last executing test programs: 5m7.013912813s ago: executing program 32 (id=211): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x44, 0x11cfe, 0x10000000, 0x8000008, 0x3, 0x4, 0x80000001}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x34, r3, 0x6ff, 0x0, 0x25dfdbfc, {0x52}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000019380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000019340)={&(0x7f0000019200)={0x140, r3, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x140}}, 0x20004000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000100)=r5}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r6, &(0x7f0000000040), 0x0}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000180)={0xff, 0x0, {0x0, 0x3, 0xfffffffc, 0x0, 0xc4}, 0x400}) pread64(r7, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x8001, 0x122c42) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000000440)={r8, 0x2000, {0x0, 0x0, 0x0, 0x4, 0x7ffffffffffffffb, 0x0, 0x0, 0x0, 0x1c, "339f020bbe780000000000000008000140080d0ec0dd17c18e8438ef2a0000000000000000000000004000", "c787a16c1ca43f7339f3d3289737f0374c72a964a0193b3e8772fd29f35239d2000000000000000000000000000000000200", "24431a5e77a68e174f000300ffffffffff0fe200", [0x2]}}) ioctl$LOOP_CHANGE_FD(r9, 0x4c07, r8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40000000000000060145c0000000000a60000000000000395000000000080008e4c57fe6c94dd2b5f0b4c0b13c716a09ebedf7f717f56a929e6d88264c2c3b1c8ed257a55bc5194f1294a13a17a5a51dc053e8e7970d03115f476c9c9eaa1f91db8188f8b1d43c5399cd6d3ba81c2870737d2a7e976552cb6f36a2b9bc61ecf1b8886a2af26ba9df29613813020ca3ebc9bd4b3ed1a2889009d3f050c4f7970318604a85a6182ac7c2846a877bba9059abb0113c5b41c6beb60ca054a77eb4c4db98bb691b018c6bb3002e86fb9e2cf87a74ef8e75f90"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 4m44.91037824s ago: executing program 33 (id=301): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000700)={0x0, 0x0, 0xb, 0x3, 0x100, &(0x7f0000000740)="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"}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) pwrite64(r1, &(0x7f0000000000)="bf3380db2e98a8c3476454d9226bc1ad78d9670c0e197f0716b3e587a59fa5c0de31a5677c05a983cebe4694c71c6e41aa7f9ef1fe5f8f7d8bf134714fe9d674468fa6123162fb1478bb959d2df85ce99b246325775ca63ddec23a2d80f7ac261533efba3de7ef3922347016f7c3889761a15529896749ad0e556286019fc18bcab1330604ab42588d0e9bac9e49c9a35584dde3676c02046c8b38d58040958a1dcbbf4b75cee19dcafca67eaf416dedae758ddc10102d90b93b70e119c2f3554040dcb13f58b24fe6c612dd5484fc4d307b88b5e6ea950573426671e876cfcc465f", 0xe2, 0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a40), r2) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmmsg$inet_sctp(r1, &(0x7f0000002a00)=[{&(0x7f0000000180)=@in6={0xa, 0x4e20, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000140)="dc", 0x1}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="30000000000000008400000001000000000000af7a00020000000000000000000400"/44, @ANYRES32=0x0, @ANYBLOB="1800"], 0x48}], 0x1, 0x40) 4m19.850236096s ago: executing program 34 (id=599): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16bfc9754559bcb9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16bfc9754559bcb9) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) (async) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) (async) 4m7.714068263s ago: executing program 35 (id=922): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r1 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) ioctl$FE_SET_FRONTEND(r1, 0x40246f4c, &(0x7f0000000340)={0x30a32c0, 0x1, @vsb}) (async) r2 = socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) (async) bind$unix(r3, &(0x7f0000000240)=@file={0x1}, 0x6e) (async) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1}, 0x6e) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000001c0)='ceph\x00', 0x208004, 0x0) 3m39.696595616s ago: executing program 36 (id=1135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x8000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xc, 0xc89f, 0xffff5ef5, 0x0, 0x19, 0x3, 0x2800}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) bind$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x2, 0x40, &(0x7f0000000300)={0x4b5a9da54893e123, 0x1, 0x2, 0x2}, 0x8, 0x203ffffd, 0x300, 0x0, 0x2, 0x20000, 0x0}) 3m24.468850691s ago: executing program 0 (id=1286): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000300)=ANY=[@ANYBLOB="fc000000190001002bbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r0], 0xfc}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) geteuid() (rerun: 32) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB="d8000000080800002abd7000fddbdf2505000002cbffc5fccf79436111a43db5efd46b6e78404a0649cb67dd2375f05383524d1e558e44aedfd46b904260bbd066a7535aabaee877fee2f01ede956e0b3693ac7a99c6ce080d2abe2c99f25940b1b42d84a95a24ea2c540fb1f84e3ecab44f55d21f6b7f4570231f6261c67fb4a14fc25cf3fe8e1588b8e60defa093260c1d51691c1fc17fe2132a0617ae5a61b5a91f823805f359cdce82b0d985a79551e3edf10206cbbfedea969960ddf5da11c5b7a3343ac20b607b0f1ad8063219750c00"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001280)={0x2020}, 0x2020) (async) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x7f}, 0x1c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev2(r4, &(0x7f0000004380)=[{&(0x7f0000000180)="92dd8c6209fd6cf97ede81315b4f332836af8dcef02498dc15ca368fe5e70cdaaea7120fd3e9333ce2f3822d0513c078d9672988c5810008000000000000129ded97def3337f2dfd36a952c41574d43b26255b80c0ac08ce8ef853122ab59b7dca80", 0x62}, {&(0x7f0000000500)="990ab7e1acb8ebe73d6ad0ddfd44467f0946ded457eb7c5d0faa12fb8cdd9ffe2e4f215722bdf6e6f997b13c06a21d7e5f0aa597fef91544f7081ad24c53c49243fe1e319e1ff46d61e059352b02c3a389c1e5e9cb846d45e8bba21a88e8e841fd11ab3884a63357798d54c8f1ef45438a10763e4926f76657e25c819ffc36fe9fbfcd1fe1a2545d5781c2e964f3cd683384785045884f3da853827c1b78d4676cbdc32aa77d", 0xa6}, {&(0x7f0000000680)="86ba7b076a63a716185bd32ebd2e9dd5b7e8418328f0f191a5459f6fabad4d6ae7b0a07b86363ddf760c64ea39c3837db209b456db13285eb8da1177811763552bfb628207678cc808e8d4fb9f873d8f9197e16c7cf3f17359ab4641c7286f2b6213360b601948b444cc08c4bdaf59698d10cc44f351d083b390e7a0eb062e6511b8484c728d02b9c4dbeaa97fe732f447a11e3fbf6634bcb0812e3de7265b581bed08633a473ea6cc513909e80e830216c859101179b8fb112ebd0e8dbb6602437e1dd1268844336eb12c887625198f769493aaae9a71cdc4c9cbe72b2147020f835808e52f039faa8f8618", 0xec}, {&(0x7f0000000780)="3c6b6655d7d067e327d894645a7bdb52988ebee3293a94f985308009831bf77115b885092c5b2378e3398623400533e566aff68816adf4947c5b6dbbbbc3885d82ff83cf5b96a1fbe906542c2356261e8350b736f04802d746361b57ff5e577a33b7bdd9efe41065f8c186c7552dfa150c80b62fbd824729805840b721ef6f3a7eff4c4673ed549b75ba588c809e24d8e22e0f1cde6b52ecc4219da2848e82", 0x9f}, {&(0x7f0000004400)="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", 0x115}, {&(0x7f00000032c0)="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", 0x1000}, {&(0x7f0000004540)="d0806d146fd5240dffd9949afff6c7f3147468ec91685455e85522b8909427b45b06289e39cb65990e2099b8cf086b65c9bc6329e666a6900c7cce747672c45f0ea62a2ac43c56e8725f928e1755d547c6b4a6adfb3871a3312a017cd1f2409741866a203481f9a0131c782fa1f95a49da8c67e6bb3d082e416e2c7105b9e65db152df42dfcdc14a590af81f4f27c585c24783e4c2127da01c25b2e23845c146379702a9fc33180d02cf1f704dba557858d0b0a6d5274ec0785891bb598de57c214aa0cf7d62cc1b72dbe562eb5aff5edaff7e4dfc1a59b1f1941b2d", 0xdc}], 0x7, 0x9, 0xdd52, 0x10) (async) sendmmsg$alg(r4, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x44001}], 0x1, 0x8040) (async) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[], 0x114}, 0x1, 0x0, 0x0, 0x4c094}, 0x14) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000003c0)=""/84, 0x54}, {&(0x7f0000000440)=""/145, 0x91}], 0x2}, 0x40012001) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x17}, 0x48) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc858}, 0x80) (async, rerun: 32) r10 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r12, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) setsockopt$sock_int(r2, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) 3m24.379329458s ago: executing program 0 (id=1287): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x40003fe, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xfdc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0xffffffff, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x2, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0x7, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x1, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x400, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) io_uring_enter(0xffffffffffffffff, 0xa0b, 0x126d, 0x84, &(0x7f0000004ac0)={[0x2]}, 0x8) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0xf, 0x7, 0x1, 0x7}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0xc014) ioctl$UI_DEV_DESTROY(r1, 0x5502) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027", @ANYRES32=0x0, @ANYBLOB="030000"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f00000029c0)={0xc, {"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", 0x1000}}, 0x1006) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x4) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xfffffffffffffffe, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) 3m24.205732909s ago: executing program 0 (id=1291): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) (async) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) (async) 3m24.088628155s ago: executing program 0 (id=1293): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400a1ae00003700010327bc7022fd0bdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4000004) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400a1ae00003700010327bc7022fd0bdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4000004) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x42020}, [@IFLA_CARRIER_CHANGES, @IFLA_NET_NS_FD]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x42020}, [@IFLA_CARRIER_CHANGES, @IFLA_NET_NS_FD]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x11) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'erspan0\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x7, 0x7, 0x8, 0x401, {{0x2a, 0x4, 0x3, 0x9, 0xa8, 0x66, 0x0, 0x5, 0x4, 0x0, @private=0xa010102, @local, {[@ra={0x94, 0x4, 0x1}, @generic={0x83, 0xb, "73f79881b53a70d904"}, @end, @ra={0x94, 0x4}, @generic={0x94, 0x7, "1156ce5f8a"}, @lsrr={0x83, 0xb, 0xd3, [@multicast2, @private=0xa010102]}, @ssrr={0x89, 0x17, 0xd4, [@empty, @empty, @loopback, @multicast2, @loopback]}, @cipso={0x86, 0x45, 0x3, [{0x5, 0xa, "fe0ff6a5f899930b"}, {0x7, 0x5, "bd1f0c"}, {0x5, 0x11, "17e2d941ee0538ba4c350bd97deac8"}, {0x2, 0xe, "000000d97d42754180000000"}, {0x40af82d30f58774e, 0x11, "6bf4d6e9f84c3b11c5dccc69904677"}]}, @generic={0x1c, 0xb, "5d5f4ae37b5263aee3"}, @ra={0x94, 0x4}]}}}}}) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x17, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4c040) (async) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x17, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4c040) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg0\x00'}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @loopback, @private}, &(0x7f0000000380)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @loopback, @private}, &(0x7f0000000380)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f00000003c0)}, 0x10) 3m23.899508929s ago: executing program 0 (id=1297): r0 = userfaultfd(0x80001) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f000000a3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x1}}, 0x50) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) r8 = syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_FNAME(r9, 0x1, 0x53, 0x0, &(0x7f00000001c0)) waitid(0x1, r8, 0x0, 0x21000006, 0x0) wait4(r8, 0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[r7, r6], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r10, 0xc01464a6, &(0x7f0000000240)={r11}) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000083c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895ca9bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000900000000000008000000060000000000000009000000000000000400000000000000fc0000000000008003000000000000000000000000000000ffffff7f58000000040000000090000009000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="010000000400000000000000000000000000200037050000000000002b000000f60004003a2d285cc980000009c30000f3397cd86d4d928d14d3a461b60245898556c20600000000002b133b0801000000000000"], 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) fchown(r0, r3, r12) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x2a615293b57fc4a5}) 3m13.609168075s ago: executing program 0 (id=1348): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000140)={0x400000000000, 0xffffffffffffffff, 0x1}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=r0, 0x6, 0x1, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r1, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x4, 0x10, 0x4, 0x4, 0x40, @dev={0xfe, 0x80, '\x00', 0x2b}, @mcast2, 0x1, 0x8000, 0x7, 0x5}}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x2, '\x00', r4, r0, 0x2, 0x4, 0x3}, 0x50) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000300)={{r3}, {@void, @max}}) syz_create_resource$binfmt(&(0x7f0000000340)='./file0\x00') bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@map=r5, r0, 0x29, 0xbc7998f76c95e415, r0, @value=r0, @void, @void, @void, r2}, 0x20) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f00000003c0)) getresuid(&(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000702, r6, &(0x7f00000004c0)) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@gettclass={0x24, 0x2a, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x4}, {0x1, 0x1}, {0x2, 0x1}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc891}, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000640)={0xe, 0x8, 0x4}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000680), 0x440400, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r7, 0x8004510a, &(0x7f00000006c0)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x200600, 0x0) ioctl$TUNGETIFF(r8, 0x800454d2, &(0x7f0000000740)={'veth0_to_team\x00'}) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f0000000780)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r7, {0xcc1}}, './file0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0xe, '\x00', 0x0, r9, 0x4, 0x4, 0x5}, 0x50) bind$packet(r0, &(0x7f0000000880)={0x11, 0xc, r4, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000008c0)=0x7) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000a00)={&(0x7f0000000900)=[0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x7, 0x7, 0x9}) ioctl$MEMUNLOCK(r9, 0x40084d06, &(0x7f0000000a40)={0x298, 0x80000001}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r8, {r6, 0xffffffffffffffff}}, './file0\x00'}) fcntl$addseals(r10, 0x409, 0x8) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000ac0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r11, 0x400454c8, 0x1) syz_open_dev$MSR(&(0x7f0000000b00), 0x3, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000b40), 0x400002, 0x0) 3m13.567105552s ago: executing program 37 (id=1348): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000140)={0x400000000000, 0xffffffffffffffff, 0x1}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=r0, 0x6, 0x1, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r1, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x4, 0x10, 0x4, 0x4, 0x40, @dev={0xfe, 0x80, '\x00', 0x2b}, @mcast2, 0x1, 0x8000, 0x7, 0x5}}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x2, '\x00', r4, r0, 0x2, 0x4, 0x3}, 0x50) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000300)={{r3}, {@void, @max}}) syz_create_resource$binfmt(&(0x7f0000000340)='./file0\x00') bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@map=r5, r0, 0x29, 0xbc7998f76c95e415, r0, @value=r0, @void, @void, @void, r2}, 0x20) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f00000003c0)) getresuid(&(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000702, r6, &(0x7f00000004c0)) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@gettclass={0x24, 0x2a, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x4}, {0x1, 0x1}, {0x2, 0x1}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc891}, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000640)={0xe, 0x8, 0x4}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000680), 0x440400, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r7, 0x8004510a, &(0x7f00000006c0)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x200600, 0x0) ioctl$TUNGETIFF(r8, 0x800454d2, &(0x7f0000000740)={'veth0_to_team\x00'}) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f0000000780)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r7, {0xcc1}}, './file0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0xe, '\x00', 0x0, r9, 0x4, 0x4, 0x5}, 0x50) bind$packet(r0, &(0x7f0000000880)={0x11, 0xc, r4, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000008c0)=0x7) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000a00)={&(0x7f0000000900)=[0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x7, 0x7, 0x9}) ioctl$MEMUNLOCK(r9, 0x40084d06, &(0x7f0000000a40)={0x298, 0x80000001}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r8, {r6, 0xffffffffffffffff}}, './file0\x00'}) fcntl$addseals(r10, 0x409, 0x8) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000ac0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r11, 0x400454c8, 0x1) syz_open_dev$MSR(&(0x7f0000000b00), 0x3, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000b40), 0x400002, 0x0) 3m9.797969569s ago: executing program 8 (id=1377): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000080)) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x4ef) ioctl$KDSETLED(r1, 0x4b32, 0x7) ioctl$TIOCSCTTY(r0, 0x540e, 0x3) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@ieee802154, &(0x7f0000000200)=0x80, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x10, 0x8, 0xdc0, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x65, 0x0, 0xc, 0x4, 0x0, @broadcast, @rand_addr=0x64010102, {[@end, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0xff, 0x8f83, 0x40, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x8000, 0x0, 0x1}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xc4, r5, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe26}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x16}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000580)=0x5) ioctl$KDDELIO(r1, 0x4b35, 0x2) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f00000005c0)=""/7) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0xc) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000680)=r8) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f00000006c0)={@private1, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa, 0x800, 0x8, 0x100, 0x800, 0x800000, r7}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000740)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000780)="ad0ce232b6747f023b2bb0c16c93f25a3b79585d8509d26bf214ed23b7cfa9803a5e04fe07c54f218acc9c43a85f1f44c895f49c7efec89a37c94bfef97cc71b56b0d5e9288a5f9d7a20d5ce44c32c9daae4f0e5b0973c4aa39dc3c83fa2173548fc369c3ea36c785c493de29ebc5a4fcdb65b5fd58b75c5ac85963b1a0d5d1ff912ecfa7d84dd77c05658b15d36f4e716927ef946fb", 0x96) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r9, 0x111, 0x5, 0x1, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000840)={r4}) ioctl$XFS_IOC_FD_TO_HANDLE(r10, 0xc038586a, &(0x7f0000000980)={r2, &(0x7f0000000880)='/\x00', 0x0, &(0x7f00000008c0)={@_ha_fsid={[0x1, 0x3]}, {0x0, 0xffff, 0x5, 0x8}}, 0x6, &(0x7f0000000900), &(0x7f0000000940)=0x2}) ioctl$XFS_IOC_FSGROWFSRT(r11, 0x40105870, &(0x7f00000009c0)={0xffff}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x44, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40041}, 0x40000) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000b40)={0xb0, "bc2fa04e8dd359eb78996724c7943921f833865fe962bfefe34f40f7a756ac2e", 0x80, 0x1ff, 0x8, 0x8, 0x2}) 3m9.797595203s ago: executing program 8 (id=1378): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x208500, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f00000017c0)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f00000007c0)="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", 0x3}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_netdev_private(r1, 0x8947, &(0x7f0000000040)="a6cc04e2d8f1c38afbf14b29b86e3a") r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bond0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="800066180a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_linger(r5, 0x1, 0x3b, &(0x7f0000000740), &(0x7f0000000780)=0x8) shmdt(0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x100000000, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f00000001c0)={0x2, 0xfffffffc, 0x6}) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(r7) socket$packet(0x11, 0x0, 0x300) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000140)={0x18, 0x0, {0x3, @broadcast, 'lo\x00'}}, 0x1e) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r8) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x66303, 0x0) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)=ANY=[@ANYBLOB="180900002dcdc950dce58f4a0393038f197c5ecf0cd91256595484ded35fa0c43134e1e044a077516ec0e62e4f6eaede3ea2d4670254de25a3957e200762dc5b7d35d5316ecf6db19ebffc2a66ca866c0d5789e4ee63075690cb9d6c54697f076eaf3df21d9347b8bcd414453048ff20e2f2605cf7d69456316ce73adb8642e2ee305707e2d2e81c35af1d797a09d2fcefe6c31fdf54d87234d579881c71e4f717ae8f2d3c2f85c123def02d0af7aa11edaca249a4d2a211245709cc1ee989f60f", @ANYRES16=r10, @ANYBLOB="01002cbd7000001000000100000004000780"], 0x18}}, 0x4) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000000c0)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) 3m9.649446428s ago: executing program 8 (id=1379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x3, 0x3, 0x3, 0x0, 0xa, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x4}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, 0x26, 0x109, 0x870bd22, 0xfffffff9, {0x12}, [@typed={0xd, 0x163, 0x0, 0x0, @str='threaded\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x17, r5, 0x1, 0x7, 0x6, @local}, 0x14) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r6, &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000000)={0x8}, 0x20) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0x1, 0x3, 0x8, 0xffffffc0}, 0x4, 0x1, 0x8, 0x0, 0x3, 0x0, 0x16, 0x13, 0x3, 0xca, {0x0, 0x8, 0x3, 0x5, 0x84, 0x8}}}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0x1, 0x3, 0x8, 0xffffffc0}, 0x4, 0x1, 0x8, 0x0, 0x3, 0x0, 0x16, 0x13, 0x3, 0xca, {0x0, 0x8, 0x3, 0x5, 0x84, 0x8}}}}]}, 0x78}}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002640)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xc}, {}, {0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0x1}, {0x6000, 0x0, 0x4, 0x2, 0x1, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x5, 0x7, 0x6}, {{0x1, 0x1, 0x1}, {0x1fffffff}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 3m9.559384314s ago: executing program 8 (id=1380): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) (async) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) (async) stat(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000003c0)) (async) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="b000000000000000", @ANYRES64=0x0, @ANYBLOB="0600000000000000030000000000000000000000000000000000000001000000070000001b02000006000000874ad1398f00000000000000090000000000000007000000000000005d0a0000000000000000010000000000090000007f00000003000000001000000a000000", @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="c425ffff050000000000000003000000000000000d0000000000000001000000b000"/44], 0xb0) (async) write$char_usb(r0, &(0x7f0000000600)="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", 0x12c) (async) write$UHID_INPUT(r0, &(0x7f00000014c0)={0x8, {"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", 0x1000}}, 0x1006) recvmsg$can_bcm(r0, &(0x7f0000000a80)={&(0x7f00000002c0)=@nfc, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/230, 0xe6}], 0x1, &(0x7f00000007c0)=""/37, 0x25}, 0x1) r1 = syz_ublk_setup_io_uring(0x81d, &(0x7f0000000040)={0x0, 0x30b5, 0x4100, 0x2, 0x373}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r5 = getpgrp(0xffffffffffffffff) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, r5, 0x0, 0x100}}}, &(0x7f0000000480)=0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000440)={0x0, 0x2, 0x3, 0x9}) r8 = dup(r7) (async) set_mempolicy(0x1, 0x0, 0x47) r9 = syz_open_dev$video(&(0x7f0000000200), 0x5, 0x2800) ioctl$VIDIOC_G_INPUT(r9, 0x80045626, &(0x7f0000000240)) (async, rerun: 64) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) bind$bt_hci(r10, &(0x7f0000000240)={0x1f, 0x2}, 0x6) getsockname(r10, 0x0, 0x0) (async) write$bt_hci(r10, &(0x7f0000000840)=ANY=[@ANYRES32=r6], 0xff75) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0x7, &(0x7f00000000c0)=0x4, 0x4) (async, rerun: 32) syz_ublk_setup_queues(r8, r6, &(0x7f0000000880)={0x0, 0x5, 0x10000, 0x3, 0x67}, &(0x7f0000000ac0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb351, 0x400, 0x2100, 0x74}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x83, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x200, 0x0, 0x3a7, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8000, 0x2, 0x365}}], 0x1, &(0x7f0000000340)={0x2e, 0x51, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5e8, 0x0, 0x0}}, 0x0) (rerun: 32) lsetxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540), &(0x7f0000000580)={'L-', 0x8}, 0x16, 0x2) landlock_restrict_self(r8, 0xc) (async) chroot(&(0x7f0000001140)='./file0\x00') ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x8) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 3m9.556951025s ago: executing program 8 (id=1381): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000040)={0x0, 0xffff, 0x0, 0x0, 0x0}) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x2) setuid(0xee01) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e8}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="043e1f1b"], 0x22) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000440)={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xa5, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x14}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r1, r6, &(0x7f00000003c0)={0x0, 0x1460, 0x10700, 0x2, 0xb2, 0x0, r1}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8220, 0x1, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x2, 0x2, 0x902c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x0, 0x2, 0x40021a, 0x0, r1}}], 0x4, &(0x7f00000002c0)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r5, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) move_pages(r0, 0x9, &(0x7f0000000140)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0], 0x2) 3m9.134630124s ago: executing program 8 (id=1385): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000001c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 3m9.024617945s ago: executing program 38 (id=1385): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000001c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2m42.826212512s ago: executing program 2 (id=1691): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x47}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x47}, 0x94) (async) 2m42.825402691s ago: executing program 2 (id=1693): timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100024290d10011ec080041007369770014003300626f6e64300004ac067d5afc67a4b5ab2dfe7fbf79509a57aa14e459434594584db60da2258fc2f152caf547d73e94e5a60c10da4c152f56d3b3593c5f75fb9264cbdb72df869c6a542e114a69a0d5285bc8a0df602dbdacc798f13be486a83b4937259b85dd0ee9b99198766554531440c8e4706c71f9f91acbbed22f2f71ef91b89c2d35e1dc07f74b3e0ceca90762b73aab0b6def8ec286d0aa60fcc78f03f06ea8c8379a3e54eb012585885d8ac4be24c2307fbde185225693261c6abd49a3f8280d62d1db6d21eec8adaf02932e145fd2ff49d24e0d15af8a"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 2m42.750148992s ago: executing program 2 (id=1694): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000240)=""/68) (async) r1 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x7, 0xffeffffe}, {0x16, 0x0, 0x0, 0x40000000}]}, 0x10) (async) sendto$inet6(r1, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x408d6, 0x0, 0x0) (async) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x53, 0x2, 0x7, {0x4eb2, 0x2}, {0x8001, 0x1ff}, @rumble={0x9, 0xf99f}}) 2m42.749566991s ago: executing program 2 (id=1697): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c00000010000104000000000300000000000000cb91f05c8be18114609aa39fcdbcf77b9923ef454c9c9cf08aa6845788ef6773832a57218ea88904a6b532e8575edd6a0242d20185d9b9cfebd69e7aa333082cd24a189353722636b6f4de5e4660bb1f604dbe3ce4bacd8bb752d162f059f878f0644d9856f2f69accc9808ddf6865071d17a28755472ad6f60f017125259785a83d996b36c3b63d82ed82dfe5f3d45110c58e4e7f3f5710030341887ac95951c7d1e7be28682dd85e1ef29b5ff7d48993028aa9578c735644011c99a2fae667080382506f7fbb0ddbcfcfeb1c66e2c400672978a87712", @ANYRES32=0x0, @ANYBLOB="2da004008d8b00002c0012800e00010069703665727370616e000000180002800500160002000000040012000500170000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, &(0x7f0000000080)=0x7, 0x4) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) creat(&(0x7f00000002c0)='./file0\x00', 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000002100df4d2abd700000000000020010000000000000000000140011006e657464657673696d3000000000000008000200640101010c001400", @ANYRES32, @ANYRES8=r1], 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 2m42.669802991s ago: executing program 2 (id=1698): r0 = socket(0x10, 0x80002, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x262040, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRES64=r0, @ANYRES8, @ANYBLOB="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"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2m42.669490818s ago: executing program 2 (id=1699): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000200)=""/73, 0x1000000, 0x0, 0x0, 0x2}, 0x20) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x3, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x0) (async) socket$inet6(0xa, 0x800, 0x401) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) pread64$ublk_bdev(r1, &(0x7f0000000100)=""/137, 0x89, 0xfffffffffffff66c) (async, rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYRESHEX=r4], 0x15) 2m37.02541385s ago: executing program 6 (id=1795): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000071c0)=[{{&(0x7f00000001c0)={0xa, 0x1, 0x10, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)="8f", 0x1}], 0x1}}], 0x1, 0x4004) 2m36.851422078s ago: executing program 6 (id=1796): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x1, 0x0, 0x2, 0x2, 0x9, 0xfffe}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x9}) r1 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') pread64(r1, &(0x7f0000000140)=""/106, 0x6a, 0x1000007) sendmsg$inet6(r1, &(0x7f0000000640)={&(0x7f0000000240)={0xa, 0x4e20, 0x3, @remote, 0x3}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000280)="7e50a196c764071ee2d362fb20b4925e3d350e98188f3b71dfc6ad037e1dccd46e49cc8b5144b34864ccfef3c7f3487a16780cf743f4bd52d6ae596666cba1de688f6a0207332971e0", 0x49}, {&(0x7f00000003c0)="077ea40390831f2eccb8ff2f667d91558808e99f8da051a358d4c9fcee02792222ccaa1373a0a0bf63155a5fabac2e0524634321b6a51a110d6c405b4b692ebefbeebd5ed66e32a2427a885bb6497da081b30d3bf17283165f22c8ea81ea55a86d296fc15b6b88fee224ec03c7b25a1ef6d999cbfbc6180f70f3c6b25de9e42f30f5b8b1af04ae32ef0c", 0x8a}, {&(0x7f0000000480)="714ce1c3686b", 0x6}, {&(0x7f00000004c0)="536c097cfff96f8c8fa0906d25ed28c3d10af80b4db9a6b5c3ce3fcbb352c738f5066c0ec35dba6bf7834d690f9decc7961a8ae4407f935c06a3c9e3140abc47db767aabd07e9476c88885b5645bd015ef6af3371904245da7ac20c74d98a0695abb7d2842b09b24e6f4f7d1038d94332620abcfd998cee6b0fe189eb01d730daed09eb84f0555977eac683c4a13dc831352466052bf305942b923737f82", 0x9e}, {&(0x7f0000000580)="363189dbf240fc1b29b8a5a864d45ec998d71a0e7b6f6260fa49b96bbeb6637a97382153e5456da2f0146a7d2dfbe37e2891b30620ad4ad94cd23e05e37e74", 0x3f}], 0x5}, 0x8004000) ioctl(r0, 0x8b32, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0xfffffe40, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24000800}, 0x10) read$FUSE(r1, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$9p_virtio(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x4, &(0x7f0000002740)=ANY=[@ANYBLOB="741761d0cb01000010", @ANYRESHEX=r3, @ANYBLOB="2c63616368653d6e6f6e652c736d61636b66736861743d5dee2c00"]) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 2m36.792644724s ago: executing program 6 (id=1797): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=@ipv4_delrule={0x24, 0x21, 0x200, 0x70bd29, 0x25dfdc00, {0x2, 0x0, 0x10, 0x3, 0x2, 0x0, 0x0, 0x9}, [@FRA_DST={0x8, 0x1, @private=0xa010100}]}, 0x24}}, 0x4048020) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)) 2m36.721025438s ago: executing program 6 (id=1799): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x7) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000001380)={[&(0x7f0000000080)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m', &(0x7f00000003c0)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, &(0x7f0000001200)={[&(0x7f0000000540)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) 2m36.714560737s ago: executing program 6 (id=1800): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000980)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x60, 0x2, r1}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x40814) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x90656}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r12], 0x54}}, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0xffffffffffffffff) 2m36.532026211s ago: executing program 6 (id=1802): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000540)={0x30, r1, 0x1, 0x70bc2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004014}, 0x20008004) socket$netlink(0x10, 0x3, 0x0) syz_usbip_server_init(0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="030f000000000000000007"], 0x48}}, 0x0) (async) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="030f000000000000000007"], 0x48}}, 0x0) fsmount(r6, 0x0, 0x0) (async) r9 = fsmount(r6, 0x0, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x404c011}, 0xc4) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000400)={@empty, @multicast1, 0x1, "e92245309840cbc9572857f015a89a66fc8ff00190fdc53b32611ff52f1a1476", 0x5, 0xffffffff, 0x8}, 0x3c) (async) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000400)={@empty, @multicast1, 0x1, "e92245309840cbc9572857f015a89a66fc8ff00190fdc53b32611ff52f1a1476", 0x5, 0xffffffff, 0x8}, 0x3c) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) syz_emit_ethernet(0x7b, &(0x7f0000000240)={@random="efb7f252d3df", @remote, @val={@void}, {@mpls_uc={0x8847, {[{0x70}, {0x7, 0x0, 0x1}, {0x4}, {0x4, 0x0, 0x1}], @ipv4=@udp={{0x10, 0x4, 0x1, 0x6, 0x59, 0x67, 0x0, 0x4, 0x11, 0x0, @broadcast, @local, {[@ssrr={0x89, 0x7, 0x8e, [@multicast1]}, @timestamp_prespec={0x44, 0xc, 0x67, 0x3, 0xf, [{@broadcast}]}, @noop, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0xb0, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x41}, @remote, @dev={0xac, 0x14, 0x14, 0x3d}]}]}}, {0x4e24, 0x4e24, 0x19, 0x0, @opaque="c3e2b65d698a2d0799eab83938b668841f"}}}}}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000003c0)={0x0, 0xa, 0x5000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) 2m27.091170908s ago: executing program 39 (id=1699): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000200)=""/73, 0x1000000, 0x0, 0x0, 0x2}, 0x20) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x3, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x0) (async) socket$inet6(0xa, 0x800, 0x401) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) pread64$ublk_bdev(r1, &(0x7f0000000100)=""/137, 0x89, 0xfffffffffffff66c) (async, rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYRESHEX=r4], 0x15) 2m20.026805458s ago: executing program 40 (id=1802): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000540)={0x30, r1, 0x1, 0x70bc2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004014}, 0x20008004) socket$netlink(0x10, 0x3, 0x0) syz_usbip_server_init(0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="030f000000000000000007"], 0x48}}, 0x0) (async) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="030f000000000000000007"], 0x48}}, 0x0) fsmount(r6, 0x0, 0x0) (async) r9 = fsmount(r6, 0x0, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x404c011}, 0xc4) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000400)={@empty, @multicast1, 0x1, "e92245309840cbc9572857f015a89a66fc8ff00190fdc53b32611ff52f1a1476", 0x5, 0xffffffff, 0x8}, 0x3c) (async) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000400)={@empty, @multicast1, 0x1, "e92245309840cbc9572857f015a89a66fc8ff00190fdc53b32611ff52f1a1476", 0x5, 0xffffffff, 0x8}, 0x3c) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) syz_emit_ethernet(0x7b, &(0x7f0000000240)={@random="efb7f252d3df", @remote, @val={@void}, {@mpls_uc={0x8847, {[{0x70}, {0x7, 0x0, 0x1}, {0x4}, {0x4, 0x0, 0x1}], @ipv4=@udp={{0x10, 0x4, 0x1, 0x6, 0x59, 0x67, 0x0, 0x4, 0x11, 0x0, @broadcast, @local, {[@ssrr={0x89, 0x7, 0x8e, [@multicast1]}, @timestamp_prespec={0x44, 0xc, 0x67, 0x3, 0xf, [{@broadcast}]}, @noop, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0xb0, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x41}, @remote, @dev={0xac, 0x14, 0x14, 0x3d}]}]}}, {0x4e24, 0x4e24, 0x19, 0x0, @opaque="c3e2b65d698a2d0799eab83938b668841f"}}}}}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000003c0)={0x0, 0xa, 0x5000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) 1m53.471906561s ago: executing program 1 (id=2029): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4000, &(0x7f0000000200)={[{@release_agent={'release_agent', 0x3d, './file1'}}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4000, &(0x7f0000000200)={[{@release_agent={'release_agent', 0x3d, './file1'}}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0) (async) 1m53.455436217s ago: executing program 1 (id=2031): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) ppoll(&(0x7f0000000100)=[{r1, 0xa340}], 0x1, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)=@sr0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='pvfs2\x00', 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000026000103000010000000000001"], 0x14}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140040"], 0x24}}, 0x0) 1m53.444080821s ago: executing program 1 (id=2039): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x100, 0x0, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xb}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008061}, 0x4048000) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80080001"], 0x38}}, 0x0) 1m53.311541687s ago: executing program 1 (id=2043): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x10, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, r2, r3, 0x1, 0x9}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}]}, 0x0, 0x0, 0x0}) (async) getdents64(r4, &(0x7f0000000100)=""/134, 0x86) (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f0000000200)=0x79, 0x0) (async) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) (async) r6 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r6, 0x641e) (async) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) mount$afs(0x0, 0x0, 0x0, 0x14000, &(0x7f0000000000)={[{@dyn}, {@flock_write}]}) ptrace$setregs(0x1a, r7, 0xc, &(0x7f0000000000)) (async) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='scalable', 0x8) (async) sendmmsg$inet(r5, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000016c0)="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", 0x3d6}], 0x1}}], 0x1, 0xa090) 1m53.167791176s ago: executing program 1 (id=2046): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000000)) r3 = socket$inet6(0xa, 0x80802, 0x0) fcntl$setstatus(r3, 0x4, 0x2800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000017c0)={0xffffffffffffffff, 0xe0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7b, &(0x7f00000015c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001600), &(0x7f0000001640), 0x8, 0x43, 0x8, 0x8, &(0x7f0000001680)}}, 0x10) sendmmsg$inet6(r3, &(0x7f0000001940)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0x4}], 0x1}}, {}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="9faa4055d004db80f42c7b133b9cb1566caaa4239fb1ee4217a50ae552317ab968c0bbe56555e4f90d50237452683c9fabc3e3f6f4a46aea7885055d9aa6047699ab15c4342ff938643a941e78478078a4cb9169fd90bae0ee23860d14a0cf5225ee926c86c981e28278dced1f2b63df7ee631adfdc5115c6aee9012c3fe350a641c7885836b938d41e6f6ea64fbe9ab9196d434aa54d3646f10b1c42c9be998", 0xa0}, {&(0x7f00000013c0)="56810499159b23cd0527d3b3925602a807e397fb2db25756c60d356448243c677e73cfa1ec476fc5126328b9bbdae86226b1c222295e287de94c0806fef68838ba470976a1da87eeaa88fcdb473abed19ae2d73dc36849241650582f5a43c792ad11677f53a065afe60ff0cac5bfac9f8af05be33655063a270cb69bceb83fcd0c609cb525a161e83cb4434728f38255664f11c90f3bf6ff6cede37e8e4cb0a8eb9a9e4661d8dec5aeb261e3fcb52cd9bf4d9cdc4874698a8e18153b3f1f494b09cc606d1186a88a81b6142c6b71c86de2468f1b3c80b6e8bd0ec80aa222fbed32896114767daebc8ec8895e31ac0bf949d9580b0f", 0xf5}], 0x3, &(0x7f0000001a40)=ANY=[@ANYBLOB="480000000000000029000000390000006706000800000000fc01000000000000000000000000000020010000000000000000000000000000ff01000000000000000000000000000124000000000000002900000032000000ff020000000000000000000000000001", @ANYRES32=r4, @ANYBLOB="00000000200000000000000029000000040000005c010000000000000102000005020002300000000000000029000000360000000603000000000000c91020010000000000000000000000000001c20400000005280000000000000029000000360000002b01000000000000040100c20400000007000000000000001400000000000000290000000800000001000000000000002400000000000000290000003200"/180, @ANYRES32=0x0, @ANYBLOB="0000000073778b6464ea4dc5d921514ac8b88fd24f0fd5e81aacedc00eee68ea3bdafa3833beb9eb435d6c56ae6c5ea34ebfaad9e1028d867feebf46ed21781b065ef38525e7d70868123296c6e820b2220183a7f581aac4291cd075f07cc62ac96ba7eac36debbabba285b7908edcb230ce952b2dadd2382b89298ca32a3b264a68b66505f2e1d7f34c8dfb820c5734cc00f7dcc2d02e79d29070490805804fddb9dba8bba5164bd0c8cafef0bdf0e6a9ba2c88e8f5c25e49fb69707263ab26ef7e07b948ea7febd7240c99cdf4fc07b3de3eb22521f633244ff8719bdcbf9608fedbe387284f247f280d"], 0x128}}], 0x4, 0x1c000) (async) ppoll(&(0x7f0000000140)=[{r3, 0x5}], 0x1, 0x0, 0x0, 0x0) (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x121000, 0x0) read$FUSE(r5, &(0x7f0000002a80)={0x2020}, 0xfffffffe) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$sr(0xffffffffffffff9c, &(0x7f0000001240), 0x620501, 0x0) sendto$inet6(r9, &(0x7f0000001300)="9bc28121d59fd382aefc7e1aeea174af9fed88bbb39845acf7117de8c12f47807106a75f71d6b018887cc59724e7b7cfce876fe144e6a0cc431ffa58c1178193fde4013bc51f8c0f181ea4d9b4670ef18c7f1d54256bc030be", 0x59, 0x20000040, &(0x7f0000001800)={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x8}, 0x1c) (async) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x8f}]}) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r14}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0x4, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x15}}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$NL802154_CMD_SET_PAN_ID(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002cbd7000ffdbdf250a000000060009000000000008000300", @ANYRES32=r13], 0x24}, 0x1, 0x0, 0x0, 0x40004004}, 0x20040044) (async) syz_kvm_setup_cpu$x86(r5, r8, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="c4e14dd11d9b7e0000b805000000b90f0000000f01d9c4e3b16d0f09c4e110575c9270b81b3600000f23c00f21f835000008000f23f80f20e035200000000f22e026f30fa7c0b9800000c00f3235008000000f300f07b93a0600000f32", 0x5d}], 0x1, 0x22, &(0x7f00000000c0)=[@dstype3={0x7, 0x9}], 0x1) (async) sendto$inet6(r3, 0x0, 0x0, 0x90, 0x0, 0x0) 1m52.854201876s ago: executing program 1 (id=2053): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xaffffffa) (async) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x9, 0x10}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000002c0)={r2, 0xa0, &(0x7f0000000200)=[@in={0x2, 0x4e23, @private=0xa010100}, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x10}, @in6={0xa, 0x4e23, 0xffffff22, @mcast1, 0x80}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e23, 0x40, @private0, 0x8}, @in6={0xa, 0x4e21, 0x8, @private1, 0x3}]}, &(0x7f0000000300)=0x10) (async) write$binfmt_script(r1, &(0x7f0000001b00), 0xfffffd9d) write$binfmt_misc(r1, &(0x7f0000000280), 0x0) 1m52.804726108s ago: executing program 41 (id=2053): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xaffffffa) (async) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x9, 0x10}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000002c0)={r2, 0xa0, &(0x7f0000000200)=[@in={0x2, 0x4e23, @private=0xa010100}, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x10}, @in6={0xa, 0x4e23, 0xffffff22, @mcast1, 0x80}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e23, 0x40, @private0, 0x8}, @in6={0xa, 0x4e21, 0x8, @private1, 0x3}]}, &(0x7f0000000300)=0x10) (async) write$binfmt_script(r1, &(0x7f0000001b00), 0xfffffd9d) write$binfmt_misc(r1, &(0x7f0000000280), 0x0) 1m16.519690635s ago: executing program 4 (id=2574): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000340), &(0x7f0000000040)=@tcp}, 0x20) sendto$inet(0xffffffffffffffff, &(0x7f00000019c0)="ba424e9bd3229c8edecdb037cd9714c4c343", 0x12, 0x4002, 0x0, 0x0) 1m16.518382894s ago: executing program 4 (id=2576): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1m16.443581855s ago: executing program 4 (id=2578): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x4}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1m16.435809808s ago: executing program 4 (id=2580): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x63, &(0x7f0000000040)=[{0x0, 0xaa, 0x0, 0x73745a11}, {0x5, 0x5, 0x6, 0x9}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x63, &(0x7f0000000040)=[{0x0, 0xaa, 0x0, 0x73745a11}, {0x5, 0x5, 0x6, 0x9}]}, 0x10) 1m16.323068711s ago: executing program 4 (id=2581): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, 0x0, 0x42902, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x870b525, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x9}, {}, {0xf, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x20a38db6}]}, 0x2c}}, 0xd74f13c0140ee5f0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r4}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r6}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x880, 0x0) r9 = fsopen(&(0x7f0000000340)='adfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r12 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r13 = fanotify_init(0x200, 0x0) fanotify_mark(r13, 0x201, 0x4000003e, r12, 0x0) r14 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r14, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0xc0010058, 0x0, 0x9}]}) 1m16.18331626s ago: executing program 4 (id=2584): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x3, &(0x7f00001c9000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x4, 0x0, 0x0, 0x800, 0x0, 0x5f, 0x0, 0x2}) 59.718314989s ago: executing program 42 (id=2584): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x3, &(0x7f00001c9000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x4, 0x0, 0x0, 0x800, 0x0, 0x5f, 0x0, 0x2}) 37.677143465s ago: executing program 3 (id=3010): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c10000000000000000000", 0x58}], 0x1) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/228, 0xfffffffffffffe22}], 0x1) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c10000000000000000000", 0x58}], 0x1) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/228, 0xfffffffffffffe22}], 0x1) (async) 37.676334201s ago: executing program 3 (id=3012): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x3f, &(0x7f00000008c0)=0x1, 0x4) recvmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/32, 0x20}, {&(0x7f00000000c0)=""/182, 0xb6}, {&(0x7f0000000180)=""/223, 0xdf}, {&(0x7f0000000280)=""/54, 0x36}], 0x4, &(0x7f0000000300)=""/148, 0x94}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000c00), &(0x7f0000002000)=0x2) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x2800, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0100001000130700000000fddbdf25640101010000000091de4f8e39e5485770574ecaa208b37000000000000000002001000000000000000000000000000100000000a9f7bc3657c75364e56a2100020a0000001d000000ef599ad4ea841483c2621a4f7dd8c2d9643509460404c79a0d624a2b86cff50baa1516dc57edcda562e69cc8fc3de13e935359818f77695f608a59e481364938f21b398b3a645387f09c6780402b610d6314ffc24b5cfe009be20ffcabda640111e747d21131defc3ba56382ddeade8834cd6a5d2ce91eb017c22ac70e735f2f71d06a8ebbdea3a96ca850c42b26a57d17a94471746bac55a86a0e9a1b2ee8a28a9ff6cb60084c6e9e1dee09582b9ff03cb71ecafda3062bedc6af6245", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000ff000000fe320000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff080000000000000001000000000000000900000000000000ffffff7f0000000043050000000000000400000000000000ffffffffffffff7ffcffffffffffffffe2eb0000000000000200000000000000000000002cbd7000003500000a00048050000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 30.108240008s ago: executing program 3 (id=3015): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) (async) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400072000000000000000000000000000000001050004000100000008000a"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f4000000050002"], 0x58}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 21.353656959s ago: executing program 3 (id=3015): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) (async) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400072000000000000000000000000000000001050004000100000008000a"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f4000000050002"], 0x58}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 13.895303122s ago: executing program 3 (id=3015): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) (async) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400072000000000000000000000000000000001050004000100000008000a"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f4000000050002"], 0x58}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 6.328067483s ago: executing program 3 (id=3015): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) (async) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400072000000000000000000000000000000001050004000100000008000a"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f4000000050002"], 0x58}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2.07577734s ago: executing program 9 (id=3394): mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x3) set_mempolicy_home_node(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000002, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000600), 0x242540, 0x0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000000)) 2.018705419s ago: executing program 9 (id=3396): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8840, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0xe, 0x8, 0x2, "ff00f70000e5020052c4f21c7f000000002000"}) syz_open_pts(r1, 0x80200) r2 = syz_open_pts(r1, 0x141601) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) r3 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000080)=0x2) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x400008, 0x1ffffffe, 0x0, 0x3, 0x19, "680c1acfa4a5000000070000faffffff000800"}) ioctl$VIDIOC_G_AUDIO(r3, 0x80345621, &(0x7f0000000100)) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f00000002c0)={0x0, 0x8000}) close_range(r0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x8000, 0x480000) fgetxattr(r4, &(0x7f0000000180)=@random={'trusted.', '}&,!\x00'}, &(0x7f00000001c0)=""/231, 0xe7) 1.770847959s ago: executing program 7 (id=3399): r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x44040, 0x11b) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1f, 0x12, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="13", 0x1}], 0x1}, 0x4051) recvmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000012c0)="f9", 0x37}], 0x1}, 0x2080) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r3, 0x4068aea3, &(0x7f0000000040)) 1.629454203s ago: executing program 7 (id=3400): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMREADAUDIO(r0, 0x31e, &(0x7f0000002140)={@msf={0x7e, 0x3, 0x4}, 0x0, 0x0, 0x0}) 1.455485407s ago: executing program 7 (id=3401): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x87, 0xfe, 0x4, 0xff}, {0x6}]}) mremap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) personality(0x87bf5ac905ea0f7f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x92, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x50) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0xa9525000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x25, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001868000006000000000000002800000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500c94400000085000000a5000000183a00000300df910000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x1000, 0xab, &(0x7f0000000400)=""/171, 0x0, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, r2], &(0x7f0000000500)=[{0x4, 0x5, 0xa, 0x8}, {0x3, 0x4, 0x6, 0x7}], 0x10, 0x3}, 0x94) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40101) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f00000042c0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000700)="86", 0x1}], 0x1, 0x0, 0x0, 0x20040010}], 0x1, 0x4028056) r7 = dup2(r4, r6) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback, 0x33, 0x0, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@map=r7, r7, 0x2f, 0x18, 0x0, @void, @value=r7, @void, @void, r8}, 0x20) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000640)='syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000740), 0x843, 0x0) ioctl$BLKBSZSET(r10, 0x40081271, &(0x7f0000000780)=0x80000001) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@cgroup=r9, r3, 0x21, 0x12, 0xffffffffffffffff, @void, @value, @void, @void, r8}, 0x20) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000140)={0x18, &(0x7f00000000c0)=[{0x31, '\x00', @data=0xb, 0x9}]}) brk(0x200000ffc000) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r12, 0x1, 0x0, 0x0, {0x53}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}}]}, 0x44}}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x1, 0x8000, 0x4, 0x9, 0x4, "73e2cb04645eea0a9ac071be4b6771673fa1a4"}) 1.03834899s ago: executing program 9 (id=3404): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0xc) r4 = openat$cgroup(r3, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000004000)={0x2020}, 0x2020) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f00000000c0)={0x10, 0x0, r1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r6, &(0x7f0000000040)={0x18, 0x0, r7, {0x7}}, 0x18) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) accept(r8, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48}) (async) fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r2, 0x1, 0xc) (async) openat$cgroup(r3, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(r4, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) (async) read$FUSE(r5, &(0x7f0000004000)={0x2020}, 0x2020) (async) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f00000000c0)={0x10, 0x0, r1}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r6, &(0x7f0000006380)={0x2020}, 0x2020) (async) write$FUSE_WRITE(r6, &(0x7f0000000040)={0x18, 0x0, r7, {0x7}}, 0x18) (async) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) accept(r8, 0x0, 0x0) (async) 901.381781ms ago: executing program 9 (id=3406): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x810, r0, 0x0) mremap(&(0x7f000000e000/0x7000)=nil, 0x7000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 773.241982ms ago: executing program 9 (id=3407): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$sock(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000180)={r0, &(0x7f0000000080)=')\x00', 0x40000, &(0x7f00000000c0)={@_ha_fsid={[0x3, 0x1]}, {0x6, 0x0, 0x100, 0x59c2}}, 0xe400, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x6c}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x8}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20080041}, 0x20008090) ioctl$BLKSSZGET(r2, 0x1268, &(0x7f00000001c0)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0xc040) 770.310705ms ago: executing program 9 (id=3408): syz_clone(0x400011, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = userfaultfd(0x80001) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000008d"], 0x0, 0x26}, 0x20) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 461.677204ms ago: executing program 7 (id=3410): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioperm(0x6, 0x1, 0x95d) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) (async) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) (async) socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$netlink(0x10, 0x3, 0x4) (async) socket$packet(0x11, 0x3, 0x300) write(r3, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0xfdef) (async) ftruncate(r2, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async, rerun: 32) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, &(0x7f0000000040)={0x40, 0x23, 0x50, {0x50, 0x11, "f9b3ca83235e9a4a0d0877f40a46dbcd36ad0f26dddc8b6207e10abc851613c2ee3347f050fe7abfbe7ac64b9036e2220b950c9967dad0215f1388219bb3b5a0e9bb1100a6b9fcac87cf29e16611"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x440a}}, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x6, "dc"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x4, 0x1, {0x22, 0x50e}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x40, 0x14, 0x31, "7c5a0c30a9a0f52b1d644f10b4da2929c2ad8bf1aab8fc5c53af58f7132684861dc61f373c9033dda1dacc34deb0d04c09"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xfc}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000380), &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x8}}) (rerun: 32) listen(r4, 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a4790bfd0c4379c3800000000000000000000000000bbfe8000000000000000000000000000aa4e204e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80c20000907803ff1e0c17024b00000006000000"], 0x0) 347.755446ms ago: executing program 5 (id=3411): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf8080045020014006500000229907864010100ffffffff90f31534d163397ff7d1a197c159dc6d68e71bfc55e01cb716e8d103f38ba8a2eebde2bef38ce53b3f5132ebd1020789a6632903e898"], 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f0000000180)={0x20, r5, 0x1, 0x0, &(0x7f0000000600)=[{}]}) pselect6(0x40, &(0x7f0000000100)={0x8, 0x0, 0x1ff, 0x8, 0x7, 0x6, 0x4, 0x4}, &(0x7f0000000140)={0x6, 0x85a, 0xffff, 0x0, 0x884, 0x6, 0x9, 0x2}, &(0x7f00000001c0)={0x0, 0xffffffff80000000, 0x3, 0x101, 0x9, 0x2, 0x8, 0x3}, &(0x7f0000000280)={r2, r3+60000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x7]}, 0x8}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "9e435a5dc85bfebc", "96a2ff2adc050fe8759e0d74e21dba6c", "04853e9d", "bfdd79c8ae44fb92"}, 0x28) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) 275.067656ms ago: executing program 5 (id=3412): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[], 0xe0}, 0x1, 0x0, 0x0, 0x24008000}, 0x8040) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000e00)='./file0\x00', 0x140) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x2000000, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r3, 0x4068aea3, &(0x7f0000000000)={0xda, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x9) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f01f}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000280)=@arm64) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000400)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYRESHEX=r8, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC]) read$FUSE(r9, &(0x7f00000021c0)={0x2020}, 0x2020) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) 273.575159ms ago: executing program 7 (id=3413): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x42880, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f00000003c0)=[@set_irq_handler={0xc8, 0x20, {0xfc, 0x1}}, @nested_amd_invlpga={0x17d, 0x20, {0x25000, 0x2f71}}, @nested_load_syzos={0x136, 0x110, {0x2, 0x5, [@out_dx={0x6a, 0x28, {0x3d01, 0x1, 0xff}}, @nested_amd_clgi={0x17f, 0x10}, @rdmsr={0x66, 0x18, {0x649}}, @wr_crn={0x67, 0x20, {0x8, 0x8000000000000000}}, @wr_crn={0x67, 0x20, {0x2, 0x9}}, @nested_amd_stgi={0x17e, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host64=0x2c02, 0x0, 0x5, 0x380000000000000}}, @nested_create_vm={0x12d, 0x18, 0x2}]}}, @rdmsr={0x66, 0x18, {0x252}}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x3, 0x6eb4}}, @enable_nested={0x12c, 0x18}, @uexit={0x0, 0x18, 0x9}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x1, 0x877}}, @uexit={0x0, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_vmsave={0x183, 0x18}, @wr_drn={0x68, 0x20, {0x4, 0x9}}, @enable_nested={0x12c, 0x18}, @nested_load_syzos={0x136, 0x199, {0x0, 0x5, [@in_dx={0x69, 0x20, {0xe1e5}}, @rdmsr={0x66, 0x18, {0x861}}, @code={0xa, 0x61, {"6536470f79e8420f239eb8010000000f01c166b83e018ee8c4a1d176ed0f2361c744240083000000c74424022b900000ff1c2466baf80cb8f1bd9b82ef66bafc0cb000ee64660f21df3e660f38824a03"}}, @in_dx={0x69, 0x20, {0x7141}}, @out_dx={0x6a, 0x28, {0xe723, 0x6, 0xfffffffffffffffc}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x70, 0x2, 0x8b3d, 0x1}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x56, 0x8, 0xd, 0x7}}, @out_dx={0x6a, 0x28, {0xd6c4, 0x6, 0x4}}]}}, @enable_nested={0x12c, 0x18}, @in_dx={0x69, 0x20, {0xce80}}, @enable_nested={0x12c, 0x18}, @code={0xa, 0x5c, {"c4c1f95aaa000000000f20e035002000000f22e0f4c7442400f9000000c7442402c7000000ff1c240fae32c48119ea59750f0092008000003ef3430f09c4414d73d29d3626d99100000000"}}, @nested_load_syzos={0x136, 0x15e, {0x0, 0x1, [@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_amd_invlpga={0x17d, 0x20, {0x8ca18d2e0e55e70f, 0x1b35}}, @rdmsr={0x66, 0x18, {0x618}}, @in_dx={0x69, 0x20, {0x464d, 0x1}}, @nested_amd_vmsave={0x183, 0x18}, @rdmsr={0x66, 0x18, {0x86a}}, @nested_load_syzos={0x136, 0x9e, {0x0, 0x4, [@code={0xa, 0x66, {"440f20c0350f000000440f22c066baa00066b88c3666efb9150800000f3248b8c9000000000000000f23c80f21f835000030000f23f83e400f30c20018f2400f2110debcad92fdced3c423fd496afc00c4027d182e"}}, @nested_create_vm={0x12d, 0x18, 0x2}]}}]}}, @nested_load_syzos={0x136, 0x40, {0x2, 0x200, [@nested_amd_invlpga={0x17d, 0x20, {0x1000, 0x41d6}}]}}, @set_irq_handler={0xc8, 0x20, {0xb2, 0x2}}, @code={0xa, 0x68, {"83ca00666441ad660fc7b737bffadb26400f76ba0600000066b8b2008ee8c4420945e00f225445f4c74424006e000000c744240200800000ff1c24c744240007000000c744240256721d0cc7442406000000000f011c24"}}, @set_irq_handler={0xc8, 0x20, {0xe0}}, @set_irq_handler={0xc8, 0x20, {0x5c, 0x2}}], 0x74b}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 112.03758ms ago: executing program 5 (id=3414): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x409c1, 0x0) (async) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000100)) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000180)={0x1}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000001c0)={'ip6_vti0\x00', 0x100}) (async) statx(r3, &(0x7f0000000200)='./file0\x00', 0x400, 0x8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0xee01, r7}}, './file0\x00'}) ioctl$USBDEVFS_REAPURBNDELAY(r8, 0x4008550d, &(0x7f0000000380)) (async) ioctl$SIOCGETLINKNAME(r8, 0x89e0, &(0x7f00000003c0)={0x3, 0x1}) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) quotactl_fd$Q_QUOTAOFF(r9, 0xffffffff80000300, r6, 0x0) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TIOCGSOFTCAR(r10, 0x5419, &(0x7f0000000480)) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r9, 0x40049366, &(0x7f00000004c0)=0x1) syz_io_uring_setup(0x349, &(0x7f0000000500)={0x0, 0xb994, 0x2000, 0x3, 0x306, 0x0, r10}, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wg1\x00'}) (async) r11 = socket(0x27, 0x80000, 0x800) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000680)=0xffffffffffffffff) signalfd(r12, &(0x7f00000006c0)={[0x6]}, 0x8) (async) r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r13, &(0x7f0000000700), 0x12) recvmmsg(r8, &(0x7f0000004f80)=[{{&(0x7f0000000740)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/200, 0xc8}], 0x1, &(0x7f0000000900)=""/70, 0x46}, 0xfffffffb}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000980)=""/141, 0x8d}, {&(0x7f0000000a40)=""/103, 0x67}, {&(0x7f0000000ac0)=""/33, 0x21}], 0x3, &(0x7f0000000b40)=""/166, 0xa6}, 0x8000}, {{&(0x7f0000000c00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000c80)=""/157, 0x9d}, {&(0x7f0000000d40)=""/81, 0x51}, {&(0x7f0000000dc0)=""/104, 0x68}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/191, 0xbf}], 0x5, &(0x7f0000001f80)=""/228, 0xe4}}, {{&(0x7f0000002080)=@generic, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002100)=""/189, 0xbd}, {&(0x7f00000021c0)=""/201, 0xc9}, {&(0x7f00000022c0)=""/207, 0xcf}], 0x3, &(0x7f0000002400)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000003400)=@generic, 0x80, &(0x7f0000003580)=[{&(0x7f0000003480)=""/216, 0xd8}], 0x1, &(0x7f00000035c0)=""/174, 0xae}, 0x1c2152ef}, {{&(0x7f0000003680)=@sco={0x1f, @none}, 0x80, &(0x7f0000003700)}, 0x2}, {{&(0x7f0000003740)=@phonet, 0x80, &(0x7f0000003800)=[{&(0x7f00000037c0)=""/57, 0x39}], 0x1, &(0x7f0000003840)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000004840)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000049c0)=[{&(0x7f00000048c0)=""/240, 0xf0}], 0x1, &(0x7f0000004a00)=""/242, 0xf2}, 0x8}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000004b00)=""/35, 0x23}, {&(0x7f0000004b40)=""/185, 0xb9}, {&(0x7f0000004c00)=""/111, 0x6f}, {&(0x7f0000004c80)=""/207, 0xcf}, {&(0x7f0000004d80)=""/164, 0xa4}, {&(0x7f0000004e40)=""/40, 0x28}], 0x6, &(0x7f0000004f00)=""/124, 0x7c}, 0x8}], 0x9, 0x20, 0x0) (async) r14 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000051c0), 0x6000, 0x0) fremovexattr(r14, &(0x7f0000005200)=@random={'system.', ' \x00'}) (async) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005280), r11) sendmsg$TIPC_NL_PEER_REMOVE(r10, &(0x7f0000005480)={&(0x7f0000005240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000005440)={&(0x7f00000052c0)={0x180, r15, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf756}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6f90}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x657c}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcc5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1e}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x40001}, 0x4040) 111.092334ms ago: executing program 5 (id=3415): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0xcd, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0xffffffffffffff96) connect$inet6(r0, &(0x7f0000000240)={0xa, 0xffff, 0x4462, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd38f}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) r1 = getpid() tgkill(r1, r1, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000340)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0405665, &(0x7f0000000140)={0x0, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r4, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2d}, @void, @val={0xc, 0x99, {0x7, 0x3a}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x40880) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)={0x24, r4, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80001}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x22, 0x13, [{0x24, 0x1}, {0x16}, {0x9}, {0x5}, {0xc, 0x1}, {0x24}, {0x5, 0x1}, {0x36, 0x1}, {0xc, 0x1}, {0x1}, {0x60}, {0x1b}, {0x4}, {0x54}, {0x1b}, {0xc}, {0x36}, {0xc, 0x1}, {0xb}, {0x12}, {0xc}, {0x24, 0x1}, {0x1b, 0x1}, {0x30, 0x1}, {0x16}, {0xb, 0x1}, {0x48, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1b, 0x1}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x8000]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x24, 0x13, [{0xc, 0x1}, {0x0, 0x1}, {0x60}, {0x12, 0x1}, {0x30}, {0x9}, {0x16, 0x1}, {0xcf73369b5d1a2df, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x30}, {0x60, 0x1}, {0xb, 0x1}, {0x60}, {0x12}, {0x2, 0x1}, {0x36, 0x1}, {0xc, 0x1}, {0x48}, {0x16, 0x1}, {0x1}, {0x24}, {0x36}, {0x4}, {0x2}, {0x4}, {0xc}, {0x12, 0x1}, {0xc, 0x1}, {0x18}, {0x24}, {0x4}]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x458}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 15.162147ms ago: executing program 5 (id=3416): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x264, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$ndctl0(0xffffffffffffff9c, 0x0, 0x169101, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000180)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = io_uring_setup(0x3ca9, &(0x7f0000000940)={0x0, 0xef24, 0x20403, 0x0, 0x3}) io_uring_register$IORING_REGISTER_CLOCK(r2, 0x1d, &(0x7f0000000040)={0x7}, 0x0) io_uring_enter(r2, 0x0, 0xffefffff, 0x21, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300100000000000fbdbdf2500000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) pread64(r0, 0x0, 0x0, 0x7) 414.024µs ago: executing program 7 (id=3417): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) r4 = socket$kcm(0x10, 0x2, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000001200), &(0x7f0000001240)=0x10) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001200010a02000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r6 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000200)='v', 0x202f}], 0x1) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f00006a2000/0x18000)=nil, &(0x7f0000001180)=[@text32={0x20, &(0x7f0000000040)="f0f659ff9a1c990000500066b889008ec00f2354650f201e662e670f228166baf80cb83477f08aef66bafc0cb82464c243ef0f35b94d0900000f32360f35", 0x3e}], 0x1, 0x1, &(0x7f00000011c0)=[@vmwrite={0x8, 0x0, 0x4, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1}], 0x1) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001380)={@ifindex, 0x37, 0x0, 0x1000, &(0x7f0000001280)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001300)=[0x0], &(0x7f0000001340)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000013c0)={@fallback=r0, r6, 0x13, 0x10, 0x0, @void, @value=r6, @void, @void, r7}, 0x20) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x2}, 0x8) close(r8) ioctl$KVM_SET_IRQCHIP(r2, 0x400caed0, &(0x7f0000000400)={0x2, 0x0, @ioapic={0xffffffff, 0xb, 0x8, 0x9, 0x0, [{0xc, 0xe, 0x0, '\x00', 0x4}, {0xf, 0x0, 0x5, '\x00', 0x4}, {0xff, 0x7, 0xf, '\x00', 0x7f}, {0x8, 0x9f, 0x2, '\x00', 0x9}, {0x1, 0x0, 0x0, '\x00', 0x80}, {0x1, 0x8, 0x7f, '\x00', 0x7f}, {0x9, 0x0, 0xd1, '\x00', 0x4}, {0x9, 0x0, 0x10}, {0xb8, 0x5e, 0x4, '\x00', 0x33}, {0x7, 0x3, 0x7f, '\x00', 0x4}, {0x8, 0x2, 0xfc, '\x00', 0xff}, {0x5, 0xb, 0xc4, '\x00', 0x4}, {0x40, 0x9a, 0x4, '\x00', 0x9}, {0x5, 0x1}, {0xfd, 0x9, 0xc5, '\x00', 0x4}, {0x9, 0xc, 0x48, '\x00', 0x9}, {0x2, 0xd, 0x0, '\x00', 0xe}, {0x7, 0x6, 0x1b, '\x00', 0x2}, {0x4, 0x4, 0x3, '\x00', 0x4}, {0x42, 0x4e, 0x5, '\x00', 0x4}, {0xf0, 0x1, 0x7, '\x00', 0x1}, {0x78, 0x81, 0x5d, '\x00', 0x8}, {0xf, 0x10, 0xdb, '\x00', 0x5}, {0x7f, 0x61, 0x5, '\x00', 0x3}]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0xffffd000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000000)) 0s ago: executing program 5 (id=3418): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000006c0)={0x0, 0x0, 0xfffffffd}) ioctl$MON_IOCG_STATS(r2, 0x80089203, 0x0) (async) r3 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3}, 0x8, 0xa20, 0x0, 0x48000000, 0x0, 0x0, 0x0}) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e04, @dev={0xac, 0x14, 0x14, 0x59}}, 0x10) (async) shutdown(r0, 0x1) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4) (async) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000142, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000008008500000087000000950000000000000009befaec72607fd9d2bdb31ab65079a3e7f3bdb5d6c4bb81f4b7c389cd9b0d62cd8068102af4df86130bcd52565201b525b9f5041449343fa08a2948ef93b2e338"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): [ T24] ftdi_sio 10-1:3.211: FTDI USB Serial Device converter detected [ 312.145257][ T24] ftdi_sio ttyUSB4: unknown device type: 0x3c77 [ 312.148819][T15660] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2506'. [ 312.155834][ T24] usb 10-1: USB disconnect, device number 6 [ 312.161109][ T42] kauditd_printk_skb: 317 callbacks suppressed [ 312.161120][ T42] audit: type=1400 audit(3567541185.471:10542): avc: denied { bpf } for pid=15659 comm="syz.3.2506" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 312.164886][ T24] ftdi_sio 10-1:3.186: device disconnected [ 312.174110][ T42] audit: type=1400 audit(3567541185.471:10543): avc: denied { perfmon } for pid=15659 comm="syz.3.2506" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 312.186902][ T24] ftdi_sio 10-1:3.43: device disconnected [ 312.191964][ T24] ftdi_sio 10-1:3.50: device disconnected [ 312.196676][ T24] ftdi_sio 10-1:3.108: device disconnected [ 312.200837][ T24] ftdi_sio 10-1:3.211: device disconnected [ 312.305672][ T42] audit: type=1400 audit(3567541185.600:10544): avc: denied { bind } for pid=15664 comm="syz.3.2507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 312.314356][ T42] audit: type=1400 audit(3567541185.618:10545): avc: denied { setopt } for pid=15664 comm="syz.3.2507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 312.322511][ T42] audit: type=1400 audit(3567541185.618:10546): avc: denied { write } for pid=15664 comm="syz.3.2507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 312.330282][ T42] audit: type=1400 audit(3567541185.618:10547): avc: denied { read } for pid=15664 comm="syz.3.2507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 312.390381][ T42] audit: type=1400 audit(3567541185.683:10548): avc: denied { create } for pid=15670 comm="syz.4.2508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 312.398856][ T42] audit: type=1400 audit(3567541185.683:10549): avc: denied { write } for pid=15670 comm="syz.4.2508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 312.401729][T15671] netlink: 'syz.4.2508': attribute type 1 has an invalid length. [ 312.407449][ T42] audit: type=1400 audit(3567541185.683:10550): avc: denied { read } for pid=15670 comm="syz.4.2508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 312.413794][T15671] netlink: 'syz.4.2508': attribute type 2 has an invalid length. [ 312.418875][ T42] audit: type=1400 audit(3567541185.683:10551): avc: denied { setopt } for pid=15670 comm="syz.4.2508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 312.761663][ T24] bridge0: entered promiscuous mode [ 312.821030][T15693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.824929][T15693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.840875][T15698] netlink: zone id is out of range [ 312.940353][T15702] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2520'. [ 312.998758][T15712] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15712 comm=syz.5.2522 [ 313.003033][T13669] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 313.061149][T15718] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2524'. [ 313.061667][T15721] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2524'. [ 313.071916][T15718] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.074909][T15718] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.084062][T15721] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.086352][T15721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.088827][T15721] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.091196][T15721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.096924][T15721] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2524'. [ 313.113855][T15721] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.116825][T15721] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.166168][T13669] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 313.170876][T13669] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 313.175393][T13669] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 313.185718][T13669] usb 9-1: config 0 interface 0 has no altsetting 0 [ 313.191864][T13669] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 313.196105][T13669] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 313.202829][T13669] usb 9-1: config 0 interface 0 has no altsetting 0 [ 313.206543][T13669] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 313.210412][T13669] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 313.214798][T13669] usb 9-1: config 0 interface 0 has no altsetting 0 [ 313.218066][T13669] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 313.221021][T13669] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 313.224721][T13669] usb 9-1: config 0 interface 0 has no altsetting 0 [ 313.228155][T13669] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 313.237356][T13669] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 313.242998][T13669] usb 9-1: config 0 interface 0 has no altsetting 0 [ 313.246790][T13669] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 313.250602][T13669] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 313.255827][T13669] usb 9-1: config 0 interface 0 has no altsetting 0 [ 313.259479][T13669] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 313.262733][T13669] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 313.267064][T13669] usb 9-1: config 0 interface 0 has no altsetting 0 [ 313.270934][T13669] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 313.275643][T13669] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 313.280193][T13669] usb 9-1: config 0 interface 0 has no altsetting 0 [ 313.285157][T13669] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 313.289111][T13669] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 313.292555][T13669] usb 9-1: Product: syz [ 313.294334][T13669] usb 9-1: Manufacturer: syz [ 313.297047][T13669] usb 9-1: SerialNumber: syz [ 313.302281][T13669] usb 9-1: config 0 descriptor?? [ 313.311880][T13669] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 313.922568][T15795] input: syz1 as /devices/virtual/input/input39 [ 314.292377][T15795] cgroup: fork rejected by pids controller in /syz5 [ 315.215778][ T5143] pmem0: [POWERTEC] [ 315.230848][T15890] syzkaller1: entered promiscuous mode [ 315.232675][T15890] syzkaller1: entered allmulticast mode [ 315.371832][T15899] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 315.514105][T15908] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 315.601748][T15912] syzkaller0: entered promiscuous mode [ 315.603687][T15912] syzkaller0: entered allmulticast mode [ 315.690402][T15914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15914 comm=syz.9.2568 [ 315.746410][ C0] usb 9-1: yurex_control_callback - control failed: -2 [ 315.750785][ T9] usb 9-1: USB disconnect, device number 8 [ 315.760968][ T9] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 315.764728][T15920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.771522][T15919] 9p filesystem being mounted at /148/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 315.774310][T15920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.781512][T15920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.787560][T15920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.416994][ T1836] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 316.481458][T15945] loop5: detected capacity change from 0 to 7 [ 316.485745][T15945] Dev loop5: unable to read RDB block 7 [ 316.487671][T15945] loop5: unable to read partition table [ 316.491932][T15945] loop5: partition table beyond EOD, truncated [ 316.495831][T15945] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 316.579411][ T1836] usb 10-1: Using ep0 maxpacket: 32 [ 316.582817][ T1836] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 316.585498][ T1836] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.589447][ T1836] usb 10-1: config 0 has no interface number 0 [ 316.592450][ T1836] usb 10-1: config 0 interface 1 has no altsetting 0 [ 316.597391][ T1836] usb 10-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 316.601581][ T1836] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.602215][ T5753] Bluetooth: hci5: command tx timeout [ 316.604086][ T1836] usb 10-1: Product: syz [ 316.605631][T15950] kvm: kvm [15949]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x9 [ 316.610501][ T1836] usb 10-1: Manufacturer: syz [ 316.612997][ T1836] usb 10-1: SerialNumber: syz [ 316.616264][ T1836] usb 10-1: config 0 descriptor?? [ 316.620239][ T1836] cx231xx 10-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 316.624035][ T1836] cx231xx 10-1:0.1: Not found matching IAD interface [ 316.680985][T15956] netlink: 'syz.9.2583': attribute type 11 has an invalid length. [ 316.810977][T15967] fuse: fd is not a fuse device [ 316.814066][T15967] netlink: 'syz.3.2586': attribute type 1 has an invalid length. [ 316.847277][T15928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.855878][T15928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.910044][ T9963] usb 10-1: USB disconnect, device number 7 [ 316.919288][T15967] 8021q: adding VLAN 0 to HW filter on device bond7 [ 316.969403][T15967] gretap2: entered promiscuous mode [ 317.667426][ T42] kauditd_printk_skb: 315 callbacks suppressed [ 317.667460][ T42] audit: type=1400 audit(3567541190.555:10867): avc: denied { create } for pid=15980 comm="syz.5.2590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 317.687696][ T42] audit: type=1400 audit(3567541190.573:10868): avc: denied { read } for pid=15980 comm="syz.5.2590" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 317.688477][T15981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=540 sclass=netlink_route_socket pid=15981 comm=syz.5.2590 [ 317.696600][ T42] audit: type=1400 audit(3567541190.573:10869): avc: denied { open } for pid=15980 comm="syz.5.2590" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 317.715325][ T42] audit: type=1400 audit(3567541190.573:10870): avc: denied { setopt } for pid=15980 comm="syz.5.2590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 317.745107][ T42] audit: type=1400 audit(3567541190.619:10871): avc: denied { create } for pid=15984 comm="syz.3.2592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 317.752928][ T42] audit: type=1400 audit(3567541190.629:10872): avc: denied { setopt } for pid=15984 comm="syz.3.2592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 317.794369][ T42] audit: type=1400 audit(3567541190.675:10873): avc: denied { create } for pid=15986 comm="syz.5.2593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 317.803158][ T42] audit: type=1400 audit(3567541190.675:10874): avc: denied { write } for pid=15986 comm="syz.5.2593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 317.811500][ T42] audit: type=1400 audit(3567541190.675:10875): avc: denied { nlmsg_write } for pid=15986 comm="syz.5.2593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 317.820061][ T42] audit: type=1400 audit(3567541190.684:10876): avc: denied { write } for pid=15986 comm="syz.5.2593" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 318.247753][T15999] __nla_validate_parse: 8 callbacks suppressed [ 318.248124][T15999] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2597'. [ 318.285217][T16001] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2598'. [ 318.355668][T16007] netlink: 'syz.9.2600': attribute type 1 has an invalid length. [ 318.374154][T16007] bond6: entered promiscuous mode [ 318.376861][T16007] 8021q: adding VLAN 0 to HW filter on device bond6 [ 318.385648][T16007] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2600'. [ 318.389088][T16007] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2600'. [ 318.398631][T16007] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2600'. [ 318.629643][T16017] overlayfs: failed to resolve './file0/file1': -2 [ 318.730812][T16024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2606'. [ 318.733821][T16024] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2606'. [ 318.810451][T16029] xt_hashlimit: size too large, truncated to 1048576 [ 318.878007][T16033] netlink: 'syz.9.2609': attribute type 1 has an invalid length. [ 318.891507][T16033] bond7: entered promiscuous mode [ 318.893526][T16033] 8021q: adding VLAN 0 to HW filter on device bond7 [ 318.900935][T16033] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2609'. [ 318.904522][T16033] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2609'. [ 318.913978][T16033] 8021q: adding VLAN 0 to HW filter on device bond7 [ 318.916349][T16033] bond7: (slave vti1): The slave device specified does not support setting the MAC address [ 318.919370][T16033] bond7: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 318.939938][T16033] bond7: (slave vti1): making interface the new active one [ 318.943435][T16033] vti1: entered promiscuous mode [ 318.947891][T16033] bond7: (slave vti1): Enslaving as an active interface with an up link [ 319.292227][T16052] netlink: 'syz.9.2614': attribute type 1 has an invalid length. [ 319.295701][T16052] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2614'. [ 319.400307][T16056] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 319.451948][T16061] vim2m vim2m.0: vidioc_s_fmt queue busy [ 319.572155][T16061] ceph: No mds server is up or the cluster is laggy [ 319.574873][T16059] openvswitch: netlink: IP tunnel dst address not specified [ 319.861034][T16074] netlink: 'syz.5.2621': attribute type 9 has an invalid length. [ 320.485408][T16099] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 320.660299][T16105] netlink: 'syz.5.2629': attribute type 1 has an invalid length. [ 320.703560][T16108] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 320.706761][T16108] overlayfs: missing 'lowerdir' [ 320.886638][T16120] netlink: zone id is out of range [ 320.888901][T16120] netlink: zone id is out of range [ 320.891104][T16120] netlink: zone id is out of range [ 320.894255][T16120] netlink: zone id is out of range [ 320.896385][T16120] netlink: zone id is out of range [ 320.898470][T16120] netlink: zone id is out of range [ 320.900505][T16120] netlink: zone id is out of range [ 320.902550][T16120] netlink: zone id is out of range [ 320.905525][T16120] netlink: del zone limit has 8 unknown bytes [ 321.095831][T16139] fuse: fd is not a fuse device [ 321.430996][T16162] netlink: 'syz.3.2649': attribute type 10 has an invalid length. [ 321.523678][T16162] netlink: 'syz.3.2649': attribute type 10 has an invalid length. [ 321.575690][ T9] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 321.743668][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 321.748100][ T9] usb 10-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 321.756748][ T9] usb 10-1: string descriptor 0 read error: -22 [ 321.759635][ T9] usb 10-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 321.763800][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.654515][T16157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.660565][T16157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.669029][ T24] usb 10-1: USB disconnect, device number 8 [ 322.996579][T16178] x_tables: duplicate underflow at hook 2 [ 323.063553][T16178] xt_CT: No such helper "pptp" [ 323.191493][ T42] kauditd_printk_skb: 168 callbacks suppressed [ 323.191512][ T42] audit: type=1400 audit(3567541195.648:11045): avc: denied { create } for pid=16191 comm="syz.3.2659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 323.207457][ T42] audit: type=1400 audit(3567541195.648:11046): avc: denied { create } for pid=16192 comm="syz.9.2660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 323.217103][ T42] audit: type=1400 audit(3567541195.648:11047): avc: denied { write } for pid=16192 comm="syz.9.2660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 323.265611][ T42] audit: type=1400 audit(3567541195.713:11048): avc: denied { read } for pid=16198 comm="syz.9.2664" dev="nsfs" ino=4026533382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 323.273315][ T42] audit: type=1400 audit(3567541195.713:11049): avc: denied { open } for pid=16198 comm="syz.9.2664" path="net:[4026533382]" dev="nsfs" ino=4026533382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 323.297440][ T42] audit: type=1400 audit(3567541195.713:11050): avc: denied { create } for pid=16198 comm="syz.9.2664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 323.309666][ T42] audit: type=1400 audit(3567541195.713:11051): avc: denied { ioctl } for pid=16198 comm="syz.9.2664" path="socket:[74463]" dev="sockfs" ino=74463 ioctlcmd=0x8937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 323.317273][ T42] audit: type=1400 audit(3567541195.722:11052): avc: denied { create } for pid=16198 comm="syz.9.2664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 323.324588][ T42] audit: type=1400 audit(3567541195.722:11053): avc: denied { getopt } for pid=16198 comm="syz.9.2664" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 323.330997][ T42] audit: type=1400 audit(3567541195.722:11054): avc: denied { write } for pid=16198 comm="syz.9.2664" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 323.335216][T16200] vxcan3: entered promiscuous mode [ 324.197329][T16236] overlayfs: failed to clone upperpath [ 324.356085][T16249] netlink: 'syz.9.2677': attribute type 10 has an invalid length. [ 324.392529][T16251] __nla_validate_parse: 11 callbacks suppressed [ 324.392549][T16251] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2678'. [ 324.486979][T16263] netlink: 'syz.9.2682': attribute type 2 has an invalid length. [ 324.489713][T16263] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2682'. [ 324.497338][T16263] Invalid source name [ 324.498707][T16263] UBIFS error (pid: 16263): cannot open "ubifs", error -22 [ 324.655645][T16277] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 324.701999][T16283] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2685'. [ 324.763737][T16297] netlink: 190972 bytes leftover after parsing attributes in process `syz.5.2690'. [ 324.966485][T16304] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2692'. [ 324.970157][T16304] netlink: 348 bytes leftover after parsing attributes in process `syz.5.2692'. [ 324.973720][T16304] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2692'. [ 324.977346][T16304] netlink: 348 bytes leftover after parsing attributes in process `syz.5.2692'. [ 324.982575][T16304] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2692'. [ 325.151492][T16308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30732 sclass=netlink_route_socket pid=16308 comm=syz.5.2693 [ 325.564057][ T5753] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 325.564126][T16315] ptrace attach of "/syz-executor exec"[11184] was attempted by "/syz-executor exec"[16315] [ 325.621347][T16318] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2696'. [ 325.627444][T16318] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.650137][T16318] syz_tun: entered promiscuous mode [ 326.130405][T16347] libceph: resolve '.RHe'ˠ/1C~1WexEAeSb{~R' (ret=-3): failed [ 326.241287][T16358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.244811][T16358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.252332][T16358] random: crng reseeded on system resumption [ 326.268769][T16358] 9p filesystem being mounted at /353/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 326.321846][T16362] loop9: detected capacity change from 0 to 2640 [ 326.325680][T16362] buffer_io_error: 342 callbacks suppressed [ 326.325691][T16362] Buffer I/O error on dev loop9, logical block 0, async page read [ 326.330268][T16362] Buffer I/O error on dev loop9, logical block 0, async page read [ 326.333160][T16362] Buffer I/O error on dev loop9, logical block 0, async page read [ 326.336083][T16362] Buffer I/O error on dev loop9, logical block 0, async page read [ 326.339079][T16362] Buffer I/O error on dev loop9, logical block 0, async page read [ 326.341690][T16362] Buffer I/O error on dev loop9, logical block 0, async page read [ 326.344655][T16362] Buffer I/O error on dev loop9, logical block 0, async page read [ 326.347315][T16362] Buffer I/O error on dev loop9, logical block 0, async page read [ 326.350214][T16362] ldm_validate_partition_table(): Disk read failed. [ 326.352325][T16362] Buffer I/O error on dev loop9, logical block 0, async page read [ 326.354817][T16362] Buffer I/O error on dev loop9, logical block 0, async page read [ 326.358658][T16362] Dev loop9: unable to read RDB block 0 [ 326.361071][T16362] loop9: unable to read partition table [ 326.362978][T16362] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 326.668054][T16367] bpf: Bad value for 'uid' [ 327.301440][T16384] xfs: Unknown parameter 'grpquota' [ 327.418726][T16389] netlink: 'syz.9.2713': attribute type 2 has an invalid length. [ 327.427468][T16389] : entered promiscuous mode [ 327.565621][T16391] /dev/sg0: Can't lookup blockdev [ 327.741514][T16401] bond8: entered promiscuous mode [ 327.743922][T16401] bond8: entered allmulticast mode [ 329.911608][T16370] overlayfs: statfs failed on './file0' [ 329.926670][ T42] kauditd_printk_skb: 186 callbacks suppressed [ 329.926681][ T42] audit: type=1400 audit(3567541201.858:11241): avc: denied { unmount } for pid=14002 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 329.969502][ T42] audit: type=1400 audit(3567541201.904:11242): avc: denied { write } for pid=16408 comm="syz.5.2718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 329.971075][T16409] __nla_validate_parse: 2 callbacks suppressed [ 329.971087][T16409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2718'. [ 329.977780][ T42] audit: type=1400 audit(3567541201.904:11243): avc: denied { read } for pid=16408 comm="syz.5.2718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 329.978673][T16409] netlink: 'syz.5.2718': attribute type 10 has an invalid length. [ 329.978688][T16409] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2718'. [ 329.998213][ T42] audit: type=1400 audit(3567541201.904:11244): avc: denied { execmem } for pid=16408 comm="syz.5.2718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 330.037827][T16410] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2718'. [ 330.042599][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 330.042685][T16410] netlink: 'syz.5.2718': attribute type 10 has an invalid length. [ 330.045076][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.047669][T16410] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2718'. [ 330.840278][T16393] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 330.846661][ T42] audit: type=1400 audit(3567541202.707:11245): avc: denied { module_request } for pid=16408 comm="syz.5.2718" kmod="net-pf-16-proto-16-family-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 330.904142][ T42] audit: type=1400 audit(3567541202.771:11246): avc: denied { create } for pid=16412 comm="syz.3.2719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 330.912805][ T42] audit: type=1400 audit(3567541202.771:11247): avc: denied { ioctl } for pid=16412 comm="syz.3.2719" path="socket:[75504]" dev="sockfs" ino=75504 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 330.931820][ T42] audit: type=1400 audit(3567541202.781:11248): avc: denied { write } for pid=16412 comm="syz.3.2719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 330.939231][ T42] audit: type=1400 audit(3567541202.781:11249): avc: denied { read } for pid=16412 comm="syz.3.2719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 330.959162][ T42] audit: type=1400 audit(3567541202.781:11250): avc: denied { create } for pid=16412 comm="syz.3.2719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 331.175561][T16436] binder: 16435:16436 ioctl c00c620f 2000000002c0 returned -22 [ 331.185063][T16436] netlink: 80 bytes leftover after parsing attributes in process `syz.9.2726'. [ 331.190702][T16436] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2726'. [ 331.262340][T16441] netlink: 'syz.3.2727': attribute type 2 has an invalid length. [ 331.265933][T16441] netlink: 'syz.3.2727': attribute type 2 has an invalid length. [ 331.276555][T16435] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 331.431900][T16446] hfs: can't find a HFS filesystem on dev sr0 [ 331.543994][T16446] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 331.776885][T16470] siw: device registration error -23 [ 331.782087][T16470] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 331.787229][T16470] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 332.356416][T16494] input: syz0 as /devices/virtual/input/input42 [ 332.712720][T16499] tipc: Started in network mode [ 332.714476][T16499] tipc: Node identity ac14140f, cluster identity 4711 [ 332.717510][T16499] tipc: New replicast peer: 255.255.255.255 [ 332.720693][T16499] tipc: Enabled bearer , priority 10 [ 333.260497][T16508] netlink: 'syz.3.2746': attribute type 7 has an invalid length. [ 333.267251][T16508] fuse: fd is not a fuse device [ 333.348684][T16514] fuse: fd is not a fuse device [ 333.369915][ T5754] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 333.380813][ T5754] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 333.392650][ T5754] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 333.416041][ T5754] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 333.443405][ T5754] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 333.500294][T16526] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 333.579198][T16532] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2753'. [ 333.773319][ T9370] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.784827][ T9370] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.799627][T16551] netlink: 'syz.5.2759': attribute type 4 has an invalid length. [ 333.809256][T16552] netlink: 'syz.5.2759': attribute type 4 has an invalid length. [ 333.828043][ T24] tipc: Node number set to 2886997007 [ 333.836877][T16547] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=49940 sclass=netlink_xfrm_socket pid=16547 comm=syz.9.2758 [ 333.881972][T16512] lo speed is unknown, defaulting to 1000 [ 333.925207][ T9370] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.928804][T16564] fuse: fd is not a fuse device [ 333.929104][ T9370] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.065415][ T9370] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.068444][ T9370] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.133598][T16589] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2769'. [ 334.137394][T16589] netlink: 'syz.5.2769': attribute type 10 has an invalid length. [ 334.140720][T16589] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2769'. [ 334.231742][ T9370] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.245148][ T9370] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.390596][T16616] xt_hashlimit: size too large, truncated to 1048576 [ 334.398721][T16512] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.401270][T16512] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.403658][T16512] bridge_slave_0: entered allmulticast mode [ 334.406731][T16512] bridge_slave_0: entered promiscuous mode [ 334.410770][T16512] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.413235][T16512] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.415925][T16512] bridge_slave_1: entered allmulticast mode [ 334.419443][T16512] bridge_slave_1: entered promiscuous mode [ 334.438204][T16512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.444310][T16512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.492600][T16512] team0: Port device team_slave_0 added [ 334.519910][T16512] team0: Port device team_slave_1 added [ 334.585513][T16512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.587851][T16512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.596038][T16512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.626286][T16512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.628634][T16512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.638611][T16512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.645097][ T9370] bridge_slave_1: left allmulticast mode [ 334.647360][ T9370] bridge_slave_1: left promiscuous mode [ 334.649547][ T9370] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.654146][ T9370] bridge_slave_0: left allmulticast mode [ 334.656055][ T9370] bridge_slave_0: left promiscuous mode [ 334.658555][ T9370] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.849706][ T9370] gretap0 (unregistering): left promiscuous mode [ 334.881126][ T9370] bond0 (unregistering): left promiscuous mode [ 334.883375][ T9370] bond_slave_0: left promiscuous mode [ 334.888920][ T9370] bond_slave_1: left promiscuous mode [ 334.905937][ T9370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.942195][ T9370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.950798][ T9370] bond0 (unregistering): Released all slaves [ 334.956578][ T9370] bond1 (unregistering): Released all slaves [ 334.972503][ T5445] 8021q: adding VLAN 0 to HW filter on device eth6 [ 335.018007][T16512] hsr_slave_0: entered promiscuous mode [ 335.021275][T16512] hsr_slave_1: entered promiscuous mode [ 335.023825][T16512] debugfs: 'hsr0' already exists in 'hsr' [ 335.026301][T16512] Cannot create hsr debugfs directory [ 335.139197][T16661] SELinux: syz.5.2787 (16661) wrote to checkreqprot. This is no longer supported. [ 335.156632][T16661] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 335.163536][T16661] net_ratelimit: 4 callbacks suppressed [ 335.163556][T16661] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 335.267496][ T9370] batman_adv: batadv0: Removing interface: macvtap1 [ 335.363532][ T42] kauditd_printk_skb: 229 callbacks suppressed [ 335.363546][ T42] audit: type=1400 audit(3567541206.877:11480): avc: denied { read } for pid=16671 comm="syz.5.2789" dev="nsfs" ino=4026533343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 335.375496][ T42] audit: type=1400 audit(3567541206.877:11481): avc: denied { open } for pid=16671 comm="syz.5.2789" path="net:[4026533343]" dev="nsfs" ino=4026533343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 335.383525][ T42] audit: type=1400 audit(3567541206.877:11482): avc: denied { create } for pid=16671 comm="syz.5.2789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 335.391815][ T42] audit: type=1400 audit(3567541206.887:11483): avc: denied { write } for pid=16671 comm="syz.5.2789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 335.401734][ T42] audit: type=1400 audit(3567541206.887:11484): avc: denied { create } for pid=16671 comm="syz.5.2789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 335.410516][ T42] audit: type=1400 audit(3567541206.887:11485): avc: denied { bind } for pid=16671 comm="syz.5.2789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 335.420085][ T42] audit: type=1400 audit(3567541206.887:11486): avc: denied { getopt } for pid=16671 comm="syz.5.2789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 335.420609][ T5445] 8021q: adding VLAN 0 to HW filter on device eth7 [ 335.430307][ T42] audit: type=1400 audit(3567541206.933:11487): avc: denied { create } for pid=16673 comm="syz.5.2790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 335.439843][ T42] audit: type=1400 audit(3567541206.933:11488): avc: denied { bind } for pid=16673 comm="syz.5.2790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 335.448301][ T42] audit: type=1400 audit(3567541206.933:11489): avc: denied { name_bind } for pid=16673 comm="syz.5.2790" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 335.675334][ T9370] hsr_slave_0: left promiscuous mode [ 335.677818][ T5753] Bluetooth: hci7: command tx timeout [ 335.686478][ T9370] hsr_slave_1: left promiscuous mode [ 335.689375][ T9370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.692034][ T9370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.694288][T16701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.701635][ T9370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.704737][ T9370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.721740][ T9370] veth0_macvtap: left promiscuous mode [ 335.724221][ T9370] veth1_vlan: left promiscuous mode [ 335.726480][ T9370] veth0_vlan: left promiscuous mode [ 335.931926][ T9370] team0 (unregistering): Port device team_slave_1 removed [ 335.939643][ T9370] team0 (unregistering): Port device team_slave_0 removed [ 336.034078][ T5445] 8021q: adding VLAN 0 to HW filter on device eth8 [ 336.275976][ T5445] 8021q: adding VLAN 0 to HW filter on device eth9 [ 336.613827][T16512] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 336.614041][ T9370] IPVS: stop unused estimator thread 0... [ 336.624585][T16512] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 336.637506][T16512] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 336.643473][T16512] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 336.659519][T16512] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 336.670361][T16512] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 336.676086][T16512] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 336.686136][T16512] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 336.783684][T16512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.796301][T16512] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.802527][ T1271] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.805739][ T1271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.818204][ T1271] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.821381][ T1271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.057798][T16774] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2807'. [ 337.100973][T16512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.318880][T16512] veth0_vlan: entered promiscuous mode [ 337.327322][T16512] veth1_vlan: entered promiscuous mode [ 337.354516][T16512] veth0_macvtap: entered promiscuous mode [ 337.382849][T16512] veth1_macvtap: entered promiscuous mode [ 337.402659][T16512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.429354][T16512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.456491][ T5795] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.460271][ T5795] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.482927][ T5795] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.491238][ T5795] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.629425][T11786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.632847][T11786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.655797][T12176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.659147][T12176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.930205][ T5753] Bluetooth: hci7: command tx timeout [ 337.950307][T16825] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2816'. [ 337.957241][T16825] comedi comedi2: comedi_config --init_data is deprecated [ 338.324585][T16858] netlink: 'syz.9.2822': attribute type 11 has an invalid length. [ 338.339797][T16860] overlayfs: failed to clone upperpath [ 338.398867][T16866] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2824'. [ 338.543411][T16872] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 338.659309][T16894] overlayfs: failed to clone upperpath [ 338.666583][T16894] overlayfs: failed to resolve './cgroup': -2 [ 338.793406][T16900] netlink: 'syz.3.2831': attribute type 11 has an invalid length. [ 338.796046][T16900] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2831'. [ 338.913481][T16913] 9p filesystem being mounted at /528/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 338.971893][T16916] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2833'. [ 338.976215][T16916] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.979903][T16916] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.295966][ T848] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 339.478878][ T848] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 339.483878][ T848] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 339.488450][ T848] usb 10-1: config 0 interface 0 has no altsetting 0 [ 339.495567][ T848] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 339.499293][ T848] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 339.502865][ T848] usb 10-1: Product: syz [ 339.504571][ T848] usb 10-1: Manufacturer: syz [ 339.506580][ T848] usb 10-1: SerialNumber: syz [ 339.511335][ T848] usb 10-1: config 0 descriptor?? [ 339.515948][T16919] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 339.521882][ T848] usb 10-1: selecting invalid altsetting 0 [ 339.725972][T16944] netlink: 'syz.7.2843': attribute type 8 has an invalid length. [ 339.828793][T16918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.838470][T16918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.844518][ T848] usb 10-1: USB disconnect, device number 9 [ 340.194942][ T5754] Bluetooth: hci7: command tx timeout [ 340.706396][ T5753] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 340.753869][ T848] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 340.793747][ T42] kauditd_printk_skb: 342 callbacks suppressed [ 340.793767][ T42] audit: type=1400 audit(3567541211.888:11832): avc: denied { create } for pid=16957 comm="syz.7.2847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 340.818232][ T42] audit: type=1400 audit(3567541211.906:11833): avc: denied { ioctl } for pid=16957 comm="syz.7.2847" path="socket:[77587]" dev="sockfs" ino=77587 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 340.830351][ T42] audit: type=1400 audit(3567541211.906:11834): avc: denied { bind } for pid=16957 comm="syz.7.2847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 340.839033][ T42] audit: type=1400 audit(3567541211.906:11835): avc: denied { write } for pid=16957 comm="syz.7.2847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 340.847424][ T42] audit: type=1400 audit(3567541211.906:11836): avc: denied { read } for pid=16957 comm="syz.7.2847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 340.874651][ T42] audit: type=1400 audit(3567541211.961:11837): avc: denied { create } for pid=16957 comm="syz.7.2847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 340.896585][ T42] audit: type=1400 audit(3567541211.980:11838): avc: denied { create } for pid=16962 comm="syz.9.2848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 340.904537][ T42] audit: type=1400 audit(3567541211.998:11839): avc: denied { write } for pid=16962 comm="syz.9.2848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 340.911365][ T42] audit: type=1400 audit(3567541211.998:11840): avc: denied { nlmsg_write } for pid=16962 comm="syz.9.2848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 341.320626][ T42] audit: type=1400 audit(3567541212.367:11841): avc: denied { map_read map_write } for pid=16929 comm="syz.3.2839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 341.514291][T16969] tipc: Failed to remove unknown binding: 66,0,0/0:923341983/923341985 [ 341.520389][T16969] tipc: Failed to remove unknown binding: 66,0,0/0:923341983/923341984 [ 341.523742][T16969] tipc: Failed to remove unknown binding: 66,0,0/0:923341983/923341985 [ 341.528834][T16969] tipc: Failed to remove unknown binding: 66,0,0/0:923341983/923341984 [ 341.567234][T16969] befs: (loop9): No write support. Marking filesystem read-only [ 341.574654][T16969] befs: (loop9): unable to read superblock [ 341.834472][ T5823] IPVS: starting estimator thread 0... [ 341.846938][T16981] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 341.952684][T16982] IPVS: using max 24 ests per chain, 57600 per kthread [ 342.193775][T16998] team0: entered allmulticast mode [ 342.196173][T16998] team_slave_0: entered allmulticast mode [ 342.198688][T16998] team_slave_1: entered allmulticast mode [ 342.214312][T16998] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2860'. [ 342.440794][ T5754] Bluetooth: hci7: command tx timeout [ 343.118930][T17014] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 343.149377][ T5754] Bluetooth: hci3: command 0x0c1a tx timeout [ 343.244375][T17028] netlink: 'syz.9.2870': attribute type 1 has an invalid length. [ 343.262289][T17028] netlink: 'syz.9.2870': attribute type 3 has an invalid length. [ 343.267798][T17028] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2870'. [ 343.275238][T17030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2871'. [ 343.279243][T17030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.282484][T17030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.287224][T17030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.290471][T17030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.295068][T17030] batman_adv: batadv0: Removing interface: gretap1 [ 343.416711][ T9] IPVS: starting estimator thread 0... [ 343.494599][T17035] fuse: Bad value for 'fd' [ 343.511323][T17033] IPVS: using max 45 ests per chain, 108000 per kthread [ 343.651399][T17045] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2877'. [ 343.662616][T17045] : renamed from lo (while UP) [ 343.709238][T17049] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 343.712854][T17049] overlayfs: missing 'lowerdir' [ 343.717566][T17049] netlink: 'syz.3.2878': attribute type 10 has an invalid length. [ 343.726318][T17049] veth0: entered allmulticast mode [ 343.731666][T17049] team0: Port device veth0 added [ 343.736085][ T5754] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 343.743757][ T5754] CPU: 3 UID: 0 PID: 5754 Comm: kworker/u34:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 343.743791][ T5754] Tainted: [L]=SOFTLOCKUP [ 343.743798][ T5754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 343.743849][ T5754] Workqueue: hci2 hci_rx_work [ 343.744095][ T5754] Call Trace: [ 343.744103][ T5754] [ 343.744111][ T5754] dump_stack_lvl+0x100/0x190 [ 343.744139][ T5754] sysfs_warn_dup.cold+0x1c/0x28 [ 343.744175][ T5754] sysfs_create_dir_ns+0x24b/0x2b0 [ 343.744223][ T5754] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 343.744251][ T5754] ? find_held_lock+0x2b/0x80 [ 343.744281][ T5754] ? kobject_add_internal+0x25f/0x930 [ 343.744343][ T5754] ? kobject_add_internal+0x25f/0x930 [ 343.744365][ T5754] ? do_raw_spin_unlock+0x145/0x1e0 [ 343.744394][ T5754] kobject_add_internal+0x2c8/0x930 [ 343.744420][ T5754] kobject_add+0x16a/0x1e0 [ 343.744442][ T5754] ? __pfx_kobject_add+0x10/0x10 [ 343.744462][ T5754] ? class_to_subsys+0x10f/0x150 [ 343.744552][ T5754] ? kobject_put+0xb9/0x640 [ 343.744571][ T5754] ? _raw_spin_unlock+0x28/0x50 [ 343.744603][ T5754] device_add+0x294/0x1970 [ 343.744629][ T5754] ? __pfx_dev_set_name+0x10/0x10 [ 343.744654][ T5754] ? __pfx_device_add+0x10/0x10 [ 343.744673][ T5754] ? mgmt_send_event_skb+0x2fb/0x460 [ 343.744708][ T5754] hci_conn_add_sysfs+0x1a3/0x260 [ 343.744740][ T5754] le_conn_complete_evt+0x11eb/0x1f60 [ 343.744770][ T5754] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 343.744795][ T5754] ? hci_event_packet+0x186/0xcd0 [ 343.744828][ T5754] hci_le_conn_complete_evt+0x23c/0x3a0 [ 343.744857][ T5754] ? skb_pull_data+0x15f/0x1e0 [ 343.744957][ T5754] hci_le_meta_evt+0x34a/0x5f0 [ 343.744988][ T5754] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 343.745019][ T5754] hci_event_packet+0x51c/0xcd0 [ 343.745046][ T5754] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 343.745075][ T5754] ? __pfx_hci_event_packet+0x10/0x10 [ 343.745105][ T5754] ? kcov_remote_start+0x384/0x670 [ 343.745122][ T5754] ? lockdep_hardirqs_on+0x78/0x100 [ 343.745155][ T5754] hci_rx_work+0x451/0xfc0 [ 343.745194][ T5754] process_one_work+0xa23/0x1940 [ 343.745225][ T5754] ? __pfx_process_one_work+0x10/0x10 [ 343.745253][ T5754] ? __pfx_hci_rx_work+0x10/0x10 [ 343.745283][ T5754] worker_thread+0x5ef/0xe50 [ 343.745311][ T5754] ? __pfx_worker_thread+0x10/0x10 [ 343.745330][ T5754] ? kthread+0x13a/0x450 [ 343.745355][ T5754] ? __pfx_worker_thread+0x10/0x10 [ 343.745369][ T5754] kthread+0x370/0x450 [ 343.745395][ T5754] ? __pfx_kthread+0x10/0x10 [ 343.745421][ T5754] ret_from_fork+0x72b/0xd50 [ 343.745447][ T5754] ? __pfx_ret_from_fork+0x10/0x10 [ 343.745469][ T5754] ? rcu_is_watching+0x12/0xc0 [ 343.745497][ T5754] ? __switch_to+0x800/0x10f0 [ 343.745553][ T5754] ? __pfx_kthread+0x10/0x10 [ 343.745584][ T5754] ret_from_fork_asm+0x1a/0x30 [ 343.745627][ T5754] [ 343.745687][ T5754] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 343.858990][ T5754] Bluetooth: hci2: failed to register connection device [ 344.223793][T17067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.230166][T17067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.573208][T17075] xt_hashlimit: max too large, truncated to 1048576 [ 344.579268][T17075] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 344.775774][T17080] netlink: 868 bytes leftover after parsing attributes in process `syz.3.2889'. [ 344.841301][T17085] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2891'. [ 344.887195][T17085] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2891'. [ 344.941965][T17097] fuse: fd is not a fuse device [ 344.991632][T17101] vlan2: entered allmulticast mode [ 345.122437][T17111] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2900'. [ 345.127016][T17111] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 345.386457][ T5754] Bluetooth: hci3: command 0x0c1a tx timeout [ 345.551788][T17137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.556134][T17137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.935016][T17150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2911'. [ 346.047389][T17152] overlayfs: failed to resolve './cgroup': -2 [ 346.051039][T17152] overlay: Unknown parameter 'measure' [ 346.567831][ T42] kauditd_printk_skb: 157 callbacks suppressed [ 346.567873][ T42] audit: type=1400 audit(2000000003.035:11999): avc: denied { unmount } for pid=14002 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 346.657347][ T42] audit: type=1400 audit(2000000003.109:12000): avc: denied { create } for pid=17157 comm="syz.5.2914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 348.039145][ T42] audit: type=1400 audit(2000000004.382:12001): avc: denied { map_read map_write } for pid=17160 comm="syz.5.2915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 348.077472][ T42] audit: type=1400 audit(2000000004.419:12002): avc: denied { create } for pid=17163 comm="syz.5.2916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 348.141598][ T42] audit: type=1400 audit(2000000004.484:12003): avc: denied { ioctl } for pid=17163 comm="syz.5.2916" path="socket:[82031]" dev="sockfs" ino=82031 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 348.150954][ T42] audit: type=1400 audit(2000000004.493:12004): avc: denied { ioctl } for pid=17163 comm="syz.5.2916" path="socket:[82030]" dev="sockfs" ino=82030 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 348.161716][ T42] audit: type=1400 audit(2000000004.493:12005): avc: denied { prog_load } for pid=17163 comm="syz.5.2916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 348.676950][T17127] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 348.682731][ T42] audit: type=1400 audit(2000000004.982:12006): avc: denied { read } for pid=17163 comm="syz.5.2916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 348.745461][ T42] audit: type=1400 audit(2000000005.037:12007): avc: denied { create } for pid=17168 comm="syz.3.2917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 348.755374][ T42] audit: type=1400 audit(2000000005.047:12008): avc: denied { bind } for pid=17168 comm="syz.3.2917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 348.989677][T17182] macvtap1: entered allmulticast mode [ 348.992193][T17182] bond0: entered allmulticast mode [ 348.994309][T17182] bond_slave_0: entered allmulticast mode [ 348.997110][T17182] bond_slave_1: entered allmulticast mode [ 349.005245][T17182] bond0: left allmulticast mode [ 349.008111][T17182] bond_slave_0: left allmulticast mode [ 349.010499][T17182] bond_slave_1: left allmulticast mode [ 349.039525][T17185] netlink: 'syz.7.2923': attribute type 1 has an invalid length. [ 349.074792][T17185] 8021q: adding VLAN 0 to HW filter on device bond1 [ 349.079906][T17179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17179 comm=syz.5.2921 [ 349.100907][T17185] bond1: (slave veth3): Enslaving as an active interface with a down link [ 349.111618][T17185] bond1: (slave dummy0): making interface the new active one [ 349.114800][T17185] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 349.150187][T17189] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 349.163352][T17189] openvswitch: netlink: Actions may not be safe on all matching packets [ 349.194559][T17192] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 349.201042][T17196] /dev/sg0: Can't lookup blockdev [ 349.548582][ T5886] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 349.568208][T17209] hub 4-0:1.0: USB hub found [ 349.570886][T17209] hub 4-0:1.0: 2 ports detected [ 349.712337][ T5886] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.716223][ T5886] usb 12-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 349.719335][ T5886] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.731329][ T5886] usb 12-1: config 0 descriptor?? [ 349.960194][ T5886] usbhid 12-1:0.0: can't add hid device: -71 [ 349.967432][ T5886] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 349.986359][ T5886] usb 12-1: USB disconnect, device number 4 [ 350.450729][ T5886] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 350.451251][T17243] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2936'. [ 350.462227][T17245] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 350.464917][T17245] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 350.474434][T17245] vhci_hcd vhci_hcd.0: Device attached [ 350.481370][T17245] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2937'. [ 350.612956][ T5886] usb 12-1: Using ep0 maxpacket: 32 [ 350.630192][ T5886] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.635163][ T5886] usb 12-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 350.635544][T17246] vhci_hcd: connection closed [ 350.639022][ T5886] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.646851][ T13] vhci_hcd vhci_hcd.5: stop threads [ 350.649006][ T13] vhci_hcd vhci_hcd.5: release socket [ 350.651291][ T5886] usb 12-1: config 0 descriptor?? [ 350.654138][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 350.654529][T17253] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2938'. [ 350.658137][ T5886] ldusb 12-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 350.661694][ T5886] ldusb 12-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 350.669873][ T9963] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 350.677138][T17254] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2938'. [ 350.878805][T17278] overlayfs: failed to clone upperpath [ 350.911848][ C2] ldusb 12-1:0.0: Ring buffer overflow, 8 bytes dropped [ 350.921634][T17284] netlink: 'syz.3.2946': attribute type 9 has an invalid length. [ 350.925911][T17284] x_tables: ip_tables: cgroup.0 match: invalid size 8 (kernel) != (user) 4112 [ 350.970101][T17275] md: superblock version -2147483648 not known [ 350.974791][T17275] md: couldn't set array info. -22 [ 351.044694][T17292] IPv6: NLM_F_REPLACE set, but no existing node found! [ 351.240062][T17300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2949'. [ 351.267871][ C1] ldusb 12-1:0.0: Ring buffer overflow, 8 bytes dropped [ 351.272109][T17303] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.357563][T17307] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2951'. [ 351.529902][T17320] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2955'. [ 352.006796][ T42] kauditd_printk_skb: 204 callbacks suppressed [ 352.006816][ T42] audit: type=1400 audit(2000000008.045:12213): avc: denied { mount } for pid=17327 comm="syz.9.2958" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 352.030791][ T42] audit: type=1400 audit(2000000008.073:12214): avc: denied { read } for pid=17333 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.041097][ T42] audit: type=1400 audit(2000000008.073:12215): avc: denied { read open } for pid=17333 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.051694][ T42] audit: type=1400 audit(2000000008.073:12216): avc: denied { getattr } for pid=17333 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.061998][ T42] audit: type=1400 audit(2000000008.073:12217): avc: denied { unmount } for pid=11184 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 352.073416][ T42] audit: type=1400 audit(2000000008.082:12218): avc: denied { write } for pid=17332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.082750][ T42] audit: type=1400 audit(2000000008.082:12219): avc: denied { add_name } for pid=17332 comm="dhcpcd-run-hook" name="resolv.conf.eth7.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.092961][ T42] audit: type=1400 audit(2000000008.082:12220): avc: denied { create } for pid=17332 comm="dhcpcd-run-hook" name="resolv.conf.eth7.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 352.103917][ T42] audit: type=1400 audit(2000000008.082:12221): avc: denied { write open } for pid=17332 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth7.ipv4ll" dev="tmpfs" ino=15269 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 352.115513][ T42] audit: type=1400 audit(2000000008.082:12222): avc: denied { append } for pid=17332 comm="dhcpcd-run-hook" name="resolv.conf.eth7.ipv4ll" dev="tmpfs" ino=15269 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 352.133005][T17336] netlink: 'syz.9.2959': attribute type 11 has an invalid length. [ 352.135720][T17336] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2959'. [ 352.227104][T17340] can: request_module (can-proto-0) failed. [ 352.436498][T17348] overlay: filesystem on ./bus not supported [ 352.566237][ T5888] usb 12-1: USB disconnect, device number 5 [ 352.582591][ T5888] ldusb 12-1:0.0: LD USB Device #0 now disconnected [ 352.653201][T17357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17357 comm=syz.3.2965 [ 352.679627][T17361] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2966'. [ 352.765504][T17370] futex_wake_op: syz.3.2969 tries to shift op by 144; fix this program [ 352.769621][T17370] futex_wake_op: syz.3.2969 tries to shift op by 144; fix this program [ 352.828150][T17373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2971'. [ 352.830967][T17373] netlink: 'syz.3.2971': attribute type 11 has an invalid length. [ 352.834279][T17373] netlink: 'syz.3.2971': attribute type 7 has an invalid length. [ 352.954981][T17384] wlan1: mtu less than device minimum [ 353.051996][T17397] overlayfs: failed to resolve './file1': -2 [ 353.111506][T17401] overlayfs: failed to resolve './file2': -2 [ 353.217988][T17414] veth0_to_team: entered promiscuous mode [ 353.221184][T17414] gretap0: entered promiscuous mode [ 353.430248][ T65] block nbd0: Receive control failed (result -32) [ 353.790691][T17433] netlink: 'syz.3.2989': attribute type 44 has an invalid length. [ 353.947008][T17443] tipc: Enabling of bearer rejected, failed to enable media [ 354.094454][T17458] fuse: Unknown parameter '0x00000000000000190x0000000000000009' [ 354.330849][T17482] netlink: 'syz.5.3006': attribute type 9 has an invalid length. [ 355.142770][T17500] openvswitch: netlink: IP tunnel TTL not specified. [ 355.145052][T17500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.250566][T17508] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 355.282792][T17516] netlink: 'syz.9.3013': attribute type 1 has an invalid length. [ 355.439053][ T5754] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 355.447525][ T5754] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 355.454302][ T5754] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 355.465127][ T5754] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 355.471052][ T5754] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 355.575577][T17537] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 355.581954][T17537] usb usb9: usbfs: process 17537 (syz.9.3019) did not claim interface 0 before use [ 355.590939][T17534] kvm: kvm [17533]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 355.595045][T17534] kvm: kvm [17533]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 355.624312][T17547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.633046][T17547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=17547 comm=syz.9.3020 [ 355.637502][T17547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=17547 comm=syz.9.3020 [ 355.723540][T17530] Failed to initialize the IGMP autojoin socket (err -2) [ 355.945887][T17572] XFS (loop5): SB validate failed with error -5. [ 356.011500][T17572] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input43 [ 356.092011][ T7738] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.098569][ T7738] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.305996][ T7738] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.309163][ T7738] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.387345][T17594] veth0_to_bond: entered allmulticast mode [ 356.389985][T17600] kAFS: unable to lookup cell '(,cL' [ 356.457471][ T7738] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.460889][ T7738] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.488313][T17613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.491185][T17613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.491634][T17530] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.498393][T17530] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.500874][T17530] bridge_slave_0: entered allmulticast mode [ 356.504364][T17530] bridge_slave_0: entered promiscuous mode [ 356.512142][T17530] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.514975][T17530] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.518150][T17530] bridge_slave_1: entered allmulticast mode [ 356.521069][T17530] bridge_slave_1: entered promiscuous mode [ 356.568136][T17530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.583752][T17530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.626604][ T7738] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.630868][ T7738] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.669958][T17530] team0: Port device team_slave_0 added [ 356.680528][T17530] team0: Port device team_slave_1 added [ 356.723282][T17530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.725984][T17530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.740508][T17530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.745680][T17530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.747916][T17530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.757023][T17530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.799237][T17618] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 356.853543][T17621] __nla_validate_parse: 6 callbacks suppressed [ 356.853564][T17621] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3033'. [ 356.869386][T17621] overlayfs: failed to resolve './file0': -2 [ 356.888625][ T7738] bridge_slave_1: left allmulticast mode [ 356.891122][ T7738] bridge_slave_1: left promiscuous mode [ 356.893667][ T7738] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.900717][ T7738] bridge_slave_0: left allmulticast mode [ 356.902434][ T7738] bridge_slave_0: left promiscuous mode [ 356.904272][ T7738] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.977954][T17628] binder: 17627:17628 ioctl c018620c 2000000005c0 returned -1 [ 356.981687][T17628] netlink: 'syz.5.3035': attribute type 21 has an invalid length. [ 357.152144][ T7738] bond5 (unregistering): (slave bridge2): Releasing active interface [ 357.194624][ T7738] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.201582][ T7738] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.207103][ T7738] bond0 (unregistering): Released all slaves [ 357.222487][ T7738] bond1 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 357.227840][ T7738] bond1 (unregistering): Released all slaves [ 357.243500][ T7738] bond2 (unregistering): Released all slaves [ 357.261196][ T7738] bond3 (unregistering): Released all slaves [ 357.273720][ T7738] bond4 (unregistering): Released all slaves [ 357.289566][ T7738] bond5 (unregistering): Released all slaves [ 357.301197][ T7738] bond6 (unregistering): Released all slaves [ 357.314427][ T7738] bond7 (unregistering): Released all slaves [ 357.331755][T17530] hsr_slave_0: entered promiscuous mode [ 357.335175][T17530] hsr_slave_1: entered promiscuous mode [ 357.339690][T17530] debugfs: 'hsr0' already exists in 'hsr' [ 357.342214][T17530] Cannot create hsr debugfs directory [ 357.353833][T17632] macsec3: entered allmulticast mode [ 357.355937][T17632] team0: entered allmulticast mode [ 357.357988][T17632] team_slave_1: entered allmulticast mode [ 357.360317][T17632] team_slave_1: entered promiscuous mode [ 357.366502][T17632] 8021q: adding VLAN 0 to HW filter on device macsec3 [ 357.369598][T17632] team0: Device macsec3 is already an upper device of the team interface [ 357.376874][T17632] team0: left allmulticast mode [ 357.378819][T17632] team_slave_1: left allmulticast mode [ 357.447815][ T42] kauditd_printk_skb: 298 callbacks suppressed [ 357.447828][ T42] audit: type=1400 audit(2000000013.065:12521): avc: denied { setopt } for pid=17636 comm="syz.5.3038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 357.461504][ T848] team_slave_1: left promiscuous mode [ 357.561968][ T7738] : left promiscuous mode [ 357.603734][ T42] audit: type=1400 audit(2000000013.213:12522): avc: denied { read } for pid=17645 comm="syz.9.3040" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 357.620843][ T42] audit: type=1400 audit(2000000013.222:12523): avc: denied { open } for pid=17645 comm="syz.9.3040" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 357.630350][ T42] audit: type=1400 audit(2000000013.222:12524): avc: denied { ioctl } for pid=17645 comm="syz.9.3040" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 357.660358][T17646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56394 sclass=netlink_route_socket pid=17646 comm=syz.9.3040 [ 357.669962][ T42] audit: type=1400 audit(2000000013.259:12525): avc: denied { prog_load } for pid=17645 comm="syz.9.3040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 357.676742][ T42] audit: type=1400 audit(2000000013.277:12526): avc: denied { prog_run } for pid=17645 comm="syz.9.3040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 357.683326][ T42] audit: type=1400 audit(2000000013.277:12527): avc: denied { ioctl } for pid=17645 comm="syz.9.3040" path="socket:[83232]" dev="sockfs" ino=83232 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 357.692891][ T42] audit: type=1400 audit(2000000013.286:12528): avc: denied { read } for pid=5445 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 357.698160][ T5754] Bluetooth: hci6: command tx timeout [ 357.701517][ T42] audit: type=1400 audit(2000000013.286:12529): avc: denied { search } for pid=5445 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 357.711916][ T42] audit: type=1400 audit(2000000013.286:12530): avc: denied { search } for pid=5445 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 357.736799][T17648] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3040'. [ 357.743802][T17648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17648 comm=syz.9.3040 [ 357.766541][T17646] openvswitch: netlink: Message has 8 unknown bytes. [ 357.911972][T17659] netlink: 'syz.9.3042': attribute type 21 has an invalid length. [ 358.139320][T17662] [U] V3Fپ"S/4:XTZWTLW= [ 358.141761][T17662] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3043'. [ 358.158163][T17662] bond5: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 358.170690][T17662] bond5 (unregistering): Released all slaves [ 358.195047][T17665] Failed to initialize the IGMP autojoin socket (err -2) [ 358.327460][T17661] [U] J"E:" [ 358.374311][T17673] 9pnet_fd: p9_fd_create_tcp (17673): problem creating socket [ 358.393463][T17674] openvswitch: netlink: Flow actions attr not present in new flow. [ 358.454408][T17674] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 358.640071][T17530] netdevsim netdevsim3 netdevsim0: renamed from eth10 [ 358.658355][T17530] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 358.661787][T17530] netdevsim netdevsim3 netdevsim1: renamed from eth11 [ 358.670463][T17530] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 358.674515][T17530] netdevsim netdevsim3 netdevsim2: renamed from eth12 [ 358.699505][T17530] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 358.706213][T17530] netdevsim netdevsim3 netdevsim3: renamed from eth13 [ 358.727173][T17530] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 358.928952][ T7738] hsr_slave_0: left promiscuous mode [ 358.931217][ T7738] hsr_slave_1: left promiscuous mode [ 358.942012][ T7738] veth1_macvtap: left allmulticast mode [ 358.944008][ T7738] veth1_macvtap: left promiscuous mode [ 358.946185][ T7738] veth0_macvtap: left promiscuous mode [ 358.947940][ T7738] veth1_vlan: left promiscuous mode [ 358.949651][ T7738] veth0_vlan: left promiscuous mode [ 359.149751][T17712] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 359.335894][ T7738] team_slave_1 (unregistering): left allmulticast mode [ 359.338937][ T7738] team0 (unregistering): Port device team_slave_1 removed [ 359.357215][ T7738] team_slave_0 (unregistering): left allmulticast mode [ 359.360863][ T7738] team0 (unregistering): Port device team_slave_0 removed [ 359.407657][ T7738] veth0 (unregistering): left allmulticast mode [ 359.411576][ T7738] team0 (unregistering): Port device veth0 removed [ 359.449228][T17530] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.459454][T16264] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.461949][T16264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.473545][T16264] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.475995][T16264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.683736][ T7738] IPVS: stop unused estimator thread 0... [ 359.805896][T17530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.888186][T17530] veth0_vlan: entered promiscuous mode [ 359.895413][T17530] veth1_vlan: entered promiscuous mode [ 359.919055][T17731] netlink: 'syz.5.3056': attribute type 11 has an invalid length. [ 359.928572][T17731] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3056'. [ 359.953263][T17530] veth0_macvtap: entered promiscuous mode [ 359.964081][ T5754] Bluetooth: hci6: command tx timeout [ 359.970754][T17530] veth1_macvtap: entered promiscuous mode [ 360.021851][T17530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.039113][T17530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.048933][T17530] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 360.060074][T17530] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 360.074845][T17734] Failed to initialize the IGMP autojoin socket (err -2) [ 360.081936][T17530] wireguard: wg0: Could not create IPv4 socket [ 360.093157][T17530] wireguard: wg1: Could not create IPv4 socket [ 360.098527][T17530] wireguard: wg2: Could not create IPv4 socket [ 360.134703][T17738] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3058'. [ 360.246437][T17742] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 360.251398][T17742] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3059'. [ 360.282531][T17743] vxcan3: entered promiscuous mode [ 362.132658][T17848] fuse: Unknown parameter 'nko0' [ 362.167195][T17848] MPI: mpi too large (16392 bits) [ 362.231356][ T5754] Bluetooth: hci3: Malformed Event: 0x13 [ 362.383282][T17863] new mount options do not match the existing superblock, will be ignored [ 362.386343][T17865] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3076'. [ 362.389783][T17865] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3076'. [ 362.397193][T17863] cgroup: Unknown subsys name ' [ 362.397193][T17863] ' [ 362.418753][T17860] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3076'. [ 362.422363][T17864] ntfs3(nbd5): try to read out of volume at offset 0x0 [ 362.552124][T17889] netlink: 'syz.7.3083': attribute type 1 has an invalid length. [ 362.581391][T17889] 8021q: adding VLAN 0 to HW filter on device bond2 [ 362.596950][T17889] vlan2: entered allmulticast mode [ 362.599218][T17889] macsec0: entered allmulticast mode [ 362.601492][T17889] veth1_macvtap: entered allmulticast mode [ 362.605045][T17889] bond2: (slave vlan2): Error -34 calling dev_set_mtu [ 362.671596][T17897] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3084'. [ 362.740874][T17904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.746397][T17904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.895449][ T42] kauditd_printk_skb: 286 callbacks suppressed [ 362.895470][ T42] audit: type=1400 audit(2000000018.094:12817): avc: denied { write } for pid=17910 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 362.909853][ T5844] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 362.936962][ T42] audit: type=1400 audit(2000000018.131:12818): avc: denied { execute } for pid=17912 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 362.949133][ T42] audit: type=1400 audit(2000000018.131:12819): avc: denied { execute_no_trans } for pid=17912 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 362.959901][ T42] audit: type=1400 audit(2000000018.131:12820): avc: denied { search } for pid=17907 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 362.959950][ T42] audit: type=1400 audit(2000000018.149:12821): avc: denied { execmem } for pid=17912 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 362.991616][ T42] audit: type=1400 audit(2000000018.186:12822): avc: denied { create } for pid=17914 comm="syz.7.3087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 363.005060][ T42] audit: type=1400 audit(2000000018.186:12823): avc: denied { ioctl } for pid=17914 comm="syz.7.3087" path="socket:[85527]" dev="sockfs" ino=85527 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 363.014740][ T42] audit: type=1400 audit(2000000018.195:12824): avc: denied { wake_alarm } for pid=17914 comm="syz.7.3087" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 363.023861][ T42] audit: type=1400 audit(2000000018.204:12825): avc: denied { read } for pid=17917 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 363.033529][ T42] audit: type=1400 audit(2000000018.204:12826): avc: denied { read open } for pid=17917 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 363.065316][ T5753] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 363.076144][ T5753] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 363.080224][ T5753] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 363.085955][ T5844] usb 10-1: Using ep0 maxpacket: 32 [ 363.087656][ T5753] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 363.092375][ T5844] usb 10-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 40 [ 363.096895][ T5844] usb 10-1: config 1 interface 0 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 363.102352][ T5844] usb 10-1: config 1 interface 0 has no altsetting 0 [ 363.102420][ T5753] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 363.107935][ T5844] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 363.114904][ T5844] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.126220][ T5844] usb 10-1: Product: 䥀娷謁᪽ꘐ꫍꾦邊鴪陉䥃ᩧ躶㻕艂⽉몟綯⣫䦶语돂 [ 363.137073][ T5844] usb 10-1: Manufacturer: 2幈苿㫃쐔㑃娡渮젦╯鮜䓱臕ൟﯲ៉◇捀ꬔ鮱읆姹笒⮶ⵒ簦뜅퍒꙰踾冶మ斟錅汤ᰎ뢊儫틚ܭ㰑睻ᖐ귗‏剂茆㯞蚖脅뻻㴥䝆뜙죋㕯榧䭟൧ᇡ윂ꄖ麌ꆭ㰕ຒᔘ阵휃䖯碦据惴 [ 363.153777][T17893] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 363.157000][T17893] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 363.311883][T10871] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 363.330904][T17918] Failed to initialize the IGMP autojoin socket (err -2) [ 363.364989][T17940] gfs2: error -5 reading superblock [ 363.387158][ T5844] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 363.474555][T10871] usb 12-1: Using ep0 maxpacket: 16 [ 363.477895][T10871] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 363.486638][T10871] usb 12-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 363.489878][T10871] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.492481][T10871] usb 12-1: Product: syz [ 363.493879][T10871] usb 12-1: Manufacturer: syz [ 363.495384][T10871] usb 12-1: SerialNumber: syz [ 363.502453][T10871] usb 12-1: config 0 descriptor?? [ 363.507587][T10871] em28xx 12-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 363.510779][T10871] em28xx 12-1:0.0: DVB interface 0 found: bulk [ 363.870719][T17973] netlink: 172 bytes leftover after parsing attributes in process `syz.9.3093'. [ 364.161031][T10871] em28xx 12-1:0.0: unknown em28xx chip ID (0) [ 364.198439][T17997] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3097'. [ 364.397577][T18007] fuse: Bad value for 'fd' [ 364.536382][T18015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18015 comm=syz.9.3100 [ 364.542766][T18015] netlink: 'syz.9.3100': attribute type 1 has an invalid length. [ 364.608926][T18015] 8021q: adding VLAN 0 to HW filter on device bond11 [ 364.613134][T10871] em28xx 12-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 364.618912][T10871] em28xx 12-1:0.0: board has no eeprom [ 364.623061][T18018] vlan3: entered allmulticast mode [ 364.627065][T18018] veth0_to_bond: entered allmulticast mode [ 364.644698][T18015] netlink: 'syz.9.3100': attribute type 2 has an invalid length. [ 364.658880][T18015] netlink: 'syz.9.3100': attribute type 1 has an invalid length. [ 364.668998][T18015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18015 comm=syz.9.3100 [ 364.701856][T17918] netdevsim netdevsim3 netdevsim0: renamed from eth10 [ 364.707504][T17918] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 364.711016][T17918] netdevsim netdevsim3 netdevsim1: renamed from eth11 [ 364.716015][T17918] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 364.719197][T17918] netdevsim netdevsim3 netdevsim2: renamed from eth12 [ 364.746149][T17918] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 364.749717][T17918] netdevsim netdevsim3 netdevsim3: renamed from eth13 [ 364.754491][T17918] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 364.864168][T18039] JFS: charset not found [ 364.983039][T10871] em28xx 12-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 364.987298][T10871] em28xx 12-1:0.0: dvb set to bulk mode. [ 364.993565][ T29] em28xx 12-1:0.0: Binding DVB extension [ 365.170005][T18059] binfmt_misc: register: failed to install interpreter file ./file1 [ 365.195465][T17918] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 365.207305][T17918] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 365.217358][T17918] wireguard: wg0: Could not create IPv4 socket [ 365.223724][T17918] wireguard: wg1: Could not create IPv4 socket [ 365.228481][T17918] wireguard: wg2: Could not create IPv4 socket [ 365.375470][T18042] ISOFS: Unable to identify CD-ROM format. [ 365.408961][T18066] bond12: (slave ip6gretap2): Enslaving as an active interface with an up link [ 365.529212][T18079] syzkaller1: entered promiscuous mode [ 365.531664][T18079] syzkaller1: entered allmulticast mode [ 365.541159][T18079] netlink: 'syz.9.3107': attribute type 25 has an invalid length. [ 365.745652][T18087] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3108'. [ 365.811382][ T1365] usb 10-1: USB disconnect, device number 11 [ 365.872672][T18096] netlink: 'syz.9.3111': attribute type 8 has an invalid length. [ 366.110425][T18119] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3117'. [ 366.120932][T18119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18119 comm=syz.5.3117 [ 366.132122][T18119] netlink: 'syz.5.3117': attribute type 1 has an invalid length. [ 366.134687][T18119] netlink: 'syz.5.3117': attribute type 2 has an invalid length. [ 366.137079][T18119] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3117'. [ 366.291483][T17922] em28xx 12-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 366.300659][ T1365] usb 12-1: USB disconnect, device number 6 [ 366.312626][ T1365] em28xx 12-1:0.0: Disconnecting em28xx [ 366.345446][ T29] em28xx 12-1:0.0: Registering input extension [ 366.356616][ T1365] em28xx 12-1:0.0: Closing input extension [ 366.402377][T18139] loop7: detected capacity change from 0 to 7 [ 366.408555][ C1] blk_print_req_error: 10 callbacks suppressed [ 366.408570][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 366.413150][ T1365] em28xx 12-1:0.0: Freeing device [ 366.413695][ C1] buffer_io_error: 339 callbacks suppressed [ 366.413706][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 366.420659][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 366.423844][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 366.427399][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 366.430551][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 366.433829][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 366.436747][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 366.439852][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 366.442872][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 366.445652][T18134] bond12: option mode: unable to set because the bond device has slaves [ 366.445813][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 366.452225][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 366.455429][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 366.458382][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 366.461094][T18139] ldm_validate_partition_table(): Disk read failed. [ 366.463352][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 366.466266][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 366.469709][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 366.473535][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 366.479786][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 366.482748][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 366.487900][T18139] Dev loop7: unable to read RDB block 0 [ 366.493513][T18139] loop7: unable to read partition table [ 366.499637][T18139] loop7: partition table beyond EOD, truncated [ 366.501847][T18139] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 366.560296][T18149] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 366.732700][T18155] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3123'. [ 366.735913][T18155] netlink: 'syz.9.3123': attribute type 10 has an invalid length. [ 366.939931][T18179] bridge_slave_0: default FDB implementation only supports local addresses [ 367.700921][T18235] netlink: 'syz.9.3139': attribute type 10 has an invalid length. [ 367.741152][T18235] team0: Port device dummy0 added [ 367.793688][T18240] syzkaller0: entered promiscuous mode [ 367.795917][T18240] syzkaller0: entered allmulticast mode [ 368.127225][T18267] SELinux: ebitmap start bit (202309632) is beyond the end of the bitmap (1472) [ 368.130195][T18267] SELinux: invalid class [ 368.134974][T18267] SELinux: failed to load policy [ 368.270865][T18279] tmpfs: Bad value for 'mpol' [ 368.330346][T18284] __nla_validate_parse: 4 callbacks suppressed [ 368.330361][T18284] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3147'. [ 368.446763][ T42] kauditd_printk_skb: 447 callbacks suppressed [ 368.446779][ T42] audit: type=1400 audit(2000000023.205:13274): avc: denied { write } for pid=18289 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 368.456552][ T42] audit: type=1400 audit(2000000023.224:13275): avc: denied { read } for pid=18286 comm="syz.9.3148" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 368.494825][ T42] audit: type=1400 audit(2000000023.261:13276): avc: denied { write } for pid=18295 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 368.518801][ T42] audit: type=1400 audit(2000000023.279:13277): avc: denied { read } for pid=18283 comm="syz.5.3147" dev="nsfs" ino=4026533343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 368.527482][ T42] audit: type=1400 audit(2000000023.279:13278): avc: denied { open } for pid=18283 comm="syz.5.3147" path="net:[4026533343]" dev="nsfs" ino=4026533343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 368.541945][ T42] audit: type=1400 audit(2000000023.279:13279): avc: denied { create } for pid=18283 comm="syz.5.3147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 368.550207][ T42] audit: type=1400 audit(2000000023.279:13280): avc: denied { bind } for pid=18283 comm="syz.5.3147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 368.558548][ T42] audit: type=1400 audit(2000000023.279:13281): avc: denied { write } for pid=18283 comm="syz.5.3147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 368.567719][ T42] audit: type=1400 audit(2000000023.279:13282): avc: denied { allowed } for pid=18283 comm="syz.5.3147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 368.577410][ T42] audit: type=1400 audit(2000000023.279:13283): avc: denied { create } for pid=18283 comm="syz.5.3147" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 369.004353][T18292] syz.9.3148 (18292): drop_caches: 1 [ 369.004361][T18287] syz.9.3148 (18287): drop_caches: 1 [ 369.126100][T18287] syz.9.3148 (18287): drop_caches: 1 [ 369.408997][T18325] overlay: Bad value for 'workdir' [ 370.647274][T18362] vim2m vim2m.0: vidioc_s_fmt queue busy [ 371.119745][T18294] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 371.211842][T18384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.225771][T18384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.427512][T18406] ptrace attach of "/syz-executor exec"[16512] was attempted by "/syz-executor exec"[18406] [ 371.462060][ T9] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 371.638406][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 371.643285][ T9] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 371.648432][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 371.652731][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 371.659101][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 371.663630][ T9] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 371.671504][ T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 371.675439][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.694375][T18427] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3163'. [ 371.728936][T18427] team0: Port device dummy0 removed [ 371.790986][ T5753] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 371.799481][ T5753] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 371.805527][ T5753] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 371.823631][ T5753] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 371.827641][ T5753] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 371.909730][ T9] usb 10-1: GET_CAPABILITIES returned 0 [ 371.911689][ T9] usbtmc 10-1:16.0: can't read capabilities [ 372.066887][T18436] Failed to initialize the IGMP autojoin socket (err -2) [ 372.193149][ T24] usb 10-1: USB disconnect, device number 12 [ 372.878459][T18506] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 372.881970][T18506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.083402][T18436] netdevsim netdevsim3 netdevsim0: renamed from eth10 [ 373.096902][T18436] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 373.098365][T18436] netdevsim netdevsim3 netdevsim1: renamed from eth11 [ 373.105513][T18436] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 373.108663][T18436] netdevsim netdevsim3 netdevsim2: renamed from eth12 [ 373.120749][T18436] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 373.124561][T18436] netdevsim netdevsim3 netdevsim3: renamed from eth13 [ 373.137647][T18436] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 373.210772][T18530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.229968][T18530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.400459][T18549] fuse: Bad value for 'user_id' [ 373.405713][T18549] fuse: Bad value for 'user_id' [ 373.418467][T18549] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3185'. [ 373.422750][T18549] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3185'. [ 373.426104][T18552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3186'. [ 373.430997][T18549] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(11) [ 373.433774][T18549] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 373.436229][T18552] netlink: 'syz.5.3186': attribute type 10 has an invalid length. [ 373.444459][T18549] vhci_hcd vhci_hcd.0: Device attached [ 373.446380][T18552] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3186'. [ 373.451152][T18554] vhci_hcd: connection closed [ 373.453456][ T13] vhci_hcd vhci_hcd.9: stop threads [ 373.458587][ T13] vhci_hcd vhci_hcd.9: release socket [ 373.461000][ T13] vhci_hcd vhci_hcd.9: disconnect device [ 373.546459][T18561] netlink: 'syz.5.3188': attribute type 9 has an invalid length. [ 373.649272][T18436] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 373.662059][T18436] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 373.679230][T18436] wireguard: wg0: Could not create IPv4 socket [ 373.685396][T18436] wireguard: wg1: Could not create IPv4 socket [ 373.691518][T18436] wireguard: wg2: Could not create IPv4 socket [ 373.986292][ T42] kauditd_printk_skb: 312 callbacks suppressed [ 373.986310][ T42] audit: type=1400 audit(2000000028.333:13596): avc: denied { mount } for pid=18578 comm="syz.7.3194" name="/" dev="ramfs" ino=88327 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 373.999434][ T42] audit: type=1400 audit(2000000028.343:13597): avc: denied { write } for pid=18578 comm="syz.7.3194" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 374.009178][ T42] audit: type=1400 audit(2000000028.343:13598): avc: denied { read write } for pid=18578 comm="syz.7.3194" name="video37" dev="devtmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 374.018618][ T42] audit: type=1400 audit(2000000028.343:13599): avc: denied { open } for pid=18578 comm="syz.7.3194" path="/dev/video37" dev="devtmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 374.029700][ T42] audit: type=1400 audit(2000000028.343:13600): avc: denied { execmem } for pid=18578 comm="syz.7.3194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 374.037994][ T42] audit: type=1400 audit(2000000028.343:13601): avc: denied { mmap_zero } for pid=18578 comm="syz.7.3194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 374.048737][ T42] audit: type=1400 audit(2000000028.343:13602): avc: denied { ioctl } for pid=18578 comm="syz.7.3194" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=88329 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 374.072254][ T42] audit: type=1400 audit(2000000028.398:13603): avc: denied { ioctl } for pid=18580 comm="syz.9.3195" path="socket:[89389]" dev="sockfs" ino=89389 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 374.083091][ T42] audit: type=1400 audit(2000000028.416:13604): avc: denied { search } for pid=5445 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.091788][ T42] audit: type=1400 audit(2000000028.416:13605): avc: denied { search } for pid=5445 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.133491][T18588] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 374.137454][T18588] ref_ctr increment failed for inode: 0xaa7 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888049d4bfc0 [ 374.150588][T18587] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 374.156704][T18587] ref_ctr decrement failed for inode: 0xaa7 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888049d4bfc0 [ 374.160713][T18587] uprobe: syz.9.3196:18587 failed to unregister, leaking uprobe [ 374.207808][T18593] cgroup2: Unknown parameter 'euid' [ 374.494705][T18610] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3201'. [ 374.500516][T18610] netlink: 76 bytes leftover after parsing attributes in process `syz.9.3201'. [ 374.503505][T18610] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3201'. [ 374.722808][T18620] dlm: no locking on control device [ 374.961242][T18636] futex_wake_op: syz.7.3207 tries to shift op by -1; fix this program [ 375.170348][T18657] syz.9.3211 (18657): /proc/18656/oom_adj is deprecated, please use /proc/18656/oom_score_adj instead. [ 375.182917][T18657] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3211'. [ 375.190027][ T34] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 375.198788][T18657] bridge: RTM_NEWNEIGH with unconfigured vlan 15 on bridge0 [ 375.373207][ T34] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 375.380370][ T34] usb 10-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 375.389158][ T34] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 375.397183][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.431571][ T34] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 375.617998][ T34] snd-usb-audio 10-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 375.659830][ T34] usb 10-1: USB disconnect, device number 13 [ 375.724343][T18691] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 375.770088][T18695] geneve0: entered promiscuous mode [ 375.845120][T18702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.851825][T18702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.413437][T18736] ubi: mtd0 is already attached to ubi8 [ 376.479262][T18741] ntfs3(nullb0): Primary boot signature is not NTFS. [ 376.496820][T18741] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 376.534150][T18735] kvm: Disabled LAPIC found during irq injection [ 376.670992][T18752] loop7: detected capacity change from 0 to 7 [ 376.679882][ C3] blk_print_req_error: 10 callbacks suppressed [ 376.679904][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.686665][ C3] buffer_io_error: 10 callbacks suppressed [ 376.686685][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 376.693694][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.697591][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 376.702224][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.706030][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 376.712304][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.716042][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 376.719504][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.722268][T18757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3232'. [ 376.723560][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 376.727087][T18757] netlink: 'syz.5.3232': attribute type 10 has an invalid length. [ 376.733921][T18757] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3232'. [ 376.740735][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.744452][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 376.750382][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.754305][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 376.757440][T18752] ldm_validate_partition_table(): Disk read failed. [ 376.760604][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.764732][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 376.772850][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.776942][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 376.780351][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.784283][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 376.787764][T18752] Dev loop7: unable to read RDB block 0 [ 376.790964][T18752] loop7: unable to read partition table [ 376.793643][T18752] loop7: partition table beyond EOD, truncated [ 376.796775][T18752] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 377.133380][T18790] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3238'. [ 377.293055][T18800] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3239'. [ 377.296612][T18800] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3239'. [ 377.513643][T18816] netlink: 112 bytes leftover after parsing attributes in process `syz.7.3244'. [ 377.639977][T18825] netlink: 'syz.7.3246': attribute type 10 has an invalid length. [ 378.145751][T18876] netlink: 'syz.7.3260': attribute type 4 has an invalid length. [ 378.164456][T18876] netlink: 'syz.7.3260': attribute type 4 has an invalid length. [ 378.211526][T18883] nft_compat: unsupported protocol 5 [ 378.221585][T18883] binder: 18882:18883 ioctl 40046205 0 returned -22 [ 378.335247][T18898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=18898 comm=syz.7.3266 [ 378.492786][T18913] program syz.9.3270 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 378.517668][T18913] 9pnet: Found fid 0 not clunked [ 378.620636][T18927] bond5: entered promiscuous mode [ 378.625381][T18927] netlink: 'syz.5.3274': attribute type 1 has an invalid length. [ 378.688283][T18933] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 378.767791][T18912] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 378.864532][T18924] binder: 18923:18924 ioctl c0306201 200000000040 returned -14 [ 379.232210][ T5753] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 379.236882][ T5753] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 379.242719][ T5753] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 379.252051][ T5753] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 379.257545][ T5753] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 379.409242][ T42] kauditd_printk_skb: 597 callbacks suppressed [ 379.409261][ T42] audit: type=1400 audit(2000000033.344:14203): avc: denied { unmount } for pid=16512 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 379.447539][ T42] audit: type=1400 audit(2000000033.371:14204): avc: denied { read append } for pid=19003 comm="syz.7.3285" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 379.459064][ T42] audit: type=1400 audit(2000000033.371:14205): avc: denied { open } for pid=19003 comm="syz.7.3285" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 379.470201][ T42] audit: type=1400 audit(2000000033.371:14206): avc: denied { ioctl } for pid=19003 comm="syz.7.3285" path="/dev/dri/card0" dev="devtmpfs" ino=635 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 379.481536][ T42] audit: type=1400 audit(2000000033.371:14207): avc: denied { map } for pid=19003 comm="syz.7.3285" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 379.493035][ T42] audit: type=1400 audit(2000000033.371:14208): avc: denied { write execute } for pid=19003 comm="syz.7.3285" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 379.524757][ T42] audit: type=1400 audit(2000000033.445:14209): avc: denied { write } for pid=19002 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 379.537913][T18980] Failed to initialize the IGMP autojoin socket (err -2) [ 379.577196][ T42] audit: type=1400 audit(2000000033.491:14210): avc: denied { create } for pid=19013 comm="syz.7.3286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 379.586574][ T42] audit: type=1400 audit(2000000033.501:14211): avc: denied { create } for pid=19013 comm="syz.7.3286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 379.592874][T19014] netlink: 'syz.7.3286': attribute type 11 has an invalid length. [ 379.594904][ T42] audit: type=1400 audit(2000000033.510:14212): avc: denied { write } for pid=19013 comm="syz.7.3286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 379.762020][T19023] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19023 comm=syz.7.3287 [ 379.940859][T19043] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 379.957554][T19043] __nla_validate_parse: 8 callbacks suppressed [ 379.957575][T19043] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3292'. [ 379.996492][T19043] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3292'. [ 380.200851][T19058] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 380.379753][T19070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30229 sclass=netlink_route_socket pid=19070 comm=syz.7.3296 [ 380.595873][T18980] netdevsim netdevsim3 netdevsim0: renamed from eth10 [ 380.606571][T18980] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 380.611112][T18980] netdevsim netdevsim3 netdevsim1: renamed from eth11 [ 380.629025][T18980] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 380.633689][T18980] netdevsim netdevsim3 netdevsim2: renamed from eth12 [ 380.643400][T18980] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 380.647329][T18980] netdevsim netdevsim3 netdevsim3: renamed from eth13 [ 380.658625][T18980] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 381.105807][T18980] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 381.114618][T18980] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 381.122677][T18980] wireguard: wg0: Could not create IPv4 socket [ 381.126526][T18980] wireguard: wg1: Could not create IPv4 socket [ 381.130509][T18980] wireguard: wg2: Could not create IPv4 socket [ 381.581450][T19141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3306'. [ 381.584977][T19141] netlink: 'syz.5.3306': attribute type 10 has an invalid length. [ 381.587547][T19141] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3306'. [ 381.682517][T19144] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 385.409301][ T42] kauditd_printk_skb: 226 callbacks suppressed [ 385.409321][ T42] audit: type=1400 audit(2000000038.871:14439): avc: denied { mount } for pid=19238 comm="syz.9.3313" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 385.422111][ T42] audit: type=1400 audit(2000000038.889:14440): avc: denied { mounton } for pid=19238 comm="syz.9.3313" path="/545/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 385.423543][T19239] macsec0: entered promiscuous mode [ 385.442930][T19239] macsec0: left promiscuous mode [ 385.446634][T19239] netlink: 200 bytes leftover after parsing attributes in process `syz.9.3313'. [ 385.462413][ T42] audit: type=1400 audit(2000000038.926:14441): avc: denied { unmount } for pid=11184 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 385.485652][ T42] audit: type=1400 audit(2000000038.944:14442): avc: denied { read } for pid=19244 comm="syz.9.3315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 385.511086][ T42] audit: type=1400 audit(2000000038.972:14443): avc: denied { write } for pid=19240 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 385.524826][ T42] audit: type=1400 audit(2000000038.981:14444): avc: denied { read append } for pid=19246 comm="syz.5.3316" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 385.538628][ T42] audit: type=1400 audit(2000000038.981:14445): avc: denied { open } for pid=19246 comm="syz.5.3316" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 385.551031][ T42] audit: type=1400 audit(2000000038.981:14446): avc: denied { ioctl } for pid=19246 comm="syz.5.3316" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 385.561048][ T42] audit: type=1400 audit(2000000038.981:14447): avc: denied { setopt } for pid=19246 comm="syz.5.3316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 385.592723][ T42] audit: type=1400 audit(2000000039.046:14448): avc: denied { write } for pid=19252 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 385.597864][ T5844] libceph: mon0 (1)[c::]:6789 connect error [ 385.645757][T19263] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3319'. [ 385.650375][T19263] netlink: 'syz.7.3319': attribute type 10 has an invalid length. [ 385.653098][T19263] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3319'. [ 385.697981][T19254] ceph: No mds server is up or the cluster is laggy [ 385.711661][T19272] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3322'. [ 385.740716][T19276] 9p: Bad value for 'rfdno' [ 385.766930][T19272] bond3: entered promiscuous mode [ 385.770033][T19272] 8021q: adding VLAN 0 to HW filter on device bond3 [ 385.864969][T19272] veth5: entered promiscuous mode [ 385.870196][T19272] bond3: (slave veth5): Enslaving as an active interface with an up link [ 386.063611][T19302] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 386.216623][T19322] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3330'. [ 386.220700][T19322] netlink: 'syz.5.3330': attribute type 10 has an invalid length. [ 386.228995][T19322] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3330'. [ 386.262412][T19307] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3328'. [ 386.284007][T19307] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 386.476155][T19362] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 386.487200][T19362] netlink: 144 bytes leftover after parsing attributes in process `syz.9.3333'. [ 387.206218][T19390] macsec1: entered promiscuous mode [ 387.208377][T19390] macsec1: entered allmulticast mode [ 387.278112][ T5753] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 387.283116][ T5753] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 387.295968][ T5753] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 387.299676][ T5753] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 387.302937][ T5753] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 387.599789][T19392] Failed to initialize the IGMP autojoin socket (err -2) [ 387.684053][T19416] fuse: root generation should be zero [ 387.825457][T19433] gretap1: entered promiscuous mode [ 387.829730][T19433] batman_adv: batadv0: Adding interface: gretap1 [ 387.831742][T19433] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.840430][T19433] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 388.227223][T19454] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 388.253262][T19454] qnx6: unable to set blocksize [ 388.332690][T19454] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 388.545513][T19464] netlink: 108 bytes leftover after parsing attributes in process `syz.9.3350'. [ 388.660034][T19392] netdevsim netdevsim3 netdevsim0: renamed from eth10 [ 388.675937][T19392] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 388.679852][T19392] netdevsim netdevsim3 netdevsim1: renamed from eth11 [ 388.692729][T19392] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 388.698273][T19392] netdevsim netdevsim3 netdevsim2: renamed from eth12 [ 388.703315][T19476] netlink: 'syz.5.3352': attribute type 11 has an invalid length. [ 388.720561][T19392] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 388.724659][T19392] netdevsim netdevsim3 netdevsim3: renamed from eth13 [ 388.738494][T19392] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 389.055737][T19491] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3355'. [ 389.128329][T19483] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 389.158022][T19499] netlink: 'syz.9.3357': attribute type 1 has an invalid length. [ 389.162331][T19499] netlink: 'syz.9.3357': attribute type 2 has an invalid length. [ 389.190963][T19392] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 389.199810][T19392] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 389.207920][T19392] wireguard: wg0: Could not create IPv4 socket [ 389.212762][T19392] wireguard: wg1: Could not create IPv4 socket [ 389.223318][T19392] wireguard: wg2: Could not create IPv4 socket [ 389.325278][T19505] netlink: 'syz.7.3360': attribute type 1 has an invalid length. [ 389.632914][T19520] netlink: 'syz.5.3365': attribute type 10 has an invalid length. [ 389.777749][T19530] macvlan1: entered allmulticast mode [ 390.011035][T19550] netlink: 'syz.9.3375': attribute type 2 has an invalid length. [ 390.411023][T19588] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 390.455169][T19593] input: syz0 as /devices/virtual/input/input48 [ 390.582180][T19597] usb usb8: usbfs: process 19597 (syz.5.3386) did not claim interface 0 before use [ 390.877475][T19629] Failed to initialize the IGMP autojoin socket (err -2) [ 390.905809][ T42] kauditd_printk_skb: 413 callbacks suppressed [ 390.905848][ T42] audit: type=1400 audit(2000000043.955:14862): avc: denied { bind } for pid=19621 comm="syz.5.3393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 390.930516][ T42] audit: type=1400 audit(2000000043.955:14863): avc: denied { listen } for pid=19621 comm="syz.5.3393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 390.949024][ T42] audit: type=1400 audit(2000000043.964:14864): avc: denied { transition } for pid=19628 comm="syz.7.3395" path="/148/file0" dev="tmpfs" ino=813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 390.959183][ T42] audit: type=1400 audit(2000000043.964:14865): avc: denied { entrypoint } for pid=19628 comm="syz.7.3395" path="/148/file0" dev="tmpfs" ino=813 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 390.968217][ T42] audit: type=1400 audit(2000000043.964:14866): avc: denied { share } for pid=19628 comm="syz.7.3395" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 390.983021][ T42] audit: type=1400 audit(2000000043.964:14867): avc: denied { noatsecure } for pid=19628 comm="syz.7.3395" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 390.991049][ T42] audit: type=1400 audit(2000000044.019:14868): avc: denied { read } for pid=19632 comm="syz.9.3396" name="video7" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 391.001049][ T42] audit: type=1400 audit(2000000044.019:14869): avc: denied { open } for pid=19632 comm="syz.9.3396" path="/dev/video7" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 391.010354][ T42] audit: type=1400 audit(2000000044.019:14870): avc: denied { ioctl } for pid=19632 comm="syz.9.3396" path="/dev/video7" dev="devtmpfs" ino=975 ioctlcmd=0x5627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 391.042361][T19638] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 391.102582][ T42] audit: type=1400 audit(2000000044.130:14871): avc: denied { create } for pid=19640 comm="syz.7.3398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 391.349970][T19646] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 391.938486][T19686] overlayfs: statfs failed on './file0' [ 392.076876][T19698] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 392.338854][T19711] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 392.342990][T19711] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 392.345638][T19711] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 392.352052][T19711] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 392.362134][T19711] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 392.364120][T19711] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 392.376033][T19711] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 392.590406][T19725] overlayfs: failed to resolve '/a': -2 [ 392.750836][T19733] binder: 19732:19733 ioctl c018620c 200000000180 returned -1 [ 392.875282][T19742] __nla_validate_parse: 15 callbacks suppressed [ 392.875305][T19742] netlink: 750 bytes leftover after parsing attributes in process `syz.7.3417'. [ 392.967632][T19751] ------------[ cut here ]------------ [ 392.970219][T19751] kvm_is_error_gpa(gpa) == kvm_is_error_hva(uhva) [ 392.970241][T19751] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1a98/0x22d0, CPU#0: syz.7.3417/19751 [ 392.977448][T19751] Modules linked in: [ 392.980220][T19751] CPU: 0 UID: 0 PID: 19751 Comm: syz.7.3417 Tainted: G L syzkaller #0 PREEMPT(full) [ 392.984836][T19751] Tainted: [L]=SOFTLOCKUP [ 392.986791][T19751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 392.993391][T19751] RIP: 0010:__kvm_gpc_refresh+0x1a98/0x22d0 [ 392.995647][T19751] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 31 07 00 00 48 8b 04 24 31 db 48 8b a8 08 01 00 00 e9 2b f6 ff ff e8 c9 a9 86 00 90 <0f> 0b 90 e9 55 f8 ff ff e8 bb a9 86 00 48 c7 c6 40 b9 c2 8b 48 89 [ 393.003157][T19751] RSP: 0018:ffffc90006d57248 EFLAGS: 00010283 [ 393.005488][T19751] RAX: 00000000000006ea RBX: ffffffffffffffff RCX: ffffc900276cc000 [ 393.008597][T19751] RDX: 0000000000080000 RSI: ffffffff81832677 RDI: ffff88802f17a540 [ 393.011756][T19751] RBP: ffff888000000000 R08: 0000000000000000 R09: 0000000000000001 [ 393.014855][T19751] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000001001 [ 393.017785][T19751] R13: ffff888000000001 R14: ffff888000000000 R15: ffffc90006d57468 [ 393.020859][T19751] FS: 00007f0fae1f66c0(0000) GS:ffff8880d5dec000(0000) knlGS:0000000000000000 [ 393.024174][T19751] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 393.027045][T19751] CR2: 00007f0fae1f5ff8 CR3: 000000002b038000 CR4: 0000000000352ef0 [ 393.030282][T19751] Call Trace: [ 393.031557][T19751] [ 393.032640][T19751] ? find_held_lock+0x2b/0x80 [ 393.034521][T19751] ? kvm_xen_set_evtchn_fast+0x874/0xe80 [ 393.036683][T19751] ? __pfx___mutex_lock+0x10/0x10 [ 393.038777][T19751] ? __lock_acquire+0x49f/0x1a40 [ 393.040901][T19751] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 393.043130][T19751] kvm_gpc_refresh+0xc9/0x160 [ 393.045133][T19751] kvm_xen_set_evtchn.part.0+0x168/0x230 [ 393.047644][T19751] ? kvm_xen_set_evtchn.part.0+0x153/0x230 [ 393.050293][T19751] kvm_xen_hvm_evtchn_send+0x22f/0x290 [ 393.053146][T19751] ? __pfx_kvm_xen_hvm_evtchn_send+0x10/0x10 [ 393.055353][T19751] kvm_arch_vm_ioctl+0x13ac/0x18d0 [ 393.057685][T19751] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 393.059912][T19751] ? __lock_acquire+0x49f/0x1a40 [ 393.062181][T19751] ? __lock_acquire+0x49f/0x1a40 [ 393.064028][T19751] ? __lock_acquire+0x49f/0x1a40 [ 393.065982][T19751] ? __lock_acquire+0x49f/0x1a40 [ 393.067892][T19751] ? is_bpf_text_address+0x8a/0x1a0 [ 393.069931][T19751] ? bpf_ksym_find+0x128/0x1c0 [ 393.071799][T19751] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 393.074536][T19751] ? is_bpf_text_address+0x94/0x1a0 [ 393.076862][T19751] ? kernel_text_address+0x8d/0x100 [ 393.079158][T19751] ? __pfx_widen_string+0x10/0x10 [ 393.081169][T19751] ? __kernel_text_address+0xd/0x30 [ 393.083307][T19751] ? unwind_get_return_address+0x59/0xa0 [ 393.085589][T19751] ? arch_stack_walk+0xa6/0xf0 [ 393.087603][T19751] ? tomoyo_path_number_perm+0x46d/0x580 [ 393.089918][T19751] ? stack_trace_save+0x8e/0xc0 [ 393.091835][T19751] ? __pfx_stack_trace_save+0x10/0x10 [ 393.094049][T19751] ? stack_depot_save_flags+0x27/0x9d0 [ 393.096308][T19751] ? __lock_acquire+0x49f/0x1a40 [ 393.098192][T19751] ? tomoyo_path_number_perm+0x46d/0x580 [ 393.100267][T19751] ? kasan_save_stack+0x3f/0x50 [ 393.102193][T19751] ? kasan_save_stack+0x30/0x50 [ 393.104081][T19751] ? kasan_save_track+0x14/0x30 [ 393.106065][T19751] ? kasan_save_free_info+0x3b/0x70 [ 393.108030][T19751] kvm_vm_ioctl+0x1564/0x4030 [ 393.110048][T19751] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 393.112502][T19751] ? kasan_quarantine_put+0x104/0x240 [ 393.115153][T19751] ? lockdep_hardirqs_on+0x78/0x100 [ 393.117555][T19751] ? find_held_lock+0x2b/0x80 [ 393.119523][T19751] ? tomoyo_path_number_perm+0x28f/0x580 [ 393.121809][T19751] ? tomoyo_path_number_perm+0x28f/0x580 [ 393.124072][T19751] ? tomoyo_path_number_perm+0x188/0x580 [ 393.126240][T19751] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 393.128486][T19751] ? __lock_acquire+0x49f/0x1a40 [ 393.130415][T19751] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 393.133079][T19751] ? do_vfs_ioctl+0x226/0x13e0 [ 393.135028][T19751] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 393.137089][T19751] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 393.139760][T19751] ? __fget_files+0x215/0x3d0 [ 393.141661][T19751] ? hook_file_ioctl_common+0x140/0x440 [ 393.143843][T19751] ? selinux_file_ioctl+0x13b/0x290 [ 393.145843][T19751] ? selinux_file_ioctl+0xb6/0x290 [ 393.147750][T19751] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 393.149942][T19751] __x64_sys_ioctl+0x18e/0x210 [ 393.151818][T19751] do_syscall_64+0x115/0x870 [ 393.153753][T19751] ? clear_bhb_loop+0x40/0x90 [ 393.155603][T19751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.157920][T19751] RIP: 0033:0x7f0faff9de59 [ 393.159819][T19751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.167260][T19751] RSP: 002b:00007f0fae1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.171172][T19751] RAX: ffffffffffffffda RBX: 00007f0fb0226090 RCX: 00007f0faff9de59 [ 393.174423][T19751] RDX: 0000200000000400 RSI: 00000000400caed0 RDI: 0000000000000005 [ 393.177491][T19751] RBP: 00007f0fb0033e6f R08: 0000000000000000 R09: 0000000000000000 [ 393.180566][T19751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.183598][T19751] R13: 00007f0fb0226128 R14: 00007f0fb0226090 R15: 00007ffcfda89088 [ 393.186876][T19751] [ 393.188162][T19751] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 393.191002][T19751] CPU: 0 UID: 0 PID: 19751 Comm: syz.7.3417 Tainted: G L syzkaller #0 PREEMPT(full) [ 393.195126][T19751] Tainted: [L]=SOFTLOCKUP [ 393.196920][T19751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 393.201526][T19751] Call Trace: [ 393.203098][T19751] [ 393.204447][T19751] dump_stack_lvl+0x100/0x190 [ 393.206572][T19751] vpanic+0x552/0x970 [ 393.208279][T19751] ? __pfx_vpanic+0x10/0x10 [ 393.210238][T19751] panic+0xd1/0xe0 [ 393.211785][T19751] ? __pfx_panic+0x10/0x10 [ 393.213624][T19751] check_panic_on_warn.cold+0x19/0x34 [ 393.215852][T19751] ? __kvm_gpc_refresh+0x1a98/0x22d0 [ 393.218185][T19751] __warn.cold+0x191/0x318 [ 393.220138][T19751] __report_bug+0x30f/0x440 [ 393.221982][T19751] ? __kvm_gpc_refresh+0x1a98/0x22d0 [ 393.224054][T19751] ? __pfx___report_bug+0x10/0x10 [ 393.226061][T19751] ? check_prev_add+0xfe/0xe60 [ 393.228048][T19751] ? check_prev_add+0xfe/0xe60 [ 393.230016][T19751] ? lockdep_unlock+0x5a/0xc0 [ 393.231868][T19751] ? __lock_acquire+0xd5b/0x1a40 [ 393.234065][T19751] ? __kvm_gpc_refresh+0x1a98/0x22d0 [ 393.236401][T19751] report_bug+0xb2/0x220 [ 393.238172][T19751] ? __kvm_gpc_refresh+0x1a98/0x22d0 [ 393.240386][T19751] handle_bug+0x16a/0x2a0 [ 393.242130][T19751] exc_invalid_op+0x17/0x50 [ 393.243996][T19751] asm_exc_invalid_op+0x1a/0x20 [ 393.245966][T19751] RIP: 0010:__kvm_gpc_refresh+0x1a98/0x22d0 [ 393.248339][T19751] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 31 07 00 00 48 8b 04 24 31 db 48 8b a8 08 01 00 00 e9 2b f6 ff ff e8 c9 a9 86 00 90 <0f> 0b 90 e9 55 f8 ff ff e8 bb a9 86 00 48 c7 c6 40 b9 c2 8b 48 89 [ 393.256390][T19751] RSP: 0018:ffffc90006d57248 EFLAGS: 00010283 [ 393.258795][T19751] RAX: 00000000000006ea RBX: ffffffffffffffff RCX: ffffc900276cc000 [ 393.262068][T19751] RDX: 0000000000080000 RSI: ffffffff81832677 RDI: ffff88802f17a540 [ 393.265272][T19751] RBP: ffff888000000000 R08: 0000000000000000 R09: 0000000000000001 [ 393.268413][T19751] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000001001 [ 393.271679][T19751] R13: ffff888000000001 R14: ffff888000000000 R15: ffffc90006d57468 [ 393.274906][T19751] ? __kvm_gpc_refresh+0x1a97/0x22d0 [ 393.277071][T19751] ? __kvm_gpc_refresh+0x1a97/0x22d0 [ 393.279195][T19751] ? find_held_lock+0x2b/0x80 [ 393.281075][T19751] ? kvm_xen_set_evtchn_fast+0x874/0xe80 [ 393.283380][T19751] ? __pfx___mutex_lock+0x10/0x10 [ 393.285685][T19751] ? __lock_acquire+0x49f/0x1a40 [ 393.287695][T19751] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 393.289872][T19751] kvm_gpc_refresh+0xc9/0x160 [ 393.291702][T19751] kvm_xen_set_evtchn.part.0+0x168/0x230 [ 393.293919][T19751] ? kvm_xen_set_evtchn.part.0+0x153/0x230 [ 393.296215][T19751] kvm_xen_hvm_evtchn_send+0x22f/0x290 [ 393.298432][T19751] ? __pfx_kvm_xen_hvm_evtchn_send+0x10/0x10 [ 393.300875][T19751] kvm_arch_vm_ioctl+0x13ac/0x18d0 [ 393.303003][T19751] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 393.305284][T19751] ? __lock_acquire+0x49f/0x1a40 [ 393.307290][T19751] ? __lock_acquire+0x49f/0x1a40 [ 393.309324][T19751] ? __lock_acquire+0x49f/0x1a40 [ 393.311277][T19751] ? __lock_acquire+0x49f/0x1a40 [ 393.313555][T19751] ? is_bpf_text_address+0x8a/0x1a0 [ 393.315833][T19751] ? bpf_ksym_find+0x128/0x1c0 [ 393.317734][T19751] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 393.320268][T19751] ? is_bpf_text_address+0x94/0x1a0 [ 393.322388][T19751] ? kernel_text_address+0x8d/0x100 [ 393.324454][T19751] ? __pfx_widen_string+0x10/0x10 [ 393.326459][T19751] ? __kernel_text_address+0xd/0x30 [ 393.328539][T19751] ? unwind_get_return_address+0x59/0xa0 [ 393.330846][T19751] ? arch_stack_walk+0xa6/0xf0 [ 393.332913][T19751] ? tomoyo_path_number_perm+0x46d/0x580 [ 393.335178][T19751] ? stack_trace_save+0x8e/0xc0 [ 393.337181][T19751] ? __pfx_stack_trace_save+0x10/0x10 [ 393.339261][T19751] ? stack_depot_save_flags+0x27/0x9d0 [ 393.341364][T19751] ? __lock_acquire+0x49f/0x1a40 [ 393.343293][T19751] ? tomoyo_path_number_perm+0x46d/0x580 [ 393.345433][T19751] ? kasan_save_stack+0x3f/0x50 [ 393.347508][T19751] ? kasan_save_stack+0x30/0x50 [ 393.349779][T19751] ? kasan_save_track+0x14/0x30 [ 393.351945][T19751] ? kasan_save_free_info+0x3b/0x70 [ 393.354100][T19751] kvm_vm_ioctl+0x1564/0x4030 [ 393.355978][T19751] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 393.357999][T19751] ? kasan_quarantine_put+0x104/0x240 [ 393.360151][T19751] ? lockdep_hardirqs_on+0x78/0x100 [ 393.362224][T19751] ? find_held_lock+0x2b/0x80 [ 393.364061][T19751] ? tomoyo_path_number_perm+0x28f/0x580 [ 393.366277][T19751] ? tomoyo_path_number_perm+0x28f/0x580 [ 393.368644][T19751] ? tomoyo_path_number_perm+0x188/0x580 [ 393.371149][T19751] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 393.373577][T19751] ? __lock_acquire+0x49f/0x1a40 [ 393.375525][T19751] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 393.377830][T19751] ? do_vfs_ioctl+0x226/0x13e0 [ 393.379727][T19751] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 393.381672][T19751] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 393.384378][T19751] ? __fget_files+0x215/0x3d0 [ 393.386248][T19751] ? hook_file_ioctl_common+0x140/0x440 [ 393.388542][T19751] ? selinux_file_ioctl+0x13b/0x290 [ 393.390817][T19751] ? selinux_file_ioctl+0xb6/0x290 [ 393.393123][T19751] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 393.395299][T19751] __x64_sys_ioctl+0x18e/0x210 [ 393.397276][T19751] do_syscall_64+0x115/0x870 [ 393.399144][T19751] ? clear_bhb_loop+0x40/0x90 [ 393.401001][T19751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.403202][T19751] RIP: 0033:0x7f0faff9de59 [ 393.405116][T19751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.413129][T19751] RSP: 002b:00007f0fae1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.416402][T19751] RAX: ffffffffffffffda RBX: 00007f0fb0226090 RCX: 00007f0faff9de59 [ 393.419503][T19751] RDX: 0000200000000400 RSI: 00000000400caed0 RDI: 0000000000000005 [ 393.422962][T19751] RBP: 00007f0fb0033e6f R08: 0000000000000000 R09: 0000000000000000 [ 393.426341][T19751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.429609][T19751] R13: 00007f0fb0226128 R14: 00007f0fb0226090 R15: 00007ffcfda89088 [ 393.432615][T19751] [ 393.434845][T19751] Kernel Offset: disabled [ 393.436543][T19751] Rebooting in 86400 seconds..