last executing test programs: 31.623885277s ago: executing program 2 (id=950): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000064000/0x1000)=nil], &(0x7f0000000240)=[0x1], 0x0, 0x0) syz_open_procfs$userns(r0, &(0x7f0000000000)) 31.623202962s ago: executing program 2 (id=951): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000008c0)={0x14, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d01, 0x0, 0x8000000001}]}) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000008c0)={0x14, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d01, 0x0, 0x8000000001}]}) (async) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 31.552853903s ago: executing program 2 (id=952): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11011, r0, 0x2000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = io_uring_setup(0x3075, &(0x7f0000001740)={0x0, 0x644a, 0x10, 0x3, 0x2b4}) io_uring_setup(0x17b2, &(0x7f0000004040)={0x0, 0x2a43, 0x21, 0x2, 0x284, 0x0, r2}) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000001c0)={0x9, 0x7, 0x2, 0xfffffffd, 0x25, "3472579e854e16f25b307be82aad1751aac13e", 0x4, 0x5}) write$binfmt_misc(r1, 0x0, 0x0) r3 = syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) futex_waitv(&(0x7f00000017c0)=[{0x8, &(0x7f0000000500)=0x6, 0x2}, {0x0, &(0x7f0000000900)=0x7, 0x82}], 0x2, 0x0, 0x0, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket(0x10, 0x3, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r4, &(0x7f0000001240)=[{&(0x7f0000001300)=""/231, 0xe7}], 0x1, 0xe12, 0x200000c) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_uring_enter(r5, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) r6 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f00000008c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r6, 0xc01864c1, &(0x7f0000000940)={r7}) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x20, 0x23, 0x90, {0x90, 0x3, "24cb68baccd033804abd76f3aa1121d9c921528b8c582cc1b0c45875c882aafcb339865e5dc6c12485f002999d5201203c5efd9fb752f0c394274609ee31855321fa1d26f6a1fded7e747d849a36688046b9bb50eb4f73fac519af70ad9ab5d38fc977ab988e3a956b3cf862242c9406a5539f728ff48ed7985dc06a0ab9b7817a8395aeb841fe1d621d05f8b2f4"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180a}}, &(0x7f00000002c0)={0x0, 0xf, 0x35, {0x5, 0xf, 0x35, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x5, 0xff7f}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x6, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x6, 0xf, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "f56565eef9189a2e4d87e849194acc97"}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x60, 0x8, 0x0, "0b992b5f", "f0cf2d7d"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x48, 0x4, 0x2, 0xa7, 0x6, 0x3ff, 0xf6ad}}}, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x30, 0x30, 0x7f, "164afee225b3b4f851f44a59a3d5f22eff9891c4b82c860e894d5612b0069ece44bf3a9877d7c6862521f5be1adad81f19e9acc40764a0d770030c2df9322e41ad6c3368b01f915b419a7cafeb3fd2474e9ec1ada5e3b8852be50f5ebe9c6128f52c80b9f10cd468ae613d17fb9bdf7a3ba5ecafe912d27be99957f072f494"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000480)={0x0, 0x8, 0x1}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x8, 0x4, [0xf]}}, &(0x7f0000000540)={0x40, 0x7, 0x2}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x2}, &(0x7f00000005c0)={0x40, 0xb, 0x2, '(k'}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000640)={0x40, 0x13, 0x6, @random="0fef6ab5aa69"}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="d9593d758566"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "dfc6"}, &(0x7f0000000700)={0x40, 0x1a, 0x2}, &(0x7f0000000300)={0x40, 0x1c, 0x1}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x5}}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x200000, 0x0) 30.912278662s ago: executing program 2 (id=955): prctl$PR_MCE_KILL(0x43, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) read(r0, &(0x7f0000000180)=""/65, 0x41) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000002c0)={r0, 0x8, 0x6, 0xffffffffffffffc8}) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d00, &(0x7f0000000300)=0x1b) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/185, 0xb9}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x2, 0x0, 0x9e, 0x0, 0xf5}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r4, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) dup2(r2, r0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010800000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="000000000420040014002b8008000300190000000800ffff", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x3c}}, 0x0) 30.482523908s ago: executing program 2 (id=963): ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) quotactl_fd$Q_GETQUOTA(r0, 0x0, r2, &(0x7f0000000480)) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000500)={'\x00', 0x10000, 0x0, 0x2}) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}]}, 0x24}}, 0x10) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000680)={0x4, 0x8}) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)=@upd={0xe8, 0x12, 0x105, 0x70bd29, 0x25dfdbfb, {{'drbg_nopr_hmac_sha512\x00'}, '\x00', '\x00', 0x400, 0x2000}, [{0x8, 0x1, 0x9}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000a80)={0xfff, 0x100, 0x0, 0x7f, &(0x7f0000000880)=""/127, 0xca, &(0x7f0000000900)=""/202, 0x67, &(0x7f0000000a00)=""/103}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000b00)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000ac0)}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r1, 0x3b8b, &(0x7f0000000b40)={0x10, 0x0, r4}) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000b80)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000bc0)=0x19) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000c40), r1) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x74, r6, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vcan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4001}, 0x40800) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80), 0x501100, 0x0) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000dc0)) ioctl$KDSKBMETA(r7, 0x4b63, &(0x7f0000000e00)=0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000e40)={{{@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x1e}, 0x4e24, 0x4b, 0x4e20, 0xdfe, 0x2, 0x20, 0x10, 0x87, 0x0, r2}, {0x3, 0x8, 0x9, 0x8, 0x8000000000000001, 0x2, 0xf2, 0x6}, {0x9d55, 0x28a0, 0x8, 0x4}, 0xd, 0x6e6bbd, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast1, 0x4d6}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3505, 0x1, 0x2, 0x80, 0x9, 0x49, 0x10001}}, 0xe8) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x28, r8, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x0, 0xf}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40c0}, 0x40) ioctl$TIOCSPTLCK(r7, 0x40045431, &(0x7f00000010c0)=0x1) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000001540)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001140)={0x38c, r8, 0x50c, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5, 0x5f}}}}, [@NL80211_ATTR_FRAME_MATCH={0xfc, 0x5b, "6a432d6267024124d23efde42237682c9bc07813bd01fbac5edf5d989ab4868b2fbf2ae6deaa45a30e68480a1ce070ac7be3174e3804be4bd8d7600a2595678cd62ebb8f2eb3ed3b2d8834caadafd7a8afa88d3af1b1609c9b8fddd7360d1930571428743713eaa851acffb0bc2d60bde7ab0ecccc914916138d80c3522c0e00a9e8a13c713c18385f849a8c37691261ebd08dcea7ccbebff3ffb6b98700681e7dd3e95b53fa25a3c644faf31642ece6f947f285d8b1458837b5747ce274bf119e38cc0b446783856b92a46237217d4232eaacdf8e01838084b9f124dcce6877ac3eed6d39dc83c50b5e21a7c5b5f7439f238dc98a8f77dd"}, @NL80211_ATTR_FRAME_MATCH={0xd1, 0x5b, "0708fc94091caffd65f8c85c0a6f7eb470c2d1a89f2320099348fbaaf59ccdcf16d23eb52d0ee9eaa351a25ece4c1c21f8fba50ff92dfef704eeb0802e4160d0b07416934378b9bac4fe64a0897a7daa2de4a526b39b637467f989460e216ca66357a8833576cf8f95abdb12ffd81f0c1456c8d5dc19888b40438b0375ead59f714ddf146002d9bcb4e30e03aa38906d569368d1ebbef2e29c558ca5a09cc0bc779721aebdace14df02ee2e2786dc8b8946fb3e45e8c6b578944c490174479eacb64cc8cd28050cb50d8f8bd69"}, @NL80211_ATTR_FRAME_MATCH={0x7a, 0x5b, "35047a38910bdc664941410c9903ab8a0726674279ba2e1b0f72dfb68f50f3a526c5a8e9021c91a4b8a4192a9b27dc5da3513e13802c2fb8697bcf9541a60343557060342cc10a236e8ef9136b8226758809b418537e56b4317a380993f121920d7500b57a0eb5f8d4c594c756024dbfcc21c82ee6b5"}, @NL80211_ATTR_FRAME_MATCH={0x49, 0x5b, "4f8bcdfdbafd29a52263e2654840bd6b3fa29828d3881b9da4983a38862b3058d4d3ff172197f277cb3bf48b38ab9a8da6974315f3bbbbc3ce2e4eacd40d91cb464bed30f6"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x401}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0xb2, 0x5b, "e8ae5d41e98bbec0b9af7be2e8eb83dc59959f5600daf1c440d371daa8b310da589e1199e263667881bb317acf280c177275b650c96b6001d579aa1efaef7c17d6cd340039ad2ed2c8f9e01faecec78e8219a20ea5e2d69facba5c168121244f282aef580863e42ce65d435452443c0f61b5c7b7b22c9dc7d1c61b90aeb510226798b69cd30210a6565607720b9d60807baedc384019131a7b8a4abf99a2704d95ac58a5c30edc04ac33184d5787"}]}, 0x38c}, 0x1, 0x0, 0x0, 0x4081}, 0x4) getpeername$inet(r1, &(0x7f0000001580)={0x2, 0x0, @multicast1}, &(0x7f00000015c0)=0x10) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000001600)=0x8) 30.44784185s ago: executing program 2 (id=964): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) fadvise64(r1, 0x8000000000000001, 0x1, 0x3) (async, rerun: 64) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 64) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0xfbf, @empty}, 0x1c) (async) listen(r5, 0x0) (async) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) (async, rerun: 32) close_range(r4, 0xffffffffffffffff, 0x0) (async, rerun: 32) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) recvmsg$unix(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)=""/1, 0x1}, {&(0x7f0000000200)=""/121, 0x79}, {&(0x7f0000000300)=""/83, 0x53}, {&(0x7f0000000280)=""/40, 0x28}, {&(0x7f0000000400)=""/132, 0x84}, {&(0x7f00000004c0)=""/124, 0x7c}], 0x6, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x10100) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2204880, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x12000, 0x0) (async) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) (async, rerun: 64) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff"], 0x15) (rerun: 64) 15.301221485s ago: executing program 32 (id=964): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) fadvise64(r1, 0x8000000000000001, 0x1, 0x3) (async, rerun: 64) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 64) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0xfbf, @empty}, 0x1c) (async) listen(r5, 0x0) (async) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) (async, rerun: 32) close_range(r4, 0xffffffffffffffff, 0x0) (async, rerun: 32) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) recvmsg$unix(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)=""/1, 0x1}, {&(0x7f0000000200)=""/121, 0x79}, {&(0x7f0000000300)=""/83, 0x53}, {&(0x7f0000000280)=""/40, 0x28}, {&(0x7f0000000400)=""/132, 0x84}, {&(0x7f00000004c0)=""/124, 0x7c}], 0x6, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x10100) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2204880, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x12000, 0x0) (async) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) (async, rerun: 64) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff"], 0x15) (rerun: 64) 3.388501073s ago: executing program 1 (id=1210): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110b0000000000063514800000000009500090000000000827573595f16aaba19dee4850fad9dc34ae0ec78734eb5ff8c80d4457498c5a7b0c59abd315c61996d140187d64787b68c0a1b3e361a405ed57dc367c33abfd46e35"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x400200, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) 3.38747631s ago: executing program 1 (id=1211): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="500100001a00010000000000000000007f0000010000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000000000004d433000000e000000100000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000ffff0000000000000000000000000000e388000000000000000000000000000000000000000000000000000040000000000000000a00000300000000000000005d001400636d61632861657329"], 0x150}}, 0x0) socket(0x10, 0x803, 0x0) socket$inet(0x2, 0x1, 0x0) syz_io_uring_setup(0x680d, &(0x7f0000000300)={0x0, 0x1003, 0x400, 0x3, 0x4156}, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000080), 0x8182, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x220302, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) fsopen(&(0x7f0000002080)='sysfs\x00', 0x1) fanotify_init(0x1a, 0x800) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, {0x2, 0x0, @local}, {0x2, 0x4e24, @remote}, 0x75, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x4, 0xb, 0x6}) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r6, @ANYRESHEX=r1, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48881) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) 3.282795084s ago: executing program 1 (id=1212): ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f0000000000)=[0xfffffff2, 0x4, 0x0, 0x2, 0x8, 0x8b4, 0xe, 0x6]) sigaltstack(&(0x7f00000000c0)={&(0x7f0000000040)=""/93, 0x1, 0x5d}, 0x0) syz_usb_connect$uac1(0x4, 0xcd, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x3, 0x1, 0xc5, 0x0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xc8}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x303, 0x2, 0x2, 0xff}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x1, 0x9, 0x9, "80bd"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xfffd, 0x4, 0x4, "3dba62197e1af6"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x6, 0x8, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x3, 0x17, 0x10, {0x7, 0x25, 0x1, 0x80, 0x99, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x3, 0x9, 0xe2, "7f", '\\'}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xb, 0x7, 0x7, "b645e4c4"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x22, 0x3, 0x9, 0x34}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x2, 0x6, 0x3, '\b'}, @as_header={0x7, 0x24, 0x1, 0x3, 0x9, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x2, 0x9, 0x3, {0x7, 0x25, 0x1, 0x1, 0x3, 0x8}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0x6, 0x9, 0x9, 0x20, 0x4}, 0xa4, &(0x7f0000000240)={0x5, 0xf, 0xa4, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0xb9, 0x2, 0x8, 0x2, 0xff}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x3, 0x1, 0x5}, @generic={0x8a, 0x10, 0x95c7fc7e337a1585, "45f55ddc5e52edcd1915ee606ec7f3e4e7ee7e1b37b01c19dddd725273b5d87cf7d0c2f0b52b3750c60f7551f430ebd732bda0b74fd96d9b3be5e8367451e50b510f5575de69dd15f975bb658c137d357f123269c6848cb272cb225059430c4f127c4b1514712cf742a3f9018d5acd0a995a25e8af78315df63687fbdd522feb09b783d99b227d"}]}, 0x9, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc1a}}, {0x13, &(0x7f0000000380)=@string={0x13, 0x3, "7a83384991033122bfc1a4e02ab397fdb7"}}, {0xe3, &(0x7f00000003c0)=@string={0xe3, 0x3, "7ce6af60684c53ff62ba0e62f058f0a242f1aca6cc656f70c90412e117527c1352d4a3b5b6d8f07c0a15d63eb7f820a51d1f49ec99f55bd77f6ff965ac4be9f3d19611af39ebf83368eed54978a4c6daf19fa9ffc3a56f53c65547816f5e64b2fced290ac69b66d30ac580815db8af5e5b5e4835e5ea4bdb7782ddba9f3d8ef6391c4ae5e9beaef3adee2dd41557c69aa10ee1ff34d45087ffa08660f5b179017869da692cc0023525d81e9f389f93f2150e03e0b0e746e06be4cfa3a759660eb89d0e755998f9d517d71a134691391013ee5e557831f24e43ef51f511840d5eb0"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xc0b}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x801}}, {0xdb, &(0x7f0000000540)=@string={0xdb, 0x3, "eac97d7b38d75ed00c262eaa43a36253307ca1c95d085e23d643925dca28f8c4220df91d152ed7f097127ee585d654410f4cad3e8b4b0cfbf4d1d8a1b3d9a7768b57c694c220960d9b0efb49ac7aafeecf111fbd0c44a4f494b86c30445860076200f193a2dd1656dfd19f6a6fff51cf53a55f66713a50918ea5d2a259dacee70e2735635436ed4d08ff3397717af9a4757ead6b8322c9b53bdc0821709e52e477b2d4fbce0f66d0513ae12130cd378c4f6619054fea00cb476dc6b7c77fadd04f3bc77e0d009277d9048c1e18600360be495721165d32e306"}}, {0x66, &(0x7f0000000640)=@string={0x66, 0x3, "cf4a9c264c6b07767d1143d08f15a4519f8d8929d88869636a18afbfea28f3a37af6677391067fc8c4e0e3b577d07dfbe1cb6ab6ebced57be4aee2897143beb5d05a96d475a356b7d569bd30687b0d425a56ba5895f4fa675ec3f94f955881a754d42be6"}}, {0x21, &(0x7f00000006c0)=@string={0x21, 0x3, "68830931a4983224fe0205dafede5324c82f5bcfa02ad62e46eb87fe574999"}}]}) syz_usb_connect(0x1, 0x2ce, &(0x7f00000007c0)={{0x12, 0x1, 0x250, 0x5d, 0xa7, 0x2a, 0x10, 0x102c, 0x6151, 0x8e3e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2bc, 0x1, 0x4, 0x5, 0x40, 0x40, [{{0x9, 0x4, 0x3d, 0x2, 0x6, 0xc2, 0x76, 0x89, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x804a, 0x3}, [@selector_unit={0x6, 0x24, 0x5, 0x5, 0x7, 'W'}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x301, 0x6, 0x2}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x5, 0x0, "be"}, @extension_unit={0xc, 0x24, 0x8, 0x2, 0x9, 0x3, "cd3ae365e2"}, @mixer_unit={0x8, 0x24, 0x4, 0x4, 0x9, "badaee"}]}], [{{0x9, 0x5, 0x2, 0x0, 0x40, 0x3, 0x8, 0x1, [@generic={0xce, 0x22, "e0adff919d450b4ea67908c60e57ac63cff5621552a9ccd93efc672b66adeabfa8f8b22a0fc87f8113d63d2331ee5d0513438c295ec38d505c5fa8bcf7646da2e2fd765c79d0ba8e7711c284176ac671fe4225207f6781a412c2c5ea42743ed20e6121c1e231c279270ef2817719689b97473cbb208a332cf19e5b62ab53b87dd1996d7133bac4df9e29b6eac9291066a9a4176f74a340fd59c3b4442ba28b12d267201661dfcb32115b240a67ee09b9abeb0308b1fa90078719285a8e480871dee610bdee300cc5c971299f"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x9}]}}, {{0x9, 0x5, 0x1, 0x3, 0x400, 0x9, 0xe, 0x2}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0xfa, 0x5, 0x8, [@generic={0xa0, 0x5, "0ae32175ce42d457726f587dc53ad25806c1470e1b25ba3ca4da7d95c5b34d578ebaeb06ba60a0c4c814e7bf323930a71335117a28cce8af2558cd16d266ae89df6f857d66001ff3a697f94b65f03660da852d6e4ba6e26b418620c3e80bc0577b32bbb0d3e908c66e7583a6a8898a768abf7c3def6b8dfa68f13032a41ca6cb32a90f3255a27b3688143343da2ab8b6481157aa5dfd138d1cbefa124545"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x8, 0x0, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0xff}]}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x2, 0xe, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xaa, 0x3}, @generic={0xb6, 0x1, "186f1af56538dc1e6995aead96afb7f51322200c2792a57edd2acacf1455bce9a2183e2e33c805ecda580b4fdb1d6b95e8436a1e97949f64aa0dd9fc4c5397d44733f8e5ea1e47b6e1aa924e8b71c56b01ed3394b78db6c179f9c7a0be5ca8939ac47e3d7a7b3254cce8300b75afdea12bd5be6cc78107ae4ae054711e83335e064e4dd0881857db175e57a5e4ecb9eb84551bcb831d4824ab1fc53d4a240f26c3a3be46952dd17fdaf2309b3db3364a2e2729a9"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x4, 0x2, 0xa8}}]}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x201, 0x63, 0x2, 0x98, 0xff, 0xa}, 0x19, &(0x7f0000000b00)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xc, "09978b0a2817dae8d850c6d8e0e23cd2"}]}, 0x5, [{0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x22, &(0x7f0000000c00)=@string={0x22, 0x3, "07ff1247f3b59b015b9c90c2ad517fa51e0aae9dc5603a57078064a0f9202fc1"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4}}]}) sigaltstack(&(0x7f0000000dc0)={&(0x7f0000000d00)=""/156, 0x6, 0x9c}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) ioctl$KVM_CAP_STEAL_TIME(r0, 0x4068aea3, &(0x7f0000000e00)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001200)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000ec0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELCHAIN={0xe8, 0x5, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_USERDATA={0x45, 0xc, "a7847cdcd706beb7fcae489074e1b82f4d915f48ee41b43d168e35951081fa1648a615ace472d2ba928a53f186a11c30ac896c06be698329f05e03f7dcd5bbb6f6"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x90620ec}]}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6d}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xcd1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff9}]}]}, @NFT_MSG_NEWTABLE={0xfc, 0x0, 0xa, 0x101, 0x0, 0x0, {0x4}, [@NFTA_TABLE_USERDATA={0x29, 0x6, "b9e4f4562daa875ee6c65a2f356e77684d0eff75c3e2a1fe763e5dd176c3d3411ed9c336b3"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0xaa, 0x6, "2ad6f0c0fb51650ce37b6d969ed91e4fe0a83936fcdb3f9d605f3771749484e3e00a136d24bd74048a56bf737e0fa80d51253978d1348ccbfbb3a7391721a6b5226ae888751ba56a7a01873f24d098942b91a6be85edc2785a771c8c0e94c08c764dc6144ca7fbdd80b057abf7ac0421e5c8722514135e90eb39209823bdfc4037be8ebfa2e7455b2d690d83007d954581af13f94c0df8061922b16b8e98fffa091ad70a6f24"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x44, 0xe, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELOBJ={0x84, 0x14, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x63, 0x8, "0f28b740f33e4c7a245da73a52a801f0416057992cdc5f0eb1a4f34f5165f34b8228c7c113fe8d180e022ab1116c0551f3ac2831fe3587b444794c5adf371ecddb032d978daac2a3a441878c966c2af88c6db03a43e1fee933a63d1674fc92"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x2f4}, 0x1, 0x0, 0x0, 0x4000004}, 0x4040) r2 = syz_open_dev$audion(&(0x7f0000001280), 0x8, 0x589004) syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000012c0), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000001300)=0x8) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001340), 0x6a2402, 0x0) read$watch_queue(r4, &(0x7f0000001380)=""/128, 0x80) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001440), r4) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x24, r5, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x6}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000001540)=0x0) sendmsg$nfc_llcp(r4, &(0x7f00000018c0)={&(0x7f0000001580)={0x27, r6, 0xffffffffffffffff, 0x7, 0x60, 0x2, "ea1747400ab77566808bff2aa131162bd812cffd0e2c17c9a9566a6481a4c2e117d9d7b41c7451eb535a205f29301a1fddad66652021f74d98223cda5cc76b", 0x3f}, 0x60, &(0x7f0000001780)=[{&(0x7f0000001600)="686ecb32c4f643c6f240a6b8d11e846f535417394b754e12d9f4aea159e5e8bee31d2b013a96d8d1bd08c06ec8d660148409d2fa7286a31cf268ca75dd7c67f32468be91b8a1643a3c34b7a2f34c92d36961387c7f4e2ad033f4ce86cc5bce1a08039c402e4313ee58301d1bed80ae529232efeb5429f388a532cc92f36cbaf67bafb4d3a9819b06079ed3ffc51f5b68eec4fc81582287227c56a3547d64a32dc09e43fbaa6bfe54aff14c0dd0a14bead31cdc8290b347ac8e8eb9dc59af44f96e4d507c7cdec4707208edfd1bc5044b85806935f8b416fc949cd6d96c4e97f2f11710ecdaa44688ee5f554fd487005e759e2cad39af74", 0xf7}, {&(0x7f0000001700)="a1936832f437c91196dd914ea8dc9a34d5fb84be394a4f0e5a1c89678d5351ad553c96bf53621ee8c3f5337ee16cb8cc9b04a0d247a6b3eee77ad8b37cd930e7e2e76a6b7498c096aa2d", 0x4a}], 0x2, &(0x7f00000017c0)={0xd8, 0x109, 0x6, "c50b1fbdce6672f475666dd62d59850fe133881746d576cae441e7c91c5ea00a934c2648fa99c40e80c96371c8ca7ae92158b266325d90ac93de21720218a1fefdda73d22df0087268efa6ca1ce2853d773ec659363161e54834b22fb0f7fec4b79cef623cf97ed56f1c5f4747a189a252d65be6ea1d23cacbbe95a982f0e81d14e05b0de6dab5ec063aa5fca31eeb26d1175b7c9362f178619d9f161ff3d3e38cebd23b8bd7ba0af79d2046f6ca0bcbd504e45dcd1f7cef34ca8b41d638ef301b40"}, 0xd8, 0x4000010}, 0x4000000) sigaltstack(&(0x7f0000001940)={&(0x7f0000001900)=""/1, 0x0, 0x1}, 0x0) sendmsg$802154_dgram(r4, &(0x7f0000001a80)={&(0x7f0000001980)={0x24, @long={0x3, 0x3}}, 0x14, &(0x7f0000001a40)={&(0x7f00000019c0)="d1602b4a32cdf80c01e1a8236a88ae4a9c30913de3b3112c65341b1f3ef5b1c9d863f96cd38d95e84fbf92e240af051d8328be4e60ded26b811741382b4728dffef2f45224", 0x45}, 0x1, 0x0, 0x0, 0x240040d0}, 0x80) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000001ac0)={0x1, {0x2c, 0xfff, 0x7, 0x1000, 0x9}}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, &(0x7f0000001b00)={0x4}, 0x4) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000001b40)={0xefe, 0x8, 0x1, 0x0, 0x1, [0x990, 0x8, 0x80000001, 0xcf6]}) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001b80), 0x2, 0x0) read$FUSE(r8, &(0x7f0000001bc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000003c00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r9, r10}}, './file0\x00'}) quotactl_fd$Q_QUOTAOFF(r4, 0xffffffff80000301, r11, 0x0) 2.113297916s ago: executing program 0 (id=1225): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x114c, r3, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x1464}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x100, {0x1, 0xa, 0x8000, 0x4}}}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x7, 0x0, {0x4, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x300, 0x7, 0x7}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x20, 0x2, 0x1, 0x0, {0xb140, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x8, 0x1, 0x6}}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xbb, 0xfa, "b3d559ef58a48a2fdebad135ad0361d2a735b248d44131865ab9b6bf91f10d1d6ca3ca88e0e4fc98889b294032b284753710181ca7cb50811eead56d1bf0235399a243fb245d4a7e31e9e29255fe1c3759ddfe0a56d3e031a2979613a36a1ba266a360e95d449f497e89f1f6d046819178660461ac956dc0bc92c511e5e213ea64d0775c8af5a56ac5c4dbc606209af6e0420bd0a235b372fd1365e9a0e1c49533b1d775855841566e672474c0bed4b2bd9ed3e24d644a"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "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"}], @NL80211_ATTR_USE_RRM={0x4}]}, 0x114c}, 0x1, 0x0, 0x0, 0x90917af8f5f3d3a5}, 0x20000040) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB='\t\x00\x00'], 0x20}}, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000001580)={0x3ec, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x2}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x5}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}, @NL80211_ATTR_IE={0x22a, 0x2a, [@perr={0x84, 0x134, {0x91, 0x12, [{{}, @device_b, 0x8, @void, 0x2}, {{0x0, 0x1}, @device_a, 0x6, @value, 0x1c}, {{0x0, 0x1}, @broadcast, 0xd7, @value, 0x10}, {{}, @device_a, 0x35, @void, 0x35}, {{0x0, 0x1}, @device_a, 0x8, @value=@broadcast, 0x26}, {{}, @device_a, 0xc, @void, 0x28}, {{0x0, 0x1}, @broadcast, 0xf85, @value=@device_b, 0xf}, {{0x0, 0x1}, @device_b, 0x17, @value=@broadcast, 0x22}, {{0x0, 0x1}, @broadcast, 0x4, @value, 0x17}, {{0x0, 0x1}, @device_a, 0x2, @value=@device_b, 0x15}, {{0x0, 0x1}, @device_a, 0x575f, @value=@device_b, 0x3e}, {{0x0, 0x1}, @broadcast, 0x3ff, @value=@broadcast, 0x7}, {{0x0, 0x1}, @broadcast, 0x4, @value=@device_b, 0x29}, {{}, @device_b, 0x3, @void, 0xc}, {{}, @device_a, 0xfffffe01, @void, 0x2e}, {{}, @device_a, 0x3ff, @void, 0x1}, {{0x0, 0x1}, @device_a, 0x603, @value, 0x2c}, {{0x0, 0x1}, @device_a, 0x7, @value=@device_b, 0x28}]}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @prep={0x83, 0x1f, {{}, 0x3, 0x8, @device_a, 0x400, @void, 0x7, 0x6, @device_b, 0x1}}, @fast_bss_trans={0x37, 0xa5, {0x7f, 0x2, "850765a5d7e1386b1f50b7ee475d350f", "cdcd0a9b18da315ef7a74497da117a05215fe0721a9b78e98ae1b58697fe1dd4", "7a5566cc74477b82cd5ecb5f02dbeb16b86ee60d0fde4c1e14ad8a3610e3022e", [{0x2, 0x28, "06608b81cbcaa31cdcabb40b62fd351962be56e23f33569da39a3ce27591aadff22128a0933390d5"}, {0x1, 0x27, "f9e79ce8e585d0ca5839af915b286b7a667e894dfdf74f0a2b6c5106231abce823f7a956d0ddac"}]}}, @ht={0x2d, 0x1a, {0x30c, 0x3, 0x4, 0x0, {0xa, 0x8, 0x0, 0x3f2, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x400, 0x9, 0xff}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0xc}}]}, @NL80211_ATTR_IE={0x17f, 0x2a, [@measure_req={0x26, 0xbf, {0x81, 0x1, 0x4, "8056e99494894878ea69ceafe420703160a6d689a9ddaec0220a4178b17e87f48cd7e7631699e91ea06f9e9ee358ce2e8ca4dfe8cf1816eed253279d1bcc0a2e4c249b316e78bae2a0403da108da54ecad7cf074ad158e4d21dc96ddbbcfacc1eb6da4e806767aa6a0e33da19dfe3470a6938c5ace4f2e36ede99f14c8960654d9dd6bc98858cc7d5ec9e445e1ea4f7576ca1758ed08c449c485ede9af8f7446f7d57dd3b7841ece2ee653b493cb86e07b697688c43e3226fc555a3a"}}, @rann={0x7e, 0x15, {{0x0, 0x10}, 0xb, 0x7, @broadcast, 0x49, 0x400, 0x1}}, @cf={0x4, 0x6, {0x1, 0x0, 0x0, 0x4}}, @fast_bss_trans={0x37, 0x99, {0x9a, 0x3, "2bd3158503968d68c22331c79427e124", "a223aa496076f37cfb82ac66c736691cf849390b94222e3815851161c6fcb991", "15b61921b0b79a8d8e7fcaff8887fdfbe13274bb307995655c079e60dce59726", [{0x4, 0x4, "3269fd88"}, {0x4, 0x1d, "ca45aad144447e79841390de4f99b4b5fa6182bf0b30b444af81620b00"}, {0x3, 0x20, "f5734678e0f13096e23b06bb98ceb05a3bb5b38f03dff8757c0d54fb7bef7ee7"}]}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xd1}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x8080}, 0x8840) 2.042873108s ago: executing program 0 (id=1226): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf25000000060048005d0000000600480024000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000054}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xa6b6f99f812745f4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000003", @ANYRES16=r2, @ANYBLOB="000425bd7000fedbdf250d00000008000100020000000c0006000100000001000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r3 = semget$private(0x0, 0x3, 0x17) semop(r3, &(0x7f0000000300)=[{0x1, 0xff00, 0x3000}, {0x0, 0x7, 0x800}], 0x2) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$uinput(0xffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000000)={{0x0, 0x85e2}, 'syz1\x00'}) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="1f0000dfffffff000000010000000400030004000180d40b4800b21e14f2d4996ddf9a2dd87dc3d438694b37bffd6d57e6d64787cf4427be98557004243c5d9587dc11462e2f1a415473e7ee0a27f82a834769b63bccc9f3f64db650397e74cf4fbbdc60794e27b3dde2dd58a96f05c7479f3a3405f618fb37c5fac4fc33776ba2bd81f33cd5d8024b707072aad39d27a757a98b9334ac24cb037e730057202e81d7fbab7000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20040800}, 0x20000011) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f00000000c0)=0x81) read(r6, &(0x7f0000000140)=""/95, 0x5f) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1d, 0xf, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b0300000000006c1d0010047e0c8131a6080c000af32c6e020075f800250002000f00e5aa000017d34460bc24eab556a705251e", 0x3a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x1000, 0xfffffffc, 'syz0\x00'}, 0x2, 0x40, 0x5, 0x0, 0x0, 0x1000, 'syz0\x00', 0x0}) semctl$GETNCNT(r3, 0x1, 0xe, 0x0) syz_open_dev$dri(&(0x7f0000000340), 0x1, 0x426803) 1.943403683s ago: executing program 3 (id=1227): r0 = socket$inet(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x204000, 0x0) fcntl$getflags(r1, 0x403) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}}]}, 0x8c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x3) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x0) write$nci(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="500403"], 0x7) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0xc0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xb, [0x5, 0xf, 0x10, 0x3, 0x2, 0xa, 0x0, 0x0, 0x4, 0xb, 0x11, 0xb, 0x4, 0xf, 0x6, 0xd], 0x1, [0x0, 0x1, 0x0, 0x0, 0x7f, 0x43f, 0x2, 0x6, 0x9, 0x1000, 0x4, 0x3, 0xfff8, 0x5, 0xa, 0x3dd], [0x2, 0x7, 0x5, 0xfffa, 0xf, 0x1, 0x7, 0x23c, 0x7, 0x4, 0x7, 0x7f, 0x5f94, 0x6, 0x9, 0xf42]}}]}}, @qdisc_kind_options=@q_cake={{0x9}, {0x28, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x100000000}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x3}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0xc0}}, 0x44800) 1.891823966s ago: executing program 3 (id=1228): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010003704000000000000000000000000266d8d7e30797939", @ANYRES32=r1, @ANYBLOB="83040500000000002c0012800e000100697036677265746170000000180002800400120008001400f8ffffff06000f00149e0000"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r2 = socket$inet(0x2, 0xa, 0xffffffff) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1.89040762s ago: executing program 3 (id=1229): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f0000000180)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x100080, &(0x7f00000001c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x39, 0x63, 0x36, 0x38, 0x31, 0x63, 0x61, 0x61], 0x2d, [0x0, 0x0, 0x66, 0x39], 0x2d, [0x38, 0x31, 0x32, 0x64], 0x2d, [0x66, 0x5d, 0x32, 0x35], 0x2d, [0x63, 0x55, 0x38, 0x31, 0x52, 0x38, 0x68, 0x31]}}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@seclabel}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r6 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f4929}], 0x1c) listen(r6, 0x100) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r7, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000008400000007000000ac"], 0x18, 0x48d5}, 0x8050) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0x7, &(0x7f00000002c0)=[{0x6, 0x2, 0x45, 0x7}, {0x1, 0xa, 0x2, 0x3}, {0x7ff, 0x6, 0x10}, {0x2, 0x11, 0xec, 0x2cc}, {0x8, 0xdb, 0x1a, 0x1b4e}, {0x80, 0xff, 0x2, 0x40}, {0x8, 0x82, 0x0, 0x9}]}) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="28030000000000000600000000000000000000000000000001000000000000000200000000000000030000000000000002000000130b00000200000000000000463800000000000006000000000000000900000000000000070000000000000004000000000000000100000040000000010001000040000008000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="9500000004000000000000000600000000000000310000000000000002000000090000006664000000000000030000000000000003000000000000000100000000000000000000000000000001000000040000000600000000000000fffeffffffffffff050000000000000002000000000000000100000000000000090000000000000000000000090000000104000000800000ffffffff", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="02000000c3630000000000000300000000000000800000000000000003"], 0x0, 0x0, 0x0}) getdents64(r8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp}, 0x20) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.385964169s ago: executing program 4 (id=1232): pipe2$9p(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RLOCK(r0, &(0x7f0000002380)={0x8, 0x35, 0x2}, 0x8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000023c0)='/proc/cgroups\x00', 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) (async) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000002400)=0x1, 0x4) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRES32=r5, @ANYBLOB='\b\x00\r\x00'], 0x70}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) (async) utime(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)={0x9, 0x3}) (async) sendto$packet(r3, 0x0, 0x0, 0x15, &(0x7f0000000400)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x6e) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x2) (async) read$FUSE(r1, &(0x7f00000002c0)={0x2020}, 0x2020) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000000)={[{@inode32}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) getuid() (async) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000001180)=0x2000000) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x80400) (async) close(r2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) (async) r8 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2e65) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r8, 0x80184151, &(0x7f00000000c0)={0x0, 0x0}) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002300)=ANY=[@ANYRESDEC=r0], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) ioctl$VHOST_VDPA_SET_STATUS(r1, 0x4001af72, &(0x7f0000000000)=0x3) 1.322204763s ago: executing program 4 (id=1233): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0xe23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="e0", 0x1}], 0x1}, 0xc001) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/4096, 0x1000}], 0x2}, 0x10000) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e7", 0x20, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r6 = dup(r5) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) timer_create(0x7, &(0x7f00000002c0)={0x0, 0xd, 0x0, @thr={&(0x7f0000000180)="50fb532813f4f9ec4dfea39d2f59fae5686ca803cba2d7d3a98eeb692e510e004d6ad28eb58c537d28f64725208cf0a0c351bbfc68af020f24d7b137d9ec1095eeb5cbdd41fa00c95b8ba723b10bd83670172ac4a64bce76b238e4d780cdaea3de5b85cb3fa8418a1899523ed2c609f8b6c641", &(0x7f0000000200)="7fc18f29444c1dcd45990e34e33dbcadd5b6f4b06d8654044b83fc9450c8cc7a17a0561d83d54cc16169d1359b4da65801020318c57d4cdfe32ef1dd5011a8af5c4e9b343b2e66a8fc09ee1ec1c11dab43cd1b24f143c99d6c850b2811625201ccae9c6c28f6e2cf58ac0a7800fbcb1f869a6498868e0b5ecc6d8e10634643fc52e3053279fedefaa6cda1ce05364dd4"}}, &(0x7f0000000300)) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000340)={0x1, 0x0, [{0x8ba, 0x0, 0x1}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) read$FUSE(r4, &(0x7f0000002040)={0x2020}, 0x2020) 1.320821692s ago: executing program 3 (id=1234): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x224, 0x52000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}}, 0x8000) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) io_uring_setup(0x2519, &(0x7f0000009a80)={0x0, 0xf14c, 0x800, 0x0, 0x212}) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYRES8=r0, @ANYBLOB="ee"], 0x2c}}, 0x20008000) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="020b00b5ea9edc00"], 0x18}, 0x1, 0x7}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r6 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x801070cf, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270000000000080001"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r10, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) 1.173326726s ago: executing program 0 (id=1235): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fffffffffffffff, 0x2) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x3, 0x0, &(0x7f0000000080)=""/195, &(0x7f0000000180)=""/204, &(0x7f0000000280)=""/183}) 1.107704264s ago: executing program 0 (id=1236): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e079c0814"], 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x4000890}, 0x20008040) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x4e21, @empty}, {0x1, @random="9b499754bb98"}, 0x2c, {0x2, 0x4e20, @empty}, 'lo\x00'}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket(0x10, 0x80000, 0x5) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4004) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe1f, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x4}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x158, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x0, 0x4e24, 0x2, 0x2, 0x20, 0x20, 0x73}, {@in=@rand_addr=0x64010102, 0x4d2, 0x32}, @in=@local, {0x4, 0x6, 0x0, 0x40000000000004, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f, 0x4000000}, {0x0, 0x8, 0x4}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0xfe, 0x5c}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x60, "82875676a015709e040000002389825596cb68e50661050000004a"}}]}, 0x158}}, 0x81c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10005, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r6, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f00000022c0)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0xffffffff81a00000, 0x13, 0x0, 0x87, 0x1, 0x0, 0x0, 0x10, 0xfffffffe}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ecbf91fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31f7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440c06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a40ec93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2913d59dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df701cfcbe72dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a31f911030569722f0c67e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c594ce3a2300e5a7d712773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49672b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0x8, {0x3, 0x0, 0x20, 0xfffffffffffffff9, 0x80000400, 0xc, {0x1, 0x9, 0x10000, 0x1, 0x1, 0x9, 0x8, 0x3, 0xdab5, 0xa000, 0x0, r8, r9, 0x4, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r6, &(0x7f00000001c0)={0x2020}, 0x2020) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)) 996.615256ms ago: executing program 3 (id=1237): close(0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000300)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0xfffffffffffffc7d, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x10) recvfrom(r3, &(0x7f0000000180)=""/60, 0x3c, 0x40000060, 0x0, 0x0) 873.029201ms ago: executing program 0 (id=1238): r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x50) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0046686, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0xb, 0x0, &(0x7f0000001740)) r4 = open(&(0x7f0000000040)='./file0\x00', 0x12ed02, 0x80) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="284740a481cb71f3640b2e290c4d6d46dbab00e8518a9105e500000001b1d8d852ff98", @ANYRESDEC=r6], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r7 = openat$cgroup_ro(r4, &(0x7f0000000340)='memory.swap.events\x00', 0x26e1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000680000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r10, r9, 0x25, 0x8, @void}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r5, r9, 0x25, 0x8, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x0, @val=@iter={0x0}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0x11, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x100004d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff00, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x8005, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xe, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x2, 0x6, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0xffffffff, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x402, 0x80, 0xfffffffd, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x9, 0xf9, 0x607, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0xfffffff9, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0x4000ff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x7, 0x4, 0xe, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffbf, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x7, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x5, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x35, 0x800082, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1fd, 0x3, 0x7ff, 0xbe, 0x4, 0xfffffff8, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0xc, 0x80a2ed, 0x3, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa61c, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x9, 0x9, 0x3, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x5, 0x7, 0x5, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, &(0x7f0000002880), 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000023000004"], 0x0, 0x26}, 0x28) clock_adjtime(0x17, &(0x7f00000001c0)={0x4008b8d, 0x40, 0xb, 0x0, 0x8, 0x1, 0x0, 0xfffffffffffffffd, 0xc4ed, 0xffffffffffffffff, 0xf423f, 0x0, 0x8, 0x1, 0x0, 0xe5a, 0x6, 0x5, 0x3, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x400000}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000080), &(0x7f0000000100)='%pi6 \x00'}, 0x20) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f737761702c6d706f6c3d696e7465726c656176652c0081c219611c4b4f9c4d72d52aff481b480a914f16d67b41413669a8b67ed523cf947c80f8538d19a0432e873fc086136bd6ff2d73a78a971ef427a2e1238c1f07e1ce87975935251943f09be830411c26008712507bd2f376e85304256f295d7e8fe6fae9bd70d286acc3f6c5181f598725997e8e776516623d3fe9d49080878f"]) 373.446184ms ago: executing program 4 (id=1239): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x18, 0x140e, 0x3fca440fc5d735f5, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c818}, 0x4) fsmount(r0, 0x1, 0x0) (async) r2 = fsmount(r0, 0x1, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000000)={0x3, [0x46e, 0x4, 0x100]}, &(0x7f0000000040)=0xa) (async) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000000)={0x3, [0x46e, 0x4, 0x100]}, &(0x7f0000000040)=0xa) 293.646277ms ago: executing program 4 (id=1240): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbfd}, 0x42}, 0x1, 0x0, 0x0, 0x2000c054}, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_TSC_KHZ_cpu(r3, 0xaea3) 292.869491ms ago: executing program 1 (id=1241): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f0000000000)) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) accept4$alg(r3, 0x0, 0x0, 0x800) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r7 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000040)) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_STEREO(r8, 0xc0045003, &(0x7f00000000c0)=0x1) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000007, 0x12, r8, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r8, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_STEREO(r8, 0xc0045003, &(0x7f0000000200)) r9 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS32(r9, 0x806c4120, &(0x7f0000000180)) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x820}, 0xbeac2f2f31c3adbe) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r10, 0x0) 233.259018ms ago: executing program 4 (id=1242): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x42200, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'trylock', ' ', 'io+mem'}, 0xf) write$vga_arbiter(r0, &(0x7f0000000480)=@other={'unlock', ' ', 'none'}, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f8666f2a665f0ff0f0fc73666ba21003e0f01c5c4c1ed665a0aa00f06ea009000002c00c4c1b81516", 0x29}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc242, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x403, 0xfffffffc, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}}, 0x20}, 0x1, 0x0, 0x0, 0x400cc54}, 0x0) 113.420932ms ago: executing program 1 (id=1243): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) connect$nfc_raw(r1, &(0x7f0000000100)={0x27, r2, 0xffffffffffffffff, 0x3}, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r4, 0x4, 0x4400) r5 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bond_slave_0\x00', 0x10) (async) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r6 = socket$kcm(0x2, 0x2, 0x73) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x2c, r8, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x24008040) (async) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x160, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "47544e56d72f55fe3ff7732d9b23fad9046edb9c78a76c84"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e4dc965c0fa2ad8b6bf212e53f75c7a7bc695c5f7b412c5f"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "17d7f7c4f0b3a26a2628f3143a3a3c96fd90414576c83db0"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x160}, 0x1, 0x0, 0x0, 0x801}, 0x4006040) r9 = socket$inet(0x2, 0x2, 0x1) bind$inet(r9, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) (async) r10 = socket$inet(0x2, 0x2, 0x1) (async) r11 = socket(0x2, 0x2, 0x1) bind$unix(r11, &(0x7f0000000000)=@abs, 0x6e) (async) bind$inet(r10, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) (async) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/input/devices\x00', 0x0, 0x0) r12 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r12, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) (async) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010028bd7040010000000f00000005002a000000000008000300", @ANYRES32=r14, @ANYBLOB="08002b000800000005002f00000000000800320005000000050029"], 0x5c}}, 0x18) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001004060528bdebccd6ed6f1da6fe7b1d70000090b484c893de09353cc98ca6a5704300000000005606c4", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800500170001000000"], 0x3c}}, 0x0) 113.173915ms ago: executing program 3 (id=1244): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0xd) ioctl$FIONREAD(r8, 0x541b, &(0x7f0000000080)) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r9, &(0x7f0000000380)="c1858aec1d0a06756f6608f23687", 0xe, 0x24080000, &(0x7f0000000240)={0x11, 0x19, r6, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r11, 0x4048aec9, &(0x7f0000000980)={0x0, 0x0, @pic={0xff, 0x8, 0x43, 0x2, 0x1, 0x2, 0xdf, 0x6, 0xb6, 0x8, 0x93, 0x4, 0xa, 0x8e, 0xaa, 0x4f}}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) 112.842494ms ago: executing program 1 (id=1245): sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x2b, 0x4, 0x7) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000100)) syz_usb_connect$uac1(0x2, 0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100300000010"], 0x0) 1.557637ms ago: executing program 4 (id=1246): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1, 0xd, 0x3f}) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_getnexthop={0x64, 0x6a, 0x2, 0x70bd28, 0x25dfdbf7, {}, [@NHA_OIF={0x8, 0x5, r2}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r2}, @NHA_ID={0x8}, @NHA_OIF={0x8, 0x5, r2}, @NHA_OIF={0x8, 0x5, r2}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_MASTER={0x8}, @NHA_OIF={0x8, 0x5, r2}, @NHA_FDB={0x4}, @NHA_FDB={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x11) 0s ago: executing program 0 (id=1247): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x84880) r2 = gettid() rt_sigqueueinfo(r2, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) newfstatat(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', &(0x7f00000011c0), 0x800) r3 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast1, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0xf3a, 0x0) write$binfmt_misc(r9, &(0x7f0000000980), 0xfdef) splice(r6, 0x0, r9, 0x0, 0x81, 0x2) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r10, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r10, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x1095, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x11e, 0x2000, 0x0, r11, r12, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(0x0, &(0x7f0000000000)=0x0, 0x0) setregid(0x0, r13) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000001240)={'\x00', 0x8, 0xb7d, 0x8, 0x9, 0x1a1}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000012c0)={0xfffffffd, 0x6, {0xffffffffffffffff}, {}, 0x5, 0x2}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001300), &(0x7f0000001340)=0xc) openat$autofs(0xffffffffffffff9c, &(0x7f0000001380), 0x42080, 0x0) getpgrp(0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000013c0)={{{@in6=@mcast2, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, &(0x7f00000014c0)=0xe8) r14 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r14, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) kernel console output (not intermixed with test programs): .402588][ T40] audit: type=1400 audit(1769936653.376:432): avc: denied { create } for pid=6623 comm="syz.0.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 72.467000][ T40] audit: type=1400 audit(1769936653.436:433): avc: denied { unmount } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 72.507534][ T40] audit: type=1400 audit(1769936653.476:434): avc: denied { write } for pid=6623 comm="syz.0.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 72.609789][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 72.769777][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 72.773487][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.777622][ T10] usb 6-1: config 0 has no interfaces? [ 72.782076][ T10] usb 6-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 72.785711][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.788876][ T10] usb 6-1: Product: syz [ 72.790710][ T10] usb 6-1: Manufacturer: syz [ 72.792607][ T10] usb 6-1: SerialNumber: syz [ 72.797744][ T10] usb 6-1: config 0 descriptor?? [ 72.799847][ T6021] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 72.929758][ T6021] usb 7-1: device descriptor read/64, error -71 [ 73.002620][ T40] audit: type=1400 audit(1769936653.976:435): avc: denied { ioctl } for pid=6621 comm="syz.1.190" path="socket:[12890]" dev="sockfs" ino=12890 ioctlcmd=0x5507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.023743][ T10] usb 6-1: USB disconnect, device number 6 [ 73.066993][ T6635] batadv_slave_1: entered promiscuous mode [ 73.072395][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.194'. [ 73.095855][ T6635] team0 (unregistering): Port device team_slave_0 removed [ 73.102643][ T6635] team0 (unregistering): Port device team_slave_1 removed [ 73.174149][ T6634] batadv_slave_1: left promiscuous mode [ 73.189821][ T6021] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 73.329831][ T6021] usb 7-1: device descriptor read/64, error -71 [ 73.333692][ T6637] Bluetooth: MGMT ver 1.23 [ 73.335687][ T40] audit: type=1400 audit(1769936654.306:436): avc: denied { write } for pid=6636 comm="syz.1.195" path="socket:[11170]" dev="sockfs" ino=11170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.344361][ T6637] syzkaller0: entered promiscuous mode [ 73.346258][ T6637] syzkaller0: entered allmulticast mode [ 73.351126][ T5947] block nbd1: Receive control failed (result -32) [ 73.368057][ T6644] xt_hashlimit: overflow, rate too high: 0 [ 73.397241][ T6646] netlink: 'syz.0.199': attribute type 10 has an invalid length. [ 73.407167][ T6646] team0: Port device dummy0 added [ 73.414217][ T6636] block nbd1: shutting down sockets [ 73.439970][ T6021] usb usb7-port1: attempt power cycle [ 73.469404][ T40] audit: type=1400 audit(1769936654.436:437): avc: denied { append } for pid=6647 comm="syz.1.201" name="comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.472237][ T6650] overlayfs: failed to clone upperpath [ 73.609140][ T40] audit: type=1400 audit(1769936654.576:438): avc: denied { create } for pid=6655 comm="syz.0.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.615641][ T40] audit: type=1400 audit(1769936654.576:439): avc: denied { read } for pid=6655 comm="syz.0.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.799837][ T6021] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 73.802842][ T54] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 73.820341][ T6021] usb 7-1: device descriptor read/8, error -71 [ 73.949761][ T54] usb 6-1: Using ep0 maxpacket: 8 [ 73.954134][ T54] usb 6-1: config 0 interface 0 has no altsetting 0 [ 73.957060][ T54] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 73.961122][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.967924][ T54] usb 6-1: config 0 descriptor?? [ 74.059717][ T6021] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 74.080327][ T6021] usb 7-1: device descriptor read/8, error -71 [ 74.190336][ T6021] usb usb7-port1: unable to enumerate USB device [ 74.256646][ T40] audit: type=1400 audit(1769936655.226:440): avc: denied { mount } for pid=6697 comm="syz.3.204" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 74.378301][ T54] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 74.391424][ T40] audit: type=1400 audit(1769936655.366:441): avc: denied { append } for pid=6721 comm="syz.3.205" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 74.392124][ T6724] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.578417][ T6654] comedi: valid board names for 8255 driver are: [ 74.580668][ T6654] 8255 [ 74.582043][ T6654] comedi: valid board names for vmk80xx driver are: [ 74.584242][ T6654] vmk80xx [ 74.585604][ T6654] comedi: valid board names for usbduxsigma driver are: [ 74.587901][ T6654] usbduxsigma [ 74.588970][ T6654] comedi: valid board names for usbduxfast driver are: [ 74.591424][ T6654] usbduxfast [ 74.592523][ T6654] comedi: valid board names for usbdux driver are: [ 74.594629][ T6654] usbdux [ 74.595569][ T6654] comedi: valid board names for ni6501 driver are: [ 74.597620][ T6654] ni6501 [ 74.598572][ T6654] comedi: valid board names for dt9812 driver are: [ 74.601819][ T6654] dt9812 [ 74.602893][ T6654] comedi: valid board names for ni_labpc_cs driver are: [ 74.605143][ T6654] ni_labpc_cs [ 74.606303][ T6654] comedi: valid board names for ni_daq_700 driver are: [ 74.608496][ T6654] ni_daq_700 [ 74.609747][ T6654] comedi: valid board names for labpc_pci driver are: [ 74.611988][ T6654] labpc_pci [ 74.613067][ T6654] comedi: valid board names for adl_pci9118 driver are: [ 74.615315][ T6654] pci9118dg [ 74.616415][ T6654] pci9118hg [ 74.617466][ T6654] pci9118hr [ 74.618563][ T6654] comedi: valid board names for 8255_pci driver are: [ 74.620809][ T6654] 8255_pci [ 74.621878][ T6654] comedi: valid board names for s526 driver are: [ 74.624118][ T6654] s526 [ 74.625034][ T6654] comedi: valid board names for multiq3 driver are: [ 74.627141][ T6654] multiq3 [ 74.628153][ T6654] comedi: valid board names for pcmuio driver are: [ 74.630344][ T6654] pcmuio48 [ 74.631362][ T6654] pcmuio96 [ 74.632388][ T6654] comedi: valid board names for pcmmio driver are: [ 74.634420][ T6654] pcmmio [ 74.635341][ T6654] comedi: valid board names for pcmda12 driver are: [ 74.637404][ T6654] pcmda12 [ 74.638475][ T6654] comedi: valid board names for pcmad driver are: [ 74.640703][ T6654] pcmad12 [ 74.641726][ T6654] pcmad16 [ 74.642761][ T6654] comedi: valid board names for ni_labpc driver are: [ 74.644859][ T6654] lab-pc-1200 [ 74.646010][ T6654] lab-pc-1200ai [ 74.647161][ T6654] lab-pc+ [ 74.648175][ T6654] comedi: valid board names for atmio16 driver are: [ 74.650382][ T6654] atmio16 [ 74.651403][ T6654] atmio16d [ 74.652518][ T6654] comedi: valid board names for ni_at_ao driver are: [ 74.654715][ T6654] at-ao-6 [ 74.655750][ T6654] at-ao-10 [ 74.656835][ T6654] comedi: valid board names for ni_at_a2150 driver are: [ 74.659023][ T6654] ni_at_a2150 [ 74.660196][ T6654] comedi: valid board names for adq12b driver are: [ 74.662301][ T6654] adq12b [ 74.663308][ T6654] comedi: valid board names for mpc624 driver are: [ 74.665419][ T6654] mpc624 [ 74.666456][ T6654] comedi: valid board names for c6xdigio driver are: [ 74.668590][ T6654] c6xdigio [ 74.669636][ T6654] comedi: valid board names for aio_iiro_16 driver are: [ 74.671915][ T6654] aio_iiro_16 [ 74.673064][ T6654] comedi: valid board names for aio_aio12_8 driver are: [ 74.675282][ T6654] aio_aio12_8 [ 74.676382][ T6654] aio_ai12_8 [ 74.677490][ T6654] aio_ao12_4 [ 74.678583][ T6654] comedi: valid board names for fl512 driver are: [ 74.680619][ T6654] fl512 [ 74.681504][ T6654] comedi: valid board names for dmm32at driver are: [ 74.684265][ T6654] dmm32at [ 74.685257][ T6654] comedi: valid board names for dt282x driver are: [ 74.687265][ T6654] dt2821 [ 74.688200][ T6654] dt2821-f [ 74.689219][ T6654] dt2821-g [ 74.690612][ T6654] dt2823 [ 74.691826][ T6654] dt2824-pgh [ 74.693194][ T6654] dt2824-pgl [ 74.694600][ T6654] dt2825 [ 74.695790][ T6654] dt2827 [ 74.697051][ T6654] dt2828 [ 74.698315][ T6654] dt2829 [ 74.699594][ T6654] dt21-ez [ 74.701230][ T6654] dt23-ez [ 74.702567][ T6654] dt24-ez [ 74.703888][ T6654] dt24-ez-pgl [ 74.705348][ T6654] comedi: valid board names for dt2817 driver are: [ 74.708099][ T6654] dt2817 [ 74.709328][ T6654] comedi: valid board names for dt2815 driver are: [ 74.711623][ T6654] dt2815 [ 74.712621][ T6654] comedi: valid board names for dt2814 driver are: [ 74.714810][ T6654] dt2814 [ 74.715804][ T6654] comedi: valid board names for dt2811 driver are: [ 74.717953][ T6654] dt2811-pgh [ 74.719052][ T6654] dt2811-pgl [ 74.720250][ T6654] comedi: valid board names for dt2801 driver are: [ 74.722369][ T6654] dt2801 [ 74.723364][ T6654] comedi: valid board names for das6402 driver are: [ 74.725388][ T6654] das6402-12 [ 74.726508][ T6654] das6402-16 [ 74.727625][ T6654] comedi: valid board names for das1800 driver are: [ 74.729806][ T6654] das-1701st [ 74.730902][ T6654] das-1701st-da [ 74.732076][ T6654] das-1702st [ 74.733344][ T6654] das-1702st-da [ 74.734645][ T6654] das-1702hr [ 74.735990][ T6654] das-1702hr-da [ 74.737554][ T6654] das-1701ao [ 74.738997][ T6654] das-1702ao [ 74.740575][ T6654] das-1801st [ 74.742030][ T6654] das-1801st-da [ 74.743573][ T6654] das-1802st [ 74.744985][ T6654] das-1802st-da [ 74.746507][ T6654] das-1802hr [ 74.747752][ T6654] das-1802hr-da [ 74.748928][ T6654] das-1801hc [ 74.750118][ T6654] das-1802hc [ 74.751205][ T6654] das-1801ao [ 74.752284][ T6654] das-1802ao [ 74.753586][ T6654] comedi: valid board names for das800 driver are: [ 74.756151][ T6654] das-800 [ 74.757277][ T6654] cio-das800 [ 74.758361][ T6654] das-801 [ 74.759321][ T6654] cio-das801 [ 74.760531][ T6654] das-802 [ 74.761688][ T6654] cio-das802 [ 74.763025][ T6654] cio-das802/16 [ 74.764298][ T6654] comedi: valid board names for isa-das08 driver are: [ 74.766555][ T6654] isa-das08 [ 74.767574][ T6654] das08-pgm [ 74.768615][ T6654] das08-pgh [ 74.769755][ T6654] das08-pgl [ 74.770799][ T6654] das08-aoh [ 74.771876][ T6654] das08-aol [ 74.772969][ T6654] das08-aom [ 74.774070][ T6654] das08/jr-ao [ 74.775178][ T6654] das08jr-16-ao [ 74.776380][ T6654] pc104-das08 [ 74.777494][ T6654] das08jr/16 [ 74.778599][ T6654] comedi: valid board names for das16m1 driver are: [ 74.780823][ T6654] das16m1 [ 74.781856][ T6654] comedi: valid board names for dac02 driver are: [ 74.783906][ T6654] dac02 [ 74.784841][ T6654] comedi: valid board names for rti802 driver are: [ 74.787400][ T6654] rti802 [ 74.788424][ T6654] comedi: valid board names for rti800 driver are: [ 74.790623][ T6654] rti800 [ 74.791635][ T6654] rti815 [ 74.792616][ T6654] comedi: valid board names for pcm3724 driver are: [ 74.794947][ T6654] pcm3724 [ 74.796002][ T6654] comedi: valid board names for pcl818 driver are: [ 74.798112][ T6654] pcl818l [ 74.799143][ T6654] pcl818h [ 74.800265][ T6654] pcl818hd [ 74.801333][ T6654] pcl818hg [ 74.802402][ T6654] pcl818 [ 74.803479][ T6654] pcl718 [ 74.804422][ T6654] pcm3718 [ 74.805391][ T6654] comedi: valid board names for pcl816 driver are: [ 74.807437][ T6654] pcl816 [ 74.808378][ T6654] pcl814b [ 74.809745][ T6654] comedi: valid board names for pcl812 driver are: [ 74.812184][ T6654] pcl812 [ 74.813209][ T6654] pcl812pg [ 74.814514][ T6654] acl8112pg [ 74.815915][ T6654] acl8112dg [ 74.817305][ T6654] acl8112hg [ 74.818692][ T6654] a821pgl [ 74.820089][ T6654] a821pglnda [ 74.821572][ T6654] a821pgh [ 74.822867][ T6654] a822pgl [ 74.823909][ T6654] a822pgh [ 74.824866][ T6654] a823pgl [ 74.825917][ T6654] a823pgh [ 74.826931][ T6654] pcl813 [ 74.827926][ T6654] pcl813b [ 74.828942][ T6654] acl8113 [ 74.830029][ T6654] iso813 [ 74.831017][ T6654] acl8216 [ 74.832040][ T6654] a826pg [ 74.833047][ T6654] comedi: valid board names for pcl730 driver are: [ 74.835025][ T6654] pcl730 [ 74.836031][ T6654] iso730 [ 74.837006][ T6654] acl7130 [ 74.838038][ T6654] pcm3730 [ 74.839059][ T6654] pcl725 [ 74.840101][ T6654] p8r8dio [ 74.841109][ T6654] acl7225b [ 74.842148][ T6654] p16r16dio [ 74.843223][ T6654] pcl733 [ 74.844188][ T6654] pcl734 [ 74.845113][ T6654] opmm-1616-xt [ 74.846539][ T6654] pearl-mm-p [ 74.847909][ T6654] ir104-pbf [ 74.849268][ T6654] comedi: valid board names for pcl726 driver are: [ 74.852050][ T6654] pcl726 [ 74.853324][ T6654] pcl727 [ 74.854618][ T6654] pcl728 [ 74.855929][ T6654] acl6126 [ 74.857252][ T6654] acl6128 [ 74.858606][ T6654] comedi: valid board names for pcl724 driver are: [ 74.861622][ T6654] pcl724 [ 74.863091][ T6654] pcl722 [ 74.864390][ T6654] pcl731 [ 74.865726][ T6654] acl7122 [ 74.867066][ T6654] acl7124 [ 74.868385][ T6654] pet48dio [ 74.869886][ T6654] pcmio48 [ 74.870924][ T6654] onyx-mm-dio [ 74.872015][ T6654] comedi: valid board names for pcl711 driver are: [ 74.874485][ T6654] pcl711 [ 74.875703][ T6654] pcl711b [ 74.877034][ T6654] acl8112hg [ 74.878381][ T6654] acl8112dg [ 74.879808][ T6654] comedi: valid board names for amplc_pc263 driver are: [ 74.882574][ T6654] pc263 [ 74.883766][ T6654] comedi: valid board names for amplc_pc236 driver are: [ 74.886586][ T6654] pc36at [ 74.887818][ T6654] comedi: valid board names for amplc_dio200 driver are: [ 74.891539][ T6654] pc212e [ 74.892774][ T6654] pc214e [ 74.894021][ T6654] pc215e [ 74.895270][ T6654] pc218e [ 74.896506][ T6654] pc272e [ 74.897503][ T6654] comedi: valid board names for comedi_parport driver are: [ 74.899851][ T6654] comedi_parport [ 74.900991][ T6654] comedi: valid board names for comedi_test driver are: [ 74.903230][ T6654] comedi_test [ 74.904649][ T6654] comedi: valid board names for comedi_bond driver are: [ 74.907590][ T6654] comedi_bond [ 75.570949][ T6745] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 76.393885][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.396070][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.451288][ T6649] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 76.479950][ T54] usb 6-1: USB disconnect, device number 7 [ 76.497120][ T6749] usb usb8: usbfs: process 6749 (syz.2.211) did not claim interface 0 before use [ 76.654686][ T6765] netlink: 'syz.0.217': attribute type 11 has an invalid length. [ 76.657254][ T6765] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.217'. [ 76.710697][ T6769] netlink: 96 bytes leftover after parsing attributes in process `syz.0.219'. [ 76.744927][ T6771] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.216'. [ 76.747778][ T6771] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 76.767014][ T6773] netlink: 'syz.3.218': attribute type 1 has an invalid length. [ 76.769894][ T6773] binder: 6766:6773 unknown command 0 [ 76.771632][ T6773] binder: 6766:6773 ioctl c0306201 2000000001c0 returned -22 [ 77.043962][ T6780] SELinux: failed to load policy [ 77.587865][ T6789] netlink: 52 bytes leftover after parsing attributes in process `syz.0.226'. [ 77.609871][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 77.609882][ T40] audit: type=1400 audit(1769936658.576:452): avc: denied { append } for pid=6786 comm="syz.2.225" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 77.629750][ T40] audit: type=1400 audit(1769936658.576:453): avc: denied { watch } for pid=6786 comm="syz.2.225" path="/42/file0" dev="tmpfs" ino=239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.636666][ T40] audit: type=1400 audit(1769936658.576:454): avc: denied { watch_sb watch_reads } for pid=6786 comm="syz.2.225" path="/42/file0" dev="tmpfs" ino=239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.659223][ T40] audit: type=1400 audit(1769936658.596:455): avc: denied { sqpoll } for pid=6790 comm="syz.3.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 77.727987][ T40] audit: type=1400 audit(1769936658.696:456): avc: denied { write } for pid=6802 comm="syz.3.230" name="file0" dev="9p" ino=72614041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.737017][ T40] audit: type=1400 audit(1769936658.696:457): avc: denied { open } for pid=6802 comm="syz.3.230" path="/56/file0/file0" dev="9p" ino=72614041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.745852][ T40] audit: type=1400 audit(1769936658.706:458): avc: denied { ioctl } for pid=6802 comm="syz.3.230" path="/56/file0/file0" dev="9p" ino=72614041 ioctlcmd=0x4800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.748113][ T6806] netlink: 'syz.0.231': attribute type 63 has an invalid length. [ 77.758246][ T6806] netlink: 5 bytes leftover after parsing attributes in process `syz.0.231'. [ 77.762847][ T6806] gretap0: entered allmulticast mode [ 77.764861][ T6806] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 77.955687][ T40] audit: type=1400 audit(1769936658.926:459): avc: denied { name_connect } for pid=6818 comm="syz.0.235" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 77.994677][ T40] audit: type=1400 audit(1769936658.966:460): avc: denied { ioctl } for pid=6824 comm="syz.0.237" path="socket:[12187]" dev="sockfs" ino=12187 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.012470][ T40] audit: type=1400 audit(1769936658.986:461): avc: denied { create } for pid=6826 comm="syz.1.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 78.110412][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.241'. [ 78.232516][ T6851] netlink: 'syz.0.245': attribute type 1 has an invalid length. [ 78.252294][ T6851] 8021q: adding VLAN 0 to HW filter on device bond3 [ 78.293210][ T6851] bond3: (slave veth5): Enslaving as an active interface with a down link [ 78.332246][ T6851] vlan2: entered allmulticast mode [ 78.334628][ T6851] bond3: entered allmulticast mode [ 78.338247][ T6851] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 78.463310][ T6862] veth0_to_bond: entered allmulticast mode [ 78.506740][ T6865] netlink: 'syz.0.250': attribute type 1 has an invalid length. [ 78.534927][ T6865] bond4: entered promiscuous mode [ 78.536725][ T6865] bond4: entered allmulticast mode [ 78.538633][ T6865] 8021q: adding VLAN 0 to HW filter on device bond4 [ 78.555025][ T6865] erspan1: entered allmulticast mode [ 78.558553][ T6865] bond4: (slave erspan1): making interface the new active one [ 78.561091][ T6865] erspan1: entered promiscuous mode [ 78.563611][ T6865] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 78.568555][ T6865] tipc: Enabling of bearer rejected, failed to enable media [ 78.591571][ T6865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=6865 comm=syz.0.250 [ 78.619397][ T6876] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 78.622555][ T6876] overlayfs: missing 'lowerdir' [ 78.737617][ T6884] delete_channel: no stack [ 78.867172][ T6902] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 78.869595][ T6902] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 78.878156][ T6902] vhci_hcd vhci_hcd.0: Device attached [ 78.898300][ T6908] vhci_hcd: connection closed [ 78.899406][ T6696] vhci_hcd vhci_hcd.1: stop threads [ 78.902623][ T6696] vhci_hcd vhci_hcd.1: release socket [ 78.904308][ T6696] vhci_hcd vhci_hcd.1: disconnect device [ 78.943624][ T6920] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 79.118351][ T6945] netlink: 'syz.3.272': attribute type 3 has an invalid length. [ 79.341970][ T6971] could not allocate digest TFM handle cryptd(blake2b-160) [ 79.380905][ T6986] netlink: 'syz.0.285': attribute type 28 has an invalid length. [ 79.383748][ T6986] netlink: 'syz.0.285': attribute type 28 has an invalid length. [ 79.387115][ T6986] netlink: 'syz.0.285': attribute type 28 has an invalid length. [ 79.394754][ T6986] netlink: 'syz.0.285': attribute type 28 has an invalid length. [ 79.397639][ T6986] netlink: 'syz.0.285': attribute type 28 has an invalid length. [ 79.402540][ T6989] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 79.402540][ T6989] program syz.3.286 not setting count and/or reply_len properly [ 79.429806][ T53] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 79.561861][ T7000] bridge0: entered promiscuous mode [ 79.570120][ T53] usb 7-1: device descriptor read/64, error -71 [ 79.594529][ T7002] netlink: 148 bytes leftover after parsing attributes in process `syz.0.290'. [ 79.598094][ T7002] netlink: 23 bytes leftover after parsing attributes in process `syz.0.290'. [ 79.603886][ T7002] overlayfs: failed to clone upperpath [ 79.677730][ T7009] netlink: 56 bytes leftover after parsing attributes in process `syz.0.292'. [ 79.681161][ T7009] netlink: 56 bytes leftover after parsing attributes in process `syz.0.292'. [ 79.797279][ T7026] syzkaller1: entered promiscuous mode [ 79.799087][ T7026] syzkaller1: entered allmulticast mode [ 79.811314][ T53] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 79.960200][ T53] usb 7-1: device descriptor read/64, error -71 [ 80.070169][ T53] usb usb7-port1: attempt power cycle [ 80.276442][ T7083] input: syz1 as /devices/virtual/input/input5 [ 80.319842][ T7086] netlink: set zone limit has 4 unknown bytes [ 80.411367][ T53] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 80.430341][ T53] usb 7-1: device descriptor read/8, error -71 [ 80.670967][ T7124] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 80.680841][ T53] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 80.710373][ T53] usb 7-1: device descriptor read/8, error -71 [ 80.769797][ T5982] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 80.786983][ T7133] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 80.833142][ T53] usb usb7-port1: unable to enumerate USB device [ 80.941691][ T5982] usb 8-1: config 168 has an invalid descriptor of length 48, skipping remainder of the config [ 80.945200][ T5982] usb 8-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 80.950293][ T5982] usb 8-1: config 168 has an invalid descriptor of length 48, skipping remainder of the config [ 80.953763][ T5982] usb 8-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 80.958675][ T5982] usb 8-1: config 168 has an invalid descriptor of length 48, skipping remainder of the config [ 80.962035][ T5982] usb 8-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 80.972008][ T5982] usb 8-1: string descriptor 0 read error: -22 [ 80.974089][ T5982] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 80.976899][ T5982] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.986293][ T5982] adutux 8-1:168.0: interrupt endpoints not found [ 81.210561][ T53] usb 8-1: USB disconnect, device number 3 [ 81.422528][ T7191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7191 comm=syz.0.349 [ 81.471499][ T7193] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 81.473885][ T7193] overlayfs: failed to set xattr on upper [ 81.475695][ T7193] overlayfs: ...falling back to redirect_dir=nofollow. [ 81.477882][ T7193] overlayfs: ...falling back to index=off. [ 81.479799][ T7193] overlayfs: ...falling back to uuid=null. [ 81.481628][ T7193] overlayfs: conflicting lowerdir path [ 81.500220][ T6240] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 81.518061][ T7200] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 81.521403][ T7200] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 81.525928][ T7200] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 81.619850][ T7210] fuse: Bad value for 'fd' [ 81.670695][ T6240] usb 6-1: Invalid ep0 maxpacket: 16 [ 81.707479][ T7217] __nla_validate_parse: 8 callbacks suppressed [ 81.707492][ T7217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.358'. [ 81.714247][ T7217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.358'. [ 81.799792][ T6240] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 81.922442][ T7244] capability: warning: `syz.0.365' uses 32-bit capabilities (legacy support in use) [ 81.949749][ T6240] usb 6-1: Invalid ep0 maxpacket: 16 [ 81.952203][ T6240] usb usb6-port1: attempt power cycle [ 82.008457][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'. [ 82.135540][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.370'. [ 82.299850][ T6240] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 82.330507][ T6240] usb 6-1: Invalid ep0 maxpacket: 16 [ 82.459214][ T7271] validate_nla: 32 callbacks suppressed [ 82.459225][ T7271] netlink: 'syz.2.374': attribute type 15 has an invalid length. [ 82.465706][ T7271] netlink: 76 bytes leftover after parsing attributes in process `syz.2.374'. [ 82.481209][ T6240] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 82.510242][ T6240] usb 6-1: Invalid ep0 maxpacket: 16 [ 82.512239][ T6240] usb usb6-port1: unable to enumerate USB device [ 82.946350][ T40] kauditd_printk_skb: 61 callbacks suppressed [ 82.946367][ T40] audit: type=1400 audit(1769936663.916:523): avc: denied { connect } for pid=7278 comm="syz.0.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 83.142574][ T40] audit: type=1400 audit(1769936664.116:524): avc: denied { bind } for pid=7296 comm="syz.0.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.237820][ T40] audit: type=1400 audit(1769936664.206:525): avc: denied { connect } for pid=7304 comm="syz.0.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.244435][ T40] audit: type=1400 audit(1769936664.206:526): avc: denied { write } for pid=7304 comm="syz.0.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.311718][ T7273] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 83.314690][ T7273] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 83.320328][ T7273] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 83.324621][ T7273] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 83.327226][ T7273] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 83.333149][ T7273] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 83.336164][ T7273] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 83.338244][ T7273] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 83.345143][ T7273] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 83.348693][ T7273] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 83.351113][ T7273] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 83.353617][ T7273] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 83.396401][ T40] audit: type=1400 audit(1769936664.366:527): avc: denied { create } for pid=7327 comm="syz.2.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 83.409818][ T40] audit: type=1400 audit(1769936664.376:528): avc: denied { setopt } for pid=7327 comm="syz.2.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 83.410822][ T7331] netlink: 'syz.0.392': attribute type 1 has an invalid length. [ 83.430356][ T7331] 8021q: adding VLAN 0 to HW filter on device bond5 [ 83.477968][ T7331] bond5: (slave veth7): Enslaving as an active interface with a down link [ 83.489480][ T7331] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 83.495665][ T7331] bond5: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 83.506540][ T7336] netlink: 'syz.2.394': attribute type 30 has an invalid length. [ 83.568155][ T7347] netlink: 'syz.2.394': attribute type 30 has an invalid length. [ 84.001536][ T7355] geneve2: entered promiscuous mode [ 84.043034][ T40] audit: type=1400 audit(1769936665.016:529): avc: denied { add_name } for pid=7356 comm="syz.2.401" name="blkio.bfq.io_service_bytes" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.052620][ T40] audit: type=1400 audit(1769936665.016:530): avc: denied { create } for pid=7356 comm="syz.2.401" name="blkio.bfq.io_service_bytes" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 84.062735][ T40] audit: type=1400 audit(1769936665.016:531): avc: denied { associate } for pid=7356 comm="syz.2.401" name="blkio.bfq.io_service_bytes" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 84.070979][ T40] audit: type=1400 audit(1769936665.016:532): avc: denied { read append } for pid=7356 comm="syz.2.401" path="/59/file0/blkio.bfq.io_service_bytes" dev="9p" ino=72614187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 84.302500][ T7364] usb usb9: usbfs: process 7364 (syz.2.402) did not claim interface 5 before use [ 84.568752][ T7392] netlink: 'syz.2.406': attribute type 7 has an invalid length. [ 84.568919][ T7390] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 84.620001][ T5947] Bluetooth: hci0: command 0x0c1a tx timeout [ 85.097374][ T7436] netlink: 'syz.3.424': attribute type 1 has an invalid length. [ 85.115798][ T7436] bond4: entered promiscuous mode [ 85.118278][ T7436] 8021q: adding VLAN 0 to HW filter on device bond4 [ 85.134317][ T7439] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 85.164360][ T7441] input: syz1 as /devices/virtual/input/input6 [ 85.225515][ T7444] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20001 [ 85.245485][ T7448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.424'. [ 85.249009][ T7448] bond4: entered allmulticast mode [ 85.259587][ T7448] bond4: (slave bridge2): making interface the new active one [ 85.262181][ T7448] bridge2: entered promiscuous mode [ 85.264017][ T7448] bridge2: entered allmulticast mode [ 85.268188][ T7448] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 85.339806][ T5295] Bluetooth: hci1: command 0x0c1a tx timeout [ 85.342479][ T5947] Bluetooth: hci2: command 0x0c1a tx timeout [ 85.352149][ T7452] Device name not specified. [ 85.352149][ T7452] [ 85.420118][ T5947] Bluetooth: hci3: command 0x0c1a tx timeout [ 85.480923][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.430'. [ 85.487278][ T7457] xt_l2tp: v2 doesn't support IP mode [ 85.878660][ T7483] ptrace attach of "/syz-executor exec"[7484] was attempted by "/syz-executor exec"[7483] [ 85.943776][ T7490] capability: warning: `syz.0.443' uses deprecated v2 capabilities in a way that may be insecure [ 85.981835][ T7499] bridge_slave_1: left allmulticast mode [ 85.984215][ T7499] bridge_slave_1: left promiscuous mode [ 85.987899][ T7499] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.995935][ T7499] bridge_slave_0: left allmulticast mode [ 85.998337][ T7499] bridge_slave_0: left promiscuous mode [ 86.004469][ T7499] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.168568][ T7506] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 86.186874][ T7506] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 86.236591][ T7512] netlink: 24 bytes leftover after parsing attributes in process `syz.0.450'. [ 86.241808][ T7512] netlink: 24 bytes leftover after parsing attributes in process `syz.0.450'. [ 86.253825][ T5947] Bluetooth: hci0: unexpected event 0x2f length: 1017 > 260 [ 86.434395][ T7531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.454'. [ 86.445668][ T7531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=7531 comm=syz.2.454 [ 86.451158][ T7531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=7531 comm=syz.2.454 [ 86.456184][ T7531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=7531 comm=syz.2.454 [ 86.461691][ T7531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=7531 comm=syz.2.454 [ 86.465875][ T7531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=7531 comm=syz.2.454 [ 86.470141][ T7531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=7531 comm=syz.2.454 [ 86.474377][ T7531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=7531 comm=syz.2.454 [ 86.478514][ T7531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7531 comm=syz.2.454 [ 86.482699][ T7531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=7531 comm=syz.2.454 [ 86.488162][ T7531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=7531 comm=syz.2.454 [ 86.608500][ T7551] Bluetooth: MGMT ver 1.23 [ 86.622876][ T1331] cfg80211: failed to load regulatory.db [ 86.699971][ T5947] Bluetooth: hci0: command 0x0c1a tx timeout [ 86.728943][ T7565] 9pnet_fd: Insufficient options for proto=fd [ 86.733945][ T7567] 5gQ[: renamed from lo (while UP) [ 86.858428][ T7579] comedi comedi3: dt2817: I/O port conflict (0x9,5) [ 87.054925][ T5947] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 87.079899][ T1331] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 87.233836][ T1331] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 87.238917][ T1331] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.243302][ T1331] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.246245][ T1331] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 87.256494][ T1331] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 87.259419][ T1331] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 87.263843][ T1331] usb 6-1: Manufacturer: syz [ 87.266365][ T7608] kvm: kvm [7607]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 87.266537][ T1331] usb 6-1: config 0 descriptor?? [ 87.271766][ T7608] kvm: kvm [7607]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 87.415956][ T7623] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 87.420881][ T5295] Bluetooth: hci1: command 0x0c1a tx timeout [ 87.422857][ T5947] Bluetooth: hci2: command 0x0c1a tx timeout [ 87.500981][ T5947] Bluetooth: hci3: command 0x0c1a tx timeout [ 87.543018][ T5947] Bluetooth: hci3: unexpected event for opcode 0x22ba [ 87.675490][ T1331] usbhid 6-1:0.0: can't add hid device: -71 [ 87.677444][ T1331] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 87.681955][ T1331] usb 6-1: USB disconnect, device number 12 [ 87.849779][ T6240] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 88.009734][ T6240] usb 7-1: Using ep0 maxpacket: 16 [ 88.014301][ T6240] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 223, changing to 11 [ 88.017816][ T6240] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 88.022557][ T6240] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.025271][ T6240] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.027785][ T6240] usb 7-1: Product: Ћ [ 88.029079][ T6240] usb 7-1: Manufacturer: ᠯ벹拑儛靧広ዦꪎឬᬒ♉꩘木甬쒮㡐靃岺䩟ᜳ౹뒁푗鎈뎽〉⧜鶍妨㟷꺶做౉鵲⦋祷粺ᗆꝋ蜯肋趲쒲鶽 [ 88.034148][ T6240] usb 7-1: SerialNumber: з [ 88.083314][ T40] kauditd_printk_skb: 44 callbacks suppressed [ 88.083325][ T40] audit: type=1400 audit(1769936925.058:577): avc: denied { read } for pid=7640 comm="syz.3.492" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 88.092732][ T40] audit: type=1400 audit(1769936925.058:578): avc: denied { open } for pid=7640 comm="syz.3.492" path="/dev/ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 88.102045][ T40] audit: type=1400 audit(1769936925.078:579): avc: denied { ioctl } for pid=7640 comm="syz.3.492" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 88.256241][ T7644] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 88.370987][ T40] audit: type=1400 audit(1769936925.338:580): avc: denied { map } for pid=7645 comm="syz.0.494" path="/192/file0" dev="tmpfs" ino=1047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 88.444952][ T40] audit: type=1400 audit(1769936925.418:581): avc: denied { ioctl } for pid=7650 comm="syz.0.495" path="socket:[15358]" dev="sockfs" ino=15358 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 88.471116][ T6240] cdc_ncm 7-1:1.0: bind() failure [ 88.479388][ T6240] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 88.482782][ T6240] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 88.499795][ T6240] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 88.504017][ T6240] usb 7-1: USB disconnect, device number 10 [ 88.613528][ T7653] loop2: detected capacity change from 0 to 7 [ 88.618719][ T6295] Dev loop2: unable to read RDB block 7 [ 88.621222][ T6295] loop2: AHDI p1 p2 [ 88.622536][ T6295] loop2: partition table partially beyond EOD, truncated [ 88.627383][ T6295] loop2: p1 start 1700753509 is beyond EOD, truncated [ 88.632394][ T7653] Dev loop2: unable to read RDB block 7 [ 88.634190][ T7653] loop2: AHDI p1 p2 [ 88.635406][ T7653] loop2: partition table partially beyond EOD, truncated [ 88.637647][ T7653] loop2: p1 start 1700753509 is beyond EOD, truncated [ 88.677212][ T7655] netlink: 'syz.3.497': attribute type 1 has an invalid length. [ 88.682554][ T7655] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.497'. [ 88.693312][ T7655] netlink: 28 bytes leftover after parsing attributes in process `syz.3.497'. [ 88.789845][ T5947] Bluetooth: hci0: command 0x0c1a tx timeout [ 88.888586][ T7657] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 88.891679][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.498'. [ 89.049467][ T40] audit: type=1400 audit(1769936926.018:582): avc: denied { mount } for pid=7660 comm="syz.2.500" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 89.103941][ T7666] devpts: Unknown parameter 'u' [ 89.105643][ T40] audit: type=1400 audit(1769936926.078:583): avc: denied { remount } for pid=7660 comm="syz.2.500" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 89.115073][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.502'. [ 89.126395][ T40] audit: type=1400 audit(1769936926.098:584): avc: denied { unmount } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 89.203585][ T7678] overlayfs: workdir and upperdir must be separate subtrees [ 89.500552][ T5947] Bluetooth: hci2: command 0x0c1a tx timeout [ 89.500558][ T5295] Bluetooth: hci1: command 0x0c1a tx timeout [ 90.047783][ T6240] IPVS: starting estimator thread 0... [ 90.050022][ T7706] 9p: Could not find request transport: unix [ 90.160895][ T7709] IPVS: using max 44 ests per chain, 105600 per kthread [ 90.266241][ T40] audit: type=1400 audit(1769936927.238:585): avc: denied { read write } for pid=7727 comm="syz.2.520" name="usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 90.280234][ T40] audit: type=1400 audit(1769936927.238:586): avc: denied { open } for pid=7727 comm="syz.2.520" path="/dev/usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 90.443491][ T7739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.524'. [ 90.448003][ T7739] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.524'. [ 90.605355][ T7746] netlink: 14 bytes leftover after parsing attributes in process `syz.2.527'. [ 90.619406][ T7746] bond0: (slave dummy0): Releasing backup interface [ 90.896195][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.528'. [ 90.898953][ T7748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.528'. [ 90.907581][ T6661] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.909891][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.528'. [ 90.910540][ T6661] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.915948][ T6661] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.919042][ T6661] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.061356][ T7758] Cannot find add_set index 65532 as target [ 91.406620][ T7777] fuse: Bad value for 'fd' [ 91.514810][ T7784] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 91.517100][ T7784] IPv6: NLM_F_CREATE should be set when creating new route [ 91.519407][ T7784] IPv6: NLM_F_CREATE should be set when creating new route [ 91.551232][ T5947] Bluetooth: hci3: unexpected event for opcode 0x0402 [ 91.667311][ T7796] "syz.2.545" (7796) uses obsolete ecb(arc4) skcipher [ 91.716136][ T7802] fuse: Bad value for 'fd' [ 91.788560][ T7808] netlink: 'syz.0.549': attribute type 7 has an invalid length. [ 91.792184][ T7808] fuse: Unknown parameter '00000000000000000004' [ 91.928305][ T7825] netlink: 'syz.2.554': attribute type 4 has an invalid length. [ 91.974662][ T7837] overlayfs: failed to clone upperpath [ 91.984022][ T7837] overlayfs: failed to clone upperpath [ 91.988221][ T7837] overlayfs: failed to clone upperpath [ 91.995542][ T7837] overlayfs: failed to clone upperpath [ 92.409954][ T7880] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 93.066069][ T7921] libceph: resolve '0' (ret=-3): failed [ 93.092944][ T40] kauditd_printk_skb: 61 callbacks suppressed [ 93.092960][ T40] audit: type=1400 audit(1769936930.058:648): avc: denied { perfmon } for pid=7926 comm="syz.2.584" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 93.103844][ T40] audit: type=1400 audit(1769936930.068:649): avc: denied { prog_run } for pid=7926 comm="syz.2.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 93.130371][ T40] audit: type=1400 audit(1769936930.108:650): avc: denied { read write } for pid=7930 comm="syz.3.585" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 93.138626][ T40] audit: type=1400 audit(1769936930.108:651): avc: denied { ioctl open } for pid=7930 comm="syz.3.585" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 93.152615][ T40] audit: type=1400 audit(1769936930.128:652): avc: denied { map_create } for pid=7930 comm="syz.3.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 93.158436][ T40] audit: type=1400 audit(1769936930.128:653): avc: denied { map_read map_write } for pid=7930 comm="syz.3.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 93.192272][ T40] audit: type=1400 audit(1769936930.168:654): avc: denied { mounton } for pid=7933 comm="syz.1.586" path="/97/file0" dev="tmpfs" ino=539 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 93.201541][ T40] audit: type=1400 audit(1769936930.168:655): avc: denied { mount } for pid=7933 comm="syz.1.586" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 93.215655][ T40] audit: type=1400 audit(1769936930.188:656): avc: denied { unmount } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 93.267816][ T40] audit: type=1400 audit(1769936930.238:657): avc: denied { allowed } for pid=7937 comm="syz.3.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 93.446669][ T7948] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.524552][ T7952] random: crng reseeded on system resumption [ 93.531702][ T7952] PM: hibernation: Image mismatch: memory size [ 93.859174][ T7974] __nla_validate_parse: 23 callbacks suppressed [ 93.859185][ T7974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.599'. [ 93.915579][ T7927] ceph: No mds server is up or the cluster is laggy [ 93.919780][ T7980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.601'. [ 93.923351][ T7980] netlink: 24 bytes leftover after parsing attributes in process `syz.0.601'. [ 94.116988][ T5947] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 94.119138][ T5947] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 94.121883][ T5947] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 94.124578][ T5947] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 94.127618][ T5947] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 94.132272][ T5947] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 94.135254][ T5947] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 94.137763][ T5947] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 94.140695][ T5947] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 94.143208][ T5947] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 94.145750][ T5947] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 94.148255][ T5947] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 94.151842][ T5947] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 94.154439][ T5947] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 94.159850][ T5947] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 94.162498][ T5947] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 94.165234][ T5947] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 94.167807][ T5947] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 94.170508][ T5947] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 94.172992][ T5947] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 94.176393][ T5947] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 94.178947][ T5947] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 94.181609][ T5947] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 94.184125][ T5947] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 94.186399][ T5947] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 94.188216][ T5947] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 94.190161][ T5947] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 94.191995][ T5947] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 94.193898][ T5947] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 94.195731][ T5947] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 94.197596][ T5947] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 94.199613][ T5947] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 94.201579][ T5947] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 94.286824][ T8021] xt_cgroup: path and classid specified [ 94.680423][ T8067] nfsd: Unknown parameter 'norecovery' [ 94.751526][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.631'. [ 94.796330][ T8077] Invalid ELF header type: 0 != 1 [ 95.013749][ T8088] rdma_op ffff8880333ed1f0 conn xmit_rdma 0000000000000000 [ 95.026511][ T8088] overlayfs: failed to clone upperpath [ 95.160115][ T8094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.640'. [ 95.421688][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'. [ 95.424567][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802ac06c00: rx timeout, send abort [ 95.441725][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.647'. [ 95.454002][ T8117] : entered promiscuous mode [ 95.483832][ T8119] netlink: 'syz.0.648': attribute type 10 has an invalid length. [ 95.492058][ T8119] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 95.539418][ T8131] overlayfs: failed to clone upperpath [ 95.543658][ T8132] netlink: 16 bytes leftover after parsing attributes in process `syz.2.652'. [ 95.577082][ T8135] mmap: syz.0.653 (8135) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 95.655282][ T8147] 9pnet_fd: p9_fd_create_tcp (8147): problem connecting socket to 127.0.0.1 [ 95.725266][ T8155] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 95.889407][ T8170] overlayfs: failed to clone lowerpath [ 95.925265][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888038ec0c00: rx timeout, send abort [ 95.929334][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802ac06c00: abort rx timeout. Force session deactivation [ 95.946220][ T8174] fuse: Bad value for 'fd' [ 96.043587][ T8186] dummy0: entered allmulticast mode [ 96.211512][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.674'. [ 96.283389][ T8221] netlink: 44 bytes leftover after parsing attributes in process `syz.1.678'. [ 96.427931][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888038ec0c00: abort rx timeout. Force session deactivation [ 96.464776][ T8248] bad cache= option: nonw [ 96.464776][ T8248] [ 96.467159][ T8248] CIFS: VFS: bad cache= option: nonw [ 96.468885][ T8248] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 96.477388][ T8248] CIFS mount error: No usable UNC path provided in device string! [ 96.477388][ T8248] [ 96.480561][ T8248] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 96.529017][ T8255] netlink: 'syz.1.690': attribute type 15 has an invalid length. [ 96.753432][ T8275] binder: 8274:8275 unknown command 0 [ 96.755238][ T8275] binder: 8274:8275 ioctl c0306201 200000000080 returned -22 [ 96.815189][ T8283] selinux_netlink_send: 1 callbacks suppressed [ 96.815201][ T8283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=261 sclass=netlink_route_socket pid=8283 comm=syz.2.698 [ 96.828733][ T8283] netlink: 'syz.2.698': attribute type 1 has an invalid length. [ 96.843660][ T8283] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.859518][ T8283] bond2: (slave gretap1): making interface the new active one [ 96.863625][ T8283] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 96.867313][ T5947] Bluetooth: hci2: Malformed LE Event: 0x0d [ 96.901934][ T8293] overlayfs: missing 'lowerdir' [ 96.923960][ T8298] io-wq is not configured for unbound workers [ 97.044926][ T8315] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 97.044926][ T8315] The task syz.2.706 (8315) triggered the difference, watch for misbehavior. [ 97.138043][ T8327] netlink: 'syz.1.708': attribute type 1 has an invalid length. [ 97.264710][ T8342] netlink: 'syz.3.719': attribute type 4 has an invalid length. [ 97.402127][ T8361] block nbd1: NBD_DISCONNECT [ 97.413534][ T8358] block nbd1: Disconnected due to user request. [ 97.415983][ T8358] block nbd1: shutting down sockets [ 97.593378][ T5947] Bluetooth: hci2: unexpected event for opcode 0x3e16 [ 97.764902][ T8418] netlink: 'syz.0.746': attribute type 7 has an invalid length. [ 97.802532][ T8422] 8021q: VLANs not supported on ip6gre0 [ 97.861311][ T8432] bond7: invalid ARP target 0.0.0.0 specified for addition [ 97.864392][ T8432] bond7: option arp_ip_target: invalid value (0) [ 97.867513][ T8432] bond7 (unregistering): Released all slaves [ 97.975594][ T8444] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 97.982317][ T8444] Error validating options; rc = [-22] [ 98.019265][ T8448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=8448 comm=syz.2.752 [ 98.118668][ T40] kauditd_printk_skb: 272 callbacks suppressed [ 98.118685][ T40] audit: type=1400 audit(1769936935.088:930): avc: denied { create } for pid=8453 comm="syz.0.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 98.128928][ T40] audit: type=1400 audit(1769936935.098:931): avc: denied { ioctl } for pid=8453 comm="syz.0.757" path="socket:[20958]" dev="sockfs" ino=20958 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 98.389109][ T40] audit: type=1400 audit(1769936935.358:932): avc: denied { map_read map_write } for pid=8468 comm="syz.0.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 98.396398][ T40] audit: type=1400 audit(1769936935.368:933): avc: denied { execmem } for pid=8468 comm="syz.0.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 98.404368][ T40] audit: type=1800 audit(1769936935.368:934): pid=8469 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.762" name="nullb0" dev="tmpfs" ino=398 res=0 errno=0 [ 98.431609][ T40] audit: type=1400 audit(1769936935.408:935): avc: denied { create } for pid=8472 comm="syz.0.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 98.438279][ T40] audit: type=1400 audit(1769936935.408:936): avc: denied { connect } for pid=8472 comm="syz.0.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 98.461233][ T8475] tmpfs: Bad value for 'mpol' [ 98.616147][ T40] audit: type=1400 audit(1769936935.588:937): avc: denied { read } for pid=8477 comm="syz.1.765" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 98.625248][ T40] audit: type=1400 audit(1769936935.598:938): avc: denied { read write } for pid=8477 comm="syz.1.765" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 98.633639][ T40] audit: type=1400 audit(1769936935.598:939): avc: denied { open } for pid=8477 comm="syz.1.765" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 99.081032][ T8489] __nla_validate_parse: 25 callbacks suppressed [ 99.081045][ T8489] netlink: 848 bytes leftover after parsing attributes in process `syz.2.768'. [ 99.327651][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'. [ 99.464873][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.774'. [ 99.468076][ T8511] bridge_slave_1: left allmulticast mode [ 99.470160][ T8511] bridge_slave_1: left promiscuous mode [ 99.472093][ T8511] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.475874][ T8511] bridge_slave_0: left allmulticast mode [ 99.477641][ T8511] bridge_slave_0: left promiscuous mode [ 99.479477][ T8511] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.567989][ T8522] netlink: 24 bytes leftover after parsing attributes in process `syz.1.780'. [ 99.632289][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.782'. [ 99.635916][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.782'. [ 99.695378][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.782'. [ 99.699374][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.782'. [ 99.738195][ T8533] tipc: MTU too low for tipc bearer [ 99.806488][ T8541] netlink: 'syz.1.788': attribute type 8 has an invalid length. [ 99.809128][ T8541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.788'. [ 99.816030][ T8541] bond0: entered promiscuous mode [ 99.817977][ T8541] bond_slave_0: entered promiscuous mode [ 99.819977][ T8541] bond_slave_1: entered promiscuous mode [ 99.822354][ T8541] gretap0: entered promiscuous mode [ 99.825345][ T8541] bond0: left promiscuous mode [ 99.826889][ T8541] bond_slave_0: left promiscuous mode [ 99.828738][ T8541] bond_slave_1: left promiscuous mode [ 99.832416][ T8541] gretap0: left promiscuous mode [ 99.858911][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.790'. [ 99.864668][ T8549] netlink: 'syz.2.790': attribute type 11 has an invalid length. [ 99.867791][ T8549] netlink: 'syz.2.790': attribute type 7 has an invalid length. [ 99.898382][ T8554] autofs: Bad value for 'fd' [ 100.161034][ T8592] program syz.1.803 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.496900][ T8596] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 100.506643][ T8596] cramfs: wrong magic [ 100.542527][ T8600] Cache volume key already in use (9p,syz,) [ 100.561791][ T8602] 9pnet_virtio: no channels available for device syz [ 100.759193][ T8626] loop6: detected capacity change from 0 to 524287999 [ 100.762904][ T8626] buffer_io_error: 363 callbacks suppressed [ 100.762919][ T8626] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.768742][ T8626] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.772185][ T8626] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.774962][ T8626] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.778165][ T8626] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.781168][ T8626] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.783701][ T8626] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.786152][ T8626] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.788546][ T8626] ldm_validate_partition_table(): Disk read failed. [ 100.788996][ T8628] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 100.791106][ T8626] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.791126][ T8626] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.791152][ T8626] Dev loop6: unable to read RDB block 0 [ 100.791557][ T8626] loop6: unable to read partition table [ 100.791664][ T8626] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 100.999047][ T8643] SELinux: Context system_u:object_r:sysfs_t:s0 is not valid (left unmapped). [ 101.024054][ T8641] (syz.1.821,8641,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 101.026615][ T8641] (syz.1.821,8641,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 101.028762][ T8641] (syz.1.821,8641,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 101.032963][ T8641] (syz.1.821,8641,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 101.069349][ T8653] netlink: 'syz.3.827': attribute type 21 has an invalid length. [ 101.083086][ T8653] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 101.085576][ T8653] overlayfs: failed to set xattr on upper [ 101.087412][ T8653] overlayfs: ...falling back to redirect_dir=nofollow. [ 101.089550][ T8653] overlayfs: ...falling back to index=off. [ 101.091811][ T8653] overlayfs: ...falling back to uuid=null. [ 101.104030][ T8653] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 101.124003][ T8663] sctp: [Deprecated]: syz.2.830 (pid 8663) Use of struct sctp_assoc_value in delayed_ack socket option. [ 101.124003][ T8663] Use struct sctp_sack_info instead [ 101.266160][ T8692] No control pipe specified [ 101.541469][ T8726] openvswitch: netlink: Missing key (keys=40, expected=100) [ 101.584247][ T8725] 9p: Could not find request transport: Brtmo [ 101.591783][ T8732] netlink: 'syz.3.851': attribute type 1 has an invalid length. [ 102.110617][ T8770] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 102.277575][ T8807] bond0: entered promiscuous mode [ 102.279264][ T8807] bond_slave_0: entered promiscuous mode [ 102.281666][ T8807] bond_slave_1: entered promiscuous mode [ 102.283547][ T8807] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 102.287872][ T8807] gretap0: entered promiscuous mode [ 102.290507][ T8807] hsr1: entered promiscuous mode [ 102.420953][ T8775] cgroup: fork rejected by pids controller in /syz2 [ 102.430033][ T8816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.648502][ T8852] netlink: 'syz.3.877': attribute type 1 has an invalid length. [ 102.668168][ T8856] netlink: 'syz.0.878': attribute type 1 has an invalid length. [ 102.673530][ T8857] netlink: 'syz.0.878': attribute type 1 has an invalid length. [ 102.679329][ T8852] bond8: entered promiscuous mode [ 102.682230][ T6021] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 102.686925][ T8852] 8021q: adding VLAN 0 to HW filter on device bond8 [ 102.727197][ T8852] 8021q: adding VLAN 0 to HW filter on device bond8 [ 102.730616][ T8852] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 102.734923][ T8852] bond8: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 102.744205][ T8852] bond8: (slave vxcan3): making interface the new active one [ 102.747577][ T8852] vxcan3: entered promiscuous mode [ 102.751691][ T8852] bond8: (slave vxcan3): Enslaving as an active interface with an up link [ 102.823921][ T6021] usb 6-1: device descriptor read/64, error -71 [ 102.830002][ T8869] 9p: p9: multiple sources not supported [ 102.961324][ T8880] IPv6: sit1: Disabled Multicast RS [ 102.964457][ T8880] sit1: entered allmulticast mode [ 103.042837][ T8880] program syz.3.881 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.069964][ T6021] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 103.148196][ T40] kauditd_printk_skb: 261 callbacks suppressed [ 103.148208][ T40] audit: type=1326 audit(1769936940.118:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8894 comm="syz.3.885" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343499aeb9 code=0x7ffc0000 [ 103.157333][ T40] audit: type=1326 audit(1769936940.118:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8894 comm="syz.3.885" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343499aeb9 code=0x7ffc0000 [ 103.173422][ T40] audit: type=1326 audit(1769936940.128:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8894 comm="syz.3.885" exe="/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f343499aeb9 code=0x7ffc0000 [ 103.181122][ T40] audit: type=1326 audit(1769936940.128:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8894 comm="syz.3.885" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343499aeb9 code=0x7ffc0000 [ 103.187944][ T40] audit: type=1326 audit(1769936940.128:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8894 comm="syz.3.885" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343499aeb9 code=0x7ffc0000 [ 103.196484][ T40] audit: type=1326 audit(1769936940.158:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8894 comm="syz.3.885" exe="/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f343499aeb9 code=0x7ffc0000 [ 103.216418][ T40] audit: type=1400 audit(1769936940.188:1207): avc: denied { create } for pid=8894 comm="syz.3.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 103.223719][ T8898] netlink: 'syz.3.885': attribute type 2 has an invalid length. [ 103.227067][ T8898] netlink: 'syz.3.885': attribute type 1 has an invalid length. [ 103.229723][ T40] audit: type=1400 audit(1769936940.198:1208): avc: denied { write } for pid=8894 comm="syz.3.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 103.230188][ T6021] usb 6-1: device descriptor read/64, error -71 [ 103.240347][ T40] audit: type=1400 audit(1769936940.208:1209): avc: denied { allowed } for pid=8899 comm="syz.2.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 103.240384][ T40] audit: type=1400 audit(1769936940.208:1210): avc: denied { create } for pid=8899 comm="syz.2.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 103.302607][ T8908] CIFS: Unable to determine destination address [ 103.430180][ T6021] usb usb6-port1: attempt power cycle [ 103.739840][ T8937] fuse: Unknown parameter '!dfault_pe' [ 103.771130][ T6021] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 103.780154][ T8942] netlink: 'syz.2.900': attribute type 13 has an invalid length. [ 103.784453][ T8942] netlink: 'syz.2.900': attribute type 13 has an invalid length. [ 103.802707][ T6021] usb 6-1: device descriptor read/8, error -71 [ 103.952683][ T8958] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 104.045109][ T8971] netlink: 'syz.2.911': attribute type 5 has an invalid length. [ 104.045325][ T8972] ip6gre0: Master is either lo or non-ether device [ 104.049745][ T6021] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 104.076861][ T6021] usb 6-1: device descriptor read/8, error -71 [ 104.179892][ T6021] usb usb6-port1: unable to enumerate USB device [ 104.227231][ T8962] could not allocate digest TFM handle cryptd(blake2b-160) [ 104.903295][ T8996] x_tables: duplicate underflow at hook 1 [ 105.101992][ T9030] overlayfs: failed to clone upperpath [ 105.136792][ T9033] __nla_validate_parse: 26 callbacks suppressed [ 105.136804][ T9033] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.928'. [ 105.538889][ T9071] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 106.818568][ T9092] 9pnet_fd: p9_fd_create_tcp (9092): problem connecting socket to 127.0.0.1 [ 106.904827][ T9120] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.994570][ T9120] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.063279][ T9120] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.133986][ T9120] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.218037][ T6668] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.226339][ T6668] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.233680][ T6668] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.242531][ T6668] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.344578][ T9146] 9pnet_fd: p9_fd_create_tcp (9146): problem connecting socket to 127.0.0.1 [ 107.399819][ T29] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 107.529803][ T29] usb 6-1: device descriptor read/64, error -71 [ 107.769878][ T29] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 107.910191][ T29] usb 6-1: device descriptor read/64, error -71 [ 108.020603][ T29] usb usb6-port1: attempt power cycle [ 108.135834][ T9150] netlink: 112 bytes leftover after parsing attributes in process `syz.3.965'. [ 108.138805][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.965'. [ 108.164814][ T40] kauditd_printk_skb: 116 callbacks suppressed [ 108.164827][ T40] audit: type=1400 audit(1769936945.138:1327): avc: denied { map_create } for pid=9151 comm="syz.3.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 108.174973][ T40] audit: type=1400 audit(1769936945.138:1328): avc: denied { perfmon } for pid=9151 comm="syz.3.966" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 108.182343][ T40] audit: type=1400 audit(1769936945.138:1329): avc: denied { map_read map_write } for pid=9151 comm="syz.3.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 108.188644][ T40] audit: type=1400 audit(1769936945.138:1330): avc: denied { bpf } for pid=9151 comm="syz.3.966" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 108.195560][ T40] audit: type=1400 audit(1769936945.138:1331): avc: denied { prog_run } for pid=9151 comm="syz.3.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 108.203108][ T40] audit: type=1400 audit(1769936945.168:1332): avc: denied { read } for pid=9153 comm="syz.3.967" name="msr" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 108.209873][ T9154] can0: slcan on ttyS3. [ 108.210597][ T40] audit: type=1400 audit(1769936945.168:1333): avc: denied { open } for pid=9153 comm="syz.3.967" path="/dev/cpu/3/msr" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 108.220957][ T40] audit: type=1400 audit(1769936945.188:1334): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 108.229627][ T40] audit: type=1400 audit(1769936945.188:1335): avc: denied { search } for pid=5645 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.237512][ T40] audit: type=1400 audit(1769936945.188:1336): avc: denied { search } for pid=5645 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.310746][ T9154] can0 (unregistered): slcan off ttyS3. [ 108.379918][ T29] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 108.411007][ T29] usb 6-1: device descriptor read/8, error -71 [ 108.669780][ T29] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 108.690529][ T29] usb 6-1: device descriptor read/8, error -71 [ 108.690566][ T9182] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 108.728361][ T9184] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 108.736721][ T9184] team0: No ports can be present during mode change [ 108.742458][ T9184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.973'. [ 108.769571][ T9184] team0 (unregistering): Port device team_slave_0 removed [ 108.777164][ T9184] team0 (unregistering): Port device team_slave_1 removed [ 108.801073][ T29] usb usb6-port1: unable to enumerate USB device [ 108.873983][ T9186] netlink: 40 bytes leftover after parsing attributes in process `syz.3.974'. [ 108.880196][ T9186] xt_hashlimit: overflow, rate too high: 0 [ 108.923943][ T5947] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 108.934933][ T5947] Bluetooth: hci0: unexpected cc 0x042f length: 1 < 7 [ 108.942232][ T5947] Bluetooth: hci0: unexpected event for opcode 0x042f [ 110.161454][ T9207] overlay: Bad value for 'workdir' [ 110.161542][ T9206] overlay: Bad value for 'workdir' [ 110.241084][ T9220] validate_nla: 1 callbacks suppressed [ 110.241095][ T9220] netlink: 'syz.3.984': attribute type 1 has an invalid length. [ 110.245024][ T9217] 9p: Could not find request transport: fdr5no=_6L$϶"20x0000000000000003 [ 110.254439][ T9220] 8021q: adding VLAN 0 to HW filter on device bond9 [ 110.258911][ T9220] bond9: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 110.263682][ T9220] bond9: entered allmulticast mode [ 110.270277][ T9217] 9p: Could not find request transport: fdr5no=_6L$϶"20x0000000000000003 [ 110.297037][ T9217] 9p: Could not find request transport: fdr5no=_6L$϶"20x0000000000000003 [ 110.299027][ T9225] 9p: Bad value for 'rfdno' [ 110.299027][ T9226] 9p: Bad value for 'rfdno' [ 110.327369][ T9217] 9p: Could not find request transport: fdr5no=_6L$϶"20x0000000000000003 [ 110.346340][ T9230] netlink: 100 bytes leftover after parsing attributes in process `syz.3.986'. [ 110.354189][ T9217] 9p: Could not find request transport: fdr5no=_6L$϶"20x0000000000000003 [ 110.385202][ T9217] 9p: Could not find request transport: fdr5no=_6L$϶"20x0000000000000003 [ 110.413370][ T9217] 9p: Could not find request transport: fdr5no=_6L$϶"20x0000000000000003 [ 110.434551][ T9217] 9p: Could not find request transport: fdr5no=_6L$϶"20x0000000000000003 [ 110.460215][ T9217] 9p: Could not find request transport: fdr5no=_6L$϶"20x0000000000000003 [ 110.496655][ T9217] 9p: Could not find request transport: fdr5no=_6L$϶"20x0000000000000003 [ 110.507977][ T9239] can0: slcan on ttyprintk. [ 110.525462][ T9217] 9p: Could not find request transport: fdr5no=_6L$϶"20x0000000000000003 [ 110.557225][ T9217] 9p: Could not find request transport: fdr5no=_6L$϶"20x0000000000000003 [ 110.580734][ T9217] 9p: Could not find request transport: fdr5no=_6L$϶"20x0000000000000003 [ 110.609174][ T9217] 9p: Could not find request transport: fdr5no=_6L$϶"20x0000000000000003 [ 110.637109][ T9217] 9p: Could not find request transport: fdr5no=_6L$϶"20x0000000000000003 [ 110.675957][ T9217] 9p: Could not find request transport: fdr5no=_6L$϶"20x0000000000000003 [ 110.706983][ T9217] 9p: Could not find request transport: fdr5no=_6L$϶"20x0000000000000003 [ 110.739260][ T9217] 9p: Could not find request transport: fdr5no=_6L$϶"20x0000000000000003 [ 110.750172][ T9234] kvm_intel: kvm [9233]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x65b7 [ 110.761265][ T9217] 9p: Could not find request transport: fdr5no=_6L$϶"20x0000000000000003 [ 110.765067][ T9234] kvm: kvm [9233]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x3b7 [ 110.768028][ T9234] kvm: kvm [9233]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x14a2 [ 110.783170][ T9217] 9p: Could not find request transport: fdr5no=_6L$϶"20x0000000000000003 [ 110.786583][ T9234] kvm: kvm [9233]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xac3c [ 110.803057][ T9234] kvm: kvm [9233]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7b28 [ 110.804546][ T9217] 9p: Could not find request transport: fdr5no=_6L$϶"20x0000000000000003 [ 110.805992][ T9234] kvm: kvm [9233]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xfe14 [ 110.826505][ T9217] 9p: Could not find request transport: fdr5no=_6L$϶"20x0000000000000003 [ 110.845059][ T9217] 9p: Could not find request transport: fdr5no=_6L$϶"20x0000000000000003 [ 110.865250][ T9217] 9p: Could not find request transport: fdr5no=_6L$϶"20x0000000000000003 [ 110.884254][ T9217] 9p: Could not find request transport: fdr5no=_6L$϶"20x0000000000000003 [ 110.908061][ T9217] 9p: Could not find request transport: fdr5no=_6L$϶"20x0000000000000003 [ 110.928086][ T9217] 9p: Could not find request transport: fdr5no=_6L$϶"20x0000000000000003 [ 110.948578][ T9217] 9p: Could not find request transport: fdr5no=_6L$϶"20x0000000000000003 [ 110.980425][ T9217] 9p: Could not find request transport: fdr5no=_6L$϶"20x0000000000000003 [ 111.001686][ T9217] 9p: Could not find request transport: fdr5no=_6L$϶"20x0000000000000003 [ 111.010777][ T9233] can0 (unregistered): slcan off ttyprintk. [ 111.022908][ T9217] 9p: Could not find request transport: fdr5no=_6L$϶"20x0000000000000003 [ 111.032341][ T9217] 9p: Could not find request transport: fdr5no=_6L$϶"20x0000000000000003 [ 112.279877][ T841] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 112.429982][ T841] usb 6-1: Using ep0 maxpacket: 8 [ 112.432922][ T841] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 112.436133][ T841] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.440191][ T841] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.443342][ T841] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.446612][ T841] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.450887][ T841] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 112.453847][ T841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.666243][ T841] usb 6-1: usb_control_msg returned -32 [ 112.668808][ T841] usbtmc 6-1:16.0: can't read capabilities [ 113.020722][ T5947] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 113.023536][ T5947] Bluetooth: hci0: Injecting HCI hardware error event [ 113.026438][ T5947] Bluetooth: hci0: hardware error 0x00 [ 113.026591][ T9299] tmpfs: Unknown parameter 'quoa' [ 114.232933][ T40] kauditd_printk_skb: 159 callbacks suppressed [ 114.232944][ T40] audit: type=1400 audit(1769936951.208:1496): avc: denied { unmount } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 115.099853][ T5947] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 115.122124][ T60] usb 6-1: USB disconnect, device number 21 [ 115.125993][ T40] audit: type=1400 audit(1769936952.098:1497): avc: denied { unmount } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 115.156289][ T40] audit: type=1400 audit(1769936952.128:1498): avc: denied { map_create } for pid=9302 comm="syz.1.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 115.164090][ T40] audit: type=1400 audit(1769936952.128:1499): avc: denied { mounton } for pid=9302 comm="syz.1.993" path="/186/file0" dev="tmpfs" ino=1024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 115.174138][ T40] audit: type=1400 audit(1769936952.128:1500): avc: denied { read } for pid=9302 comm="syz.1.993" dev="nsfs" ino=4026532886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 115.183383][ T40] audit: type=1400 audit(1769936952.138:1501): avc: denied { open } for pid=9302 comm="syz.1.993" path="net:[4026532886]" dev="nsfs" ino=4026532886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 115.193249][ T40] audit: type=1400 audit(1769936952.138:1502): avc: denied { create } for pid=9302 comm="syz.1.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 115.199768][ T40] audit: type=1400 audit(1769936952.138:1503): avc: denied { write } for pid=9302 comm="syz.1.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 115.206243][ T40] audit: type=1400 audit(1769936952.138:1504): avc: denied { read } for pid=9302 comm="syz.1.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 115.327633][ T9308] netlink: 'syz.1.994': attribute type 5 has an invalid length. [ 115.361783][ T40] audit: type=1400 audit(1769936952.338:1505): avc: denied { create } for pid=9310 comm="syz.1.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 115.493541][ T9317] geneve2: entered promiscuous mode [ 115.506309][ T9317] exFAT-fs (nullb0): invalid boot record signature [ 115.509476][ T9317] exFAT-fs (nullb0): failed to read boot sector [ 115.514191][ T9317] exFAT-fs (nullb0): failed to recognize exfat type [ 115.543646][ T9321] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 115.548735][ T9321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.574265][ T9325] fuse: Unknown parameter '0000000000000000000400000000000000000000005' [ 115.714531][ T9336] pim6reg9: entered allmulticast mode [ 116.595056][ T9346] support for cryptoloop has been removed. Use dm-crypt instead. [ 116.599876][ T9346] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1007'. [ 116.719070][ T9349] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1008'. [ 117.201623][ T9377] 9p: Bad value for 'version' [ 117.289881][ T53] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 117.348122][ T5942] libceph: connect (1)[c::]:6789 error -101 [ 117.351922][ T5942] libceph: mon0 (1)[c::]:6789 connect error [ 117.458935][ T9409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.459774][ T53] usb 6-1: Invalid ep0 maxpacket: 64 [ 117.461997][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.470789][ T9408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.474543][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.589893][ T53] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 117.611477][ T54] libceph: connect (1)[c::]:6789 error -101 [ 117.613524][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 117.739908][ T53] usb 6-1: Invalid ep0 maxpacket: 64 [ 117.741913][ T53] usb usb6-port1: attempt power cycle [ 118.079805][ T53] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 118.100377][ T53] usb 6-1: Invalid ep0 maxpacket: 64 [ 118.120128][ T54] libceph: connect (1)[c::]:6789 error -101 [ 118.123108][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 118.171135][ T9401] ceph: No mds server is up or the cluster is laggy [ 118.229995][ T53] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 118.251238][ T53] usb 6-1: Invalid ep0 maxpacket: 64 [ 118.253305][ T53] usb usb6-port1: unable to enumerate USB device [ 118.381693][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.433564][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.741432][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.097468][ T40] kauditd_printk_skb: 118 callbacks suppressed [ 120.097485][ T40] audit: type=1400 audit(1769936957.068:1624): avc: denied { create } for pid=9431 comm="syz.1.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 120.100252][ T5947] Bluetooth: hci2: unexpected event for opcode 0x0402 [ 120.106486][ T40] audit: type=1400 audit(1769936957.068:1625): avc: denied { mounton } for pid=9431 comm="syz.1.1035" path="/201/file2" dev="tmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 120.116231][ T40] audit: type=1400 audit(1769936957.068:1626): avc: denied { getopt } for pid=9431 comm="syz.1.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 120.123158][ T40] audit: type=1400 audit(1769936957.098:1627): avc: denied { read write } for pid=5935 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 120.130830][ T40] audit: type=1400 audit(1769936957.098:1628): avc: denied { open } for pid=5935 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 120.138411][ T40] audit: type=1400 audit(1769936957.098:1629): avc: denied { ioctl } for pid=5935 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 120.143819][ T9436] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1036'. [ 120.146519][ T40] audit: type=1400 audit(1769936957.118:1630): avc: denied { read } for pid=9433 comm="syz.1.1036" name="nvme-fabrics" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.156557][ T40] audit: type=1400 audit(1769936957.118:1631): avc: denied { open } for pid=9433 comm="syz.1.1036" path="/dev/nvme-fabrics" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.245008][ T40] audit: type=1400 audit(1769936957.218:1632): avc: denied { create } for pid=9442 comm="syz.1.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.251374][ T40] audit: type=1400 audit(1769936957.228:1633): avc: denied { setopt } for pid=9442 comm="syz.1.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.431382][ T9447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1039'. [ 120.461831][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.660937][ T9451] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1040'. [ 120.726682][ T9457] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1042'. [ 120.796754][ T9463] netem: incorrect gi model size [ 120.798669][ T9463] netem: change failed [ 120.846063][ T9463] netlink: 'syz.3.1044': attribute type 12 has an invalid length. [ 120.966966][ T9473] netlink: 'syz.3.1047': attribute type 1 has an invalid length. [ 120.988692][ T9473] 8021q: adding VLAN 0 to HW filter on device bond10 [ 120.999827][ T9473] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 121.008691][ T9473] bond10: (slave wlan0): Enslaving as an active interface with an up link [ 121.181134][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.261337][ T9482] TCP: TCP_TX_DELAY enabled [ 121.266757][ T9482] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1050'. [ 121.269595][ T9482] bond0: entered allmulticast mode [ 121.271619][ T9482] bond_slave_0: entered allmulticast mode [ 121.273512][ T9482] bond_slave_1: entered allmulticast mode [ 121.502683][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.549824][ T53] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 121.583343][ T9499] overlayfs: failed to clone upperpath [ 121.699832][ T53] usb 6-1: Using ep0 maxpacket: 16 [ 121.703443][ T53] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.706969][ T53] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.712854][ T53] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.716583][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.720284][ T53] usb 6-1: Product: syz [ 121.722166][ T53] usb 6-1: Manufacturer: syz [ 121.724033][ T53] usb 6-1: SerialNumber: syz [ 121.820152][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.345275][ T53] usb 6-1: 0:2 : does not exist [ 122.351336][ T53] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 122.367047][ T53] usb 6-1: USB disconnect, device number 26 [ 122.386680][ T6295] udevd[6295]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.453751][ T5947] Bluetooth: hci1: unexpected event for opcode 0x040d [ 122.511258][ T5295] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 122.514378][ T5295] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 122.517792][ T5295] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 122.520645][ T9510] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 122.530964][ T5295] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 122.534270][ T5295] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 122.545816][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.635569][ T9507] chnl_net:caif_netlink_parms(): no params data found [ 122.692666][ T9507] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.695625][ T9507] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.698498][ T9507] bridge_slave_0: entered allmulticast mode [ 122.702225][ T9507] bridge_slave_0: entered promiscuous mode [ 122.706322][ T9507] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.708544][ T9507] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.711405][ T9507] bridge_slave_1: entered allmulticast mode [ 122.714474][ T9507] bridge_slave_1: entered promiscuous mode [ 122.734768][ T9507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.740819][ T9507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.760937][ T9507] team0: Port device team_slave_0 added [ 122.765074][ T9507] team0: Port device team_slave_1 added [ 122.786616][ T9507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.789114][ T9507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.789975][ T6021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.800024][ T9507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.807683][ T9507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.810508][ T9507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.820477][ T9507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.851249][ T9507] hsr_slave_0: entered promiscuous mode [ 122.853859][ T9507] hsr_slave_1: entered promiscuous mode [ 122.856742][ T9507] debugfs: 'hsr0' already exists in 'hsr' [ 122.858599][ T9507] Cannot create hsr debugfs directory [ 122.994206][ T9507] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 123.001518][ T9507] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 123.009008][ T9507] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 123.016308][ T9507] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 123.045456][ T9507] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.048563][ T9507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.051890][ T9507] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.054925][ T9507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.112625][ T9507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.126832][ T6670] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.132803][ T6670] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.143221][ T9507] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.149347][ T6683] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.151591][ T6683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.157822][ T6683] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.160082][ T6683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.172022][ T9538] input: syz1 as /devices/virtual/input/input10 [ 123.275083][ T9507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.306216][ T9552] batadv_slave_1: entered promiscuous mode [ 123.316816][ T9551] batadv_slave_1: left promiscuous mode [ 123.435868][ T9507] veth0_vlan: entered promiscuous mode [ 123.443910][ T9507] veth1_vlan: entered promiscuous mode [ 123.470797][ T9507] veth0_macvtap: entered promiscuous mode [ 123.474901][ T9507] veth1_macvtap: entered promiscuous mode [ 123.483914][ T9507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.491207][ T9507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.496881][ T6707] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.501028][ T6707] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.504935][ T6707] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.507975][ T6707] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.558388][ T6661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.562107][ T6661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.579612][ T6661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.584253][ T6661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.591839][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.742751][ T6021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.823788][ T5947] Bluetooth: hci1: unexpected event for opcode 0x202a [ 123.896653][ T9590] team0: Port device dummy0 removed [ 123.901976][ T9590] bond0: (slave bridge_slave_1): Releasing backup interface [ 123.907800][ T9590] bond0: (slave bond_slave_0): Releasing backup interface [ 123.913578][ T9590] bond0: (slave bond_slave_1): Releasing backup interface [ 123.920159][ T9590] team0: Port device team_slave_0 removed [ 123.925025][ T9590] team0: Port device team_slave_1 removed [ 123.927288][ T9590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.931277][ T9590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.934895][ T9590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.937300][ T9590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.940969][ T9590] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 123.958337][ T9590] team0: Mode changed to "loadbalance" [ 123.960848][ T9590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1078'. [ 124.082030][ T9598] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 124.144152][ T9601] fuse: Bad value for 'user_id' [ 124.145753][ T9601] fuse: Bad value for 'user_id' [ 124.178149][ T9607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1081'. [ 124.230185][ T9602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1079'. [ 124.318022][ T9613] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 124.539964][ T5947] Bluetooth: hci4: command tx timeout [ 124.623493][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.976444][ T9617] erspan0: entered promiscuous mode [ 125.106353][ T40] kauditd_printk_skb: 168 callbacks suppressed [ 125.106365][ T40] audit: type=1400 audit(1769936962.078:1802): avc: denied { create } for pid=9627 comm="syz.4.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 125.192232][ T40] audit: type=1400 audit(1769936962.168:1803): avc: denied { read } for pid=9632 comm="syz.4.1092" dev="nsfs" ino=4026533892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 125.199958][ T40] audit: type=1400 audit(1769936962.168:1804): avc: denied { open } for pid=9632 comm="syz.4.1092" path="net:[4026533892]" dev="nsfs" ino=4026533892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 125.207132][ T40] audit: type=1400 audit(1769936962.168:1805): avc: denied { create } for pid=9632 comm="syz.4.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.213477][ T40] audit: type=1400 audit(1769936962.178:1806): avc: denied { ioctl } for pid=9632 comm="syz.4.1092" path="socket:[24173]" dev="sockfs" ino=24173 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.221377][ T40] audit: type=1400 audit(1769936962.178:1807): avc: denied { read } for pid=9632 comm="syz.4.1092" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 125.228395][ T40] audit: type=1400 audit(1769936962.178:1808): avc: denied { open } for pid=9632 comm="syz.4.1092" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 125.235602][ T40] audit: type=1400 audit(1769936962.178:1809): avc: denied { ioctl } for pid=9632 comm="syz.4.1092" path="/dev/hpet" dev="devtmpfs" ino=630 ioctlcmd=0x6610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 125.243838][ T40] audit: type=1400 audit(1769936962.218:1810): avc: denied { allowed } for pid=9635 comm="syz.4.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 125.249915][ T40] audit: type=1400 audit(1769936962.218:1811): avc: denied { create } for pid=9635 comm="syz.4.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.429811][ T5295] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 125.429888][ T5947] Bluetooth: hci5: command 0x1003 tx timeout [ 125.546419][ T9643] overlay: ./file0 is not a directory [ 125.670527][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.784895][ T9656] binder: BINDER_SET_CONTEXT_MGR already set [ 125.787332][ T9656] binder: 9654:9656 ioctl 4018620d 200000000040 returned -16 [ 126.173683][ T9670] x_tables: ip6_tables: CT target: only valid in raw table, not syz1 [ 126.201164][ T9671] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.1104'. [ 126.205188][ T9671] net_ratelimit: 1 callbacks suppressed [ 126.205203][ T9671] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 126.449861][ T53] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 126.579876][ T53] usb 6-1: device descriptor read/64, error -71 [ 126.601911][ T9676] Falling back ldisc for ttyS3. [ 126.619843][ T5295] Bluetooth: hci4: command tx timeout [ 126.696735][ T9682] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1110'. [ 126.703608][ T6485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.756352][ T9683] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1110'. [ 126.763465][ T9683] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.767272][ T9683] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.775706][ T9683] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1110'. [ 126.779514][ T9683] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.782486][ T9683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.785782][ T9683] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.788640][ T9683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.792845][ T9683] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1110'. [ 126.796905][ T9683] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.799934][ T9683] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.839807][ T53] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 126.969806][ T53] usb 6-1: device descriptor read/64, error -71 [ 127.079999][ T53] usb usb6-port1: attempt power cycle [ 127.191702][ T9686] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1111'. [ 127.419852][ T53] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 127.440200][ T53] usb 6-1: device descriptor read/8, error -71 [ 127.507550][ T9711] loop1: detected capacity change from 0 to 7 [ 127.513302][ C3] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 127.516396][ C3] buffer_io_error: 8 callbacks suppressed [ 127.516404][ C3] Buffer I/O error on dev loop1, logical block 0, async page read [ 127.521967][ C3] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 127.525022][ C3] Buffer I/O error on dev loop1, logical block 0, async page read [ 127.528580][ C3] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 127.531707][ C3] Buffer I/O error on dev loop1, logical block 0, async page read [ 127.534658][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 127.538820][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 127.543064][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 127.547392][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 127.551592][ C2] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 127.554685][ C2] Buffer I/O error on dev loop1, logical block 0, async page read [ 127.558457][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 127.562536][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 127.565959][ T9711] ldm_validate_partition_table(): Disk read failed. [ 127.568868][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 127.573035][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 127.576689][ C2] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 127.579762][ C2] Buffer I/O error on dev loop1, logical block 0, async page read [ 127.584836][ C2] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 127.588130][ C2] Buffer I/O error on dev loop1, logical block 0, async page read [ 127.592664][ T9711] Dev loop1: unable to read RDB block 0 [ 127.594803][ T9711] loop1: unable to read partition table [ 127.596764][ T9711] loop1: partition table beyond EOD, truncated [ 127.598766][ T9711] loop_reread_partitions: partition scan of loop1 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 127.679934][ T53] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 127.701126][ T53] usb 6-1: device descriptor read/8, error -71 [ 127.707804][ T9724] bond0: (slave wlan1): Releasing backup interface [ 127.714062][ T9724] mac80211_hwsim hwsim5 wlan1 (unregistering): left promiscuous mode [ 127.724091][ T9727] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1126'. [ 127.744431][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.811027][ T53] usb usb6-port1: unable to enumerate USB device [ 127.864108][ T9736] netlink: 'syz.3.1130': attribute type 2 has an invalid length. [ 127.906286][ T9743] netlink: 'syz.3.1132': attribute type 10 has an invalid length. [ 127.927455][ T9745] SELinux: Context system_u:object_r:pam_var_run_t:s0 is not valid (left unmapped). [ 127.929031][ T9743] syz_tun: entered promiscuous mode [ 127.935070][ T9743] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 127.961105][ T9743] 8021q: adding VLAN 0 to HW filter on device bond11 [ 127.967493][ T9743] netlink: zone id is out of range [ 127.969563][ T9743] netlink: zone id is out of range [ 127.972000][ T9743] netlink: set zone limit has 8 unknown bytes [ 127.977235][ T9748] xfrm0 speed is unknown, defaulting to 1000 [ 127.979977][ T9748] xfrm0 speed is unknown, defaulting to 1000 [ 127.984804][ T9748] xfrm0 speed is unknown, defaulting to 1000 [ 127.998716][ T9748] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 128.020295][ T9748] xfrm0 speed is unknown, defaulting to 1000 [ 128.023310][ T9748] xfrm0 speed is unknown, defaulting to 1000 [ 128.025619][ T9752] overlayfs: failed to resolve './file0': -2 [ 128.025893][ T9748] xfrm0 speed is unknown, defaulting to 1000 [ 128.040171][ T9748] xfrm0 speed is unknown, defaulting to 1000 [ 128.042838][ T9748] xfrm0 speed is unknown, defaulting to 1000 [ 128.220184][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.316680][ T9767] openvswitch: netlink: Flow key attr not present in new flow. [ 128.578497][ T9780] netlink: 'syz.4.1143': attribute type 39 has an invalid length. [ 128.699864][ T5295] Bluetooth: hci4: command tx timeout [ 128.794258][ T6485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.861697][ T6021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.069154][ T9793] xt_cluster: node mask cannot exceed total number of nodes [ 129.071038][ T9794] 9pnet_fd: p9_fd_create_unix (9794): problem connecting socket: ./file0: -111 [ 129.071186][ T9795] overlayfs: failed to clone lowerpath [ 129.250516][ T9800] GUP no longer grows the stack in syz.1.1149 (9800): 200000004000-20000000a000 (200000002000) [ 129.254256][ T9800] CPU: 2 UID: 0 PID: 9800 Comm: syz.1.1149 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.254277][ T9800] Tainted: [L]=SOFTLOCKUP [ 129.254282][ T9800] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.254289][ T9800] Call Trace: [ 129.254293][ T9800] [ 129.254298][ T9800] dump_stack_lvl+0x100/0x190 [ 129.254331][ T9800] gup_vma_lookup.cold+0x83/0x96 [ 129.254348][ T9800] __get_user_pages+0x241/0x34d0 [ 129.254369][ T9800] ? find_held_lock+0x2b/0x80 [ 129.254383][ T9800] ? mtree_load+0x311/0xa40 [ 129.254401][ T9800] ? __pfx___get_user_pages+0x10/0x10 [ 129.254421][ T9800] get_user_pages_remote+0x3d2/0xb10 [ 129.254437][ T9800] ? mas_new_root+0x620/0x6e0 [ 129.254450][ T9800] ? __pfx_get_user_pages_remote+0x10/0x10 [ 129.254468][ T9800] ? __access_remote_vm+0x84d/0xa70 [ 129.254487][ T9800] __access_remote_vm+0x3ba/0xa70 [ 129.254504][ T9800] ? do_raw_spin_lock+0x128/0x260 [ 129.254518][ T9800] ? __pfx___access_remote_vm+0x10/0x10 [ 129.254534][ T9800] ? alloc_pages_noprof+0x233/0x390 [ 129.254550][ T9800] proc_pid_cmdline_read+0x4f2/0x8c0 [ 129.254567][ T9800] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 129.254584][ T9800] ? rw_verify_area+0xce/0x6d0 [ 129.254595][ T9800] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 129.254609][ T9800] vfs_readv+0x5d8/0x8d0 [ 129.254623][ T9800] ? __pfx_vfs_readv+0x10/0x10 [ 129.254643][ T9800] ? __fget_files+0x21f/0x3d0 [ 129.254659][ T9800] ? do_preadv+0x1ac/0x270 [ 129.254669][ T9800] do_preadv+0x1ac/0x270 [ 129.254680][ T9800] ? __pfx_do_preadv+0x10/0x10 [ 129.254695][ T9800] do_syscall_64+0xc9/0xf80 [ 129.254709][ T9800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.254721][ T9800] RIP: 0033:0x7f5109b9aeb9 [ 129.254730][ T9800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.254741][ T9800] RSP: 002b:00007f510ab18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 129.254752][ T9800] RAX: ffffffffffffffda RBX: 00007f5109e15fa0 RCX: 00007f5109b9aeb9 [ 129.254759][ T9800] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000006 [ 129.254766][ T9800] RBP: 00007f5109c08c1f R08: 0000000000000000 R09: 0000000000000000 [ 129.254772][ T9800] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 129.254778][ T9800] R13: 00007f5109e16038 R14: 00007f5109e15fa0 R15: 00007ffce37f60e8 [ 129.254791][ T9800] [ 129.255952][ T9800] __nla_validate_parse: 2 callbacks suppressed [ 129.255961][ T9800] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1149'. [ 129.381637][ T9805] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1150'. [ 129.389898][ T9805] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1150'. [ 129.394729][ T9805] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1150'. [ 129.398685][ T9805] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1150'. [ 129.404551][ T9805] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1150'. [ 129.409130][ T9805] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1150'. [ 129.416904][ T9805] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1150'. [ 129.421561][ T9805] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1150'. [ 129.425636][ T9805] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1150'. [ 129.427380][ T9808] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 129.567445][ T5295] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 129.693529][ T9847] IPVS: Error connecting to the multicast addr [ 129.813901][ T9866] binder_alloc: 9864: binder_alloc_buf, no vma [ 129.820036][ T9866] raw_sendmsg: syz.3.1168 forgot to set AF_INET. Fix it! [ 129.839741][ T841] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 129.861886][ T9876] netlink: 'syz.3.1169': attribute type 1 has an invalid length. [ 129.879195][ T9878] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 129.907224][ T9880] overlay: Bad value for 'workdir' [ 129.989728][ T841] usb 9-1: device descriptor read/64, error -71 [ 130.008205][ T5295] Bluetooth: hci1: unexpected event for opcode 0x080c [ 130.249747][ T841] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 130.379873][ T841] usb 9-1: device descriptor read/64, error -71 [ 130.395435][ T40] kauditd_printk_skb: 226 callbacks suppressed [ 130.395447][ T40] audit: type=1400 audit(1769936967.368:2038): avc: denied { write } for pid=9897 comm="syz.0.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 130.490038][ T841] usb usb9-port1: attempt power cycle [ 130.773661][ T9906] smc: net device bond0 applied user defined pnetid SYZ2 [ 130.790029][ T5295] Bluetooth: hci4: command tx timeout [ 130.800884][ T9906] smc: removing net device bond0 with user defined pnetid SYZ2 [ 130.806042][ T9906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.811872][ T9906] bond_slave_0: left allmulticast mode [ 130.817982][ T9906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.821688][ T9906] bond_slave_1: left allmulticast mode [ 130.824957][ T9906] bond0 (unregistering): Released all slaves [ 130.830303][ T841] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 130.850936][ T841] usb 9-1: device descriptor read/8, error -71 [ 130.948861][ T9912] overlayfs: failed to clone upperpath [ 130.953886][ T40] audit: type=1400 audit(1769936967.928:2039): avc: denied { write } for pid=9911 comm="syz.3.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 131.089752][ T5942] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 131.109970][ T841] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 131.130357][ T841] usb 9-1: device descriptor read/8, error -71 [ 131.249747][ T5942] usb 6-1: device descriptor read/64, error -71 [ 131.252529][ T841] usb usb9-port1: unable to enumerate USB device [ 131.499762][ T5942] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 131.629878][ T5942] usb 6-1: device descriptor read/64, error -71 [ 131.750275][ T5942] usb usb6-port1: attempt power cycle [ 131.900306][ T6021] net_ratelimit: 3 callbacks suppressed [ 131.900320][ T6021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.905128][ T6021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.099754][ T5942] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 132.120749][ T5942] usb 6-1: device descriptor read/8, error -71 [ 132.359775][ T5942] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 132.380162][ T5942] usb 6-1: device descriptor read/8, error -71 [ 132.499994][ T5942] usb usb6-port1: unable to enumerate USB device [ 132.653889][ T40] audit: type=1400 audit(1769936969.628:2040): avc: denied { ioctl } for pid=9920 comm="syz.4.1182" path="socket:[24383]" dev="sockfs" ino=24383 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 132.762207][ T40] audit: type=1400 audit(1769936969.738:2041): avc: denied { mounton } for pid=9922 comm="syz.4.1183" path="/41/file0" dev="tmpfs" ino=230 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 132.770682][ T40] audit: type=1400 audit(1769936969.738:2042): avc: denied { mount } for pid=9922 comm="syz.4.1183" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 132.779726][ T40] audit: type=1400 audit(1769936969.748:2043): avc: denied { ioctl } for pid=9922 comm="syz.4.1183" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64b8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 132.790600][ T40] audit: type=1400 audit(1769936969.748:2044): avc: denied { perfmon } for pid=9922 comm="syz.4.1183" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 132.792375][ T9923] overlay: ./file0 is not a directory [ 132.799097][ T40] audit: type=1400 audit(1769936969.748:2045): avc: denied { prog_load } for pid=9922 comm="syz.4.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 132.809053][ T40] audit: type=1400 audit(1769936969.748:2046): avc: denied { bpf } for pid=9922 comm="syz.4.1183" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 132.817770][ T40] audit: type=1400 audit(1769936969.758:2047): avc: denied { prog_run } for pid=9922 comm="syz.4.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 132.869753][ T5295] Bluetooth: hci4: command tx timeout [ 132.943508][ T6485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.213832][ T9953] overlayfs: failed to clone upperpath [ 133.307799][ T9956] gfs2: gfs2 mount does not exist [ 133.340665][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.816557][ T9983] fuse: Bad value for 'fd' [ 133.817333][ T9985] fuse: Bad value for 'fd' [ 133.899865][ T9988] xfrm0 speed is unknown, defaulting to 1000 [ 133.923483][ T9984] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 133.926341][ T9984] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 133.929166][ T9984] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 133.932642][ T9984] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 133.935447][ T9984] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 133.941191][ T9984] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 133.993557][ T6705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.999266][ T841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.009590][ T6485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.081125][ T9996] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 134.181266][T10003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.184571][T10003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.201139][T10005] netlink: 'syz.1.1207': attribute type 6 has an invalid length. [ 134.298725][T10013] mkiss: ax0: crc mode is auto. [ 134.729938][ T60] usb 6-1: new low-speed USB device number 35 using dummy_hcd [ 134.879740][ T60] usb 6-1: Invalid ep0 maxpacket: 16 [ 134.950038][ T6661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.999821][ T841] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 135.019938][ T60] usb 6-1: new low-speed USB device number 36 using dummy_hcd [ 135.151207][ T841] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 135.154010][ T841] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 135.157180][ T841] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 135.160206][ T841] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 135.163647][ T841] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 135.168256][ T841] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 135.171386][ T841] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 135.173969][ T841] usb 9-1: Product: syz [ 135.175318][ T841] usb 9-1: Manufacturer: syz [ 135.179867][ T60] usb 6-1: Invalid ep0 maxpacket: 16 [ 135.182760][ T60] usb usb6-port1: attempt power cycle [ 135.183006][ T841] cdc_wdm 9-1:1.0: skipping garbage [ 135.186710][ T841] cdc_wdm 9-1:1.0: skipping garbage [ 135.190705][ T841] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 135.192668][ T841] cdc_wdm 9-1:1.0: Unknown control protocol [ 135.437893][ T5982] usb 9-1: USB disconnect, device number 6 [ 135.437909][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 135.442125][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 135.444086][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 135.529900][ T60] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 135.550122][ T60] usb 6-1: Invalid ep0 maxpacket: 16 [ 135.643637][ T40] kauditd_printk_skb: 131 callbacks suppressed [ 135.643648][ T40] audit: type=1400 audit(1769936972.618:2179): avc: denied { ioctl } for pid=10031 comm="syz.4.1217" path="/dev/input/event2" dev="devtmpfs" ino=947 ioctlcmd=0x4520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 135.668570][T10055] __nla_validate_parse: 27 callbacks suppressed [ 135.668588][T10055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1225'. [ 135.679825][ T60] usb 6-1: new low-speed USB device number 38 using dummy_hcd [ 135.703767][ T60] usb 6-1: Invalid ep0 maxpacket: 16 [ 135.706420][ T60] usb usb6-port1: unable to enumerate USB device [ 135.724784][ T40] audit: type=1400 audit(1769936972.698:2180): avc: denied { module_request } for pid=10056 comm="syz.0.1226" kmod="netdev-netdevsim0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 135.755101][ T40] audit: type=1400 audit(1769936972.728:2181): avc: denied { sys_module } for pid=10056 comm="syz.0.1226" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 135.775998][ T40] audit: type=1400 audit(1769936972.748:2182): avc: denied { write } for pid=10056 comm="syz.0.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 135.791019][ T40] audit: type=1400 audit(1769936972.768:2183): avc: denied { create } for pid=10056 comm="syz.0.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 135.798404][ T40] audit: type=1400 audit(1769936972.768:2184): avc: denied { read } for pid=10056 comm="syz.0.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 135.875600][T10064] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1228'. [ 135.900196][ T5295] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.905643][ T40] audit: type=1400 audit(1769936972.878:2185): avc: denied { mounton } for pid=10065 comm="syz.3.1229" path="/266/file0" dev="tmpfs" ino=1435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 135.913866][ T40] audit: type=1400 audit(1769936972.878:2186): avc: denied { name_bind } for pid=10065 comm="syz.3.1229" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 135.922590][ T40] audit: type=1400 audit(1769936972.878:2187): avc: denied { node_bind } for pid=10065 comm="syz.3.1229" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 135.931141][ T40] audit: type=1400 audit(1769936972.878:2188): avc: denied { write } for pid=10065 comm="syz.3.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 135.989776][ T5295] Bluetooth: hci4: command 0x0c1a tx timeout [ 135.989893][ T5947] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.990102][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 136.573861][T10112] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1234'. [ 136.670001][ T5947] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 136.739087][T10124] netlink: 'syz.0.1236': attribute type 8 has an invalid length. [ 136.741436][T10124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1236'. [ 137.102135][ T6485] net_ratelimit: 38 callbacks suppressed [ 137.102149][ T6485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.299785][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.303097][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.481645][T10147] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1240'. [ 137.587477][T10149] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 137.587477][T10149] program syz.1.1241 not setting count and/or reply_len properly [ 137.631200][T10129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.824078][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.826209][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.856676][T10179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1248'. [ 137.862621][T10182] overlayfs: failed to clone upperpath [ 138.009760][ T6485] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 138.141779][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.172619][ T6485] usb 6-1: unable to get BOS descriptor or descriptor too short [ 138.178047][ T6485] usb 6-1: too many configurations: 254, using maximum allowed: 8 [ 138.181767][ T6485] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 138.184139][ T6485] usb 6-1: can't read configurations, error -71 [ 138.670410][T10189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1252'. [ 138.779332][T10193] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1253'. [ 142.942009][ T6698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.946778][ T6485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.950684][ T841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.220514][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.260074][ T6485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.263538][ T6485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.310342][ T6485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.349964][ T6485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.731273][ T40] kauditd_printk_skb: 128 callbacks suppressed [ 153.731292][ T40] audit: type=1400 audit(1769936990.708:2317): avc: denied { execute } for pid=10194 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 153.750244][ T40] audit: type=1400 audit(1769936990.708:2318): avc: denied { execute_no_trans } for pid=10194 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 153.820273][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.823642][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.842508][ T1421] ================================================================== [ 153.845757][ T1421] BUG: KASAN: slab-use-after-free in handle_tx+0x5c2/0x620 [ 153.848060][ T1421] Read of size 1 at addr ffff88802b0ea490 by task aoe_tx0/1421 [ 153.851404][ T40] audit: type=1400 audit(1769936990.828:2319): avc: denied { write } for pid=5920 comm="syz-executor" path="pipe:[6071]" dev="pipefs" ino=6071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 153.852345][ T1421] [ 153.852356][ T1421] CPU: 2 UID: 0 PID: 1421 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.852371][ T1421] Tainted: [L]=SOFTLOCKUP [ 153.852376][ T1421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.852383][ T1421] Call Trace: [ 153.852387][ T1421] [ 153.852391][ T1421] dump_stack_lvl+0x100/0x190 [ 153.852408][ T1421] print_report+0x156/0x4c9 [ 153.852422][ T1421] ? __virt_addr_valid+0x81/0x620 [ 153.852433][ T1421] ? __phys_addr+0xe8/0x180 [ 153.852443][ T1421] ? handle_tx+0x5c2/0x620 [ 153.852460][ T1421] kasan_report+0xdf/0x1a0 [ 153.852482][ T1421] ? handle_tx+0x5c2/0x620 [ 153.852504][ T1421] handle_tx+0x5c2/0x620 [ 153.852526][ T1421] dev_hard_start_xmit+0x127/0x6c0 [ 153.852556][ T1421] __dev_queue_xmit+0x6dd/0x46f0 [ 153.852575][ T1421] ? finish_task_switch.isra.0+0x204/0xb70 [ 153.852599][ T1421] ? __pfx___dev_queue_xmit+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 153.852618][ T1421] ? __lock_acquire+0x4a5/0x2630 [ 153.852634][ T1421] ? ref_tracker_free+0x37e/0x6c0 [ 153.852658][ T1421] ? do_raw_spin_lock+0x128/0x260 [ 153.852688][ T1421] ? tx+0xa4/0x130 [ 153.852697][ T1421] ? rcu_is_watching+0x12/0xc0 [ 153.852712][ T1421] ? __pfx_tx+0x10/0x10 [ 153.852721][ T1421] tx+0xc4/0x130 [ 153.852730][ T1421] kthread+0x1d8/0x3c0 [ 153.852747][ T1421] ? __kthread_parkme+0xbb/0x230 [ 153.852769][ T1421] ? __pfx_kthread+0x10/0x10 [ 153.852790][ T1421] ? rcu_is_watching+0x12/0xc0 [ 153.852810][ T1421] ? __pfx_default_wake_function+0x10/0x10 [ 153.852856][ T1421] ? __kthread_parkme+0x18c/0x230 [ 153.852889][ T1421] ? __pfx_kthread+0x10/0x10 [ 153.852904][ T1421] kthread+0x3b3/0x730 [ 153.852916][ T1421] ? __pfx_kthread+0x10/0x10 [ 153.852926][ T1421] ? ret_from_fork+0x79/0xaf0 [ 153.852938][ T1421] ? ret_from_fork+0x79/0xaf0 [ 153.852949][ T1421] ? rcu_is_watching+0x12/0xc0 [ 153.852962][ T1421] ? __pfx_kthread+0x10/0x10 [ 153.852973][ T1421] ret_from_fork+0x754/0xaf0 [ 153.852985][ T1421] ? __pfx_ret_from_fork+0x10/0x10 [ 153.852998][ T1421] ? __switch_to+0x7b9/0x10c0 [ 153.853012][ T1421] ? __pfx_kthread+0x10/0x10 [ 153.853023][ T1421] ret_from_fork_asm+0x1a/0x30 [ 153.853036][ T1421] [ 153.853040][ T1421] [ 153.933204][ T1421] Allocated by task 9460: [ 153.934590][ T1421] kasan_save_stack+0x30/0x50 [ 153.936126][ T1421] kasan_save_track+0x14/0x30 [ 153.937648][ T1421] __kasan_kmalloc+0xaa/0xb0 [ 153.939135][ T1421] alloc_tty_struct+0x96/0x8c0 [ 153.940701][ T1421] tty_init_dev.part.0+0x20/0x470 [ 153.942323][ T1421] tty_open+0xa63/0xfa0 [ 153.943655][ T1421] chrdev_open+0x234/0x6a0 [ 153.945108][ T1421] do_dentry_open+0x73e/0x1570 [ 153.946670][ T1421] vfs_open+0x82/0x3f0 [ 153.947992][ T1421] path_openat+0x21dc/0x3120 [ 153.949480][ T1421] do_filp_open+0x1f7/0x420 [ 153.950942][ T1421] do_sys_openat2+0x12e/0x220 [ 153.952478][ T1421] __x64_sys_openat+0x12d/0x210 [ 153.954061][ T1421] do_syscall_64+0xc9/0xf80 [ 153.955543][ T1421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.957429][ T1421] [ 153.958212][ T1421] Freed by task 6485: [ 153.959602][ T1421] kasan_save_stack+0x30/0x50 [ 153.961320][ T1421] kasan_save_track+0x14/0x30 [ 153.962818][ T1421] kasan_save_free_info+0x3b/0x70 [ 153.964418][ T1421] __kasan_slab_free+0x5f/0x80 [ 153.965987][ T1421] kfree+0x1c7/0x690 [ 153.967237][ T1421] process_one_work+0x9c2/0x1840 [ 153.968806][ T1421] worker_thread+0x5da/0xe40 [ 153.970305][ T1421] kthread+0x3b3/0x730 [ 153.971611][ T1421] ret_from_fork+0x754/0xaf0 [ 153.973259][ T1421] ret_from_fork_asm+0x1a/0x30 [ 153.974795][ T1421] [ 153.975587][ T1421] Last potentially related work creation: [ 153.977727][ T1421] kasan_save_stack+0x30/0x50 [ 153.979385][ T1421] kasan_record_aux_stack+0xa7/0xc0 [ 153.981266][ T1421] insert_work+0x36/0x230 [ 153.982669][ T1421] __queue_work+0x96f/0x10f0 [ 153.984219][ T1421] queue_work_on+0x180/0x1e0 [ 153.985738][ T1421] release_tty+0x4f3/0x5f0 [ 153.987165][ T1421] tty_release_struct+0xb7/0xe0 [ 153.988710][ T1421] tty_release+0xd7a/0x1300 [ 153.990181][ T1421] __fput+0x3ff/0xb40 [ 153.991458][ T1421] task_work_run+0x150/0x240 [ 153.992960][ T1421] do_exit+0x829/0x2a30 [ 153.994282][ T1421] do_group_exit+0xd5/0x2a0 [ 153.995746][ T1421] get_signal+0x1ec7/0x21e0 [ 153.997219][ T1421] arch_do_signal_or_restart+0x91/0x7a0 [ 153.998966][ T1421] exit_to_user_mode_loop+0x86/0x4b0 [ 154.000644][ T1421] do_syscall_64+0x4fe/0xf80 [ 154.002323][ T1421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.004605][ T1421] [ 154.005462][ T1421] The buggy address belongs to the object at ffff88802b0ea000 [ 154.005462][ T1421] which belongs to the cache kmalloc-cg-2k of size 2048 [ 154.009811][ T1421] The buggy address is located 1168 bytes inside of [ 154.009811][ T1421] freed 2048-byte region [ffff88802b0ea000, ffff88802b0ea800) [ 154.014063][ T1421] [ 154.014833][ T1421] The buggy address belongs to the physical page: [ 154.016844][ T1421] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b0e8 [ 154.019557][ T1421] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 154.022110][ T1421] memcg:ffff888055d4c981 [ 154.023459][ T1421] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 154.025780][ T1421] page_type: f5(slab) [ 154.027065][ T1421] raw: 00fff00000000040 ffff88801b84c140 ffffea0000e98600 dead000000000002 [ 154.029808][ T1421] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff888055d4c981 [ 154.032476][ T1421] head: 00fff00000000040 ffff88801b84c140 ffffea0000e98600 dead000000000002 [ 154.035246][ T1421] head: 0000000000000000 0000000000080008 00000000f5000000 ffff888055d4c981 [ 154.037957][ T1421] head: 00fff00000000003 ffffea0000ac3a01 00000000ffffffff 00000000ffffffff [ 154.040655][ T1421] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 154.043379][ T1421] page dumped because: kasan: bad access detected [ 154.045425][ T1421] page_owner tracks the page as allocated [ 154.047656][ T1421] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5933, tgid 5933 (syz-executor), ts 62146714482, free_ts 60620967080 [ 154.054307][ T1421] post_alloc_hook+0x1e1/0x250 [ 154.055842][ T1421] get_page_from_freelist+0xe3d/0x2e10 [ 154.057626][ T1421] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 154.059491][ T1421] alloc_pages_mpol+0x1fb/0x550 [ 154.061053][ T1421] new_slab+0x2c4/0x440 [ 154.062383][ T1421] ___slab_alloc+0xda3/0x1ca0 [ 154.063908][ T1421] __slab_alloc.isra.0+0x63/0x110 [ 154.065567][ T1421] __kmalloc_cache_noprof+0x531/0x810 [ 154.067267][ T1421] ipv6_add_dev+0x1c9/0x1520 [ 154.068741][ T1421] addrconf_notify+0x563/0x19c0 [ 154.070303][ T1421] notifier_call_chain+0x99/0x3b0 [ 154.071948][ T1421] call_netdevice_notifiers_info+0xbe/0x110 [ 154.074009][ T1421] register_netdevice+0x16b9/0x21d0 [ 154.075675][ T1421] rtnl_newlink+0x1deb/0x2380 [ 154.077194][ T1421] rtnetlink_rcv_msg+0x95e/0xe90 [ 154.078769][ T1421] netlink_rcv_skb+0x159/0x420 [ 154.080297][ T1421] page last free pid 0 tgid 0 stack trace: [ 154.082150][ T1421] __free_frozen_pages+0x822/0x1130 [ 154.083806][ T1421] __folio_put+0x3b4/0x540 [ 154.085272][ T1421] put_netmem+0x294/0x320 [ 154.086653][ T1421] skb_release_data+0x4b2/0x700 [ 154.088204][ T1421] napi_consume_skb+0x2be/0x320 [ 154.089759][ T1421] skb_defer_free_flush+0x1f1/0x290 [ 154.091405][ T1421] net_rx_action+0x3ca/0xf20 [ 154.092896][ T1421] handle_softirqs+0x1ea/0x910 [ 154.094410][ T1421] __irq_exit_rcu+0xef/0x150 [ 154.095916][ T1421] irq_exit_rcu+0x9/0x30 [ 154.097277][ T1421] common_interrupt+0xbe/0xe0 [ 154.098763][ T1421] asm_common_interrupt+0x26/0x40 [ 154.100343][ T1421] [ 154.101126][ T1421] Memory state around the buggy address: [ 154.102920][ T1421] ffff88802b0ea380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.105490][ T1421] ffff88802b0ea400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.108404][ T1421] >ffff88802b0ea480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.111079][ T1421] ^ [ 154.112618][ T1421] ffff88802b0ea500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.115216][ T1421] ffff88802b0ea580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.117719][ T1421] ================================================================== [ 154.120296][ T1421] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 154.122554][ T1421] CPU: 2 UID: 0 PID: 1421 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.126027][ T1421] Tainted: [L]=SOFTLOCKUP [ 154.127390][ T1421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 154.130565][ T1421] Call Trace: [ 154.131641][ T1421] [ 154.132593][ T1421] dump_stack_lvl+0x100/0x190 [ 154.134124][ T1421] vpanic+0x20d/0x630 [ 154.135423][ T1421] panic+0xd1/0xd1 [ 154.136632][ T1421] ? __pfx_panic+0x10/0x10 [ 154.138104][ T1421] ? check_panic_on_warn+0x1f/0x90 [ 154.139933][ T1421] check_panic_on_warn.cold+0x19/0x34 [ 154.141668][ T1421] end_report.part.0+0x3a/0x90 [ 154.143347][ T1421] kasan_report.cold+0xe/0x18 [ 154.145189][ T1421] ? handle_tx+0x5c2/0x620 [ 154.146763][ T1421] handle_tx+0x5c2/0x620 [ 154.148123][ T1421] dev_hard_start_xmit+0x127/0x6c0 [ 154.149769][ T1421] __dev_queue_xmit+0x6dd/0x46f0 [ 154.151350][ T1421] ? finish_task_switch.isra.0+0x204/0xb70 [ 154.153220][ T1421] ? __pfx___dev_queue_xmit+0x10/0x10 [ 154.154913][ T1421] ? __lock_acquire+0x4a5/0x2630 [ 154.156528][ T1421] ? ref_tracker_free+0x37e/0x6c0 [ 154.158155][ T1421] ? do_raw_spin_lock+0x128/0x260 [ 154.159759][ T1421] ? tx+0xa4/0x130 [ 154.160978][ T1421] ? rcu_is_watching+0x12/0xc0 [ 154.162507][ T1421] ? __pfx_tx+0x10/0x10 [ 154.163835][ T1421] tx+0xc4/0x130 [ 154.165003][ T1421] kthread+0x1d8/0x3c0 [ 154.166451][ T1421] ? __kthread_parkme+0xbb/0x230 [ 154.168062][ T1421] ? __pfx_kthread+0x10/0x10 [ 154.169547][ T1421] ? rcu_is_watching+0x12/0xc0 [ 154.171077][ T1421] ? __pfx_default_wake_function+0x10/0x10 [ 154.172955][ T1421] ? __kthread_parkme+0x18c/0x230 [ 154.174548][ T1421] ? __pfx_kthread+0x10/0x10 [ 154.176048][ T1421] kthread+0x3b3/0x730 [ 154.177347][ T1421] ? __pfx_kthread+0x10/0x10 [ 154.178810][ T1421] ? ret_from_fork+0x79/0xaf0 [ 154.180330][ T1421] ? ret_from_fork+0x79/0xaf0 [ 154.181836][ T1421] ? rcu_is_watching+0x12/0xc0 [ 154.183365][ T1421] ? __pfx_kthread+0x10/0x10 [ 154.184839][ T1421] ret_from_fork+0x754/0xaf0 [ 154.186331][ T1421] ? __pfx_ret_from_fork+0x10/0x10 [ 154.187957][ T1421] ? __switch_to+0x7b9/0x10c0 [ 154.189468][ T1421] ? __pfx_kthread+0x10/0x10 [ 154.190956][ T1421] ret_from_fork_asm+0x1a/0x30 [ 154.192479][ T1421] [ 154.194204][ T1421] Kernel Offset: disabled [ 154.195592][ T1421] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:05:34 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffffff8e5e3280 RCX=0000000000000001 RDX=0000000000000046 RSI=ffffffff8dc1f692 RDI=ffffffff8bfa3620 RBP=ffff888032c424c0 RSP=ffffc9003522f830 R8 =0000000000000006 R9 =ffffc90026000000 R10=ffffc90026000000 R11=0000000000000000 R12=00000000ffffffff R13=0000000000000246 R14=ffffc90026000000 R15=0000000000000000 RIP=ffffffff8b76c747 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d65d9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe109e1bff8 CR3=000000000e392000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000001 Opmask02=0000000000000003 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdd828fb4b 00007ffdd828fb4b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdd8290050 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdd8290050 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e6f637420745f6d 64617379733a725f 6d64617379733a74 6f6f723d74786500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6465637420745567 6461737373307255 6764617373733074 6565723774726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6661203078302051 5620657461636f6c 6572206f7420656c 62616e55203a4445 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d7a79732f223d68 7461702022726f74 75636578652d7a79 73223d6d6d6f6320 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d657669737369 6d72657020656c69 663d7373616c6374 20745f656d69746e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 75725f6374653a72 5f7463656a626f3a 746f6f723d747865 746e6f637420745f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d64617379733a72 5f6d64617379733a 746f6f723d747865 746e6f6373203032 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30323d6f6e692022 31616473223d7665 642022726f747563 6578652d7a79732f ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffffffdfc000 RBX=0000000000000000 RCX=0000000000000016 RDX=0000000000000000 RSI=0000000000000004 RDI=ffffffff93ea2734 RBP=ffff88802917ea00 RSP=ffffc900006a0f40 R8 =0000000000000001 R9 =fffff520000d41d6 R10=0000000000000003 R11=0000000000000001 R12=0000000000204000 R13=0000000000000016 R14=ffff88802917e9c0 R15=dffffc0000000000 RIP=ffffffff81b49d41 RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66d9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f45b24b9080 CR3=000000000e392000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 29447e3ee372b7dc 230ece07141c6550 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5c92bdb6988832e6 76ac160e9b244a90 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dcb4bffa5466b4f0 f8288b91f22dfcc1 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c20f36a26a7b8184 1ffc9094bb3afab4 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000c0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005e0000005e 047260467466e7cc ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000005e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005e743bb0b6 70be896803e5d0b1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 78c860a600edb592 0000005e708f6bde ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dbe3e3b5415254ae 707d2297bebc5d44 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2fe58bd2740dde47 c15e363adb114948 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8569b0f5 RDI=ffffffff9b209c00 RBP=ffffffff9b209bc0 RSP=ffffc90006f173a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000032 R14=0000000000000010 R15=ffffffff8569b090 RIP=ffffffff8569b11f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67d9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2dc20000 CR3=000000005536f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7a79732f74656e2f 70756f7267637a79 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff92bb2126 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff92bb2126 00007fff92bb212c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd14808704 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd14808750 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd148086c4 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd14808742 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c667265766f20 6772612061746164 000a747261745374 6f687370616e5300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49435740534a05 4257440544514441 000a515744515351 4a4d5655444b5300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffffff8e5e32e0 RCX=ffffffff914f2201 RDX=0000000000000000 RSI=ffffffff8bfa35a0 RDI=ffffffff8dd35f39 RBP=ffffffff81b6a38e RSP=ffffc90003cf7028 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=00000000000075be R12=ffff88803e3bc980 R13=ffffc90003cf70e8 R14=0000000000000206 R15=ffffc90003cf711c RIP=ffffffff8b76dd50 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68d9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe109d47e20 CR3=0000000035806000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffefe37b590 00007ffefe37b590 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1091e46c3 00007fe1091e46c3 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000001c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1091e4d20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1091e4d20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555798f5a98 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 003b90030000003b 08060eb000000000 0eac031004000ea8 030004000ea40300 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5dce04800000003c 003ce00300000000 d0030010003cc003 0210003cb0033810 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002080600000000 0000000000000000 000000316e616c77 01ffffff0000003f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffdf080c00000000 000580040401748a 0031313230386c6e 01ffffff0000003e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffef080500000000 0010080659800404 0174940032764350 495401ff0000003d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffff100000000 22808810003c8004 0100001008060601 5dce04800000003c ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000