647': attribute type 10 has an invalid length. [ 157.476354][T11636] batman_adv: batadv0: Adding interface: team0 [ 157.478311][T11636] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.491006][T11636] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 157.921548][T11652] MINIX-fs: blocksize too small for device [ 158.052384][T11657] binder: 11656:11657 unknown command 0 [ 158.054850][T11657] binder: 11656:11657 ioctl c0306201 200000000080 returned -22 [ 158.199450][T11667] dummy0: entered promiscuous mode [ 158.201829][T11667] dummy0: left promiscuous mode [ 158.844260][T11706] netlink: 'syz.6.1669': attribute type 2 has an invalid length. [ 158.856836][T11706] veth0_to_team: entered promiscuous mode [ 158.972483][T11734] __nla_validate_parse: 10 callbacks suppressed [ 158.972495][T11734] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1673'. [ 159.040786][T11747] bridge0: entered allmulticast mode [ 159.079867][T11758] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1679'. [ 159.086594][T11753] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1678'. [ 159.089809][T11753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11753 comm=syz.9.1678 [ 159.135884][ T6469] Bluetooth: hci5: Frame reassembly failed (-84) [ 159.137769][ T6469] Bluetooth: hci5: Frame reassembly failed (-84) [ 159.181758][ T5975] Bluetooth: hci4: command 0xfc11 tx timeout [ 159.183521][ T5328] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 159.250986][ T5328] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 159.266924][T11778] netlink: 8 bytes leftover after parsing attributes in process `¬í'. [ 159.269921][T11778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11778 comm=¬í [ 159.352699][ T5328] Bluetooth: hci3: command 0x0405 tx timeout [ 159.494161][ T63] Bluetooth: hci0: unexpected event for opcode 0x2005 [ 159.497821][T11798] fuse: Bad value for 'group_id' [ 159.500238][T11798] fuse: Bad value for 'group_id' [ 161.234675][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.330857][ T5970] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 161.330924][ T63] Bluetooth: hci5: command 0x1003 tx timeout [ 161.338879][T11768] mkiss: ax0: crc mode is auto. [ 174.409532][ T63] Bluetooth: hci1: command 0x0406 tx timeout [ 174.432200][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1695'. [ 174.434396][ T40] kauditd_printk_skb: 330 callbacks suppressed [ 174.434406][ T40] audit: type=1400 audit(1755858299.541:5088): avc: denied { create } for pid=11805 comm="syz.7.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 174.435737][T11807] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1695'. [ 174.437705][ T40] audit: type=1400 audit(1755858299.541:5089): avc: denied { write } for pid=11805 comm="syz.7.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 174.462594][ T40] audit: type=1400 audit(1755858299.541:5090): avc: denied { read } for pid=11805 comm="syz.7.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 174.474529][ T40] audit: type=1400 audit(1755858299.550:5091): avc: denied { ioctl } for pid=11805 comm="syz.7.1695" path="socket:[44991]" dev="sockfs" ino=44991 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 174.485097][ T40] audit: type=1400 audit(1755858299.550:5092): avc: denied { create } for pid=11813 comm="syz.9.1698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 174.493182][ T40] audit: type=1400 audit(1755858299.550:5093): avc: denied { create } for pid=11813 comm="syz.9.1698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 174.499809][ T40] audit: type=1400 audit(1755858299.578:5094): avc: denied { listen } for pid=11819 comm="syz.7.1700" path=0000224E0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 174.515518][ T40] audit: type=1400 audit(1755858299.587:5095): avc: denied { read } for pid=11813 comm="syz.9.1698" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 174.524656][ T40] audit: type=1400 audit(1755858299.587:5096): avc: denied { open } for pid=11813 comm="syz.9.1698" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 174.534268][ T40] audit: type=1400 audit(1755858299.587:5097): avc: denied { map } for pid=11813 comm="syz.9.1698" path="/dev/dlm-monitor" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 174.534320][T11822] ref_ctr increment failed for inode: 0x318 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888036ec2b00 [ 174.644078][T11843] can: request_module (can-proto-0) failed. [ 174.705707][T11852] /dev/sg0: Can't lookup blockdev [ 174.745542][T11860] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 174.799271][T11864] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1715'. [ 174.823097][T11864] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11864 comm=syz.9.1715 [ 174.846790][T11871] overlay: ./file0 is not a directory [ 174.952844][T11885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1720'. [ 175.037649][T11895] ptrace attach of "/syz-executor exec"[8729] was attempted by ""[11895] [ 175.338429][ T63] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 175.395870][T11930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=11930 comm=syz.6.1735 [ 175.599248][T11938] netlink: 'syz.6.1737': attribute type 1 has an invalid length. [ 175.633501][T11941] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1738'. [ 175.746109][T11953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11953 comm=syz.9.1742 [ 175.803702][T11963] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1744'. [ 175.814831][T11965] syz_tun: entered allmulticast mode [ 175.821176][T11964] syz_tun: left allmulticast mode [ 175.828855][T11963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11963 comm=syz.9.1744 [ 175.836169][T11963] netlink: 'syz.9.1744': attribute type 4 has an invalid length. [ 175.869081][T11970] batadv_slave_0: entered promiscuous mode [ 175.872739][T11970] batadv_slave_0: left promiscuous mode [ 175.886455][T11971] batadv_slave_0: entered promiscuous mode [ 175.890471][T11971] batadv_slave_0: left promiscuous mode [ 175.893212][T11973] tty tty33: ldisc open failed (-12), clearing slot 32 [ 176.040182][T11992] netlink: 464 bytes leftover after parsing attributes in process `syz.9.1751'. [ 176.132047][T12001] overlayfs: conflicting lowerdir path [ 176.232514][T12011] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1759'. [ 176.235689][T12011] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 176.237992][T12009] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 176.459975][T12015] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1761'. [ 176.813391][T12028] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 176.865339][T12037] netlink: 'syz.6.1766': attribute type 11 has an invalid length. [ 176.868281][T12037] netlink: 'syz.6.1766': attribute type 4 has an invalid length. [ 176.871647][T12037] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1766'. [ 176.902122][T12044] netlink: 'syz.9.1767': attribute type 2 has an invalid length. [ 176.906300][T12044] netlink: 'syz.9.1767': attribute type 1 has an invalid length. [ 176.909353][T12044] netlink: 'syz.9.1767': attribute type 1 has an invalid length. [ 177.139465][T12063] smc: net device bond0 applied user defined pnetid SYZ2 [ 177.143533][T12063] smc: net device bond0 erased user defined pnetid SYZ2 [ 177.305165][T12081] ieee802154 phy0 wpan0: encryption failed: -22 [ 177.318094][ T5970] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 177.318367][ T63] Bluetooth: hci1: command 0x0406 tx timeout [ 177.471962][T12098] binder: 12096:12098 ioctl c0306201 200000000080 returned -14 [ 177.475454][T12098] binder: 12096:12098 ioctl c0189371 200000000080 returned -22 [ 177.604875][T12116] syz.9.1790: attempt to access beyond end of device [ 177.604875][T12116] loop9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 177.609677][T12116] FAT-fs (loop9): unable to read boot sector [ 177.671217][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.677482][T12126] program syz.9.1793 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.681126][ T63] Bluetooth: Unexpected continuation frame (len 16) [ 177.750855][T12132] program syz.6.1795 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.758757][T12132] vlan3: entered allmulticast mode [ 177.761071][T12132] bridge1: port 1(vlan3) entered blocking state [ 177.763991][T12132] bridge1: port 1(vlan3) entered disabled state [ 177.767419][T12132] vlan3: entered promiscuous mode [ 177.769449][T12132] bridge0: entered promiscuous mode [ 177.780002][T12132] vlan3 (unregistering): left promiscuous mode [ 177.782654][T12132] bridge0 (unregistering): left promiscuous mode [ 177.785223][T12132] bridge1: port 1(vlan3) entered disabled state [ 177.850586][T12137] overlayfs: failed to clone upperpath [ 178.065529][T12152] fuse: Bad value for 'group_id' [ 178.067965][T12152] fuse: Bad value for 'group_id' [ 178.551149][T12169] program syz.7.1808 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.597079][T12171] overlayfs: missing 'lowerdir' [ 178.599667][ T63] Bluetooth: hci3: Dropping invalid advertising data [ 178.601940][ T1113] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 178.602869][ T63] Bluetooth: hci3: Malformed LE Event: 0x02 [ 178.606338][ T1113] ata1.00: irq_stat 0x40000000 [ 178.610353][ T1113] ata1.00: failed command: ZAC MANAGEMENT OUT [ 178.612919][ T1113] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 12 [ 178.612919][ T1113] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 178.619275][ T1113] ata1.00: status: { DRDY ERR } [ 178.621239][ T1113] ata1.00: error: { ABRT } [ 178.623227][ T1113] ata1.00: device reported invalid CHS sector 0 [ 179.002668][T12199] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 179.002947][T12198] IPVS: stopping backup sync thread 12199 ... [ 179.168070][ T6024] usb 12-1: new full-speed USB device number 36 using dummy_hcd [ 179.225224][T12226] netlink: 'syz.6.1826': attribute type 1 has an invalid length. [ 179.280049][T12235] syz_tun: entered allmulticast mode [ 179.307309][ T6024] usb 12-1: device descriptor read/64, error -71 [ 179.314386][T12244] tmpfs: Bad value for 'gid' [ 179.315916][T12244] tmpfs: Bad value for 'gid' [ 179.585160][ T6024] usb 12-1: new full-speed USB device number 37 using dummy_hcd [ 179.735019][ T6024] usb 12-1: device descriptor read/64, error -71 [ 179.799666][ T1113] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 179.801805][ T1113] ata1: failed to read log page 10h (errno=-5) [ 179.803739][ T1113] ata1.00: exception Emask 0x1 SAct 0x2000 SErr 0x0 action 0x0 [ 179.806138][ T1113] ata1.00: irq_stat 0x40000000 [ 179.807698][ T1113] ata1.00: failed command: WRITE FPDMA QUEUED [ 179.809865][ T1113] ata1.00: cmd 61/38:68:26:0a:10/00:00:00:00:00/40 tag 13 ncq dma 28672 out [ 179.809865][ T1113] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 179.815337][ T1113] ata1.00: status: { DRDY } [ 179.815794][ T40] kauditd_printk_skb: 485 callbacks suppressed [ 179.815807][ T40] audit: type=1400 audit(1755858304.581:5583): avc: denied { getopt } for pid=12271 comm="syz.9.1842" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 179.817004][ T1113] ata1.00: error: { ABRT } [ 179.820206][ T40] audit: type=1400 audit(1755858304.581:5584): avc: denied { shutdown } for pid=12271 comm="syz.9.1842" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 179.827298][ T1113] ata1.00: configured for UDMA/100 [ 179.828678][ T40] audit: type=1400 audit(1755858304.581:5585): avc: denied { prog_load } for pid=12271 comm="syz.9.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 179.837329][ T1113] ata1: EH complete [ 179.838970][ T40] audit: type=1400 audit(1755858304.581:5586): avc: denied { prog_run } for pid=12271 comm="syz.9.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 179.857174][ T40] audit: type=1400 audit(1755858304.581:5587): avc: denied { write } for pid=12271 comm="syz.9.1842" name="vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 179.865084][ T40] audit: type=1400 audit(1755858304.618:5588): avc: denied { map_create } for pid=12274 comm="syz.9.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 179.867586][ T6024] usb usb12-port1: attempt power cycle [ 180.120013][ T6052] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 180.237466][ T6024] usb 12-1: new full-speed USB device number 38 using dummy_hcd [ 180.259289][ T6024] usb 12-1: device descriptor read/8, error -71 [ 180.280218][ T6052] usb 14-1: Using ep0 maxpacket: 16 [ 180.283771][ T6052] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.287331][ T6052] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.290752][ T6052] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 180.295426][ T6052] usb 14-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 180.298739][ T6052] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.303358][ T6052] usb 14-1: config 0 descriptor?? [ 180.393227][ T40] audit: type=1400 audit(1755858305.123:5589): avc: denied { write } for pid=12279 comm="syz.6.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 180.495175][ T40] audit: type=1400 audit(1755858305.217:5590): avc: denied { read write } for pid=12283 comm="syz.6.1846" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 180.504525][ T40] audit: type=1400 audit(1755858305.217:5591): avc: denied { open } for pid=12283 comm="syz.6.1846" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 180.536932][ T6024] usb 12-1: new full-speed USB device number 39 using dummy_hcd [ 180.553093][ T40] audit: type=1400 audit(1755858305.273:5592): avc: denied { listen } for pid=12283 comm="syz.6.1846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 180.560690][ T6024] usb 12-1: device descriptor read/8, error -71 [ 180.676036][ T6024] usb usb12-port1: unable to enumerate USB device [ 180.736235][ T6052] hid_parser_main: 217 callbacks suppressed [ 180.736248][ T6052] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 180.741555][ T6052] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 180.744714][ T6052] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 180.747375][ T6052] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 180.749782][ T6052] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 180.753928][ T6052] input: HID 0955:7214 Haptics as /devices/virtual/input/input27 [ 180.760523][ T6052] shield 0003:0955:7214.0008: Registered Thunderstrike controller [ 180.763730][ T6052] shield 0003:0955:7214.0008: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.9-1/input0 [ 180.949511][T12275] random: crng reseeded on system resumption [ 180.954978][ T6032] usb 14-1: USB disconnect, device number 8 [ 180.955029][ T9] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 180.960375][ T9] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 180.964012][ T9] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 180.967938][ T9] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 181.110947][T12317] __nla_validate_parse: 15 callbacks suppressed [ 181.110959][T12317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1856'. [ 182.395333][T12355] overlayfs: failed to clone upperpath [ 182.655011][T12387] netlink: 'syz.2.1878': attribute type 11 has an invalid length. [ 182.675925][T12389] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 182.697393][T12395] netlink: 'syz.2.1881': attribute type 1 has an invalid length. [ 182.706517][T12395] gretap3: entered promiscuous mode [ 182.709540][T12395] bond7: (slave gretap3): making interface the new active one [ 182.712225][T12395] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 182.717431][T12397] macvlan0: entered promiscuous mode [ 182.719456][T12397] macvlan0: entered allmulticast mode [ 182.721619][T12397] bond7: entered promiscuous mode [ 182.723489][T12397] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 182.726122][T12397] bond7: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 182.731870][T12397] bond7: left promiscuous mode [ 182.740730][T12398] macvlan0: entered promiscuous mode [ 182.743793][T12398] macvlan0: entered allmulticast mode [ 182.746511][T12398] bond7: entered promiscuous mode [ 182.748833][T12398] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 182.752863][T12398] bond7: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 182.759190][T12398] bond7: left promiscuous mode [ 182.904223][T12400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1882'. [ 182.908016][T12400] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1882'. [ 182.913368][T12400] sch_fq: defrate 0 ignored. [ 182.932541][T12404] tipc: Failed to remove unknown binding: 66,1,1/3028680704:1081742097/1081742099 [ 182.935972][T12404] tipc: Failed to remove unknown binding: 66,1,1/3028680704:1081742097/1081742099 [ 182.938931][T12404] tipc: Failed to remove unknown binding: 66,1,1/3028680704:1081742097/1081742099 [ 182.943212][ T6052] usb 14-1: new low-speed USB device number 9 using dummy_hcd [ 182.946147][T12404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27920 sclass=netlink_route_socket pid=12404 comm=syz.2.1883 [ 183.039974][T12411] /dev/sg0: Can't lookup blockdev [ 183.103741][ T6052] usb 14-1: Invalid ep0 maxpacket: 16 [ 183.242818][ T6052] usb 14-1: new low-speed USB device number 10 using dummy_hcd [ 183.402991][ T6052] usb 14-1: Invalid ep0 maxpacket: 16 [ 183.404830][ T6052] usb usb14-port1: attempt power cycle [ 183.529679][T12439] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1896'. [ 183.681790][T12445] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1898'. [ 183.766448][ T6052] usb 14-1: new low-speed USB device number 11 using dummy_hcd [ 183.788633][ T6052] usb 14-1: Invalid ep0 maxpacket: 16 [ 183.927029][ T6052] usb 14-1: new low-speed USB device number 12 using dummy_hcd [ 183.954703][T12477] netlink: 'syz.2.1907': attribute type 1 has an invalid length. [ 183.959517][ T6052] usb 14-1: Invalid ep0 maxpacket: 16 [ 183.961395][ T6052] usb usb14-port1: unable to enumerate USB device [ 183.967399][T12477] bond8: (slave bridge0): making interface the new active one [ 183.971149][T12477] bond8: (slave bridge0): Enslaving as an active interface with an up link [ 184.009140][T12482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1909'. [ 184.031978][T12486] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 184.092031][T12490] netlink: 'syz.2.1911': attribute type 1 has an invalid length. [ 184.095226][T12490] netlink: 'syz.2.1911': attribute type 3 has an invalid length. [ 184.098861][T12490] netlink: 'syz.2.1911': attribute type 3 has an invalid length. [ 184.227096][T12500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1916'. [ 184.314576][T12516] netlink: 'syz.7.1921': attribute type 10 has an invalid length. [ 184.387825][T12522] syz.7.1922: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 184.394031][T12522] CPU: 3 UID: 0 PID: 12522 Comm: syz.7.1922 Not tainted syzkaller #0 PREEMPT(full) [ 184.394055][T12522] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 184.394066][T12522] Call Trace: [ 184.394072][T12522] [ 184.394078][T12522] dump_stack_lvl+0x16c/0x1f0 [ 184.394121][T12522] warn_alloc+0x248/0x3a0 [ 184.394146][T12522] ? __pfx_warn_alloc+0x10/0x10 [ 184.394162][T12522] ? __pfx_stack_trace_save+0x10/0x10 [ 184.394186][T12522] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 184.394208][T12522] ? kasan_save_stack+0x42/0x60 [ 184.394224][T12522] ? kasan_save_stack+0x33/0x60 [ 184.394245][T12522] ? kasan_save_track+0x14/0x30 [ 184.394261][T12522] ? xskq_create+0x52/0x1d0 [ 184.394285][T12522] ? xsk_setsockopt+0x74e/0x9a0 [ 184.394307][T12522] ? do_sock_setsockopt+0xf0/0x1d0 [ 184.394329][T12522] ? xskq_create+0xfb/0x1d0 [ 184.394353][T12522] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 184.394382][T12522] ? xskq_create+0xfb/0x1d0 [ 184.394408][T12522] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 184.394437][T12522] ? xskq_create+0xfb/0x1d0 [ 184.394461][T12522] vmalloc_user_noprof+0x9e/0xe0 [ 184.394485][T12522] ? xskq_create+0xfb/0x1d0 [ 184.394510][T12522] xskq_create+0xfb/0x1d0 [ 184.394535][T12522] xsk_setsockopt+0x74e/0x9a0 [ 184.394559][T12522] ? __pfx_xsk_setsockopt+0x10/0x10 [ 184.394583][T12522] ? __fget_files+0x204/0x3c0 [ 184.394601][T12522] ? rcu_is_watching+0x12/0xc0 [ 184.394624][T12522] ? selinux_socket_setsockopt+0x6a/0x80 [ 184.394648][T12522] ? __pfx_xsk_setsockopt+0x10/0x10 [ 184.394672][T12522] do_sock_setsockopt+0xf0/0x1d0 [ 184.394693][T12522] __sys_setsockopt+0x1a0/0x230 [ 184.394711][T12522] __x64_sys_setsockopt+0xbd/0x160 [ 184.394727][T12522] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 184.394748][T12522] do_syscall_64+0xcd/0x4c0 [ 184.394767][T12522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.394784][T12522] RIP: 0033:0x7f7a1f18ebe9 [ 184.394798][T12522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.394815][T12522] RSP: 002b:00007f7a20056038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 184.394832][T12522] RAX: ffffffffffffffda RBX: 00007f7a1f3b6090 RCX: 00007f7a1f18ebe9 [ 184.394844][T12522] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 184.394854][T12522] RBP: 00007f7a1f211e19 R08: 0000000000000004 R09: 0000000000000000 [ 184.394864][T12522] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.394874][T12522] R13: 00007f7a1f3b6128 R14: 00007f7a1f3b6090 R15: 00007fff4697c808 [ 184.394891][T12522] [ 184.394897][T12522] Mem-Info: [ 184.490419][T12522] active_anon:18870 inactive_anon:0 isolated_anon:0 [ 184.490419][T12522] active_file:4692 inactive_file:53466 isolated_file:0 [ 184.490419][T12522] unevictable:1768 dirty:60 writeback:0 [ 184.490419][T12522] slab_reclaimable:9513 slab_unreclaimable:74532 [ 184.490419][T12522] mapped:26283 shmem:12671 pagetables:1300 [ 184.490419][T12522] sec_pagetables:315 bounce:0 [ 184.490419][T12522] kernel_misc_reclaimable:0 [ 184.490419][T12522] free:429017 free_pcp:21035 free_cma:0 [ 184.504905][T12522] Node 0 active_anon:75480kB inactive_anon:0kB active_file:18768kB inactive_file:213620kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:105088kB dirty:240kB writeback:0kB shmem:47148kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14256kB pagetables:5012kB sec_pagetables:1260kB all_unreclaimable? no Balloon:0kB [ 184.515683][T12522] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:244kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 184.517807][T12546] overlayfs: failed to clone upperpath [ 184.526528][T12522] Node 0 DMA free:15224kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:112kB local_pcp:104kB free_cma:0kB [ 184.538670][T12522] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 184.540972][T12522] Node 0 DMA32 free:101640kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:75480kB inactive_anon:0kB active_file:18768kB inactive_file:213620kB unevictable:3536kB writepending:240kB present:2080628kB managed:1263484kB mlocked:0kB bounce:0kB free_pcp:67984kB local_pcp:2312kB free_cma:0kB [ 184.552680][T12522] lowmem_reserve[]: 0 0 0 0 0 [ 184.554593][T12522] Node 1 Normal free:1598956kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:244kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:16556kB local_pcp:4480kB free_cma:0kB [ 184.567197][T12522] lowmem_reserve[]: 0 0 0 0 0 [ 184.569251][T12522] Node 0 DMA: 4*4kB (UM) 5*8kB (UM) 4*16kB (U) 4*32kB (UM) 6*64kB (UM) 4*128kB (U) 3*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 1*4096kB (U) = 15224kB [ 184.575627][T12522] Node 0 DMA32: 934*4kB (ME) 461*8kB (UM) 262*16kB (UM) 278*32kB (UME) 243*64kB (UME) 76*128kB (UME) 28*256kB (UME) 19*512kB (UM) 20*1024kB (UM) 9*2048kB (UM) 0*4096kB = 101600kB [ 184.582835][T12522] Node 1 Normal: 5*4kB (UME) 15*8kB (UE) 14*16kB (UME) 14*32kB (UME) 11*64kB (UME) 8*128kB (ME) 4*256kB (U) 14*512kB (UME) 9*1024kB (UE) 11*2048kB (UME) 380*4096kB (UME) = 1598956kB [ 184.590969][T12522] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 184.594082][T12522] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 184.597066][T12522] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 184.600074][T12522] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 184.603221][T12522] 70826 total pagecache pages [ 184.604844][T12522] 0 pages in swap cache [ 184.606188][T12522] Free swap = 124996kB [ 184.607506][T12522] Total swap = 124996kB [ 184.608819][T12522] 1048443 pages RAM [ 184.610088][T12522] 0 pages HighMem/MovableOnly [ 184.611698][T12522] 283259 pages reserved [ 184.613323][T12522] 0 pages cma reserved [ 184.673335][T12559] "syz.2.1933" (12559) uses obsolete ecb(arc4) skcipher [ 184.773147][ T6024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.949816][T12594] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1943'. [ 185.189398][ T74] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 185.275087][ T6024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.377334][ T40] kauditd_printk_skb: 254 callbacks suppressed [ 185.377351][ T40] audit: type=1400 audit(1755858309.780:5847): avc: denied { unmount } for pid=8681 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 185.421911][T12599] cgroup: Name too long [ 185.422267][ T40] audit: type=1400 audit(1755858309.818:5848): avc: denied { mounton } for pid=12597 comm="syz.6.1944" path="/296/file0" dev="tmpfs" ino=1600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 185.433441][ T40] audit: type=1400 audit(1755858309.827:5849): avc: denied { mount } for pid=12597 comm="syz.6.1944" name="/" dev="9p" ino=35913880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 185.521145][ T40] audit: type=1400 audit(1755858309.920:5850): avc: denied { read } for pid=12606 comm="syz.6.1946" name="cec6" dev="devtmpfs" ino=1012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.530172][ T40] audit: type=1400 audit(1755858309.920:5851): avc: denied { open } for pid=12606 comm="syz.6.1946" path="/dev/cec6" dev="devtmpfs" ino=1012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.541584][ T40] audit: type=1400 audit(1755858309.920:5852): avc: denied { ioctl } for pid=12606 comm="syz.6.1946" path="/dev/cec6" dev="devtmpfs" ino=1012 ioctlcmd=0x6100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.550512][ T40] audit: type=1400 audit(1755858309.920:5853): avc: denied { ioctl } for pid=12606 comm="syz.6.1946" path="socket:[49849]" dev="sockfs" ino=49849 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 185.560820][ T40] audit: type=1400 audit(1755858309.920:5854): avc: denied { read } for pid=12606 comm="syz.6.1946" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 185.576601][ T40] audit: type=1400 audit(1755858309.920:5855): avc: denied { read write } for pid=12606 comm="syz.6.1946" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 185.586834][ T40] audit: type=1400 audit(1755858309.920:5856): avc: denied { open } for pid=12606 comm="syz.6.1946" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 185.611847][T12620] Bluetooth: MGMT ver 1.23 [ 185.926606][ T6024] usb 12-1: new high-speed USB device number 40 using dummy_hcd [ 186.000200][T12662] fuse: Bad value for 'user_id' [ 186.002884][T12662] fuse: Bad value for 'user_id' [ 186.031797][ T6032] IPVS: starting estimator thread 0... [ 186.034776][T12667] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1962'. [ 186.062681][T12670] Unsupported ieee802154 address type: 0 [ 186.064726][T12670] "syz.6.1963" (12670) uses obsolete ecb(arc4) skcipher [ 186.075312][T12670] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1963'. [ 186.097676][ T6024] usb 12-1: Using ep0 maxpacket: 32 [ 186.101189][ T6024] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.104996][ T6024] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.108243][ T6024] usb 12-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 186.112298][ T6024] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.117083][ T6024] usb 12-1: config 0 descriptor?? [ 186.134917][T12668] IPVS: using max 58 ests per chain, 139200 per kthread [ 186.169250][T12674] "syz.6.1964" (12674) uses obsolete ecb(arc4) skcipher [ 186.191352][T12674] syz.6.1964 (12674): /proc/12673/oom_adj is deprecated, please use /proc/12673/oom_score_adj instead. [ 186.282057][ T63] Bluetooth: hci0: unexpected event for opcode 0x1407 [ 186.290325][ T6052] usb 14-1: new high-speed USB device number 13 using dummy_hcd [ 186.292203][T12676] ntfs3(sr0): Primary boot signature is not NTFS. [ 186.294968][T12676] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 186.323867][T12678] ceph: Path missing in source [ 186.451348][ T6052] usb 14-1: Using ep0 maxpacket: 8 [ 186.454798][ T6052] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.458864][ T6052] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 186.463813][ T6052] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 186.467981][ T6052] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.473636][ T6052] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 186.477152][ T6052] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.558302][ T6024] savu 0003:1E7D:2D5A.0009: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 186.699498][ T6052] usb 14-1: GET_CAPABILITIES returned 0 [ 186.701326][ T6052] usbtmc 14-1:16.0: can't read capabilities [ 187.009318][ T839] usb 14-1: USB disconnect, device number 13 [ 187.167062][ T6052] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 187.328894][ T6052] usb 11-1: config index 0 descriptor too short (expected 39, got 27) [ 187.332466][ T6052] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 187.336496][ T6052] usb 11-1: config 0 interface 0 has no altsetting 0 [ 187.341462][ T6052] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 187.345391][ T6052] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 187.348686][ T6052] usb 11-1: Product: syz [ 187.350309][ T6052] usb 11-1: Manufacturer: syz [ 187.352015][ T6052] usb 11-1: SerialNumber: syz [ 187.354703][ T6052] usb 11-1: config 0 descriptor?? [ 187.357151][ T6052] hub 11-1:0.0: bad descriptor, ignoring hub [ 187.359088][ T6052] hub 11-1:0.0: probe with driver hub failed with error -5 [ 187.362958][ T6052] usb 11-1: selecting invalid altsetting 0 [ 187.577461][T12696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.581627][T12696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.611298][T12707] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 187.707436][T12721] __nla_validate_parse: 1 callbacks suppressed [ 187.707448][T12721] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1979'. [ 187.712609][ T839] usb 11-1: USB disconnect, device number 15 [ 187.886067][T12739] netlink: zone id is out of range [ 187.887708][T12739] netlink: zone id is out of range [ 187.889332][T12739] netlink: zone id is out of range [ 187.890951][T12739] netlink: zone id is out of range [ 187.892540][T12739] netlink: zone id is out of range [ 187.894323][T12739] netlink: zone id is out of range [ 187.895973][T12739] netlink: zone id is out of range [ 187.897596][T12739] netlink: zone id is out of range [ 187.978203][T12743] 9pnet_fd: Insufficient options for proto=fd [ 187.981923][T12743] comedi: No check for data length of config insn id 3 is implemented [ 187.984823][T12743] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 187.987688][T12743] comedi: Assuming n=15 is correct [ 188.109241][T12751] SELinux: Context system_u:object_r:inetd_child_exec_t:s0 is not valid (left unmapped). [ 188.112891][T12751] hugetlbfs: Bad value for 'uid' [ 188.114470][T12751] hugetlbfs: Bad value for 'uid' [ 188.160491][T12759] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.162834][T12759] IPv6: NLM_F_CREATE should be set when creating new route [ 188.165128][T12759] IPv6: NLM_F_CREATE should be set when creating new route [ 188.316644][T12764] 9pnet: Could not find request transport: virtdo [ 188.319167][T12778] loop6: detected capacity change from 0 to 63 [ 188.322275][T12276] buffer_io_error: 31 callbacks suppressed [ 188.322283][T12276] Buffer I/O error on dev loop6, logical block 0, async page read [ 188.326774][T12276] Buffer I/O error on dev loop6, logical block 0, async page read [ 188.329309][T12276] Buffer I/O error on dev loop6, logical block 0, async page read [ 188.331857][T12276] Buffer I/O error on dev loop6, logical block 0, async page read [ 188.332770][ T34] usb 11-1: new full-speed USB device number 16 using dummy_hcd [ 188.335805][T12276] Buffer I/O error on dev loop6, logical block 0, async page read [ 188.339688][T12276] Buffer I/O error on dev loop6, logical block 0, async page read [ 188.342242][T12276] Buffer I/O error on dev loop6, logical block 0, async page read [ 188.345468][T12276] Buffer I/O error on dev loop6, logical block 0, async page read [ 188.347324][T12785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.347987][T12276] ldm_validate_partition_table(): Disk read failed. [ 188.353071][T12276] Buffer I/O error on dev loop6, logical block 0, async page read [ 188.355722][T12276] Buffer I/O error on dev loop6, logical block 0, async page read [ 188.358231][T12276] Dev loop6: unable to read RDB block 0 [ 188.360105][T12276] loop6: unable to read partition table [ 188.362345][T12778] ldm_validate_partition_table(): Disk read failed. [ 188.364546][T12778] Dev loop6: unable to read RDB block 0 [ 188.366628][T12778] loop6: unable to read partition table [ 188.368528][T12778] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 188.494400][ T34] usb 11-1: config 0 has no interfaces? [ 188.496968][ T34] usb 11-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 188.499928][ T34] usb 11-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 188.502511][ T34] usb 11-1: Manufacturer: syz [ 188.509533][ T34] usb 11-1: config 0 descriptor?? [ 188.733104][ T6024] usb 11-1: USB disconnect, device number 16 [ 188.867915][ T1473] usb 12-1: USB disconnect, device number 40 [ 188.945428][T12799] mmap: syz.7.2002 (12799): VmData 29208576 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 189.614670][T12830] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2013'. [ 189.618741][T12830] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2013'. [ 189.747324][ T63] Bluetooth: hci3: unexpected event for opcode 0x0c46 [ 189.767029][T12848] netlink: 'syz.6.2018': attribute type 10 has an invalid length. [ 189.770934][T12848] team0: Device dummy0 is up. Set it down before adding it as a team port [ 189.899914][T12865] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1025 sclass=netlink_tcpdiag_socket pid=12865 comm=syz.2.2023 [ 189.904341][T12865] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12865 comm=syz.2.2023 [ 189.908855][T12865] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12865 comm=syz.2.2023 [ 189.913593][T12865] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12865 comm=syz.2.2023 [ 189.945878][ T63] Bluetooth: hci1: unexpected event for opcode 0x2023 [ 189.983925][T12872] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2026'. [ 190.196424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 190.211816][T12877] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 190.213832][T12877] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 190.217133][T12877] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 190.219413][T12877] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 190.221751][T12877] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 190.223913][T12877] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 190.226941][T12877] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 190.231822][T12877] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 190.235502][T12877] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 190.238261][T12877] CPU: 2 UID: 0 PID: 12877 Comm: syz.6.2021 Not tainted syzkaller #0 PREEMPT(full) [ 190.242989][T12877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 190.246196][T12877] RIP: 0010:klist_put+0x4d/0x1b0 [ 190.247736][T12877] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 cc 3e 0d [ 190.253475][T12877] RSP: 0018:ffffc90005a87310 EFLAGS: 00010202 [ 190.255462][T12877] RAX: dffffc0000000000 RBX: ffff888025b75460 RCX: ffffc90030843000 [ 190.257871][T12877] RDX: 000000000000000b RSI: ffffffff8b891035 RDI: 0000000000000058 [ 190.260311][T12877] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff211c684 [ 190.262782][T12877] R10: ffffffff908e3423 R11: 0000000000000001 R12: 0000000000000000 [ 190.265194][T12877] R13: 0000000000000001 R14: 1ffff92000b50e6a R15: ffffffff908e33e0 [ 190.267626][T12877] FS: 00007fdeb9d916c0(0000) GS:ffff8880d68bc000(0000) knlGS:0000000000000000 [ 190.270403][T12877] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 190.272498][T12877] CR2: 0000200000017038 CR3: 000000005b62d000 CR4: 0000000000352ef0 [ 190.275059][T12877] Call Trace: [ 190.276135][T12877] [ 190.277084][T12877] klist_remove+0x13f/0x2e0 [ 190.278543][T12877] ? kobject_move+0x15d/0x260 [ 190.280072][T12877] ? __pfx_klist_remove+0x10/0x10 [ 190.281683][T12877] ? __pfx_kobject_move+0x10/0x10 [ 190.283271][T12877] ? get_device_parent+0x1ed/0x4e0 [ 190.284883][T12877] device_move+0x12d/0x10d0 [ 190.286313][T12877] hci_conn_del_sysfs+0x81/0x180 [ 190.287865][T12877] hci_conn_del+0x5b3/0xe70 [ 190.289326][T12877] hci_abort_conn_sync+0x76a/0xb20 [ 190.290993][T12877] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 190.292828][T12877] ? rcu_is_watching+0x12/0xc0 [ 190.294352][T12877] ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0 [ 190.296390][T12877] ? rcu_is_watching+0x12/0xc0 [ 190.297898][T12877] ? lock_release+0x201/0x2f0 [ 190.299418][T12877] ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0 [ 190.301476][T12877] hci_disconnect_all_sync.constprop.0+0x104/0x3c0 [ 190.303534][T12877] hci_suspend_sync+0x821/0xb20 [ 190.305069][T12877] ? __pfx_enable_work+0x10/0x10 [ 190.306634][T12877] ? __pfx_hci_suspend_sync+0x10/0x10 [ 190.308315][T12877] hci_suspend_dev+0x308/0x500 [ 190.309832][T12877] ? __pfx_hci_suspend_dev+0x10/0x10 [ 190.311516][T12877] ? rcu_barrier+0x341/0x6e0 [ 190.313014][T12877] ? kobject_get+0xbb/0x150 [ 190.314460][T12877] hci_suspend_notifier+0x28d/0x2f0 [ 190.316102][T12877] notifier_call_chain+0xb9/0x410 [ 190.317696][T12877] ? __pfx_hci_suspend_notifier+0x10/0x10 [ 190.319537][T12877] blocking_notifier_call_chain_robust+0xc8/0x160 [ 190.321563][T12877] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 190.323763][T12877] pm_notifier_call_chain_robust+0x27/0x60 [ 190.325593][T12877] snapshot_open+0x189/0x2b0 [ 190.327063][T12877] ? __pfx_snapshot_open+0x10/0x10 [ 190.328674][T12877] misc_open+0x35a/0x420 [ 190.330051][T12877] ? __pfx_misc_open+0x10/0x10 [ 190.331644][T12877] chrdev_open+0x231/0x6a0 [ 190.333057][T12877] ? __pfx_chrdev_open+0x10/0x10 [ 190.334609][T12877] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 190.336546][T12877] do_dentry_open+0x982/0x1530 [ 190.338057][T12877] ? __pfx_chrdev_open+0x10/0x10 [ 190.339631][T12877] vfs_open+0x82/0x3f0 [ 190.340909][T12877] path_openat+0x1de4/0x2cb0 [ 190.342420][T12877] ? __pfx_path_openat+0x10/0x10 [ 190.343973][T12877] do_filp_open+0x20b/0x470 [ 190.345398][T12877] ? __pfx_do_filp_open+0x10/0x10 [ 190.346988][T12877] ? alloc_fd+0x471/0x7d0 [ 190.348346][T12877] do_sys_openat2+0x11b/0x1d0 [ 190.349866][T12877] ? __pfx_do_sys_openat2+0x10/0x10 [ 190.351519][T12877] __x64_sys_openat+0x174/0x210 [ 190.353057][T12877] ? __pfx___x64_sys_openat+0x10/0x10 [ 190.354742][T12877] do_syscall_64+0xcd/0x4c0 [ 190.356210][T12877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.358058][T12877] RIP: 0033:0x7fdebbf8ebe9 [ 190.359484][T12877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.365435][T12877] RSP: 002b:00007fdeb9d91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 190.368018][T12877] RAX: ffffffffffffffda RBX: 00007fdebc1b6270 RCX: 00007fdebbf8ebe9 [ 190.370500][T12877] RDX: 0000000000040000 RSI: 0000200000000680 RDI: ffffffffffffff9c [ 190.372936][T12877] RBP: 00007fdebc011e19 R08: 0000000000000000 R09: 0000000000000000 [ 190.375387][T12877] R10: 0000000000000019 R11: 0000000000000246 R12: 0000000000000000 [ 190.377839][T12877] R13: 00007fdebc1b6308 R14: 00007fdebc1b6270 R15: 00007ffff380e958 [ 190.380369][T12877] [ 190.381351][T12877] Modules linked in: [ 190.382939][T12877] ---[ end trace 0000000000000000 ]--- [ 190.385467][T12877] RIP: 0010:klist_put+0x4d/0x1b0 [ 190.387276][T12877] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 cc 3e 0d [ 190.393383][T12877] RSP: 0018:ffffc90005a87310 EFLAGS: 00010202 [ 190.395451][T12877] RAX: dffffc0000000000 RBX: ffff888025b75460 RCX: ffffc90030843000 [ 190.398493][T12877] RDX: 000000000000000b RSI: ffffffff8b891035 RDI: 0000000000000058 [ 190.401778][T12877] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff211c684 [ 190.405031][T12877] R10: ffffffff908e3423 R11: 0000000000000001 R12: 0000000000000000 [ 190.409017][T12877] R13: 0000000000000001 R14: 1ffff92000b50e6a R15: ffffffff908e33e0 [ 190.409029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 190.411699][T12877] FS: 00007fdeb9d916c0(0000) GS:ffff8880d68bc000(0000) knlGS:0000000000000000 [ 190.417481][T12877] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 190.420195][T12877] CR2: 0000200000017038 CR3: 000000005b62d000 CR4: 0000000000352ef0 [ 190.422836][T12877] Kernel panic - not syncing: Fatal exception [ 190.425342][T12877] Kernel Offset: disabled [ 190.426751][T12877] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:25:19 Registers: info registers vcpu 0 CPU#0 RAX=000000000022b284 RBX=0000000000000000 RCX=ffffffff8b93ac29 RDX=ffffed100d486656 RSI=ffffffff8c162800 RDI=ffffffff81913321 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab4090 R15=0000000000000000 RIP=ffffffff8b93978f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055555de09808 CR3=0000000055733000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=000000000000508c DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000020000f67200 0001d20004010010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff4697cd16 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff4697cd16 00007fff4697cd1c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7a1f212e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7a1f212e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7a1f212e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7a1f212e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7a1f212ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7a1f212fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 070005ffffffffff f6ffff002e000c80 0200200000656764 6972620001000b80 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7a1feed100 00007f7a1f387460 00007f7a1f380004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7a1f3874b8 00007f7a1f3874b0 00007f7a1f3874a8 00007f7a1f3874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff89664934 RBX=ffffc9000161f778 RCX=ffffc90001620001 RDX=1ffff920002c3ef8 RSI=ffffffff89664934 RDI=ffffc9000161f838 RBP=ffffc9000161f808 RSP=ffffc9000161f770 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc9000161f778 R11=0000000000011717 R12=ffffffff81a6db80 R13=ffffc9000161f838 R14=0000000000000000 R15=ffff8880227ec880 RIP=ffffffffa0001230 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b32523ffc CR3=000000002a5f3000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c1fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000003bf12 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555aec5c36 000055555aec56f0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555aec9454 000055555aec8d30 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e697279656b01ff ffffffffffffffef 0800030308000010 0000100002800401 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8803400180808080 82000286037a7973 01ffffffffffffff fff9080280030067 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffe908 0380030108000010 0000100002800400 040a045600020002 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f79656b01ffffff ffffffffffe10804 8003006369727465 6d6d79736101ffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100001000000 0806010800060103 f600100000080003 9208000008000100 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000008060a016ad6 0680040a8084d08a 0800010000000806 060110d204800403 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8004000000020806 3a100008013eb600 6e696168633a01ff fffffffffffffff1 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0804c20300000004 0ca406049e033a67 6e697279656b5f72 6f5f79656b01ffff ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f5f206220303637 3930336239666666 66666666660a3432 2e79656b5f5f2062 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e79656b5f5f2062 2030613739303362 3966666666666666 660a35322e79656b ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 660a37322e79656b 5f5f206220306537 3930336239666666 66666666660a3632 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 660a302e79656b5f 5f20622030386564 3033623966666666 666666660a35312e ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6666666666660a30 2e79656b5f5f2062 2030636564303362 3966666666666666 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 66660a64695f7465 6e5f656b61687364 6e61682062203030 6664303362396666 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 68736168725f656b 616873646e616820 6220303466643033 6239666666666666 info registers vcpu 2 CPU#2 RAX=000000000000003a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85643385 RDI=ffffffff9b10e020 RBP=ffffffff9b10dfe0 RSP=ffffc90005a86c80 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552032203a555043 R12=0000000000000000 R13=000000000000003a R14=ffffffff9b10dfe0 R15=ffffffff85643320 RIP=ffffffff856433af RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fdeb9d916c0 ffffffff 00c00000 GS =0000 ffff8880d68bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000017038 CR3=000000005b62d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff380ee66 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff380ee66 00007ffff380ee6c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdebc012e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdebc012e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdebc012e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdebc012e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdebc012ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdebc012fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 006c6f72746e6f63 5f6e6170776f6c36 2f68746f6f746575 6c622f6775626564 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdebcced100 00007fdebc187460 00007fdebc180004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdebc1874b8 00007fdebc1874b0 00007fdebc1874a8 00007fdebc1874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000198884 RBX=0000000000000003 RCX=ffffffff8b93ac29 RDX=ffffed100d4e6656 RSI=ffffffff8c162800 RDI=ffffffff81913321 RBP=ffffed1003c57000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000001 R12=0000000000000003 R13=ffff88801e2b8000 R14=ffffffff90ab4090 R15=0000000000000000 RIP=ffffffff8b93978f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c35f4a8 CR3=00000000396c2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff4697cb90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff4697cd16 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff4697cd16 00007fff4697cd1c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7a1f212e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7a1f212e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7a1f212e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7a1f212e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7a1f212ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7a1f212fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000