last executing test programs: 1m54.181221157s ago: executing program 0 (id=146): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async, rerun: 32) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (rerun: 32) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x188) (rerun: 64) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2004000, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) (async) ioctl$BLKPG(r0, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x0, 0x0, 0xf}}) 1m54.176814629s ago: executing program 0 (id=149): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000500000004000180f77085c93267652cd9aac7dcef736fd888d081e2a27eaaec026c176b70da986e90c82e135a48a763f75af9212e23876244e845c6d1a8aff08608a2fd32503a0d8754a7240ac472f75832945b59e0fe2426bd4f0b3c5e00"], 0x18}}, 0x0) r3 = socket(0x23, 0x80805, 0x0) accept(r3, 0x0, 0x0) r4 = dup(r0) write$UHID_INPUT(r4, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) 1m54.010813404s ago: executing program 0 (id=152): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) ioctl$FE_SET_FRONTEND(r1, 0x40246f4c, &(0x7f0000000340)={0x30a32c1, 0x1, @ofdm={0x1, 0xc, 0x1e, 0x4, 0x2}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x24040800}, 0x8080) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x57ee}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)='./file0\x00') sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002e00020027bd7021000000000400000004000e82"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) (async) ioctl$FE_SET_FRONTEND(r1, 0x40246f4c, &(0x7f0000000340)={0x30a32c1, 0x1, @ofdm={0x1, 0xc, 0x1e, 0x4, 0x2}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x24040800}, 0x8080) (async) landlock_create_ruleset(&(0x7f00000002c0)={0x57ee}, 0x18, 0x0) (async) landlock_restrict_self(r4, 0x0) (async) link(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)='./file0\x00') (async) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002e00020027bd7021000000000400000004000e82"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) 1m54.008750128s ago: executing program 0 (id=155): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x8000, 0x8, 0xfc, 0x4, {{0x25, 0x4, 0x0, 0x23, 0x94, 0x68, 0x0, 0x2b, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x26}, @remote, {[@rr={0x7, 0xb, 0xce, [@local, @multicast1]}, @generic={0x94, 0x3, "1c"}, @cipso={0x86, 0x25, 0x3, [{0x2, 0xf, "47c4c8244778e882b2001c05f5"}, {0x2, 0x10, "07cf700043806478186853d93ad3"}]}, @ssrr={0x89, 0x17, 0x8a, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @generic={0x86, 0xf, "a0b6dfc3f8669c41689189d07e"}, @timestamp={0x44, 0x24, 0xe8, 0x0, 0x8, [0x400, 0xfffffffa, 0xfffffff8, 0x5, 0x0, 0x7000, 0x101, 0x4]}, @end]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000440)={@private, @local, 0x0}, &(0x7f0000000480)=0xc) socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800040, 0x25dfdbff, {0x2, 0x18, 0x42401837745673e4, 0xff, r8}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x20008840) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'erspan0\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x8000, 0x1, 0x0, 0x6, {{0x28, 0x4, 0x2, 0x1, 0xa0, 0x67, 0x0, 0x9, 0x4, 0x0, @multicast2, @private=0xa010102, {[@timestamp_prespec={0x44, 0x24, 0xd0, 0x3, 0x2, [{@local, 0x7}, {@private=0xa010100, 0x1}, {@empty, 0xd}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @ra={0x94, 0x4}, @end, @generic={0x88, 0x6, "04e48560"}, @generic={0x89, 0xe, "2527e5f5294007c73b9e0c72"}, @rr={0x7, 0xf, 0x3d, [@remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x12}]}, @rr={0x7, 0xf, 0xe1, [@broadcast, @loopback, @loopback]}, @lsrr={0x83, 0x1f, 0xbf, [@multicast2, @remote, @loopback, @local, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @rr={0x7, 0xf, 0x3b, [@loopback, @remote, @private=0xa010101]}]}}}}}) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, 0x0, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x30, 0x5}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xb8, r3, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x9}, @ETHTOOL_A_CHANNELS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xe6cd}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r12, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r12, 0x40107446, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x1, 0xfb, 0x2}]}) close(r12) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) mount$fuse(0x0, 0x0, 0x0, 0x280449c, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m53.749582948s ago: executing program 0 (id=166): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x10000000, 0x6, 0x6}, 0x63}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=@gettfilter={0x64, 0x2e, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xfff3, 0x3}, {0xb, 0x7}, {0xffe0, 0x6}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x8000}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x786b}, {0x8, 0xb, 0x5bd}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004020) r3 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@printk={@lx, {0x3, 0x3, 0x3, 0xa, 0x0}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {}, {0x85, 0x0, 0x0, 0x8d}}]}, &(0x7f0000000300)='GPL\x00', 0x1}, 0x94) r4 = socket(0x10, 0x803, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r5, &(0x7f0000000300)) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80218000}, 0xc, &(0x7f0000000140)={&(0x7f0000000680)={0x1d4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xac, 0x5b, "91c5716704244f5d0005708386341f5cc08cbb6053e702e244cc77a09cc86e3e35acb9999101f4889be75cc832d238d4bb2e619580888a7007684b406d85facc52f07361cee35481bf57c9c17ad31c0a4f3b05346146a727c9c3e308188d59a96721b481cf4dee47f0fae782ccfc3857e67a14e9ffe4eb3fd6e0172060f5b4dcd1c84dd0b85382df2b5f090b716c9f8eb22d7b0413078f09f22f513956d793e92d4ab8053c07fa8f"}, @NL80211_ATTR_FRAME_MATCH={0x1b, 0x5b, "8d556738f222c88007f1a8a79cc1fc95f9e6558e2ef034"}, @NL80211_ATTR_FRAME_MATCH={0xf8, 0x5b, "ea978aecfd628cde56ec91017cc55f40c8c7be49d7fd52af76afb1affb9516e7df5e1e0b20a7abe39aeba1760afb45a6116089bf82410f666bfaca4f7d4b64095e48fc4bac5e751552650368fd40bf293d6c62c252e9c937fbc2e3ca1e988d6c30ecd3a90dbae0fd5dc5aa8fe6d0e1945eeb679cf98f1e083d19badb4e1337ef3d899631315388f8e62b7875dcaa79ff15e053d2cf5f358e90b54b83f291fa7815ba07e97d33b5bdcf4ea42dd810d7009c26dcea73eef95ca31e290f4e430035c155514959d007604f29e2f2de5925cb999aed0a007b866e6771fba6da2a569e39528b93a894ee2f47675733d7308f4b36a7cb65"}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r7 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)="8e0e06", 0x3}], 0x1}, 0x0) sendmmsg$inet(r7, &(0x7f0000008a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1m53.56195859s ago: executing program 0 (id=168): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000ac0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0xffffffff, @mcast2}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x34}}, r1}}, 0x48) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000440)={{0xffffffffffffffff, &(0x7f0000000180)='))&+\x00', 0x20000, &(0x7f0000000240)={@_ha_fsid={[0x0, 0x2e4c]}, {0xfff7, 0x5, 0x10, 0xffffffff7fffffff}}, 0x7, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x40}, 0x1, &(0x7f0000000400)=[{0x2, 0x2, &(0x7f0000000300)='ethtool\x00', &(0x7f0000000340), 0x0, 0x18}]}) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000340)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) close(r3) ioctl$MEDIA_IOC_DEVICE_INFO(r2, 0xc1007c00, &(0x7f00000004c0)) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x80000020}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e40000000001011400000000000000000aff00e9cf0001800c0e000280050000c1feb6e30545974309ec4b151cdaa3e8b9b1878c8cb7736225942d82e4b6a85c218d6881e0bd36838edf85808d0760f9a62599db47fa25026dcdfa4e89e66948c1e8f395182cbf9b6e"], 0xe4}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000740)={0xc, 0x8, 0xfa00, {&(0x7f00000005c0)}}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) 1m38.587349538s ago: executing program 32 (id=168): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000ac0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0xffffffff, @mcast2}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x34}}, r1}}, 0x48) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000440)={{0xffffffffffffffff, &(0x7f0000000180)='))&+\x00', 0x20000, &(0x7f0000000240)={@_ha_fsid={[0x0, 0x2e4c]}, {0xfff7, 0x5, 0x10, 0xffffffff7fffffff}}, 0x7, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x40}, 0x1, &(0x7f0000000400)=[{0x2, 0x2, &(0x7f0000000300)='ethtool\x00', &(0x7f0000000340), 0x0, 0x18}]}) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000340)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) close(r3) ioctl$MEDIA_IOC_DEVICE_INFO(r2, 0xc1007c00, &(0x7f00000004c0)) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x80000020}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e40000000001011400000000000000000aff00e9cf0001800c0e000280050000c1feb6e30545974309ec4b151cdaa3e8b9b1878c8cb7736225942d82e4b6a85c218d6881e0bd36838edf85808d0760f9a62599db47fa25026dcdfa4e89e66948c1e8f395182cbf9b6e"], 0xe4}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000740)={0xc, 0x8, 0xfa00, {&(0x7f00000005c0)}}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) 1m24.80160143s ago: executing program 1 (id=559): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) r3 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x122) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) writev(r4, &(0x7f0000000680)=[{&(0x7f0000000040)="646a53e446de86a03ca53401a666039a19210b0c7cd7dc3ec41aede8b3c1e538631385ff5fe9491dcc08f39f53c806d40c36ab0b5b62821eddb8f74fb84295bdb901adaf9dd8cc98d6e28479fc520ba013129d273a8bb37fe91a72b544f41cb3b17e1f33ae17cdb6da17fd4d6c9e17013cd8f6e1682a96807775495b2bd94f2016d4", 0x82}, {&(0x7f0000000c40)="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", 0x37f}], 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="200010003a0a010400eeffffff00000000"], 0x20}}, 0x8044) clock_getres(0x2, &(0x7f0000000380)) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000, 0x1}) socket(0x40000000015, 0x5, 0x0) (async) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x4) (async) gettid() (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) sendto$inet6(r2, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) (async) userfaultfd(0x801) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x122) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) (async) writev(r4, &(0x7f0000000680)=[{&(0x7f0000000040)="646a53e446de86a03ca53401a666039a19210b0c7cd7dc3ec41aede8b3c1e538631385ff5fe9491dcc08f39f53c806d40c36ab0b5b62821eddb8f74fb84295bdb901adaf9dd8cc98d6e28479fc520ba013129d273a8bb37fe91a72b544f41cb3b17e1f33ae17cdb6da17fd4d6c9e17013cd8f6e1682a96807775495b2bd94f2016d4", 0x82}, {&(0x7f0000000c40)="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", 0x37f}], 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="200010003a0a010400eeffffff00000000"], 0x20}}, 0x8044) (async) clock_getres(0x2, &(0x7f0000000380)) (async) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000, 0x1}) (async) 1m24.801350511s ago: executing program 1 (id=560): r0 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x7}}}}}}}, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/101, 0x65, 0x1, &(0x7f00000000c0)=""/124, 0x7c}, &(0x7f0000000180)=0x40) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f00000001c0)='\x00') 1m24.543037912s ago: executing program 1 (id=561): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$kcm(r0, &(0x7f0000001240)={&(0x7f0000000080)=@in={0x2, 0x4e20, @local}, 0x80, 0x0}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a480000000c0a010100000000000000000a0000090900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d103000008000340000000011400000011000100"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd0300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r5, 0x0, 0x0, 0x0, &(0x7f0000000040)) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) ioctl$EVIOCGMASK(r7, 0x5b03, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0x15, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x40, 0xc5, &(0x7f0000000340)=""/197, 0x40f00, 0x10, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x6, 0x7, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x10000}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000500)=r8, 0x4) 1m22.417922911s ago: executing program 1 (id=584): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002980)={0x4c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1m22.417267842s ago: executing program 1 (id=586): ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x30012}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r2}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000100)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000001380)={&(0x7f0000001340)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000000)=[0x2], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) (async) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000000)) 1m22.009451866s ago: executing program 1 (id=596): bpf$MAP_CREATE(0x4000000000000, 0x0, 0x0) 1m21.897142436s ago: executing program 33 (id=596): bpf$MAP_CREATE(0x4000000000000, 0x0, 0x0) 1m17.223415784s ago: executing program 2 (id=687): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1d, 0xf, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x39}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m17.222775004s ago: executing program 2 (id=688): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x3c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x21}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc8}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r8) sendmsg$MPTCP_PM_CMD_REMOVE(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r9, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) r10 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) fcntl$dupfd(r6, 0x406, r11) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x100000b}, 0x1c) listen(r10, 0xb) listen(r0, 0xffffff81) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r3, r12, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x12, 0x14, 0x63, 0x0, 0xf, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local}}}}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) unshare(0x48020200) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="b80000001900010025bd700001000000ac1414bb000000000000000000000000000000000000000000000000000000004e210000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000070000000000000000000000000000000000000000000000000000000000100000000500000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000080000000000000000000020000000000000000010000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 1m17.122612721s ago: executing program 2 (id=691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWSTAT(r2, &(0x7f0000000100)={0x7, 0x7f, 0x2}, 0x7) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x5452, &(0x7f00000001c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$loop(&(0x7f00000001c0), 0xe, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x48}}, 0x0) ioctl$BLKRASET(r5, 0x1262, &(0x7f0000000200)=0x7) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000085387660008300000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r8, r7, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r9, r1, 0x2) r10 = inotify_init() r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r12, r13, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="040100001a0007000000000000000000ff020000000000000800000000000000e0000002000000000000000000000000ffff0000000000000000200002000000fa047aa9aa6f096d7a924dc57ffa193b68b19bb5f2829f2deb671c78de46716734037b2aa9663888c1009369a80a65da8c89fd5fa9d20836b04fc153825f791516a93acc97bb5f88eadc60512f2c80e51dd59412a893f1671de14cc16c71acb096b6c2bb03797ac53e4219dd34534bd6e5dc6d238c24cc9560ede66ff3cb62c032876d3730f664f0820a5c0f8c32855c5e9bdfad", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000001000000002b000000fc0000000000000000000000000000009a4a00000000000000000000000000000200000000000000e609000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000200040000000000e80a000000000000000000000a000500700000000000000014000e00"/188], 0x104}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000003a00010020000000000000000b000000140001"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1m16.78342556s ago: executing program 2 (id=700): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipmr_delroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x800000, {0x80, 0x20, 0x0, 0x40, 0x0, 0x4, 0x0, 0x5, 0x2400}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x44, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x4a, &(0x7f0000000640), 0x4) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x20000, 0x1c0, 0x32}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2025) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0x9a51, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x10, 0xfffffffffffffffd, 0x8, 0x4, 0x0, 0x6000, 0x8000000f, r4, 0x0, 0x800004, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x3, 0x0, 0x7, 0x4, 0x4, 0x2000, 0x101, r4, r5, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x50) syz_fuse_handle_req(r7, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000041c0)={&(0x7f0000001340)={0x50, 0x0, 0xae, {0x7, 0x2d, 0x200, 0x1140000, 0x7, 0x18da, 0x200, 0x6, 0x0, 0x0, 0x100, 0xffff}}, &(0x7f00000013c0)={0x18, 0x0, 0x5, {0x7}}, 0x0, 0x0, &(0x7f0000001480)={0x18, 0x0, 0x8, {0x4}}, &(0x7f00000014c0)={0x28, 0x0, 0xff, {{0x6, 0x3, 0x1, r6}}}, &(0x7f0000001500)={0x60, 0x0, 0xc0, {{0x9, 0x40, 0x6, 0x3, 0x5, 0x5, 0x80000001, 0x5}}}, &(0x7f0000001580)={0x18, 0x0, 0x8, {0x7}}, &(0x7f00000015c0)={0x14, 0x0, 0x9200, {'&--\x00'}}, 0x0, 0x0, &(0x7f0000001700)={0x90, 0xffffffffffffffda, 0x5, {0x3, 0x1, 0x1, 0x5, 0x2748, 0x401, {0x0, 0x3, 0x7ff, 0x7fffffffffffffff, 0x1ff, 0x1, 0xc, 0x1, 0xfffffff9, 0x1000, 0x1, r4, 0x0, 0x10000, 0x1}}}, &(0x7f00000017c0)={0x38, 0x0, 0x7ff, [{0x5, 0x7, 0xd, 0x1, 'sha256-arm64\x00'}]}, &(0x7f0000001a00)={0x10, 0xfffffffffffffffe, 0x8}, 0x0, &(0x7f0000002080)={0x20, 0xfffffffffffffff5, 0x1, {0x7cc, 0x0, 0xffffff80, 0x1}}, 0x0}) renameat2(r2, &(0x7f0000000140)='./file0\x00', r7, &(0x7f0000000180)='./file0\x00', 0x2) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') 1m15.93374079s ago: executing program 2 (id=720): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000009c0)="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", 0x110}], 0x1}}], 0x1, 0x4008810) recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x30, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0xd}, 0x1, 0x0, 0x0, 0x48812}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x28, 0x6, 0x0, @local, @local, {[], {{0x4e24, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d4c466fb19f71e96642faa2300"}]}}}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='virtiofs\x00', 0x200000, 0x0) 1m15.613096551s ago: executing program 2 (id=726): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(0xffffffffffffffff, 0x81204101, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x3c}}, 0x40000010) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) timer_create(0x6, &(0x7f0000000080)={0x0, 0x26}, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e04031a0c91"], 0x7) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="4000a6000a000200a8aaaaaaaabb00220600050001000000"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x8005) 1m15.514810734s ago: executing program 34 (id=726): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(0xffffffffffffffff, 0x81204101, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x3c}}, 0x40000010) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) timer_create(0x6, &(0x7f0000000080)={0x0, 0x26}, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e04031a0c91"], 0x7) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="4000a6000a000200a8aaaaaaaabb00220600050001000000"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x8005) 37.44912266s ago: executing program 6 (id=1246): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a2"], 0x0}, 0x0) r3 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f0000000040)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r3, &(0x7f00000000c0)='ns/time_for_children\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x40000000) sendto$inet6(r6, 0x0, 0x0, 0x4, 0x0, 0x0) r7 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x1000}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x2}, 0x94) kexec_load(0x0, 0x10, &(0x7f00000001c0)=[{0x0}], 0x0) getsockopt$bt_BT_VOICE(r7, 0x112, 0xb, &(0x7f0000000200)=0x859, &(0x7f0000000240)=0x2) clock_gettime(0x3, &(0x7f0000000400)) socket$inet6_icmp(0xa, 0x2, 0x3a) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRESHEX=r8, @ANYRES64=r9], 0x3c}}, 0x0) 35.855763836s ago: executing program 6 (id=1259): r0 = io_uring_setup(0x6280, &(0x7f0000000580)={0x0, 0x90000000, 0x1, 0x0, 0x1d2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002700)=""/4096, 0x1000}], &(0x7f0000000200), 0x1}, 0x20) syz_io_uring_setup(0x50cf, &(0x7f0000000000)={0x0, 0xfffffffc, 0x800, 0x2, 0x333, 0x0, r0}, 0x0, 0x0) 35.854201881s ago: executing program 6 (id=1260): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) (async) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000000c0)={'\x00@\x00', 0x0, 0x6, 0x3, 0x0, 0x0, "f759ca34000400", '\x00', "03000100", '\x00', ["8bada940edffea0a0800", "c2fed6cb0200004000", '\x00', "00000000000000000100"]}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000a00)={0x0, 0x2, &(0x7f00000009c0)={&(0x7f0000000900)={0x14, r3, 0xe2c40cf0776ef37, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f0000000080)={0x18, r5}) (async) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0xc3d940ba245d3883) ioctl$SNDRV_PCM_IOCTL_PREPARE(r7, 0x4140, 0x0) (async) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000172000/0x1000)=nil) 35.704821625s ago: executing program 6 (id=1261): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x8000, 0x180) (async) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x8000, 0x180) openat2(r0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000280)={0x10000, 0x10, 0x11}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000000d40)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000003400000004000000000000001c000000000000000000000008"], 0x68}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f0000000140)) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0x2, 0x4e23, 0x0, @private2, 0x3}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x80009, @remote, 0x8001}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x80009, @remote, 0x8001}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) (async) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000500)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x35, 0x301, 0x70bd29, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44893}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@default_permissions}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 35.704433484s ago: executing program 6 (id=1262): r0 = socket$netlink(0x10, 0x3, 0x4) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) write$sndseq(r1, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {0x6}, @addr={0x7, 0x3}}, {0xd, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0xc}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {0x3, 0x1}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) (async) write(r0, &(0x7f0000000040)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d125957bea501ecd1c624d76500b7235f5681eedcd01e00aaf4081fb11de05706ce421b3e6105b98772f2f1968d1f71d47f1b0f02339a92b34bd3034181133d475ee47920ae5afd4fc443e1cf6c4429e51efec2b61693898d7badb9183c94a9fb4b50338b8cbe06fc2aed763cecf1d0c01db98c8af7430a9a877790dc202b71094706f63f238612f31ee45342559d4eca701523a33859def251018114145b57006d1ec1bc3f44dbb9727f19baa4c1db5436efe2", 0xd7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@ipv4_newnexthop={0x18, 0x68, 0x521}, 0x18}}, 0x4020054) 35.288298523s ago: executing program 6 (id=1266): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x8000, 0x8, 0x3, 0xfffffff9, {{0xf, 0x4, 0x1, 0x5, 0x3c, 0x68, 0x0, 0x6, 0x29, 0x0, @local, @multicast2, {[@lsrr={0x83, 0x17, 0xbd, [@private=0xa010100, @local, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x43}, @broadcast]}, @cipso={0x86, 0xb, 0xffffffffffffffff, [{0x5, 0x5, "c6b666"}]}, @ra={0x94, 0x4}, @end]}}}}}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x50483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) sendmmsg$inet(r4, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@mpls_newroute={0xa8, 0x18, 0x10, 0x70bd26, 0x25dfdbfe, {0x1c, 0x80, 0x80, 0xe, 0xff, 0x0, 0xfd, 0x2, 0x600}, [@RTA_VIA={0x14, 0x12, {0x25, "40c3bcd524e50d33ecb9561d419d"}}, @RTA_VIA={0x14, 0x12, {0x11, "8a3be916471cc220ca33d23212f3"}}, @RTA_OIF={0x8, 0x4, r3}, @RTA_OIF={0x8, 0x4, r6}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x6}, @RTA_DST={0x8, 0x1, {0x1, 0x0, 0x1}}, @RTA_VIA={0x14, 0x12, {0x4, "55196ad2895ab5c580e6641dcb58"}}, @RTA_VIA={0x14, 0x12, {0x9, "169fb94aa2ac7765f7df65b64941"}}, @RTA_VIA={0x14, 0x12, {0x2a, "27c2b7194552d1c155919b220724"}}, @RTA_OIF={0x8, 0x4, r2}]}, 0xa8}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80401, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r7, &(0x7f00000002c0)={0x2c, 0x1a, r9}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 35.237062476s ago: executing program 35 (id=1266): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x8000, 0x8, 0x3, 0xfffffff9, {{0xf, 0x4, 0x1, 0x5, 0x3c, 0x68, 0x0, 0x6, 0x29, 0x0, @local, @multicast2, {[@lsrr={0x83, 0x17, 0xbd, [@private=0xa010100, @local, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x43}, @broadcast]}, @cipso={0x86, 0xb, 0xffffffffffffffff, [{0x5, 0x5, "c6b666"}]}, @ra={0x94, 0x4}, @end]}}}}}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x50483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) sendmmsg$inet(r4, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@mpls_newroute={0xa8, 0x18, 0x10, 0x70bd26, 0x25dfdbfe, {0x1c, 0x80, 0x80, 0xe, 0xff, 0x0, 0xfd, 0x2, 0x600}, [@RTA_VIA={0x14, 0x12, {0x25, "40c3bcd524e50d33ecb9561d419d"}}, @RTA_VIA={0x14, 0x12, {0x11, "8a3be916471cc220ca33d23212f3"}}, @RTA_OIF={0x8, 0x4, r3}, @RTA_OIF={0x8, 0x4, r6}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x6}, @RTA_DST={0x8, 0x1, {0x1, 0x0, 0x1}}, @RTA_VIA={0x14, 0x12, {0x4, "55196ad2895ab5c580e6641dcb58"}}, @RTA_VIA={0x14, 0x12, {0x9, "169fb94aa2ac7765f7df65b64941"}}, @RTA_VIA={0x14, 0x12, {0x2a, "27c2b7194552d1c155919b220724"}}, @RTA_OIF={0x8, 0x4, r2}]}, 0xa8}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80401, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r7, &(0x7f00000002c0)={0x2c, 0x1a, r9}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 34.952272069s ago: executing program 4 (id=1271): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0, 0x41, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000001c0), &(0x7f00000002c0), 0x8, 0xf, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@gettfilter={0x3c, 0x2e, 0x4, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x5, 0x8}, {0x7, 0xfff3}, {0x3, 0x8}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x55c}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8090}, 0x40) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 34.841895538s ago: executing program 4 (id=1272): sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd2d, 0x0, {0x39}}, 0x14}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900"], 0x48}}, 0x0) (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000500)={0x28, 0x2, 0x0, {0x2, 0x1, 0x10}}, 0x28) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000140)={0x268, r2, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_IE={0x7f, 0x2a, [@tim={0x5, 0x3d, {0xc7, 0xc8, 0x4, "43cba35a9982d11f3d0cea778bdfa8bf4ba6344807b24afb609f6ff31984359ff645dc59b13a5ddcf6b17e0c4217242187ddd15b938de973f729"}}, @tim={0x5, 0x1e, {0x6, 0x51, 0x6, "5a9c927b5ca5cd97c7d8be77e4206502e06d8e365bafbdaec99794"}}, @ht={0x2d, 0x1a, {0x8, 0x1, 0x0, 0x0, {0x100, 0x5, 0x0, 0xf, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x0, 0x6}}]}, @NL80211_ATTR_IE={0x47, 0x2a, [@chsw_timing={0x68, 0x4, {0x6d, 0x7}}, @ht={0x2d, 0x1a, {0x80a1, 0x0, 0x0, 0x0, {0x9, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x2}, 0x1, 0x2, 0x7}}, @random={0x7, 0x1b, "dac23ddca60f1436b5b03f202a4b433cbec0cd9accd9b88d630544"}, @ibss={0x6, 0x2, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0x15f, 0x2a, [@ht={0x2d, 0x1a, {0xc, 0x2, 0x6, 0x0, {0x8, 0x9, 0x0, 0x4, 0x0, 0x1}, 0x8, 0x0, 0x5}}, @perr={0x84, 0x127, {0x5c, 0x11, [{{0x0, 0x1}, @device_a, 0x1, @value=@broadcast, 0xe}, {{}, @broadcast, 0x5, @void, 0x3}, {{0x0, 0x1}, @device_a, 0x0, @value=@broadcast, 0x26}, {{}, @device_b, 0x8, @void, 0x21}, {{}, @broadcast, 0x2, @void, 0x37}, {{0x0, 0x1}, @device_a, 0x6, @value=@device_b, 0x17}, {{0x0, 0x1}, @broadcast, 0x2, @value, 0x2f}, {{0x0, 0x1}, @device_b, 0x3, @value, 0x17}, {{}, @broadcast, 0x10000, @void, 0x3e}, {{}, @device_a, 0x48, @void, 0x42}, {{0x0, 0x1}, @broadcast, 0x7fffffff, @value=@broadcast, 0x12}, {{0x0, 0x1}, @broadcast, 0xaf, @value, 0x29}, {{0x0, 0x1}, @device_a, 0xffffffff, @value=@device_b, 0x3f}, {{0x0, 0x1}, @device_a, 0x6, @value=@device_b, 0x40}, {{0x0, 0x1}, @broadcast, 0x1, @value=@broadcast, 0x3b}, {{0x0, 0x1}, @device_a, 0x6000, @value, 0x3e}, {{0x0, 0x1}, @broadcast, 0xc92, @value=@broadcast, 0x2c}]}}, @channel_switch={0x25, 0x3, {0x0, 0xb1}}, @dsss={0x3, 0x1, 0x24}, @chsw_timing={0x68, 0x4, {0xab, 0x7}}, @mesh_chsw={0x76, 0x6, {0x6, 0x1, 0x26, 0x8}}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x4040}, 0x10) 34.784568635s ago: executing program 4 (id=1274): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x64}}, './file0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)={0x144, r4, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x610}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010100}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xffffffff, @private2, 0x7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x120000}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2c6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x280000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf580}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3a3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x23}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x16}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfc6}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4008011}, 0x8000) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x194, r4, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x30fb}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b2cce21}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5aca}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "8afff8ff5918e00a5e634813e41ee254d5efa3d0"}}]}]}, 0x194}, 0x1, 0x0, 0x0, 0xc000}, 0x80) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x0, 0x400, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) 34.408897947s ago: executing program 4 (id=1277): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xfffffffd, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r2, &(0x7f0000006340)="7c7a6a069306f2c5ddf91f36944f207a1bd11284b4445fa3507bbc5def2e6fec4bb7c6001eafe381e277221f30085acd5d0c251f7c60c23874c04db6aa516f773dd2e57e746d1a085193c8b7664fceb1fe764d87f4395c66e5d4eee443a555692ebe80f3a11b8be74963f1a18c1d0cd71dec65e609e065e14615d2e8b283e55b4aa8b485f81ce52443d61fac9f08cf34f2997c05a63f98f988cfcea9a5650b37dff5817e5033b3912c226bd9bf68b528dec710584242fbdcf7dd0d55e394d3742039e6960bb589fb9ba18ac8e9e82cdbd08e9b584d0a8224cae3e9dd91e25699549007dc0d99165a73cda1c99fc48f6bfdb900c60e4481222505c58cc1108fbaf317d361d1f2d78f6db6e14b283ca9f1927f4f8a0f6f52818be03c7b257aec57f06a0a4279131a2bb0a13b23ab188ea50a686abb2f7e4d0f7a166f358e4cb886b7fbdf51cd9a153410dcc4cc5db7e8e94cc9ba2371a328480ad20f51d7fa012f367a0a8f9c882c47b5f714f0e1b35f72b2261989513c1428d648aa8ab8c12c87dfea38d5be0d49097fce804c9cd2ac8f61b68579853129351e3bcdbdae3371d2b12a150d94b3097161c226c50a1d2c1f8b4c10a986e21dbbb854ad1d26d0ce5d950835d14664ee8f58c537f5256b761b4707fe8d46cc1658798d285310a1cff127b1280cab3f1f633569391d5a7cc08aa1d108b93c38df397d90bbb81753930934df7dcaf8f960dff660fe239aa15cf48872668cacf4d664dc0809fe9d780ab202c3a968abb56655267c907eb3343809b2407105a5c14d53a3b17a9a1552314d27e13daf48a2bb7b2c9fc15aba9ae1d6325c11fbe8432c067efa72878ca56c6463b6cf4d29646905422908a4a1f7741d0049febed4fc2b7cc27154031e50a0ab297826383935bef6a0f968db92128e8a940509b5368146bdcacc852b9d0b4ae9624635f9e69f3a7bc8e6f3340c7de46f49feb20a46f11aef464fa6696a60865bdd0c40b1c411c9661fa9f6393a33a7eb4afaef3eb1ab4634a42baeea780ac6c0c4fc8cf7a92cf0592f993ac85bdfd6c18ba4b7cf4c4438a8330413de8365b4a080234f59edefca0c5ce9697b20cc7b71d04438c00cf3d557bd03b5e1b86e167d2d6e09714135ef720667d0f2e7ca54da419d1bf6722eda31381059216009cd8c99ba1d7f9ebc1bc021457a195fa5be2f0727a84cf4cac5e080f22c836a4955d5ed06bee2eec0d39abc5f459ac43596fee3b341dfbd7ce6f4e57ea42e1e8d4f65880b8b77d2ee27dc1efe95ff1bacf5aa14933456b68645380d0f2ef6284b9946857456d64f4cb656998e99e3e286f596b31c69a69d0ee8444ed838ca2f0ead1be9538e4e927239d0e65a3f871dcad33881f69592eed93a9fafc934aefa67bb87d582d0ae4cfbb5c50325774bbc259a277749751228d3610f95fd56e9fbccb288eca1b14c8255b6996a59c91efbb08440ed91cdd53b0aab82600906904cee2a117a06157e24fa822e1cf4f9db4c2e8a5e842cfc503e578e69002fbae194b6bc7c8b69aac7359292109b712eb49d21946f5ea2745ab77ef59950dcfd926df2aef20e85f2a14554aabb417f15c725c73edd4853926ad6c525afa2c65de213cee799c18d1ced9424d10d7076fc5862579702a5f91031381f41cb8d9899ab514cfa1c8c51437df9710271d8cf69e8900921cba296703f1a7b5234500c1625884fea594d836a930b06142a6e577cd9c2a32cae65e712624abeeffc423a5d5ed7bd75fcb1a82ecec8acd0da9918a5c7c189f14f8cdf37062f93b87f9188501556060ffc6eac435cb1624f2af688316366e03cfb869eacf83d9d45fce910c3347f810b614c2e4291e70471ca2b574241c3f3d9740c6a45c7296a2f275acbde72e513ef4e5a1123a57c2eb1bd023af716c16a7747204338f60b6e3ac514af50b21952c21592aefb6149828a5183ba581d5ee8647f374645ff941bab67bef760ce353b456c4b51c5d3a0c5372b1773b944ad67a92937dd838e1b6f550a1dca975d6230e430bcc278afed54e0621008b2f850107b0244359e3747be5282630452d432e5df0fd160795effed150f9396a7da5a1e4dce0c8f62280ff2fbfaa813859a671208b4b9f05fe450729b0efad83a790acd688a90e5fee5550de4ddeac70ecd125ad076c4e2b68652e6ea520e2b6b339b4b9dc219d853e06b9aa79d022e53607213fc254e15ec3e6b776d2b562997e0fe52b98c58e1c0316b22a4219460053da87e7baff7dc1892c2de2f324dd1169b977f3a6698d0234c78de3e46ba5824f3e373f264e8d28fbb4cc108a41fdecd4b629d92b0a65f84366bf504eb5a894ba40c89f9df854dc469fa174ac85cb8d2adfdc099ca9848a1032b2e2f375bd1544dfb69e33492e1a4b921ad7ff17c4c7e357ff69f42d2301c302ee2ed313f0e9a20ebfe028a8737d6e38bf179940179cb779b70c2276264cb4f23249db7d5f179baa842b70f5b287cf74ce1ff6b70a56be8f2fe15aeadca229804923d28a793838bc605eaf5dcd362f757577ebdac54b09fd73326720d3522d002a41a3b5f2450f48286a5ea45836b5ee77fc415f47e0716049ec2610d607737fd5a73b066b4876f9d744f6b3486b088dd3bfc3d393a27c6c799ce078e2ee348257b5ec1ba9de76da2a67ca912dc2dd5afc70834ceecbb8bd41f6e790294cacd5891bef1b4e2124dcd6dffdedee8f16b3bddc030429dcb0f98e6fe0649cb14eed3293fa4933b2ab8c0ec0ff4dbbced1e32dceb317252e715b872b00478cbd7b0275b7394a0ccfe9887410b32f1ce9266b3b83470ec982cf908507d3ad0cc366bff3759388b624701b3e0dc0e7928386b155b50b42a8e352622516beeeddfb79866a2eb1d360802cd19d62fd171267a0fece5f54e315a8cd49c41072f2a7a0baab5aadae2c1ff28e285b642f8d3869321bd18b4aed107feaa12d055b179a8ab7b50e2796d287a196e280d527b526c45c8aa98696d88a02d923d06fedf51336c0695c218e70448073921971093ea44b5352e10ce6cec26d082b93f69958165bd986f56650a62224c2d9fd044bd8fefd33544c6bd141b4cc211a087fa57c09e195c8edffe559048db738d1395f5e2625dd7cd035b8c76aad6c238fb52a7c5ff0965fc7122a5899746ca88abd699d6078623722fff92726e18613519f2b1927504fd5cb7a38ffa373c3883022f0387953530834affb5f05e0f44c24caa75561b2b63994493ab857fdc30900586fed09298d846e5936869b43d81c4b91902028e57a8f2da16355ccb7a77d29ecc8e66015e979b2f3edc5b8d77c45348dea55c9ed6b7465acf899f4bc1a7edcae0b0daf69ff85c504eea1294620b6d3dbb004575044a5ae7c110010c2cf39827fbdab3b42ac35d147fc53bb5e7de6c47091dc80c14b8da494b2e913d1a52085e29af19edc4a417346c5a896a3851cb6132511e0627d190b77623c8a3bb6085eff22ede7127f7988a1d388fb70ea20d5c1b2424c5aa83532bc5162a5d177968b4a46583f2d4b92d04a5f19145221aeaf724d92ea1d4dfb53021b47585bbe5ce35f8d09a83e13fdb1de8e52dc646d41e810879ce9c830959c3ee93f11a16d030d141863244395e3f847505fe6d9594a34009fec9a743c033b9793335684cc5c3d0eb0ad094f40a60264b02cd88c583c850d99c5b9c6c5dcef467ca3ea38f2aa42f5657cd940aeb12960efa18d571e4f958b9cd90918e069a486d84f214617ce29c0f2c26bf84f12f5036f26a8de0c8359f572654bf5ee06d38f741c464976d95ae3fdda45c2ed2d08ef71d3590e82d235e0fa357c568158791a195d4a2d9615e1edc85be64cfd169f925ffc4f636f86783cf43624a77bdb9b172228097f02f391df00668dafbd9932298b23cfadfd1b8d14a25cb408a440f930f0813de73c1eb2eb4b3c802d718a672453d0038965c6dc98db96fb4e06f1fda72782d0839d4e8b477ebdb2c73510db44f643ec7dc4fcb837806853caa35cf622aff9d44381d3f7adae00650cbb6f0334ceca14ec982dfb5817d7fd49251c203b6463a09c14885f754603291ccf0a7ceaa57284ee751774fa5ad72f9f7a32fa542947af40601e98057895f2869d4ec2db0d73930962535fc9e12ba7e6777cb458592bee505b367012ebd27b256fa0fac1452cf3b28eab573549b7c7a13752ca0189768f738d5f8030fe999f7bdc466d67bb32937ae469f1a1e21fac2ae2ab92a0a260bf0e9ce20625e82f88d0ed4d13876aed768765d77433bb9137d92d622df502aef574de82fe28063128fe5a1787ced99734c2f3f221e80d3baefd367d01d950ee1bc981b4b5ff86b2a96ab78fa3c1201303cab473103d89bb185afc77dd2cb7ac1564045036fe9fcf85af5d73a7553bc45bf5e221564540982db2f81e612e7c1715d3498b8d7851c0160146d6eaae9e30c81dedfca8e7122fcb69b26b396629b723f1e1822b8d5d8f2ac583728a5ab40010f88aa42f37f2031a3e99d8d6661e63f86f65af521066ea6af89c89e1748521b8368cd03409e895a941025ee777653f55e66cd1a0cca21308666260c3b9a306ddadb322eb1d09f7b27fd570cd35b6ec88bb391e3ae4745e17fb4dd7aef1d75b4ebb91e6e7789b241566d7c0cc97a3a126ed50b0cb621e015414f62641afd85bad78470463f86d8287aa56d331911c23c4cae8e5dfea33f3789c03d61f51c590417b5ff9f1aa35ab6a15364296c5f9399216ce565210a4075ac5e43e916850774a127f9174d95b43d839e056b4a7d679bb8804951ca171c0b59f4d6f32c4fe8f908b9a1614591f5d1e1cf3348e02317ec4655c693417a4c4e7007a8db02faa1634f8eea9c9bbe5b149ce2279953a54884392dc7251dd38670fd59d9d1da5203340909d50f779e864339014bcb545d825cdcccedc558a1d01a2784b8f499ce9fa2ddb0dd1dc0b93d1b282a96cb4ecf152474dbc4b2853b30c8e5fcea85bdab949f5eb1e98d81c102c349f680230082db5aba9e20209c35b16598507d28211b49763b598a7e60519d5b28b67c027cb2657cf2ac7c7455291fcfe63f0b43afcd3afaea934da97c209d02e5b47a686c1c284aeee5d662fd9d9be7c576259d9f1a36fc0f7fe329a1da1dbe078381233940745fc28a56db98b1a8442325168158e3f0b3cbf8a368d19dd20cdfc1c4f3893a30a49223050159b0bb8b7c59ca705ae25453988d87ca6cdd2bd2fe37847ba67cbcf7a494925a8598b7b50a741c9ced10ea08e35c422b79265561a07f40ebb89bc46069a1c1ad95949fe757a76ff6b5386a043abc967c367a9d86b54d374e573540dfc1f6d396f398abe9735f523b778fd124ac1e1eb832a66dd4b1838a50e6a4eb1b95b8a60a94f067b24d1194976c539d5ec287a261bf25904575be3ff49e7411a8dc09739649828124c14fc2b89dad1f3f5725db2e45f5a447cd3e4bdf9e1e95c5ad7c76fcf0c1021cb6c32e6985e1d113030d534eecb0dff2554183ee18da2da5d21a8b994a81f05e0e6ae89b20bffb4be333d1956270da23e9905830921b1f3d615a56a20b11d45ccd1d22b910e33f475a92c31fa5b4675ddee18336d0ee7b75c07df2a9d4ad53d83142219a00aef15e1e9dace0f039d63a530fdf671a54aba3882dad0d439632af5576726c3aa095cc1a0a03063e8a6581b78bef501acc24b05a0150d8f683c90e8e5e283a49f898906dab926e544ead48cb9bf9a6e1bf140b5273443b8cb8166b2d8a5464a3e9d9f4246ac81ea91b33a0b399dde9f5efaf792bb04cfa028f40b7c92db2d9c33e16ef58b9263350879ea94e581a1187b2d1931b1cd7606a76bd8943b7c3098a33bdf476960af7bdf2854b1336e72feb603b8bb2242df0839d157843d369a50a615068ff5d99ecebe8dc19158a6c654e853cedf860a727bf8140c062f5d307fdcd150ad0af03d2c3a913b91047858ed6382d2d2d30f5c0bd419c2cd4047f225107ea8bf4a3a69384f16b5b5bb2655bdb750db4e975794592987df95f6a90374b0a08769b2c957faa16a21270196afba76b4527f01f0c5db7fa16e2da81fc49336e20bc3ee1ccbcb62255c84513d9ceb706f03c25000517070c03b7bce838e6b6cbc7f767959fbd62e11ab7ea6d760cff674a4296e6185eb348028b472290922160f3ea36c22c8375a016f505017c0a0e041dd8e52b4f19ccfc701109a19391a059d77db239d40a06d84a6f0ccd08aaad764e53ad1da19ee825a4d25ca7cd538289bffe135486ec1614e28b3682c7081a1b0a2c7272f4e36f6d0d9e68d84209126dc59312d48eed1c63c90efeadd472259392c28746abf394c5c6c97d3fb00b70a74c313a817ee1719c33f16d58f297fc7eacbca5803df115745079c5434e851ad6c1f0e8ba0bdbb66cbb6789b89a23526b476ad0f2cea0907e72702f93d37bdfe7b39fb9b33fb1111e58f5c45db8cc38afe4e03a318aa0690afb870a67aeda7da9640fdad1e1f551dd4757c69b4f523b616e502514a2e35495916f2e5ddab1ad9534644d99ec56e818caba173773aa5e45104deb869b23063eaea5542d3bc503a6948b83779aa46879443cad02477451b46429f1f67560c31d4377f96031ab94866a73be753c4ab91cc6576c3991c3423103ebae604e887c56cbacb9e95b8b46300b62e698a6456a0d175cf682eacabbe301e0b0ea34f963daed0dc6c1b75fa5e3870959913e69e61911d9ff646e9c6bab33fe566871027e861577c4d7fdfdf94ce7ac1a3f6d29daf28d660431a89c0b56c4b95090e2ca5df62c1e5c5dbf98f067751819d4c5914aa33883b7b521aab30d14e1cfae74fcf3ad4b2cf9448009d3223ad984e0c50f92d465573a6fc2894f8a5d4e855316738ecfd6a6c157d39b5c44d80a7cba944cf9f7a701899859821cf2bc248459f7a350fefba53c1481a7197f024f2eb74251455c06f4b82dfcf3ccf3e3b98b898fa1b16c310125e5e9fd4019acccbe91b4d842ddd52ee56f6d3112dec80159d6d3ef93bca70e7afcccb223361c39addbe3c429934cd0ae35f36a8f6309f08e36b27341db1f21fd8a148b239361b31a85f53bd1ad49fadace6c64d5f4363427fb2f268e8aec6d81cdb7f1252baa4652dc55881661114bf98cdf17190379591f0e22dc97e790f53f463bbb0ad0ead78ddf7dfe2e26052acc31cfe52b822afd5ec5c75957106cb5c368c09252ff3e4f624d90e599279fb985ecdb7d8880dfe05ac2d2da83e34e2b9b88f5dd60107a4509902fcddf4a36605e5c7a2606a4aea9fd4b5b24ca6b67d6945d133869cf9276d8c30b08c2a9f4bf03f4e0b956fd5f3c80b958ac5c41e4115b6708799c3102bd8b6c7fe17ff8c3f89c7437255faf69d1e16074086dd44d038bc0211ac74743169b462dbc085d77bf45eea72bf8348308bf48feea02d739a0fee9fbf71023ef8c6828da1aec8618cc2345ff663f88bc52a990e6b9591425435b0c7900ea4068f5aa6345e94254e259a71290fa23281658a6a165d1dee10dcb355518264824665ff2c5538de9ae4487782911f79e0bb09bc2c2d8e0d91b33cbec839075c9b38c848e9d2fad7368e96c1932042c3e85fd95b7d4500e6cae9e649082e9d5ca6f2cf91fc7ecaccc1049525d4325003424cacbd6eb5b8cc30b6893bd1ef46a8e7cbcc87dc2dda5c802ef1f8bb607c7457eb161254dc0feb60ed5ed0383fdb4db91d7e41d45c8eb80c1981e801ef05703f97f8710a2e00eb0559f854f700f946937b9e68c75ad6d0015d5d79be5423d0d846bc76f92ea7ebb0302b3d3c695c0aafa83b2bf029a444709cbf2cefbdcc7eaf3dd7a16f8ca8c861e883db10d433f7fec547be45e6829962e430bb3c93e8cdfb342c1cb7e53d8a6ea625d5574c4b4303f61c4338a658e652ab2bc0029c0a78a5114f495a439956909cf42128cb4348affbecb20b7fea98e22160e9a58e7666a00e7b37fbec4bd3860d66a39d1232a57e8cc50710c5c666f7efa98f16f9a02d843c94b0842a383945d06899998ff2fd01ffb58ab53ea89b2c93634c48d0420edb9791b8e451b35b534b8b2874c4859c684cd14afb5335a2555c75ad9df018635bb7131a7ef204ccecfed33a675fc51687e3f8818406fbf58e7b5fde1ca96153817e1b632e89a78d967eb6a34af1dac0d9ffa448b7b9bac27afc305a7b47febbe0a37036c18aef6852b1b2759d67479f9edb169e796d949844a1624b1e832a2eee9be36dc5866d6fde431cfcbd4e305d322c9dd07f83b5b361daaa74bfc9fbce8b447210c327468659ecbb0a5fc20d0cb79de7d1d70bf251c81d5f38711f3f4bd4752685b077058beb465711b1359d2a7d2f59216c5a807121bb97e7ccacc46526e4072f1d6de3b487d492fed0995e2273fa3bb115bd08d32d8e57eb2aa8f9d3b81babd1b8334c3a5e69422b75502ced3793d07b9bdf38e9d9fa1d2e48c7886dfc41985e8ffc49f09c4ba58ddc3b4cbf562b591f8939ced5d18214a77cc753075334a157373cc33cbc07a731cd6342492f5e05f78108e627bc88777203c76632bbe0120924c7a51bbfc9dc789a5695b7c95ef544935032fb81d499c454a2d78727875c20bc8a48a9f23cf6595c17c9cdaa8d04bab8ac567ebd3bbcdb40e11f1893fea3970f176f75f38d17d6ee1bd4ab76c660723a776bc72319199ab82c40ac4a9f4f475e8fd4643a4be8601cb5172e112c236c7c430078601bf183a59a03885e994c1116a9d4ef275790ff2417ffd85b43274fc57654466fa394958aeb11f343c3439604af13997011af70b67df1a9dfa4cdb751a2dc3e5bbf42f7b9ebc6dcebb2dbdc57d7a2cef7409dba307b7cf6eab148a924566341d035cabc877c68d0fbfaebdd39c16304b63a1bae376fb4650708bf5695dfd7ffc01f43f0021f622de0b116ea494454497337a0ec469963de7f9d2b1d6c5a7a0a7835777a78a2b9e16eec696446981d2fea550f011419b96f7b2018d027b87fc715521b0302bd7b5b3bc5f033346029eced73df07dd1bb1f91848376b40b9e9da7233e7832edcc7b54ef6fd320d19efce78d58ea7020fbbdf77612dc8a4f3281915ac9706f346e405b9f489f8f2e9a2decb8d18bec1e5f735a4ec69bba4dc5d36c9c1cc50b92fe67b2cdd53fa671c0cbe331abdf46787e7c9912b951aa20700dba6cf5a209fe5c9c61ef62a8e2e572ec774b2d0f42d570633fc44d44826e848d47a8f386a5704e0a3eaf1d06617181aeb166334ab55d5aedccb27abf19a42a480930e25465721336c70a2ea7799d21a3659124ac9503efc99c1b13ca2b9723e3e338055f9b3cef7502017ebbb09a64b06462db353a5c562101cb7fbf29e056deeb1ff0c7bc877210c941c87401ceae52bcecc83e87655069ab931bd813c1a87d67554f5d2cf435e6dd92a515c22f5d5a9a44ebc81e9c4849104343b80824005619312a9e349d996e366d381da42edad1a560bf5e31ecd049e92ceaf42954958600a7868599fe10e9b34587368d3044250c3d1a8ba6c8dcb6d318d4f9e71c2d33fc74cb57620a8343258d072f3aa767b4b178f3f66d5a713dae2426296c12edf9ee37636869e30df64cd3855fae20bc7602c1b7e6c8246ed4be71231a5ec7b5e7a9ebb08bf8667d8f2900ecdb0a0addc14a2328eebc448db13013e6a3c1a661065e5ac0a04b5171bd84c9d9d947a6c31257ed13a966530c5e20168c100117cf82b4c00ea3ad00ea65e1af89535b3f11a1418ddad33db8cec281543732d2ff4eab54b12cc95f7d872e75bc01bf6c580540b0e26413c6c2321ddfb0447bdb6acf05ddf2bb92534a3a5f37d6da882289f6fefc6a213cdfcf34902137fa3b982b2b4c27c611f08909a18405482f1e3a2bf3635d3e970457541da16e37bb3c422cceeb484bb64c78724431a543ecf4ca851914c1555e3b785ec87bba3769927f6c29f80e7ae8632bdb9acdddf7c3b5580740d9b2bfc25086c9566844136f3fac74f429121f86c378c68c20a194b0c98b1e92991954cbf60477e217a2e25297fc7b18972e40c531ec19e1eea193bbc8893392d8528c6a0375bcb4b082d20d5c47cb330bbb4b74b91ab55d4a0d3e1dee8182c581e8e70ac30108eeb7185c6ea3f786881ad124e1404651ee95cdb0fbb0d0f4a2b43c795ec1cd4e46234a88862d57903ce878b641004fb637341e5d6bf5163f1a3467b828f6eea96c3c2bb79503687867e11eec32dec452e0fdd2eaacfc0a477ee839ef049855da734d18212142dfe2a95ab9ad9bc4f98c3bfa34134c7e6c9f8669303314d4e8c1bc5475e8fcf418cbdb3246ebf393d911cdfee8f2550dc1593ece59ced81a4ffb2484f9c8ebed0aed8d418138445c4e96b209adcc4afd70f09901662daa2c8c557d6039768d97e6b9518f0de4ac2e0187ba08a4a9128d3e632fca102137338b5e568f12c7bd28db772c800fb5f4d4e683b201840731bb7c034235cd73313cde88891bbb31597bb537696e6c987302297f9717b8053779aed447d33ef9129e84d3031fa9b453bd5731fb010ffd19a9133e0ccbec2461cdd31ba294d68c60a8535b15584bab6e6d0ce6c1cef4755bd5f7d90f4debb40af1437a19a96ef9c0709692156152091c7efb58f2d39a65b96416dc09e8091ae08d9be5235a3c1ec062862baa1aab788f28e83ba4635cecc6671f2320f42b4f711e7d0fcad89d6727d3630da1ef35e32dee39eda665946abe6224f17f2acc29e62518fd51eb7f193d9bb16c38204069098c293fdce24c1c79229fd08622a4256b581cffce12e46c20248dc902753f0e3c91f9685b3d45f984620e262b3487d67d152f1c50de3fd2067a9d3debf715f346dd2f712c55545336a9036ba82bb06cfae59a48d083c3388f77790c9639fa0a9c33f4c66c7513042bffb765c2a4b3657dddf0ea094d8d79018f66c8ef8e9df980a89906275edf4a467a5db0a623976899f0efd167aab6ff385cdde59027a95a570277cb94ebce503906c28527e3114eb9ed739d0c2f4cf82786b35c0054718f47381ed8ce9b107e1f1019be5fc877166da667036f0c1b84e2b5118b5f4babc052d997e5f1e8c4cf45eb26430b74d9e1df3735b8d5df559903143d983e974bed6cc608c2580a991bdd3628ec676d348de8752cafa80c1661f162e35c25fc0ba0198423f83214fed800f9355ac8ea67951cfeeb3736b50c1e14d45d33aa25fc72c38702bd5dd217842e54114f4799c45ff1b7cec9729382ff7fc3ff80cbe1a13d03e19eecd7de676f6791fe34143ae30c97da9623907d974a37b65d0ef5d46b718d58541c6b1902814de71218ca7396ceb5fdacdc3cf4d110862402e7cc6254f1e44e28593fd443290262db75fd482ce1d305d6bf9fd3e5e0efbedac5a4d097650b111e6e9e1b2c66a23ac5bf27ed78d25d1a54c16ca4287126736c2f17ab73e683798c29d16481775ada8e20d94b00b6b29654b18f60e2853fdc7d3ba55d7df660db90288b6f440efd19f0478047b12c7b07ab2b1c9529597e6462d20612e6c3b6d1b1d11305f8ddc811860450504b7cbf9794edd0d07c25ab6307d74afdce958355eb919dcb1fcb8038c6dd5e774ee398dc8553a9ddeb551f", 0x2023, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18, 0xfffffffffffffff5, 0x7, {0x800}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) r5 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) process_vm_writev(r5, &(0x7f0000000580)=[{&(0x7f0000000100)=""/110, 0x6e}], 0x1, &(0x7f00000008c0)=[{&(0x7f0000000600)=""/126, 0x7e}], 0x1, 0x0) fallocate(r4, 0x10, 0x460e, 0x3) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) fanotify_init(0x8, 0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001bc0)={0x0, 0x5, 0x1, [0xfffffffffffffeff, 0x8, 0x0, 0x1, 0x8], [0x15d, 0xa, 0xf, 0x4, 0xbe, 0xff, 0x2, 0x80000000, 0x0, 0x0, 0x8000000000000000, 0xfffffffffffffffc, 0x3ec, 0x10, 0x24c5, 0x10001, 0xffffffff, 0x7, 0xcb, 0x29, 0x7, 0xde1b, 0x9, 0x2, 0xd3a, 0x2, 0x6, 0x8000000000000001, 0x9, 0x2, 0x544, 0x7, 0x1, 0xfffffffffffffff8, 0x7, 0x7f, 0xfffffffffffffffd, 0x2, 0x0, 0x3030, 0x5, 0x9, 0x9, 0x0, 0x80000000, 0xb, 0x1, 0xfffffffffffffc01, 0x8, 0x6, 0x10, 0xd89, 0x9, 0x5, 0x5, 0xe, 0x8, 0x5, 0xfffffffffffffff7, 0x9, 0x5, 0x388, 0x9b5a, 0x7, 0x2, 0xee, 0x200, 0x4, 0xc, 0x80, 0x8, 0x9, 0x1, 0x8000000000000000, 0x0, 0x8, 0x6, 0x7, 0x6, 0xf80, 0x4, 0x7, 0xa, 0xfffffffffffffffc, 0xfffffffffffffff9, 0x6, 0x7, 0x6, 0x0, 0x8, 0x8, 0x1, 0x4, 0x5, 0x0, 0x1, 0x3, 0x3, 0x8001, 0x8, 0x2000000000, 0x7, 0x5, 0x6, 0x1, 0x5000000000000000, 0x7, 0xe83d, 0x8001, 0x1, 0x9, 0x0, 0x7fffffff, 0x3, 0xfffffffffffffffc, 0x5, 0xc954, 0x7, 0x6, 0x9, 0x8]}) r6 = syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x0, 0x203}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) syz_io_uring_submit(r7, r8, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r6, 0xd81, 0x0, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/48, 0x30}], 0x1, &(0x7f00000008c0)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001940)=""/99, 0x63}], 0x1}, 0xf5}], 0x2, 0x40000121, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 31.224033407s ago: executing program 4 (id=1316): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x44) (async) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r2, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, '{/#+-*\xae'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x38}}, 0x4044084) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) (async) r6 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3264}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 30.694524261s ago: executing program 4 (id=1323): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x46, 0x6, 0x7, 0x2, 0x1, 0x4, 0x1, {0x0, @in={{0x2, 0x4e24, @loopback}}, 0x380, 0x5, 0x8, 0x400, 0x1}}, &(0x7f0000000100)=0xb0) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r2, 0x7}, 0x8) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000280)={0x0, @win={{0x8, 0x6, 0x9, 0x553}, 0x8, 0x55fddc8, &(0x7f0000000200)={{0x1, 0x5, 0x9, 0xdd}, &(0x7f00000001c0)={{0x6, 0x8, 0x631d, 0xb}, &(0x7f0000000180)={{0x0, 0x24, 0x10000, 0x9}}}}, 0x14, &(0x7f0000000240)="6ce32730024a1beb57b55ca3f5163233f8c9f75762f123e6a61afe28753983", 0x9}}) write$selinux_attr(r0, &(0x7f0000000380)='system_u:object_r:update_modules_exec_t:s0\x00', 0x2b) r3 = mq_open(&(0x7f00000003c0)=',\x00', 0x800, 0x126, &(0x7f0000000400)={0x80, 0x3, 0x8000, 0x2}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x1, &(0x7f0000000440)=""/215, &(0x7f0000000540)=0xd7) r5 = getuid() quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000580)=@rnullb, r5, &(0x7f00000005c0)={0xddbe, 0x9, 0x885a, 0xa, 0x9, 0x0, 0xfffffffffffffffb, 0x50c66648, 0x5}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000640)='syzkaller0\x00') mount$9p_virtio(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x1002000, &(0x7f0000000740)={'trans=virtio,', {[{@cache_mmap}, {@loose}, {@nodevmap}], [{@context={'context', 0x3d, 'staff_u'}}, {@subj_role={'subj_role', 0x3d, 'syzkaller0\x00'}}, {@obj_type}, {@fsmagic={'fsmagic', 0x3d, 0x7fffffff}}]}}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f00000007c0), &(0x7f0000000800)={'L-', 0xe93d}, 0x16, 0x2) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000840)={r2, @in={{0x2, 0x4e21, @multicast1}}}, &(0x7f0000000900)=0x84) getsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000940), &(0x7f0000000980)=0x4) r6 = socket$kcm(0x29, 0x1, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000009c0)={r7}) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000a00)={0x1db2, 0x1d, [{0x8, 0x1}, {0xa, 0x1}, {0x7}, {0xb, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x9, 0x1}, {0x6, 0x1}, {0xe, 0x1}, {0x0, 0x1}, {0xb}, {0xc}, {0x7}, {0xc, 0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0xa}, {0xd}, {0x3, 0x1}, {0x5}, {0x3}, {0xc}, {0x8, 0x1}, {0x1}, {}, {0x8, 0x1}, {0x9, 0x1}, {0x3, 0x1}]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000a40)={0x0, 0x9, 0x9, 0x1}) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x2) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000e40)={r1, 0xd37d}, &(0x7f0000000e80)=0x8) setsockopt$WPAN_WANTLQI(r7, 0x0, 0x3, &(0x7f0000000ec0), 0x4) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000000f00)={0x3, 0xe9a}) sendmsg$qrtr(r0, &(0x7f00000019c0)={&(0x7f0000000f40)={0x2a, 0x2, 0x7fff}, 0xc, &(0x7f0000001440)=[{&(0x7f0000000f80)="a6f03996a8f729a17da03293d05e0b56de32cfcafd93728725472e822e42ea6332f74e829632da3bf688d8c0b038298adf7afde3552a70b972c832f13120183371893a31b36b17a59bc992b4104797ff189afaee4cf1cd03d148968fc47b928c1261c8a4b9d7e66d9d21c29dfc9264da1dd5a68ddd10e24674fa04a042ec9d6488f4daf91a86b7790a400028fa56896c273ce7154599b3ef5273e733efac5ab3045459144087fee77daf9cfc3cbccae257b31c1a95789f986a448f6e270d136ed968", 0xc2}, {&(0x7f0000001080)="551b65b80a843301aa07fd9b32067cfc852c5fd2fbfaef7c13d9d6b20849c2a4031df25521fe4380e5c812faef8274e7f990ffdf3f8707efb95a68b387a06d09788edc39936bbd41fa653e032fbc4d9d642674ab0fed89", 0x57}, {&(0x7f0000001100)="cf6b7fb05e592d98826ab96e14d34dfbc74a2531bee9a349eddd4d32381f95aee60c7d0bbe012bcad02965941f5bb303f4ec05a9c30e7302514af78c3988f3624f518426703af1a31a5201c574cecabd47bcc0eebb51b32500056acfad39071d69013b0a8c411da611", 0x69}, {&(0x7f0000001180)="38341ebb29fc8301ad0091fe402dae9112b7ade31024491012690b321ce1a938265c9894713bc2f6cc2d3d2a1aa3e29e87bea7b07302bc56a2ab992f17c70ecdb20768af72b3504635cc6e45df8ae948b6124b9e3f97896979e443af78cbac439972cdf464116328f89818c18a04ed5220c698", 0x73}, {&(0x7f0000001200)="194e1c9e5d1f6db0faef6256532109b32cfc504fb05d688d278e1f7895cf0a17fcfaa2ed9c335ae2d0e0fc45bfd3c7e720050faaed9802f9297a8700436bf57db16a540f52984394d28dfb9ebd7ae002f592edc026c742ec646012251f75aae5259c52ba38147ff27d8b5c9893494182204f2304ac78c8618184f3b6b82ef03e0b4385ee2bee1b88de2b80e56391fde3ff1f60b7b2d619daf1e5a4584c512db336b5b51918369a09c063a25a4eacfbaa1e375d03360f04647739fda2ef25a6d30366afa314abc73b667f9b1a2381ce49", 0xd0}, {&(0x7f0000001300)="b38edfa411ccae0f9fa4cc37668d4a61bb84e850208b11430d9bb8c57b7f9eaf13983302ebb3e03245cd80f9b96a78687f97ff3f", 0x34}, {&(0x7f0000001340)="8fdd907a603bec33e3953df58ab24069177069c1fa72da4853a56b151573115b8fc980936a3c1e79f72819fb0656ddbf5d0f1f9686d031e2a913c8dfee24f76cfb6cc85666e5ff26514da05177821bd97cb5f8262e68a3639c654e0300d65722a20d8b5e78d9a17339b6e0adbf8fdf0692650163b5c0337fa9509c2fe282d0955740b280781570c92c293719cc69bb164a1694499e7aefbd208b8182ff7f6e1041575c413e325cfac4281b69819295faeb95bc9efd80d08f714ea75161052aeb07c76036e167c2bfb863c914b0320b13b8a2378d830953358c515a9f9f988404e22e5acec8bb683b4bf2", 0xea}], 0x7, &(0x7f00000014c0)=[{0xa0, 0x108, 0x8, "9108ba45b414ab24d93dcbda3fbbbcb036a6a5aab1a321d729a9368e047d1d928fde7dc455bc9880f2707f1fdc744bb90f15c2eb4b9ffebcc86dda67bf2af3a6975e3ad792c6b29976322a0383a7eaf8297ac2d452e4dc761833937550267f331bc5ae6d0e0272727d30cfd602d95a65f3b24cc3b7902864779b37dc957575d44360d5ea3b8f906fdb4c5139"}, {0xb0, 0x10b, 0xffff02a5, "aca8fd2a7fc4d87ec17bad9ff6b6b50891754c940ddd7d4652c46f64e0803561cc062664ceafb4fc3d9b5bfe1ef2927fdffd201ecff3931ec76fb3e3891da2c0f65074edaa48ade352e59d8f5d8cf91b3434718228b3ec3f28747a907e295d2f808881ff711e55632955ced66155f7179cec56fb47e9943ec94a198ce4217c2cf18013be235fdaba5172ed09a07343ccb85c4e2667c6426c5d68"}, {0x18, 0xff, 0x4, "951a"}, {0x20, 0x104, 0x5, "932d3ba99255aaf66d"}, {0x50, 0x115, 0x5, "126261a911c1138c85c606f5c30ed58c13b217b003a4f7c042dc89ee9a91d075b3a3b8991d62d92aa283f3401bca47d194efcc6b7ad1f0916c4fccea6b"}, {0xe8, 0x118, 0x4, "c32079f7c45ef1128dfd51d11278d039fec879736bae2ebfddeff7aa43cc49539ac786828ec0bf45e0c8d7086695a9fd2a3b05b05894e394be539d7943304eaaf18379e15e55416e66e5b7d771e5fc1f4e58a5a8a28d65d2af6040483f6ec227f4e8a0bf80ba70bebadef9354770ccaae764d14ceab3b59a6d268bb8383b902b4f4378ece9dc62d3e8d57edbc3a3ce01a4f91d59157b593c65a15cf4179d0cfc01eb8d2abeede31413ac3ee00d855fc0391ec8d9efc6b5703cc73a9b10f0ab8285a253cf97963f65b8ed49080753c3653564ae6f3d83c8"}, {0xa0, 0x113, 0x4, "40354c090e76051b2ec3b87a846902d8e76af1cea7dbf43b772b4d06430c98a32ae381f7eeef8fa992a532312a435ab43938ac8b39af1891c11916807f87d3ac7146a94241b0081a43e3aaf60683da7bff3e21b96a5535bab50c38de50d0398d99165102915d2e6a8496c70f2dcf76b6eedb0e7c0afd3f99e6aa8f563361aabe450f5bb13403b266bd3dbe8f9233318c"}, {0x98, 0x10e, 0xffffff2f, "0b28a8065663cccab1d6b93d191ed7ffab430fd9611aaddf2dd7c0921e2cbe15896b90028616754ab0cabe8d5549333f11868c7f15eb593e75651384ca934436da2d979a73bff08cb30b6c83b1cfdada3ac40e6ac4d0fc88175224db4d23c258c5b16fd5d7f13cf5e016b35ae5e5fef2ddbfead7d1c8625565ba07b1498e5225c0d52de8"}, {0xe8, 0x111, 0x5, "44741c8a1235f69f81a1ea2ca10bf34e44f33ed0df7a402e709a0f3c2b44d9ca192477471688fa3443d31226bcbefb7cc859dfae7cfff27e3d84b127c9a98178b2b04162a6dc6601bcea50f7aa22f3ecb8850592962fe6a06d6d1d8b3deab7bc08276c5f7237b87a09e0f4e1a15e67808ad8e5cef81256f797e092a260fa92f443dc823663adb6aff7af5e702a57b65d4f25a99dc688babf6fef4e93bc77698f11bb34d8c436ab29a4db1d5f2bffd695b8f567056f2d3f96a6cafd30440dba120310e0c29268e75e73a6272031f73ce90b6a058a0786"}], 0x4e0, 0x4040185}, 0x38) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000001a00)={"d606b0d1", 0x4, 0xc5, 0x8, 0x80000001, 0x6, "b23826015aced56e40718507884cd5", "d92e547f", "315cb795", "261978ec", ["bbbe48e48c895e5defac79f9", "2517fcdfb9cccfdc71d91d85", "00373c8ffa19d0b9e0fbbcba", "84085e870eb261cd36341062"]}) ioctl$KVM_PRE_FAULT_MEMORY(r0, 0xc040aed5, &(0x7f0000001a80)={0xb000, 0xc000}) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000001ac0)={0x1, 0xffffffffffff7fff}) 30.633264863s ago: executing program 36 (id=1323): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x46, 0x6, 0x7, 0x2, 0x1, 0x4, 0x1, {0x0, @in={{0x2, 0x4e24, @loopback}}, 0x380, 0x5, 0x8, 0x400, 0x1}}, &(0x7f0000000100)=0xb0) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r2, 0x7}, 0x8) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000280)={0x0, @win={{0x8, 0x6, 0x9, 0x553}, 0x8, 0x55fddc8, &(0x7f0000000200)={{0x1, 0x5, 0x9, 0xdd}, &(0x7f00000001c0)={{0x6, 0x8, 0x631d, 0xb}, &(0x7f0000000180)={{0x0, 0x24, 0x10000, 0x9}}}}, 0x14, &(0x7f0000000240)="6ce32730024a1beb57b55ca3f5163233f8c9f75762f123e6a61afe28753983", 0x9}}) write$selinux_attr(r0, &(0x7f0000000380)='system_u:object_r:update_modules_exec_t:s0\x00', 0x2b) r3 = mq_open(&(0x7f00000003c0)=',\x00', 0x800, 0x126, &(0x7f0000000400)={0x80, 0x3, 0x8000, 0x2}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x1, &(0x7f0000000440)=""/215, &(0x7f0000000540)=0xd7) r5 = getuid() quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000580)=@rnullb, r5, &(0x7f00000005c0)={0xddbe, 0x9, 0x885a, 0xa, 0x9, 0x0, 0xfffffffffffffffb, 0x50c66648, 0x5}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000640)='syzkaller0\x00') mount$9p_virtio(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x1002000, &(0x7f0000000740)={'trans=virtio,', {[{@cache_mmap}, {@loose}, {@nodevmap}], [{@context={'context', 0x3d, 'staff_u'}}, {@subj_role={'subj_role', 0x3d, 'syzkaller0\x00'}}, {@obj_type}, {@fsmagic={'fsmagic', 0x3d, 0x7fffffff}}]}}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f00000007c0), &(0x7f0000000800)={'L-', 0xe93d}, 0x16, 0x2) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000840)={r2, @in={{0x2, 0x4e21, @multicast1}}}, &(0x7f0000000900)=0x84) getsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000940), &(0x7f0000000980)=0x4) r6 = socket$kcm(0x29, 0x1, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000009c0)={r7}) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000a00)={0x1db2, 0x1d, [{0x8, 0x1}, {0xa, 0x1}, {0x7}, {0xb, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x9, 0x1}, {0x6, 0x1}, {0xe, 0x1}, {0x0, 0x1}, {0xb}, {0xc}, {0x7}, {0xc, 0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0xa}, {0xd}, {0x3, 0x1}, {0x5}, {0x3}, {0xc}, {0x8, 0x1}, {0x1}, {}, {0x8, 0x1}, {0x9, 0x1}, {0x3, 0x1}]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000a40)={0x0, 0x9, 0x9, 0x1}) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x2) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000e40)={r1, 0xd37d}, &(0x7f0000000e80)=0x8) setsockopt$WPAN_WANTLQI(r7, 0x0, 0x3, &(0x7f0000000ec0), 0x4) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000000f00)={0x3, 0xe9a}) sendmsg$qrtr(r0, &(0x7f00000019c0)={&(0x7f0000000f40)={0x2a, 0x2, 0x7fff}, 0xc, &(0x7f0000001440)=[{&(0x7f0000000f80)="a6f03996a8f729a17da03293d05e0b56de32cfcafd93728725472e822e42ea6332f74e829632da3bf688d8c0b038298adf7afde3552a70b972c832f13120183371893a31b36b17a59bc992b4104797ff189afaee4cf1cd03d148968fc47b928c1261c8a4b9d7e66d9d21c29dfc9264da1dd5a68ddd10e24674fa04a042ec9d6488f4daf91a86b7790a400028fa56896c273ce7154599b3ef5273e733efac5ab3045459144087fee77daf9cfc3cbccae257b31c1a95789f986a448f6e270d136ed968", 0xc2}, {&(0x7f0000001080)="551b65b80a843301aa07fd9b32067cfc852c5fd2fbfaef7c13d9d6b20849c2a4031df25521fe4380e5c812faef8274e7f990ffdf3f8707efb95a68b387a06d09788edc39936bbd41fa653e032fbc4d9d642674ab0fed89", 0x57}, {&(0x7f0000001100)="cf6b7fb05e592d98826ab96e14d34dfbc74a2531bee9a349eddd4d32381f95aee60c7d0bbe012bcad02965941f5bb303f4ec05a9c30e7302514af78c3988f3624f518426703af1a31a5201c574cecabd47bcc0eebb51b32500056acfad39071d69013b0a8c411da611", 0x69}, {&(0x7f0000001180)="38341ebb29fc8301ad0091fe402dae9112b7ade31024491012690b321ce1a938265c9894713bc2f6cc2d3d2a1aa3e29e87bea7b07302bc56a2ab992f17c70ecdb20768af72b3504635cc6e45df8ae948b6124b9e3f97896979e443af78cbac439972cdf464116328f89818c18a04ed5220c698", 0x73}, {&(0x7f0000001200)="194e1c9e5d1f6db0faef6256532109b32cfc504fb05d688d278e1f7895cf0a17fcfaa2ed9c335ae2d0e0fc45bfd3c7e720050faaed9802f9297a8700436bf57db16a540f52984394d28dfb9ebd7ae002f592edc026c742ec646012251f75aae5259c52ba38147ff27d8b5c9893494182204f2304ac78c8618184f3b6b82ef03e0b4385ee2bee1b88de2b80e56391fde3ff1f60b7b2d619daf1e5a4584c512db336b5b51918369a09c063a25a4eacfbaa1e375d03360f04647739fda2ef25a6d30366afa314abc73b667f9b1a2381ce49", 0xd0}, {&(0x7f0000001300)="b38edfa411ccae0f9fa4cc37668d4a61bb84e850208b11430d9bb8c57b7f9eaf13983302ebb3e03245cd80f9b96a78687f97ff3f", 0x34}, {&(0x7f0000001340)="8fdd907a603bec33e3953df58ab24069177069c1fa72da4853a56b151573115b8fc980936a3c1e79f72819fb0656ddbf5d0f1f9686d031e2a913c8dfee24f76cfb6cc85666e5ff26514da05177821bd97cb5f8262e68a3639c654e0300d65722a20d8b5e78d9a17339b6e0adbf8fdf0692650163b5c0337fa9509c2fe282d0955740b280781570c92c293719cc69bb164a1694499e7aefbd208b8182ff7f6e1041575c413e325cfac4281b69819295faeb95bc9efd80d08f714ea75161052aeb07c76036e167c2bfb863c914b0320b13b8a2378d830953358c515a9f9f988404e22e5acec8bb683b4bf2", 0xea}], 0x7, &(0x7f00000014c0)=[{0xa0, 0x108, 0x8, "9108ba45b414ab24d93dcbda3fbbbcb036a6a5aab1a321d729a9368e047d1d928fde7dc455bc9880f2707f1fdc744bb90f15c2eb4b9ffebcc86dda67bf2af3a6975e3ad792c6b29976322a0383a7eaf8297ac2d452e4dc761833937550267f331bc5ae6d0e0272727d30cfd602d95a65f3b24cc3b7902864779b37dc957575d44360d5ea3b8f906fdb4c5139"}, {0xb0, 0x10b, 0xffff02a5, "aca8fd2a7fc4d87ec17bad9ff6b6b50891754c940ddd7d4652c46f64e0803561cc062664ceafb4fc3d9b5bfe1ef2927fdffd201ecff3931ec76fb3e3891da2c0f65074edaa48ade352e59d8f5d8cf91b3434718228b3ec3f28747a907e295d2f808881ff711e55632955ced66155f7179cec56fb47e9943ec94a198ce4217c2cf18013be235fdaba5172ed09a07343ccb85c4e2667c6426c5d68"}, {0x18, 0xff, 0x4, "951a"}, {0x20, 0x104, 0x5, "932d3ba99255aaf66d"}, {0x50, 0x115, 0x5, "126261a911c1138c85c606f5c30ed58c13b217b003a4f7c042dc89ee9a91d075b3a3b8991d62d92aa283f3401bca47d194efcc6b7ad1f0916c4fccea6b"}, {0xe8, 0x118, 0x4, "c32079f7c45ef1128dfd51d11278d039fec879736bae2ebfddeff7aa43cc49539ac786828ec0bf45e0c8d7086695a9fd2a3b05b05894e394be539d7943304eaaf18379e15e55416e66e5b7d771e5fc1f4e58a5a8a28d65d2af6040483f6ec227f4e8a0bf80ba70bebadef9354770ccaae764d14ceab3b59a6d268bb8383b902b4f4378ece9dc62d3e8d57edbc3a3ce01a4f91d59157b593c65a15cf4179d0cfc01eb8d2abeede31413ac3ee00d855fc0391ec8d9efc6b5703cc73a9b10f0ab8285a253cf97963f65b8ed49080753c3653564ae6f3d83c8"}, {0xa0, 0x113, 0x4, "40354c090e76051b2ec3b87a846902d8e76af1cea7dbf43b772b4d06430c98a32ae381f7eeef8fa992a532312a435ab43938ac8b39af1891c11916807f87d3ac7146a94241b0081a43e3aaf60683da7bff3e21b96a5535bab50c38de50d0398d99165102915d2e6a8496c70f2dcf76b6eedb0e7c0afd3f99e6aa8f563361aabe450f5bb13403b266bd3dbe8f9233318c"}, {0x98, 0x10e, 0xffffff2f, "0b28a8065663cccab1d6b93d191ed7ffab430fd9611aaddf2dd7c0921e2cbe15896b90028616754ab0cabe8d5549333f11868c7f15eb593e75651384ca934436da2d979a73bff08cb30b6c83b1cfdada3ac40e6ac4d0fc88175224db4d23c258c5b16fd5d7f13cf5e016b35ae5e5fef2ddbfead7d1c8625565ba07b1498e5225c0d52de8"}, {0xe8, 0x111, 0x5, "44741c8a1235f69f81a1ea2ca10bf34e44f33ed0df7a402e709a0f3c2b44d9ca192477471688fa3443d31226bcbefb7cc859dfae7cfff27e3d84b127c9a98178b2b04162a6dc6601bcea50f7aa22f3ecb8850592962fe6a06d6d1d8b3deab7bc08276c5f7237b87a09e0f4e1a15e67808ad8e5cef81256f797e092a260fa92f443dc823663adb6aff7af5e702a57b65d4f25a99dc688babf6fef4e93bc77698f11bb34d8c436ab29a4db1d5f2bffd695b8f567056f2d3f96a6cafd30440dba120310e0c29268e75e73a6272031f73ce90b6a058a0786"}], 0x4e0, 0x4040185}, 0x38) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000001a00)={"d606b0d1", 0x4, 0xc5, 0x8, 0x80000001, 0x6, "b23826015aced56e40718507884cd5", "d92e547f", "315cb795", "261978ec", ["bbbe48e48c895e5defac79f9", "2517fcdfb9cccfdc71d91d85", "00373c8ffa19d0b9e0fbbcba", "84085e870eb261cd36341062"]}) ioctl$KVM_PRE_FAULT_MEMORY(r0, 0xc040aed5, &(0x7f0000001a80)={0xb000, 0xc000}) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000001ac0)={0x1, 0xffffffffffff7fff}) 3.113846265s ago: executing program 3 (id=1537): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2102, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2) ioctl$DRM_IOCTL_PANTHOR_GROUP_GET_STATE(r1, 0xc010644a, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) close(r0) 1.22358205s ago: executing program 8 (id=1565): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xe) (async) open$dir(&(0x7f00000003c0)='./file0\x00', 0x400, 0x113) (async) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x8, 0x10, 0x690, 0x1, {{0xe, 0x4, 0x1, 0x16, 0x38, 0x8, 0x0, 0x7, 0x29, 0x0, @local, @broadcast, {[@noop, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0x65, 0x1, 0x8, [{@rand_addr=0x64010100, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x3}]}, @generic={0x8, 0xa, "880a3feb5883221a"}]}}}}}) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x4) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@dellink={0x0, 0x11, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x11000, 0x1544}, [@IFLA_EVENT={0x0, 0x2c, 0xa57b}, @IFLA_OPERSTATE={0x0, 0x10, 0xf5}, @IFLA_NUM_RX_QUEUES={0x0, 0x20, 0x6}, @IFLA_PROMISCUITY={0x0, 0x1e, 0x5}, @IFLA_GSO_MAX_SIZE={0x0, 0x29, 0x726e0}, @IFLA_MAP={0x0, 0xe, {0x1, 0x15, 0x5, 0x8de0, 0x7, 0xa}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='\''], 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r4, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)={0x24, r2, 0x211, 0x0, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x100000000000000, 0x0, 0x45}, 0x0) 1.223284337s ago: executing program 8 (id=1566): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) socket(0x11, 0xa, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="757372626543ef00004c4da7abbd255e6f3baab424db3fe753190ee756d610cd64f32fa919268bd6cd06574fde5f14d52ccbe9dc7004000000d3316d29ea4e824976da74d4496f362621d9aa3b91b71d838fa1f29502178a5a0aca640bf113716d92beaaca10f35ab5c788645ea499c38406ab44bfe4c67bcda92c928cd5801f65fe021018adba451dd906052c83c93c530458c796d4346d98088102582d2ef6c60000000000000000000000007aa642a2107a60b470c5d5b0c989c45d6ab3a6829d0fc9720d30a6280aca846ae77c11f23b7740b370ace2d19068af817f33850a6efd05ff7ae54a03932f46e49e9e33ecc6bda40c36399aab0232f98641b89003b3e872f6ead7500b114c3c853a4570507b0c8198adfd9a96cfde7bec47ae403cc40fa856a6aad6661d601456efac7dcdc16f967a401c784b635bcbbb7e4817e51f5a8c8f2d116d86919a1600e20bb091e134d430cf4ac436dbca80c14e44792b389deeb20aa394b4bba350b235755d3df1839a81a37c6ad89dafca0a4a5206489566522a3c97c6e486f9ad8dc8028b90d602"]) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2a, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xf, 0xfff1}, {0xfff1, 0xc}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x80000) 974.546643ms ago: executing program 3 (id=1567): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001500), 0x802, 0x0) syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x151181) syz_open_dev$dmmidi(&(0x7f0000000080), 0x2, 0x2003) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1e, 0x80000, 0x401, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="2b0929bd7000fddbdf259844909308000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x60}, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0xee00, r7) fchown(r5, r7, r8) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x54) 973.351544ms ago: executing program 3 (id=1568): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) mount$overlay(0x0, 0x0, 0x0, 0x4000, &(0x7f0000000180)={[], [], 0x3a}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) chdir(0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 903.75157ms ago: executing program 3 (id=1569): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000bc0), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x3c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) (async) r3 = signalfd4(r2, &(0x7f0000000000)={[0x6fc]}, 0x8, 0x80000) (async) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000200)="69223a6e0fd0c24f273c7b8d4d82b90f115423cd1946133ff2a49b88ada59863376482dea686f9e9cc30914713c9fc102b2c353d3d36d49de58d28b536c41752b21745b0e3c6bdf86b6b05a5b423950e03252c809b1b8fd499528816acbb4e4b979620d0271f2b918f95fd9e29b617e1e041155c1e62fbff807c2c5b498b817c1b8ecf65d4902afd40ca791515b23f29d83839fb0f2e9a", &(0x7f00000000c0)=@udp6=r4, 0x4}, 0x20) (async) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000440)="d0b29c80232e9b01", 0x8, 0x8001, 0x0, 0x0) 598.538998ms ago: executing program 7 (id=1573): r0 = syz_io_uring_setup(0x5bb8, &(0x7f0000000000)={0x0, 0xfffffffb, 0x10100, 0x5, 0x67}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) 598.282854ms ago: executing program 7 (id=1574): r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="8907040400", 0x5) r2 = socket(0x1, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x30, 0x28, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0xfff3, 0x9}, {0x0, 0x9}, {0xffff, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x40408c4) read$FUSE(0xffffffffffffffff, &(0x7f0000000f80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r3, &(0x7f0000000580)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {0x1, 0x8}, [{0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x4, r5}], {0x4, 0x3}, [{0x8, 0x2, r6}], {}, {0x20, 0x6}}, 0x3c, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4622, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x4e8, 0x450, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x450, 0x230, 0x230, 0x450, 0x223, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010102, @local, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x53}, 0x0, 0x358, 0x378, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x30}, {}, {}, {0x0, 0x0, 0x10}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x0, 0x3, 0x0, 0x1}]}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@local, [0xff000000, 0xff, 0xff000000, 0xff], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0x0, 0xffffffff, 0x0, 0xff000000], @ipv6=@dev={0xfe, 0x80, '\x00', 0x20}, [0xffffffff, 0xff000000, 0xff0000ff, 0xff], @ipv4=@loopback, [0xff, 0x0, 0xffffff00, 0xff], 0x6, 0x1, 0x5c, 0x4e23, 0x4e24, 0x4e21, 0x4e21, 0x100, 0x4}, 0x0, 0x5c}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x548) 516.362571ms ago: executing program 7 (id=1575): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x8ec81, 0x0) r0 = syz_clone(0x4800000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) ptrace$ARCH_SET_CPUID(0x1e, r0, 0x1, 0x1012) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000300)={0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x484480, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000080)}], 0x2, &(0x7f0000000b40)=ANY=[@ANYRES8=0x0], 0x280}}], 0x1, 0x810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="304ac7f7892358150a0d000e353d203cbf6b6190dcb623e48bf65eed11e5377cbe901a530e292ac25439957709e1b404ffbb4fa812574e35a9c8f43ef54b0860bfb88376f8161a771fa85558451b65414038a88246d470508d1f4c963bd9145b0b", @ANYRES16, @ANYBLOB="010330bd7000000000001f0000000c0006000300000000000000"], 0x20}, 0x1, 0x3000000}, 0x800) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040), 0x0, 0x40800) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000600)="64440fc739b93a060000b807000000ba000000000f3066baa100ec67670f210866baf80cb818ffec8def66bafc0c66b886be66ef8f48408628048f09e001ef400f231d0fc17f010f5da67e000000", 0x4e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x78, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 365.334414ms ago: executing program 7 (id=1576): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='devpts\x00', 0x3000005, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat\x00') r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='attr/fscreate\x00') close_range(r4, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r2, 0xc02064a5, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0}) io_uring_enter(r5, 0x2791, 0x544f, 0x12, &(0x7f0000000180)={[0x2]}, 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r6, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 364.938445ms ago: executing program 5 (id=1577): ioprio_set$pid(0x2, 0x0, 0x4000) r0 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r0, 0x0, 0x100000033) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000880)={0x0, 0xffffffffffffffaf, 0x81c00}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe7, 0x0) syz_emit_ethernet(0x5eb, &(0x7f0000000000)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653e05b53afffe80000000000000000000000000002cff02000000000000000000000000000180009078d6780fff0ce860841e725d49434bcae08d22a971b253924b0c5e707858b65f206f80b99490560cfda07ea0ed64892e44ad78d2558915f32070c24e33df07ecb6314e446d037656566d4c54561e8bb0ebbec80199ca4a3ff9c87622a115f864bee36c2d2b1416cafff082a29417b26d7d42d20a38c17e8236337d576e15eb6b498bf4764adb17ee5501e49fb6a8a2ea03ebf4bcd334387a30a0a6a981a96538b11217bfe822c6099a52385cecdb8c718e4f0a0edbeef4ebd7c79adac7fbf9ab32ebdd2d5e198427bcf4c6e7ba50376f73cee86d95312220b140efa2facf419a43f14a1a6f7fa868ac8b95b6e4ac007c69a8212aef2158fc8c419a82dd552392a5a453f663120be864841c2f2459f2e8ad0c16d1a00623c28ef24cafa9664781cd6295237613fd713a8a17682d00dc39c902b1ee11f856505f4c69f830ebf98367fb00d27cbd2fc89959c8fb861fad61a7e408d3852338ffa3a95bb02bebf68ead0e4cf80aaee3c4675a678cb2cebf0c718192d74302f5c08285fb1b35c990bc44351e76741885b3b8f86904311d62b25bc28dee99c5a272c6cfb4db95ae1e276485dac90d1a311a2da1f0dc3305a1c80eb2f4c786c2ad05b1b75eb5b71355205e9302157a5458dde7e24d192b56b9ca57cee5729bb70bf3c8c056fdd8c78ef3532ee2f3e7730c7b6ab1fb7034400ed9125b372beaaf9571e447036fdf4b050ece37e6e6337e657b9af5bb8e3c2b5d709a6afa25eb8f3ffc68bb224d9198abc1109f87d0808661cd65e6dce3e143b0f7ff0a832d44afe08b9841fbd98d89e30cc97aa2a9fad0cd2c63d927872fbcc55678968bcf05b6d9a792cf6a8c527343ef59fe5ac5e06d83bd1d1606a4f376b6d71bd0b7bdaa5d402fd0c6cae0e4692ee07cf13b2667990ef2600025e980bef8d46abd087300890ba5237b469ce4390a19e3aa06faf10f1bf9df12230af9215f0ae52c877494585a2ae3a4c391f22b695fac7bdf20dc9c8cadf6335af3cd6981d362319d3ad7f8d68e10643abb2e17c102564c442f4db3a660f5ad600ca67ab191de48eab5271fee3d1b105a7d199979bfeb291b204eb0b82fc31ca4ef4a6bbc945dd945c1d5286a3d4334cf838a35d68f5c7797583f70b7fcf12fa3dc9dc9081f8ff80d1c01a3a6130e5489d7b222ddf4e94a24f2acec178c172ef7df868e064db4eaa491ca53cd596dfe5b04dd534f6bfbcb8cefe1119e3d2bafff8ee5445bf0fc70d0fbcc033011af6ac6b00a3bf7833ab1f32ed1a8ce7bbae82ef7e0c0a3f8e22de04c1ebee96e3fcaf856d47a425fd06b8f84302f52a5feeb76cdbc919ab1fdec7e8c1e2a0ebfa23bc24ef6f0af0d1831249122771c0e33f24f8fbd5d26c50880a812525cab8e8679686cd990c91cc5e33addf4f0256c2fa988f6bbc4a11517b912f8d058391bde0bed8e83ba628871e0f0a1e2fcb669e722d25b03a08b1b2760efbf152d05511f904efbd943002e5d41e9320f4a637fbd472c7ba42cbc5c4d72ecf48f0d1e11c409c4bd17c1fbef4f20750fa1425efcd41a9dd72a8b9cd5849bd1d81030ce674f298d982f3ac3e9d5f5f0787f200e07f94dfc902791056c90834051812ed095f88c4da7f3bb33f78ebdde37ddb13367bdb5c1bc81c4cd6c7284d7da1debea4d476652281299d0baf55c3a953b0ad7e4746877c841ff81f4b058b25efaa1e72cd5a9dfb6c5adc7cbddcfefcfee63a7ed884e2b15e08d91b5cc1b65babc31c4bd0e58dbcf4eb532908311f4a89c5d02cf09cd164da5e3a9adc7ccde2ced10e9057f52b481171ace87429e2da6502b831cc0a29ddfbaec1a0f035100cc3e6eaaad9d42159fc58474ee4cc59ac6b8ecbb15b6594c7c129a46567aa27037e6b5aa592c1d53d3f656be9ba4372813147e4b39211f87de579180e7186b40c4c0597221197909e842e71ffaaec95ca6007a6e129c1ead17ce06ca20606c4d2fe8361cff369d2a9a592fb195659d9f42f4766132467b0f6e7fd1af1c41b2b08b24f53e4b95b595474a871182571600000000000000000000000000000000443c2b5cb92555640b8459c3fd5cb13130b85ba7863fffb9d490ae93d471b80bd5959c0547f5a90e5c62ed9a2f3fe16460a657f428c78e431ab696bdd652eab62ee7f8839960fc1e991a6f2d2d8c2aa488bf6f325d29eecb0fd9f65c0ca6648afba1732ee974a2db277ed53d6bacbc1ff2b77a74580bba59737a140d776c1116e4267ba726be6134ed404df046c4a34b85bcd57833327896"], 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000700)={0xffffffffffffffff, 0xb9cb, 0x3, 0x9}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000001780)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000001880)={0x60, 0x2, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x7, 0x0, 0x0, 0x401, 0x8, 0x61, 0x4, 0x24}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r7, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x34044804}, 0x20048814) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x5c, r10, 0xa3959ba9c9468c63, 0x6, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5fbfc4992f69c7379a6069ab5160db44"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f4dc82e4d3e53971"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="56fbe883aa28637b7eca8ecd189ed459def191ad83905dcd"}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x24000000) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, r7, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x9, 0x7e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004804}, 0x84) 363.213473ms ago: executing program 7 (id=1578): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r0, 0x0) fanotify_mark(r3, 0x1, 0x40000020, r0, &(0x7f00000000c0)='./file0\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000012140100000000000000000008004f000000000008004b1013000000080003000100cc275289a030ba81a0454900000800150002000000cbff0100000000005a32412ae58160c5bae5bd7c12636f5f52a9c1e8087310e7a6235dccdb23b79998a309091ef4b8d08cbbc30e6911"], 0x38}, 0x1, 0x0, 0x0, 0x4008814}, 0x8084) r6 = socket(0x10, 0x3, 0x0) r7 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x400}, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f0000000400)={0x5, 0x1}, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') fanotify_mark(r3, 0x200, 0x40000011, r8, &(0x7f0000000200)='./file0\x00') preadv(r8, &(0x7f0000000640)=[{&(0x7f0000000140)=""/120, 0x78}], 0x1, 0x0, 0x2004) r9 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2a020480) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) fchown(r11, 0xee01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000080)) syz_genetlink_get_family_id$team(&(0x7f0000000900), r6) getsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f0000000940)={@initdev}, &(0x7f0000000980)=0x14) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001300010025bd7000fedbdf2500000000", @ANYRES32=r10, @ANYBLOB="4d2464d2878199321a680300", @ANYRES32=r9, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0xc0008c1}, 0x20048000) lsetxattr$security_selinux(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:dhcpd_initrc_exec_t:s0\x00', 0x29, 0x2) 294.910666ms ago: executing program 8 (id=1579): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xbdae, 0x10, 0x0, 0x30f}, &(0x7f0000000500)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000040)=[r1], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000200)={{0x80000000, 0x0, 0xf5a1c2b8e98148d, [0x6, 0xfe]}, {0x80000000, 0x0, 0x7, [0x4, 0xb]}, 0x2, [0x5, 0x84000000]}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x10, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x21, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d00400000000001c00128009000100626f6e64000000000c00028008001400006f"], 0x3c}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) bind(r0, &(0x7f0000000080)=@ethernet={0x306}, 0x80) 294.261874ms ago: executing program 5 (id=1580): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000080)={0x4, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xa) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) read(r0, &(0x7f00000001c0)=""/162, 0xa2) r1 = accept$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, &(0x7f00000002c0)=0x10) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000380)={0xc0b6, 0x8, [0x8, 0x2, 0x0, 0x7], &(0x7f0000000340)=[0x0]}) (async) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000380)={0xc0b6, 0x8, [0x8, 0x2, 0x0, 0x7], &(0x7f0000000340)=[0x0]}) ioctl$XFS_IOC_FSGEOMETRY(r1, 0x8100587e, &(0x7f00000003c0)) (async) ioctl$XFS_IOC_FSGEOMETRY(r1, 0x8100587e, &(0x7f00000003c0)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000004c0)={0x0, 0xffff}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000540)={0x0, 0x3}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000005c0)={r2, 0xfffffffa, 0x5, 0x2, 0x6, 0xfffd, 0x71, 0x5, {r3, @in6={{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}, 0xfffffffe}}, 0x6, 0x4, 0x9, 0x7, 0x6}}, &(0x7f0000000680)=0xb0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000006c0), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000740)=r5, 0x1) write$binfmt_format(r1, &(0x7f0000000780)='-1\x00', 0x3) openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x402481, 0x0) (async) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x402481, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000800)={{0x1, 0x1, 0x18, r5, {0x7}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000800)={{0x1, 0x1, 0x18, r5, {0x7}}, './file0\x00'}) ioctl$XFS_IOC_FSGROWFSLOG(r4, 0x4008586f, &(0x7f0000000840)={0x2a0, 0x77}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000008c0)={'veth0_to_hsr\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000008c0)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=@gettfilter={0x34, 0x2e, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xd, 0xb}, {0xfff2}, {0x5, 0x10}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0xfffffffb}]}, 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x4000000) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=@gettfilter={0x34, 0x2e, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xd, 0xb}, {0xfff2}, {0x5, 0x10}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0xfffffffb}]}, 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x4000000) connect$rds(r5, &(0x7f00000009c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) (async) connect$rds(r5, &(0x7f00000009c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000a00)=@assoc_value={r3, 0x8}, 0x8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/softlockup_count', 0x488080, 0x0) (async) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/softlockup_count', 0x488080, 0x0) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r7) sendmsg$BATADV_CMD_SET_VLAN(r9, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, r10, 0x800, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000bc0), &(0x7f0000000c00)=0x8) (async) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000bc0), &(0x7f0000000c00)=0x8) syz_open_dev$vcsn(&(0x7f0000000c40), 0x7, 0x80000) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x74, 0x0, 0xe00, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xff}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xb}, @NL80211_ATTR_PMK={0x14, 0xfe, "27b45d7136a79b15fe3e67992c3b4a5a"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x850) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r9, 0x40a85321, &(0x7f0000000dc0)={{0x0, 0xd8}, 'port0\x00', 0x1, 0x19, 0x4, 0xc, 0x8, 0x2e, 0x7, 0x0, 0x1, 0x5}) 294.084346ms ago: executing program 5 (id=1581): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000780)='task\x00') lseek(r3, 0x1, 0x3) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 233.767977ms ago: executing program 8 (id=1582): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x6e0}]}) r3 = openat$audio1(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x88044d19, 0x0) 109.145066ms ago: executing program 8 (id=1583): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r3 = dup(r2) read$FUSE(r3, &(0x7f0000002940)={0x2020}, 0x2020) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x40, 0x10, 0x1, 0xa, {{0x1a, 0x4, 0x2, 0x0, 0x68, 0x64, 0x0, 0x1, 0x29, 0x0, @empty, @rand_addr=0x64010100, {[@noop, @noop, @ssrr={0x89, 0x13, 0x94, [@remote, @multicast1, @local, @remote]}, @end, @noop, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x2b, 0xde, [@local, @remote, @loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @lsrr={0x83, 0xb, 0x70, [@private=0xa010102, @loopback]}]}}}}}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000440)={{0xffffffffffffffff, &(0x7f0000000240)='\x00', 0x402, &(0x7f0000000280)={@align=0x1000, {0xf84, 0x0, 0x7}}, 0x2ed, &(0x7f0000000300), &(0x7f0000000340)=0x101}, {[0x3, 0x26, 0x2, 0x9]}, 0x1, 0x89, &(0x7f0000000380)=""/137}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbe, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xc9, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000001800010000000000fbffffff01000000feffffff00000000000000009500000000000000"], &(0x7f0000000880)='syzkaller\x00', 0xf2, 0x0, &(0x7f00000008c0), 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0xe, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000980)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000009c0)=[{0x3, 0x1, 0xb, 0xa}], 0x10, 0x1}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ac0)={0x1, 0xffffffffffffffff}, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b40)=@generic={&(0x7f0000000b00)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1a, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xcedc}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x1, '\x00', r4, @fallback=0x34, r5, 0x8, &(0x7f00000004c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x1, 0x2, 0x1}, 0x10, r6, r7, 0x0, &(0x7f0000000b80)=[r8, r9], 0x0, 0x10, 0x8}, 0x94) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x1008}}], 0x1, 0x4) 105.33885ms ago: executing program 7 (id=1584): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000102c0), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x4900, 0x30a8a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10004}, 0x4080) 104.336144ms ago: executing program 5 (id=1585): bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000275db02b600668d640e133e15d9ddc0a21a8ca5125b6d12b51d249fed6bdac1abddcd40e39954fc452f553a051ac9a35b816d69e956ee337fafe95c5174032a593d4c2f519af2ee45dd0751fa58d349412d03377db66d08c89975e776c1da182f90170b0ccd4d0b9b63e22c873c606b86d50826bb096013e666992244e568d44c2aaab47ce0eab9502c8917770a315a9880be8237ca07d3ceb6667e8ca08536b6338b5096c526da22fd3983cc5b653f1fb8429b104f92ee6646c4cbe95fd8fc5a429df8abb598ca233f12ccd52e5eb553919b2eef1146f723d88182b66b184ceb3ae246f4e1a30fabc3b6b4a77922f1483c748f26f164e2fe4c5df1739d0df88e91d56017ce3a3b553a1a5fb99796f3aadc8c1203fef791ef9debede8c90f2adc8d1056a957d0a35ed5206bdc6f507fe9b51167a1aa6cf54bbb203886881bb3ddf8b6eb067d8270f56d194dadc6f32499901ff41b210a87de5abe6c3cc9d1951123ed2051c7715a84bb8a04ac4462a7bbcfa3c38ce364003c5bc61b5680f1ba9912fc22b86003e335b30ed9bec2d43c4234078ddcc8961b6edaf874d7be5d01d49ab7577613ec926133ee0f2b2bb8ae9ce313a3cdb55717ba97286475b5d7533679d5d3369548371d611e3e45dafc81b205669e865c5aacea9308f258a6e1b7f9f21d7c9825a3c12f831d86baa1dd69b85337b7caaa0e8c5d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000ffffffff00"/28], 0x48) 69.064335ms ago: executing program 37 (id=1584): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000102c0), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x4900, 0x30a8a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10004}, 0x4080) 20.853866ms ago: executing program 8 (id=1587): socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000000c0), 0x450040, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001040), 0x80, 0x0) read$FUSE(r3, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffc33, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000010000700000000ff8ddde2b1face23fea4130000000000000000002ae7070a2f319aad16a74f057f3742c821f572b9194dbd3a8e9ac9ffa65cfecf87035439d237a8bce67423f5c448f8b6cf32bd0feadb6916977fb9ba655c2cea5c64199381a03b703f44d4c21dced5c9f408060adc1e13541975c7f598368c5f1316f7ce646e232c0610afbd09e416b471755058aadf43fe8b7bdd434046e1522f8400b305a1b01a9335b2f1aa40d5560d2f36a7bd647f808533", @ANYRES32=0x0, @ANYBLOB="0401010000080200140003006d616376746170300000000000000000"], 0x34}}, 0x0) 20.338798ms ago: executing program 5 (id=1588): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'team_slave_0\x00', {0x2, 0x4e23, @empty}}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x2433a9a946f04baf, 0x0) sendto$packet(r1, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) 20.174737ms ago: executing program 3 (id=1589): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x3, @remote}, 0x1, 0x1}}, 0x2e) syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = syz_socket_connect_nvme_tcp() r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f00000029c0)={0x8, {"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", 0x1000}}, 0x1006) 3.164895ms ago: executing program 3 (id=1590): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x4421a2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd06000040", 0x27}], 0x2, 0x0, 0x4) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_FRONTEND(r2, 0x40246f4c, &(0x7f0000000200)={0x2, 0x1, @vsb={0xd}}) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f0000000000)={0x24, &(0x7f0000000180)=[{0x42, '\x00', @buffer={"caf941fe0721e057fa2d2b6b4a21e4dd1a51f366d161e07e0600a9e2fda8b721", 0x20}, 0x8}]}) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x4, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x4, {0x1, @win={{}, 0x0, 0x6, 0x0, 0x0, 0x0}}, 0x8000}) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@ipv6_newaddr={0x18, 0x18, 0x121, 0x0, 0x0, {0x23}}, 0x18}}, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x7e1942, 0x80) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x408000, 0x148) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x82020000) r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x7f9f, 0x0) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x8, &(0x7f0000000000)={0x22, "e922604a455494c905fd824393fe53e14fcab3d1eb0000000000000000000800"}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r6}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x11, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100008000000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) faccessat(r5, &(0x7f0000000100)='./bus\x00', 0x82) mount(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0xaa, &(0x7f0000000580)='dax=always') 0s ago: executing program 5 (id=1591): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000004, 0x5d032, 0xffffffffffffffff, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x20a80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x40000108, 0x0, 0x9}]}) (async) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) (async) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000140), 0x8, 0x0) ioctl$FE_ENABLE_HIGH_LNB_VOLTAGE(r4, 0x6f44, 0x7) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r5 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pread64(r5, &(0x7f00000000c0)=""/34, 0x22, 0xa) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) kernel console output (not intermixed with test programs): ile UP) [ 109.514102][ T9232] 9pnet_fd: p9_fd_create_unix (9232): problem connecting socket: ./file0: -30 [ 109.576663][ T9242] tmpfs: Unknown parameter 'Ü|Ħ‚¸®; Õ›@ÓËK6ˆ“Ï' [ 109.602402][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.617312][ T34] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 109.677399][ T9248] bridge1: entered promiscuous mode [ 109.684405][ T9248] Bluetooth: MGMT ver 1.23 [ 109.727622][ T9259] binder: 9258:9259 ioctl c0306201 200000000480 returned -14 [ 109.802880][ T9266] can0: slcan on pty30. [ 109.873010][ T9264] can0 (unregistered): slcan off pty30. [ 110.001616][ T6007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.164131][ T34] usb 8-1: unable to get BOS descriptor or descriptor too short [ 110.168634][ T34] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 110.171710][ T34] usb 8-1: can't read configurations, error -71 [ 110.191272][ T9293] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 110.346983][ T9305] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.350047][ T9305] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.545163][ T9312] tipc: Enabling of bearer rejected, media not registered [ 110.587430][ T9315] ieee802154 phy0 wpan0: encryption failed: -22 [ 110.739315][ T9328] loop9: detected capacity change from 0 to 7 [ 110.758949][ T9249] Dev loop9: unable to read RDB block 7 [ 110.760789][ T9249] loop9: unable to read partition table [ 110.764406][ T9249] loop9: partition table beyond EOD, truncated [ 110.781106][ T9328] Dev loop9: unable to read RDB block 7 [ 110.783632][ T9328] loop9: unable to read partition table [ 110.785959][ T9328] loop9: partition table beyond EOD, truncated [ 110.788359][ T9328] loop_reread_partitions: partition scan of loop9 (úùƒå¡™‰üg¾CêjÌ–ã¢P=×!MX‹ºÐ œëÜ%õ«`Éæ˜Èµ4FLQkÝŠ5) failed (rc=-5) [ 111.141467][ T24] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 111.311436][ T24] usb 11-1: Using ep0 maxpacket: 8 [ 111.314678][ T24] usb 11-1: too many endpoints for config 2 interface 0 altsetting 8: 161, using maximum allowed: 30 [ 111.321715][ T24] usb 11-1: config 2 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 161 [ 111.326378][ T24] usb 11-1: config 2 interface 0 has no altsetting 0 [ 111.331061][ T24] usb 11-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 111.332043][ T9370] netlink: 'syz.3.864': attribute type 33 has an invalid length. [ 111.336112][ T24] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.339094][ T24] usb 11-1: Product: syz [ 111.340441][ T24] usb 11-1: Manufacturer: syz [ 111.342169][ T24] usb 11-1: SerialNumber: syz [ 111.348946][ T9368] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=349689926 (11190077632 ns) > initial count (9226619392 ns). Using initial count to start timer. [ 111.355535][ T9368] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 111.370955][ T9368] netlink: 'syz.5.863': attribute type 30 has an invalid length. [ 111.374367][ T9368] netlink: 'syz.5.863': attribute type 23 has an invalid length. [ 111.442239][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 111.442250][ T40] audit: type=1400 audit(2000000057.595:30270): avc: denied { map } for pid=9374 comm="syz.5.866" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 111.452087][ T40] audit: type=1400 audit(2000000057.595:30271): avc: denied { execute } for pid=9374 comm="syz.5.866" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 111.554498][ T24] usb 11-1: USB disconnect, device number 6 [ 111.992719][ T9399] netlink: 'syz.3.874': attribute type 4 has an invalid length. [ 112.075253][ T9404] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20002 [ 112.083260][ T5963] net_ratelimit: 2 callbacks suppressed [ 112.083270][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.088183][ T40] audit: type=1400 audit(2000000058.235:30272): avc: denied { create } for pid=9405 comm="syz.4.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 112.113781][ T9411] netlink: 'syz.3.879': attribute type 2 has an invalid length. [ 112.119215][ T9411] !: entered promiscuous mode [ 112.145878][ T9413] devpts: Bad value for 'max' [ 112.148049][ T9413] __nla_validate_parse: 4 callbacks suppressed [ 112.148057][ T9413] netlink: 8 bytes leftover after parsing attributes in process `syz.6.880'. [ 112.153336][ T9413] netlink: 8 bytes leftover after parsing attributes in process `syz.6.880'. [ 112.193666][ T40] audit: type=1400 audit(2000000058.345:30273): avc: denied { mounton } for pid=9414 comm="syz.3.881" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 112.193704][ T9415] cgroup: subsys name conflicts with all [ 112.285942][ T9422] ieee802154 phy0 wpan0: encryption failed: -22 [ 112.315439][ T9406] bond0: Error: Cannot enslave bond to itself. [ 112.317498][ T9429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36608 sclass=netlink_route_socket pid=9429 comm=syz.3.884 [ 112.354388][ T9433] vlan0: entered allmulticast mode [ 112.356679][ T9433] veth0_vlan: entered allmulticast mode [ 112.441322][ T9] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 112.475269][ T40] audit: type=1400 audit(2000000058.625:30274): avc: denied { accept } for pid=9452 comm="syz.4.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 112.542611][ T9463] program syz.5.894 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.547365][ T9460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.893'. [ 112.552179][ T9460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.893'. [ 112.584834][ T40] audit: type=1326 audit(2000000058.735:30275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9469 comm="syz.4.896" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe7559bf79 code=0x0 [ 112.591787][ T9] usb 11-1: Using ep0 maxpacket: 16 [ 112.594890][ T9] usb 11-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 112.598068][ T9] usb 11-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 112.598394][ T9468] syzkaller0: entered promiscuous mode [ 112.600777][ T9] usb 11-1: Product: syz [ 112.602583][ T9468] syzkaller0: entered allmulticast mode [ 112.604479][ T9468] tipc: Enabled bearer , priority 0 [ 112.606223][ T9] usb 11-1: Manufacturer: syz [ 112.608699][ T9468] overlay: Unknown parameter 'smackfsroot' [ 112.610801][ T9] usb 11-1: SerialNumber: syz [ 112.617607][ T9] usb 11-1: config 0 descriptor?? [ 112.639523][ T40] audit: type=1400 audit(2000000058.785:30276): avc: denied { mounton } for pid=9473 comm="syz.5.897" path="/proc/255/task" dev="proc" ino=35101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 112.651639][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.823955][ T6007] usb 11-1: USB disconnect, device number 7 [ 113.020475][ T40] audit: type=1400 audit(2000000059.165:30277): avc: denied { append } for pid=9488 comm="syz.4.901" name="frontend0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 113.072455][ T9489] kvm: kvm [9488]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 113.091882][ T9489] kvm: kvm [9488]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 113.095077][ T9489] kvm: kvm [9488]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 113.122139][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.332822][ T9495] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 113.399139][ T9502] netlink: 12 bytes leftover after parsing attributes in process `syz.5.905'. [ 113.408667][ T9502] netlink: 12 bytes leftover after parsing attributes in process `syz.5.905'. [ 113.449417][ T9508] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 113.601416][ T5935] Bluetooth: hci1: command tx timeout [ 113.604251][ T34] tipc: Node number set to 882624749 [ 113.623413][ T40] audit: type=1400 audit(2000000059.775:30278): avc: denied { module_load } for pid=9522 comm="syz.5.911" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 113.623651][ T9523] kernel read not supported for file /policy (pid: 9523 comm: syz.5.911) [ 113.905689][ T9529] netlink: 'syz.5.913': attribute type 1 has an invalid length. [ 113.924453][ T9529] bond2: (slave geneve2): making interface the new active one [ 113.927378][ T9529] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 113.930175][ T7592] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 113.936287][ T7592] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 113.941110][ T7592] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 113.948502][ T7592] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 114.181439][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.202861][ T6007] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 114.213915][ T5935] Bluetooth: hci1: unexpected event 0x08 length: 5 > 4 [ 114.242104][ T40] audit: type=1400 audit(2000000060.385:30279): avc: denied { associate } for pid=9547 comm="syz.5.920" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 114.351956][ T6007] usb 9-1: Using ep0 maxpacket: 16 [ 114.355268][ T9562] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.357772][ T6007] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 114.362717][ T6007] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 114.365687][ T6007] usb 9-1: Product: syz [ 114.365907][ T9561] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 114.367034][ T6007] usb 9-1: Manufacturer: syz [ 114.367044][ T6007] usb 9-1: SerialNumber: syz [ 114.368592][ T6007] usb 9-1: config 0 descriptor?? [ 114.381405][ T9554] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 114.384582][ T9554] block device autoloading is deprecated and will be removed. [ 114.446155][ T9562] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.471444][ T9573] mkiss: ax0: crc mode is auto. [ 114.517954][ T9562] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.585657][ T6007] usb 9-1: USB disconnect, device number 6 [ 114.587498][ T9589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.925'. [ 114.603093][ T9562] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.720500][ T7592] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.734541][ T7597] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.742414][ T7597] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.749604][ T7597] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.021563][ T9611] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 115.024218][ T9611] IPv6: NLM_F_CREATE should be set when creating new route [ 115.026530][ T9611] IPv6: NLM_F_CREATE should be set when creating new route [ 115.079889][ T9623] netlink: 'syz.5.935': attribute type 1 has an invalid length. [ 115.109240][ T9623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.935'. [ 115.113412][ T9623] bond3 (unregistering): Released all slaves [ 115.211295][ T6007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.291260][ T24] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 115.441422][ T24] usb 11-1: Using ep0 maxpacket: 8 [ 115.449112][ T24] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 115.453051][ T24] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.457140][ T24] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 115.463485][ T24] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 115.467668][ T24] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.473625][ T24] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 115.477564][ T24] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.536912][ T9661] syz.5.943 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 115.682814][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.695396][ T24] usb 11-1: GET_CAPABILITIES returned 0 [ 115.697238][ T24] usbtmc 11-1:16.0: can't read capabilities [ 115.901883][ T5978] usb 11-1: USB disconnect, device number 8 [ 115.931200][ T24] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 116.111826][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 116.118387][ T24] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 116.122019][ T24] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 116.124725][ T24] usb 9-1: Product: syz [ 116.126256][ T24] usb 9-1: Manufacturer: syz [ 116.127767][ T24] usb 9-1: SerialNumber: syz [ 116.132774][ T24] usb 9-1: config 0 descriptor?? [ 116.251235][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.339930][ T7737] usb 9-1: USB disconnect, device number 7 [ 116.357433][ T9680] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in; [ 116.357433][ T9680] program syz.3.947 not setting count and/or reply_len properly [ 116.430115][ T9683] Mount JFS Failure: -5 [ 116.432218][ T9683] jfs_mount failed w/return code = -5 [ 116.663593][ T9693] block nbd0: not configured, cannot reconfigure [ 117.228754][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 117.228765][ T40] audit: type=1400 audit(2000000063.375:30285): avc: denied { checkpoint_restore } for pid=9698 comm="syz.3.951" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 117.283719][ T9708] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20003 [ 117.301274][ T6007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.327237][ T9711] netlink: 14 bytes leftover after parsing attributes in process `syz.3.955'. [ 117.387247][ T9724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.957'. [ 117.400452][ T9724] netlink: 'syz.3.957': attribute type 12 has an invalid length. [ 117.411070][ T9724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.957'. [ 117.414270][ T9724] netlink: 'syz.3.957': attribute type 12 has an invalid length. [ 117.416728][ T9724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.957'. [ 117.446979][ T9728] netlink: 12 bytes leftover after parsing attributes in process `syz.6.959'. [ 117.671069][ T5978] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 117.841154][ T5978] usb 10-1: Using ep0 maxpacket: 16 [ 117.851409][ T5978] usb 10-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 117.854287][ T5978] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 117.856865][ T5978] usb 10-1: Product: syz [ 117.858280][ T5978] usb 10-1: Manufacturer: syz [ 117.859814][ T5978] usb 10-1: SerialNumber: syz [ 117.863818][ T5978] usb 10-1: config 0 descriptor?? [ 117.905047][ T9742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.962'. [ 118.012937][ T9751] program syz.6.966 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.017207][ T9751] ata1.00: invalid command format 0 [ 118.044590][ T40] audit: type=1400 audit(2000000064.195:30286): avc: denied { write } for pid=9745 comm="syz.4.965" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 118.061440][ T40] audit: type=1400 audit(2000000064.195:30287): avc: denied { open } for pid=9745 comm="syz.4.965" path="/154/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 118.070388][ T40] audit: type=1400 audit(2000000064.205:30288): avc: denied { ioctl } for pid=9745 comm="syz.4.965" path="/154/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 118.072228][ T5978] usb 10-1: USB disconnect, device number 7 [ 118.331171][ T6007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.572305][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.635707][ T40] audit: type=1400 audit(2000000064.785:30289): avc: denied { getopt } for pid=9783 comm="syz.6.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 118.696600][ T9794] netlink: 28 bytes leftover after parsing attributes in process `syz.6.980'. [ 118.699597][ T9794] netlink: 28 bytes leftover after parsing attributes in process `syz.6.980'. [ 118.703663][ T9794] netlink: 28 bytes leftover after parsing attributes in process `syz.6.980'. [ 118.706674][ T9794] netlink: 28 bytes leftover after parsing attributes in process `syz.6.980'. [ 118.712297][ T9794] snd_dummy snd_dummy.0: control 5:3:199:syz0:12 is already present [ 118.721547][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.732182][ T9796] netlink: 'syz.5.981': attribute type 21 has an invalid length. [ 118.831021][ T40] audit: type=1400 audit(2000000064.975:30290): avc: denied { load_policy } for pid=9807 comm="syz.5.985" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 118.835587][ T9808] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 118.842500][ T9808] SELinux: failed to load policy [ 118.884145][ T9798] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 118.932589][ T6007] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 119.271003][ T5978] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 119.371035][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.421043][ T5978] usb 9-1: Using ep0 maxpacket: 16 [ 119.426614][ T5978] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 119.430294][ T5978] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 119.433073][ T5978] usb 9-1: Product: syz [ 119.434416][ T5978] usb 9-1: Manufacturer: syz [ 119.435910][ T5978] usb 9-1: SerialNumber: syz [ 119.440267][ T5978] usb 9-1: config 0 descriptor?? [ 119.652086][ T34] usb 9-1: USB disconnect, device number 8 [ 119.854388][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.941439][ T9830] bond3: Invalid ad_actor_system MAC address. [ 119.944068][ T9830] bond3: option ad_actor_system: invalid value (255) [ 119.948078][ T9830] bond3 (unregistering): Released all slaves [ 119.969864][ T9833] IPVS: ip_vs_add_dest(): server weight less than zero [ 120.127281][ T40] audit: type=1400 audit(2000000066.275:30291): avc: denied { bind } for pid=9840 comm="syz.3.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 120.219607][ T9842] program syz.5.996 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.414514][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.473711][ T9859] bond2: option xmit_hash_policy: invalid value (6) [ 120.476746][ T9859] bond2 (unregistering): Released all slaves [ 120.572334][ T9859] ieee802154 phy0 wpan0: encryption failed: -22 [ 120.599077][ T9864] CIFS mount error: No usable UNC path provided in device string! [ 120.599077][ T9864] [ 120.602330][ T9864] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 120.630947][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 120.631294][ T40] audit: type=1400 audit(2000000066.785:30292): avc: denied { setopt } for pid=9863 comm="syz.5.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 120.663079][ T9868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.666140][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.672332][ T9868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.793911][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.797384][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.800517][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 120.805389][ T9] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 120.808412][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.813250][ T9] usb 8-1: config 0 descriptor?? [ 121.063774][ T9894] netlink: 'syz.5.1011': attribute type 21 has an invalid length. [ 121.066821][ T9894] fuse: Unknown parameter '' [ 121.081018][ T29] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 121.222120][ T9] hid_parser_main: 28 callbacks suppressed [ 121.222133][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 121.226513][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 121.228986][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 121.233210][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 121.235659][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 121.238294][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 121.241094][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 121.241851][ T29] usb 11-1: Using ep0 maxpacket: 16 [ 121.243605][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 121.248283][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 121.250360][ T29] usb 11-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 121.250723][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 121.255664][ T29] usb 11-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 121.261393][ T29] usb 11-1: Product: syz [ 121.262740][ T9] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 121.263439][ T29] usb 11-1: Manufacturer: syz [ 121.279128][ T29] usb 11-1: SerialNumber: syz [ 121.284030][ T29] usb 11-1: config 0 descriptor?? [ 121.343836][ T9899] can0: slcan on ttyS3. [ 121.411322][ T9898] can0 (unregistered): slcan off ttyS3. [ 121.434429][ T9857] mkiss: ax0: crc mode is auto. [ 121.495973][ T29] usb 11-1: USB disconnect, device number 9 [ 121.509488][ T9903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=9903 comm=syz.5.1014 [ 121.567805][ T9908] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 121.572084][ T9908] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 121.633367][ T5963] usb 8-1: USB disconnect, device number 7 [ 121.830812][ T24] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 121.982293][ T24] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 121.986029][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.990180][ T24] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 121.994169][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.998812][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.004519][ T24] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 122.008201][ T24] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 122.011775][ T24] usb 9-1: Product: syz [ 122.013824][ T24] usb 9-1: Manufacturer: syz [ 122.021422][ T24] cdc_wdm 9-1:1.0: skipping garbage [ 122.023978][ T24] cdc_wdm 9-1:1.0: skipping garbage [ 122.027829][ T24] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 122.030309][ T24] cdc_wdm 9-1:1.0: Unknown control protocol [ 122.124131][ T40] audit: type=1400 audit(2000000068.275:30293): avc: denied { setattr } for pid=9917 comm="syz.5.1019" name="NETLINK" dev="sockfs" ino=36615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 122.183367][ T40] audit: type=1326 audit(2000000068.336:30294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9922 comm="syz.3.1022" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f00c259bf79 code=0x0 [ 122.219865][ T9909] cdc_wdm 9-1:1.0: Error submitting int urb - -90 [ 122.223746][ T9909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.231028][ T9909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.237766][ T9909] cdc_wdm 9-1:1.0: Error submitting int urb - -90 [ 122.303754][ T40] audit: type=1400 audit(2000000068.456:30295): avc: denied { write } for pid=9907 comm="syz.4.1017" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 122.353451][ T40] audit: type=1400 audit(2000000068.506:30296): avc: denied { ioctl } for pid=9907 comm="syz.4.1017" path="/dev/input/mouse0" dev="devtmpfs" ino=946 ioctlcmd=0x5304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 122.353733][ T9943] overlayfs: failed to resolve './file1': -2 [ 122.481445][ T29] net_ratelimit: 4 callbacks suppressed [ 122.481457][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.508047][ T34] usb 9-1: USB disconnect, device number 9 [ 122.590887][ T5963] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 122.750805][ T5963] usb 10-1: Using ep0 maxpacket: 16 [ 122.755313][ T5963] usb 10-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 122.758207][ T5963] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 122.761776][ T5963] usb 10-1: Product: syz [ 122.763307][ T5963] usb 10-1: Manufacturer: syz [ 122.764822][ T5963] usb 10-1: SerialNumber: syz [ 122.768292][ T5963] usb 10-1: config 0 descriptor?? [ 122.881267][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.933994][ T9956] sit0: entered promiscuous mode [ 122.937753][ T9956] netlink: 'syz.6.1032': attribute type 1 has an invalid length. [ 122.940217][ T9956] __nla_validate_parse: 9 callbacks suppressed [ 122.940226][ T9956] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1032'. [ 122.948257][ T9956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9956 comm=syz.6.1032 [ 122.979516][ T24] usb 10-1: USB disconnect, device number 8 [ 122.981805][ T9958] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1033'. [ 122.985798][ T9958] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1033'. [ 122.989737][ T9958] netlink: 'syz.6.1033': attribute type 11 has an invalid length. [ 122.993518][ T9958] netlink: 'syz.6.1033': attribute type 7 has an invalid length. [ 123.036000][ T9962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=9962 comm=syz.3.1035 [ 123.044457][ T9964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=9964 comm=syz.3.1035 [ 123.044767][ T9965] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=9965 comm=syz.3.1035 [ 123.157201][ T40] audit: type=1400 audit(2000000069.306:30297): avc: denied { read } for pid=9979 comm="syz.3.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 123.157460][ T9980] support for the xor transformation has been removed. [ 123.166105][ T9980] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1039'. [ 123.202496][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1040'. [ 123.236941][ T9984] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.481312][ T40] audit: type=1400 audit(2000000069.636:30298): avc: denied { execute } for pid=10006 comm="syz.4.1049" path="/dev/audio1" dev="devtmpfs" ino=1323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 123.500781][T10013] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1050'. [ 123.530754][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.682580][ T24] hid-generic 0200:18000000:0001.0006: reserved main item tag 0xd [ 123.687376][ T24] hid-generic 0200:18000000:0001.0006: item fetching failed at offset 11/19 [ 123.690981][ T24] hid-generic 0200:18000000:0001.0006: probe with driver hid-generic failed with error -22 [ 123.720739][T10036] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 123.753869][T10039] overlay: Unknown parameter '' [ 123.957030][ T40] audit: type=1400 audit(2000000070.106:30299): avc: denied { write } for pid=10062 comm="syz.6.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 124.011062][T10066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.018622][T10071] Mount JFS Failure: -5 [ 124.020114][T10071] jfs_mount failed w/return code = -5 [ 124.066838][T10075] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1073'. [ 124.105310][T10080] fuse: Bad value for 'fd' [ 124.115911][ T40] audit: type=1400 audit(2000000070.266:30300): avc: denied { ioctl } for pid=10079 comm="syz.6.1074" path="socket:[37125]" dev="sockfs" ino=37125 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 124.125253][T10080] xt_hashlimit: overflow, rate too high: 0 [ 124.130722][ T7737] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 124.292792][ T7737] usb 10-1: Using ep0 maxpacket: 16 [ 124.301388][ T7737] usb 10-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 124.305489][ T7737] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 124.309619][ T7737] usb 10-1: Product: syz [ 124.315057][ T7737] usb 10-1: Manufacturer: syz [ 124.317132][ T7737] usb 10-1: SerialNumber: syz [ 124.325679][ T7737] usb 10-1: config 0 descriptor?? [ 124.399339][T10083] tc_dump_action: action bad kind [ 124.402244][T10083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1072'. [ 124.490931][ T7737] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 124.530786][ T7333] usb 10-1: USB disconnect, device number 9 [ 124.560813][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.644152][ T7737] usb 11-1: config index 0 descriptor too short (expected 39, got 27) [ 124.650631][ T7737] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 124.653754][ T7737] usb 11-1: config 0 interface 0 has no altsetting 0 [ 124.657479][ T7737] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 124.660461][ T7737] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 124.670911][ T7737] usb 11-1: Product: syz [ 124.672297][ T7737] usb 11-1: Manufacturer: syz [ 124.673808][ T7737] usb 11-1: SerialNumber: syz [ 124.681116][ T7737] usb 11-1: config 0 descriptor?? [ 124.691259][ T7737] hub 11-1:0.0: bad descriptor, ignoring hub [ 124.693308][ T7737] hub 11-1:0.0: probe with driver hub failed with error -5 [ 124.697118][ T7737] usb 11-1: selecting invalid altsetting 0 [ 124.926122][T10089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.929204][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.306139][ T7333] usb 11-1: USB disconnect, device number 10 [ 125.450678][ T7333] usb 11-1: new full-speed USB device number 11 using dummy_hcd [ 125.602058][ T7333] usb 11-1: config index 0 descriptor too short (expected 39, got 27) [ 125.604773][ T7333] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 125.607152][T10100] netlink: 'syz.3.1080': attribute type 1 has an invalid length. [ 125.608012][ T7333] usb 11-1: config 0 interface 0 has no altsetting 0 [ 125.615293][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.615494][ T7333] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 125.621832][ T7333] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 125.625003][ T7333] usb 11-1: Product: syz [ 125.626919][ T7333] usb 11-1: Manufacturer: syz [ 125.629052][ T7333] usb 11-1: SerialNumber: syz [ 125.641110][ T7333] usb 11-1: config 0 descriptor?? [ 125.645860][ T7333] hub 11-1:0.0: bad descriptor, ignoring hub [ 125.648484][ T7333] hub 11-1:0.0: probe with driver hub failed with error -5 [ 125.657935][ T7333] usb 11-1: selecting invalid altsetting 0 [ 125.700275][T10100] 8021q: adding VLAN 0 to HW filter on device bond5 [ 125.704143][T10100] bond4: (slave bond5): making interface the new active one [ 125.706716][T10100] bond4: (slave bond5): Enslaving as an active interface with an up link [ 125.711301][T10100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1080'. [ 125.711323][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1080'. [ 125.775210][T10112] sctp: [Deprecated]: syz.3.1082 (pid 10112) Use of int in maxseg socket option. [ 125.775210][T10112] Use struct sctp_assoc_value instead [ 125.794811][T10114] Cannot find set identified by id 3 to match [ 125.806382][T10117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10117 comm=syz.3.1084 [ 125.931080][ T7736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.952508][ T40] audit: type=1400 audit(2000000072.106:30301): avc: denied { map } for pid=10119 comm="syz.3.1085" path="/dev/i2c-0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 125.960913][ T5963] usb 11-1: USB disconnect, device number 11 [ 126.040595][ T7333] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 126.190568][ T7333] usb 9-1: Using ep0 maxpacket: 8 [ 126.194450][ T7333] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 126.197195][ T7333] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 126.200421][ T7333] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 126.204005][ T7333] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 126.207308][ T7333] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.211580][ T7333] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 126.214689][ T7333] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.320704][ T5928] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 126.492273][ T5928] usb 10-1: Using ep0 maxpacket: 16 [ 126.497776][ T5928] usb 10-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 126.502620][ T5928] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 126.505286][ T5928] usb 10-1: Product: syz [ 126.506621][ T5928] usb 10-1: Manufacturer: syz [ 126.508178][ T5928] usb 10-1: SerialNumber: syz [ 126.511683][ T5928] usb 10-1: config 0 descriptor?? [ 126.551395][ T1115] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 126.556958][ T1115] ata1: failed to read log page 10h (errno=-5) [ 126.558995][ T1115] ata1.00: exception Emask 0x1 SAct 0x4000 SErr 0x0 action 0x0 [ 126.561726][ T1115] ata1.00: irq_stat 0x40000000 [ 126.563357][ T1115] ata1.00: failed command: WRITE FPDMA QUEUED [ 126.565304][ T1115] ata1.00: cmd 61/18:70:76:09:10/00:00:00:00:00/40 tag 14 ncq dma 12288 out [ 126.565304][ T1115] res 50/00:00:00:00:00/00:00:00:00:00/a0 Emask 0x1 (device error) [ 126.570984][ T1115] ata1.00: status: { DRDY } [ 126.573281][ T1115] ata1.00: configured for UDMA/100 [ 126.575178][ T1115] ata1: EH complete [ 126.645967][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.728829][ T5963] usb 10-1: USB disconnect, device number 10 [ 127.011786][T10161] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 127.032880][ T40] audit: type=1400 audit(2000000073.186:30302): avc: denied { setopt } for pid=10159 comm="syz.6.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 127.042478][T10115] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 127.044935][T10115] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 127.046968][T10115] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 127.050304][T10115] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 127.053329][T10115] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 127.055385][T10115] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 127.058175][T10115] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 127.069156][ T5963] usb 9-1: USB disconnect, device number 10 [ 127.181573][ T40] audit: type=1400 audit(2000000073.336:30303): avc: denied { append } for pid=10165 comm="syz.4.1097" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.339203][ T40] audit: type=1400 audit(2000000073.486:30304): avc: denied { bind } for pid=10168 comm="syz.5.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 127.351866][ T40] audit: type=1400 audit(2000000073.506:30305): avc: denied { ioctl } for pid=10168 comm="syz.5.1098" path="socket:[38169]" dev="sockfs" ino=38169 ioctlcmd=0x942c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 127.685610][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.689512][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.696066][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.721764][ T40] audit: type=1400 audit(2000000073.876:30306): avc: denied { shutdown } for pid=10193 comm="syz.3.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 127.838269][ T40] audit: type=1400 audit(2000000073.986:30307): avc: denied { getopt } for pid=10196 comm="syz.6.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 127.845081][T10197] 9pnet_virtio: no channels available for device syz [ 127.872511][ T40] audit: type=1400 audit(2000000074.026:30308): avc: denied { create } for pid=10198 comm="syz.6.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 127.881600][ T40] audit: type=1400 audit(2000000074.026:30309): avc: denied { write } for pid=10198 comm="syz.6.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 128.161131][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.165653][ T7737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.171310][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.174981][ T7333] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 128.296050][T10204] __nla_validate_parse: 3 callbacks suppressed [ 128.296062][T10204] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1107'. [ 128.305858][ T61] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.305904][T10204] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1107'. [ 128.309800][ T61] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.317555][ T61] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.324983][ T61] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.330444][ T7333] usb 11-1: Using ep0 maxpacket: 8 [ 128.335003][ T7333] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 128.338873][ T7333] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.344944][ T7333] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.350450][ T7333] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.354730][ T7333] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.360888][ T7333] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 128.364831][ T7333] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.390479][ T7736] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 128.494491][ T40] audit: type=1400 audit(2000000074.646:30310): avc: denied { ioctl } for pid=10206 comm="syz.5.1108" path="/147/file0/file0" dev="fuse" ino=64 ioctlcmd=0x915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 128.508152][ T40] audit: type=1400 audit(2000000074.656:30311): avc: denied { write } for pid=10206 comm="syz.5.1108" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 128.549568][ T40] audit: type=1400 audit(2000000074.696:30312): avc: denied { getopt } for pid=10209 comm="syz.3.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 128.550495][ T7736] usb 9-1: Using ep0 maxpacket: 16 [ 128.562660][ T7736] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 128.565881][ T7736] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 128.568580][ T7736] usb 9-1: Product: syz [ 128.569923][ T7736] usb 9-1: Manufacturer: syz [ 128.572845][ T7736] usb 9-1: SerialNumber: syz [ 128.575916][ T7736] usb 9-1: config 0 descriptor?? [ 128.587049][ T7333] usb 11-1: GET_CAPABILITIES returned 0 [ 128.589289][ T7333] usbtmc 11-1:16.0: can't read capabilities [ 128.645493][ T7596] Bluetooth: hci2: Frame reassembly failed (-84) [ 128.648562][ T7592] Bluetooth: hci2: Frame reassembly failed (-84) [ 128.649159][ T40] audit: type=1400 audit(2000000074.796:30313): avc: denied { map } for pid=10218 comm="syz.3.1111" path="/dev/ptyqb" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 128.720784][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.780465][ T7736] usb 9-1: USB disconnect, device number 11 [ 128.970749][ T7592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.973835][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.977139][ T7736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.130528][ T5932] Bluetooth: hci1: command 0x0c1a tx timeout [ 129.130587][ T5933] Bluetooth: hci4: command 0x0c1a tx timeout [ 129.132982][ T5283] Bluetooth: hci3: command 0x0c1a tx timeout [ 129.392400][T10226] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1113'. [ 130.730553][ T5927] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 130.789385][T10233] xt_hashlimit: size too large, truncated to 1048576 [ 130.892067][ T7333] usb 11-1: USB disconnect, device number 12 [ 131.200433][ T5932] Bluetooth: hci1: command 0x0c1a tx timeout [ 131.200452][ T5927] Bluetooth: hci4: command 0x0c1a tx timeout [ 131.280667][ T7333] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 131.430275][ T7333] usb 11-1: Using ep0 maxpacket: 16 [ 131.436936][ T7333] usb 11-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 131.441072][ T7333] usb 11-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 131.444235][ T7333] usb 11-1: Product: syz [ 131.445666][ T7333] usb 11-1: Manufacturer: syz [ 131.447613][ T7333] usb 11-1: SerialNumber: syz [ 131.452395][ T7333] usb 11-1: config 0 descriptor?? [ 131.520339][ T5935] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 131.520362][ T5932] Bluetooth: hci5: command 0xfc11 tx timeout [ 131.577988][T10271] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 131.658798][ T24] usb 11-1: USB disconnect, device number 13 [ 131.795696][T10281] team0: Device gtp0 is up. Set it down before adding it as a team port [ 132.081201][T10300] ceph: Path missing in source N ðe–v&©Æá[ 132.100983][T10293] netlink: 'syz.5.1134': attribute type 12 has an invalid length. [ 132.104440][T10293] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1134'. [ 132.199634][T10306] netlink: 488 bytes leftover after parsing attributes in process `syz.5.1137'. [ 132.202886][T10306] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.1137'. [ 132.236791][T10312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1139'. [ 132.352992][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 132.353003][ T40] audit: type=1400 audit(2000000078.506:30317): avc: denied { write } for pid=10318 comm="syz.6.1141" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 132.592431][T10339] pim6reg: entered allmulticast mode [ 132.632096][T10350] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 132.649492][T10346] mmap: syz.3.1151 (10346): VmData 29073408 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 132.761185][T10359] netlink: 'syz.3.1154': attribute type 10 has an invalid length. [ 132.766000][T10359] netlink: 'syz.3.1154': attribute type 1 has an invalid length. [ 132.769162][T10359] netlink: 'syz.3.1154': attribute type 2 has an invalid length. [ 132.840248][ T7737] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 132.890416][ T6007] net_ratelimit: 4 callbacks suppressed [ 132.890428][ T6007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.890718][ T40] audit: type=1400 audit(2000000079.046:30318): avc: denied { ioctl } for pid=10370 comm="syz.3.1157" path="socket:[40346]" dev="sockfs" ino=40346 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 132.990142][ T7737] usb 11-1: Using ep0 maxpacket: 16 [ 132.995538][ T7737] usb 11-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 132.998654][T10377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1158'. [ 133.001777][ T7737] usb 11-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 133.004333][ T7737] usb 11-1: Product: syz [ 133.005730][ T7737] usb 11-1: Manufacturer: syz [ 133.007237][ T7737] usb 11-1: SerialNumber: syz [ 133.012738][ T7737] usb 11-1: config 0 descriptor?? [ 133.217338][ T6007] usb 11-1: USB disconnect, device number 14 [ 133.291136][ T5932] Bluetooth: hci1: command 0x0c1a tx timeout [ 133.291465][ T5927] Bluetooth: hci4: command 0x0c1a tx timeout [ 133.420364][ T24] usb 10-1: new low-speed USB device number 11 using dummy_hcd [ 133.555501][T10390] tipc: Failed to obtain node identity [ 133.557968][T10390] tipc: Enabling of bearer rejected, failed to enable media [ 133.570199][ T24] usb 10-1: Invalid ep0 maxpacket: 16 [ 133.710393][ T24] usb 10-1: new low-speed USB device number 12 using dummy_hcd [ 133.791645][T10396] loop5: detected capacity change from 0 to 7 [ 133.844594][T10398] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1165'. [ 133.851367][T10400] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 133.870237][ T24] usb 10-1: Invalid ep0 maxpacket: 16 [ 133.874890][ T24] usb usb10-port1: attempt power cycle [ 133.920514][ T7737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.934175][ T6007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.964088][ T9246] Dev loop5: unable to read RDB block 7 [ 133.966327][T10415] syz.3.1170: vmalloc error: size 4183572480, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset= [ 133.966489][ T9246] loop5: unable to read partition table [ 133.966495][T10415] / [ 133.972447][ T9246] loop5: partition table beyond EOD, [ 133.973850][T10415] ,mems_allowed=0-1 [ 133.975006][ T9246] truncated [ 133.976775][T10415] [ 133.980475][T10415] CPU: 2 UID: 0 PID: 10415 Comm: syz.3.1170 Tainted: G L syzkaller #0 PREEMPT(full) [ 133.980492][T10415] Tainted: [L]=SOFTLOCKUP [ 133.980496][T10415] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 133.980502][T10415] Call Trace: [ 133.980507][T10415] [ 133.980511][T10415] dump_stack_lvl+0x100/0x190 [ 133.980548][T10415] warn_alloc.cold+0x95/0x1c1 [ 133.980567][T10415] ? __pfx_warn_alloc+0x10/0x10 [ 133.980579][T10415] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 133.980604][T10415] ? lockdep_hardirqs_on+0x78/0x100 [ 133.980619][T10415] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 133.980640][T10415] ? kasan_save_stack+0x3f/0x50 [ 133.980652][T10415] ? kasan_save_stack+0x30/0x50 [ 133.980664][T10415] ? kasan_save_track+0x14/0x30 [ 133.980677][T10415] ? vb2_vmalloc_alloc+0x135/0x410 [ 133.980697][T10415] __vmalloc_node_range_noprof+0x1252/0x1530 [ 133.980715][T10415] ? __x64_sys_ioctl+0x18e/0x210 [ 133.980726][T10415] ? do_syscall_64+0x106/0xf80 [ 133.980742][T10415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.980762][T10415] ? vb2_vmalloc_alloc+0x135/0x410 [ 133.980784][T10415] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 133.980809][T10415] ? vb2_vmalloc_alloc+0x135/0x410 [ 133.980821][T10415] vmalloc_user_noprof+0x9e/0xe0 [ 133.980838][T10415] ? vb2_vmalloc_alloc+0x135/0x410 [ 133.980854][T10415] vb2_vmalloc_alloc+0x135/0x410 [ 133.980871][T10415] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 133.980896][T10415] __vb2_queue_alloc+0x8d5/0x1160 [ 133.980920][T10415] vb2_core_create_bufs+0x5fa/0xa30 [ 133.980934][T10415] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 133.980947][T10415] ? lock_acquire+0x17c/0x330 [ 133.980966][T10415] vb2_create_bufs+0x40c/0x830 [ 133.980986][T10415] ? __pfx_vb2_create_bufs+0x10/0x10 [ 133.981002][T10415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.981014][T10415] ? v4l_sanitize_colorspace+0x220/0x410 [ 133.981035][T10415] vb2_ioctl_create_bufs+0x244/0x3e0 [ 133.981053][T10415] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 133.981068][T10415] vidioc_create_bufs+0x7d/0xf0 [ 133.981083][T10415] v4l_create_bufs+0x17d/0x270 [ 133.981098][T10415] __video_do_ioctl+0xaf8/0xdc0 [ 133.981116][T10415] ? __might_fault+0xc5/0x140 [ 133.981127][T10415] ? __pfx___video_do_ioctl+0x10/0x10 [ 133.981148][T10415] video_usercopy+0x476/0x1660 [ 133.981164][T10415] ? __pfx___video_do_ioctl+0x10/0x10 [ 133.981181][T10415] ? __pfx_video_usercopy+0x10/0x10 [ 133.981206][T10415] v4l2_ioctl+0x1bd/0x250 [ 133.981221][T10415] ? __pfx_v4l2_ioctl+0x10/0x10 [ 133.981239][T10415] __x64_sys_ioctl+0x18e/0x210 [ 133.981252][T10415] do_syscall_64+0x106/0xf80 [ 133.981266][T10415] ? clear_bhb_loop+0x40/0x90 [ 133.981280][T10415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.981291][T10415] RIP: 0033:0x7f00c259bf79 [ 133.981301][T10415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.981312][T10415] RSP: 002b:00007f00c34e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.981323][T10415] RAX: ffffffffffffffda RBX: 00007f00c2815fa0 RCX: 00007f00c259bf79 [ 133.981330][T10415] RDX: 0000200000000000 RSI: 00000000c100565c RDI: 0000000000000003 [ 133.981336][T10415] RBP: 00007f00c26327e0 R08: 0000000000000000 R09: 0000000000000000 [ 133.981343][T10415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.981349][T10415] R13: 00007f00c2816038 R14: 00007f00c2815fa0 R15: 00007ffcbfd399a8 [ 133.981363][T10415] [ 133.981367][T10415] Mem-Info: [ 134.106949][T10415] active_anon:19603 inactive_anon:27345 isolated_anon:0 [ 134.106949][T10415] active_file:2238 inactive_file:41328 isolated_file:0 [ 134.106949][T10415] unevictable:1768 dirty:61 writeback:0 [ 134.106949][T10415] slab_reclaimable:9350 slab_unreclaimable:124717 [ 134.106949][T10415] mapped:24905 shmem:34293 pagetables:4104 [ 134.106949][T10415] sec_pagetables:302 bounce:0 [ 134.106949][T10415] kernel_misc_reclaimable:0 [ 134.106949][T10415] free:374082 free_pcp:12632 free_cma:0 [ 134.125792][T10415] Node 0 active_anon:78256kB inactive_anon:109380kB active_file:8772kB inactive_file:165112kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:70936kB dirty:240kB writeback:0kB shmem:133628kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15456kB pagetables:15512kB sec_pagetables:1208kB all_unreclaimable? no Balloon:0kB [ 134.139454][T10415] Node 1 active_anon:156kB inactive_anon:0kB active_file:180kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28684kB dirty:4kB writeback:0kB shmem:3544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:160kB pagetables:904kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 134.152256][T10415] Node 0 DMA free:9600kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:1536kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:48kB local_pcp:4kB free_cma:0kB [ 134.167460][T10415] lowmem_reserve[]: 0 1232 1232 1232 1232 [ 134.170074][T10415] Node 0 DMA32 free:111624kB boost:0kB min:27480kB low:34348kB high:41216kB reserved_highatomic:0KB free_highatomic:0KB active_anon:78324kB inactive_anon:109380kB active_file:8772kB inactive_file:163576kB unevictable:3536kB writepending:240kB zspages:0kB present:2080628kB managed:1262116kB mlocked:0kB bounce:0kB free_pcp:34172kB local_pcp:6788kB free_cma:0kB [ 134.184850][T10415] lowmem_reserve[]: 0 0 0 0 0 [ 134.186950][T10415] Node 1 Normal free:1375104kB boost:0kB min:39756kB low:49692kB high:59628kB reserved_highatomic:0KB free_highatomic:0KB active_anon:156kB inactive_anon:0kB active_file:180kB inactive_file:200kB unevictable:3536kB writepending:4kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:16392kB local_pcp:212kB free_cma:0kB [ 134.200366][T10415] lowmem_reserve[]: 0 0 0 0 0 [ 134.202400][T10415] Node 0 DMA: 12*4kB (UM) 12*8kB (UM) 9*16kB (UM) 9*32kB (UM) 7*64kB (UM) 9*128kB (UM) 9*256kB (UM) 4*512kB (UM) 3*1024kB (U) 0*2048kB 0*4096kB = 9600kB [ 134.208903][T10415] Node 0 DMA32: 2395*4kB (UME) 861*8kB (UME) 662*16kB (UME) 467*32kB (UME) 211*64kB (UME) 42*128kB (UME) 34*256kB (UME) 52*512kB (UM) 11*1024kB (UM) 2*2048kB (M) 0*4096kB = 111572kB [ 134.225930][T10415] Node 1 Normal: 258*4kB (UME) 239*8kB (UME) 230*16kB (UME) 237*32kB (UME) 222*64kB (UME) 223*128kB (UME) 205*256kB (UM) 194*512kB (UME) 165*1024kB (UM) 11*2048kB (UME) 238*4096kB (UM) = 1375104kB [ 134.230230][ T24] usb 10-1: new low-speed USB device number 13 using dummy_hcd [ 134.234514][T10415] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 134.242167][T10415] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 134.246015][T10415] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 134.249883][T10415] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 134.250517][ T24] usb 10-1: Invalid ep0 maxpacket: 16 [ 134.253888][T10415] 77855 total pagecache pages [ 134.257567][T10415] 0 pages in swap cache [ 134.259391][T10415] Free swap = 124996kB [ 134.260432][T10396] Dev loop5: unable to read RDB block 7 [ 134.262751][T10415] Total swap = 124996kB [ 134.263556][T10396] loop5: unable to read partition table [ 134.265295][T10415] 1048443 pages RAM [ 134.265305][T10415] 0 pages HighMem/MovableOnly [ 134.265311][T10415] 283603 pages reserved [ 134.265318][T10415] 0 pages cma reserved [ 134.280435][T10396] loop5: partition table beyond EOD, truncated [ 134.283051][T10396] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 134.328810][T10426] tipc: Enabling of bearer rejected, failed to enable media [ 134.339463][ T40] audit: type=1400 audit(2000000080.486:30319): avc: denied { setopt } for pid=10423 comm="syz.6.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 134.390251][ T24] usb 10-1: new low-speed USB device number 14 using dummy_hcd [ 134.411112][ T24] usb 10-1: Invalid ep0 maxpacket: 16 [ 134.413429][ T24] usb usb10-port1: unable to enumerate USB device [ 134.806883][T10455] futex_wake_op: syz.4.1180 tries to shift op by -1; fix this program [ 134.921279][T10458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.925561][T10458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.929540][T10458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.933858][T10458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.937626][T10458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.944365][T10458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.948243][T10458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.967632][T10458] raw_sendmsg: syz.4.1183 forgot to set AF_INET. Fix it! [ 135.360129][ T5935] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.635481][T10473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1187'. [ 135.720070][ T7596] Bluetooth: hci2: Frame reassembly failed (-84) [ 135.739992][ T40] audit: type=1400 audit(2000000081.886:30320): avc: denied { watch watch_reads } for pid=10477 comm="syz.3.1189" path="/proc/992/numa_maps" dev="proc" ino=39641 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 136.150798][T10487] sctp: [Deprecated]: syz.3.1192 (pid 10487) Use of int in maxseg socket option. [ 136.150798][T10487] Use struct sctp_assoc_value instead [ 136.203818][ T40] audit: type=1400 audit(2000000082.356:30321): avc: denied { name_bind } for pid=10491 comm="syz.3.1194" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 136.402227][T10501] kAFS: unparsable volume name [ 136.404833][T10501] 9pnet_virtio: no channels available for device syz [ 136.412822][ T40] audit: type=1400 audit(2000000082.566:30322): avc: denied { lock } for pid=10503 comm="syz.4.1197" path="/198/file0/cpuset.effective_cpus" dev="9p" ino=72614251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 136.427281][ T40] audit: type=1400 audit(2000000082.576:30323): avc: denied { create } for pid=10503 comm="syz.4.1197" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 136.447700][ T40] audit: type=1400 audit(2000000082.596:30324): avc: denied { mounton } for pid=10503 comm="syz.4.1197" path="/198/file0/bus" dev="9p" ino=72614127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 136.458284][T10504] overlay: ./file0 is not a directory [ 136.472217][ T40] audit: type=1400 audit(2000000082.626:30325): avc: denied { setattr } for pid=10503 comm="syz.4.1197" name="file0" dev="9p" ino=72614239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 136.485643][ T40] audit: type=1400 audit(2000000082.636:30326): avc: denied { watch } for pid=10503 comm="syz.4.1197" path="/198/file0/bus/file0" dev="9p" ino=72614239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 136.762921][T10517] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1201'. [ 136.781032][ T7594] batman_adv: batadv0: IGMP Querier appeared [ 136.783630][ T7594] batman_adv: batadv0: MLD Querier appeared [ 137.364750][T10532] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 137.368854][T10532] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 137.373008][T10532] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 137.377817][T10532] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 137.451418][ T5927] Bluetooth: hci1: command 0x0c1a tx timeout [ 137.613204][ T40] audit: type=1400 audit(2000000083.766:30327): avc: denied { connect } for pid=10548 comm="syz.3.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 137.683662][T10557] nbd: must specify an index to disconnect [ 137.686848][T10557] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1213'. [ 137.708125][T10557] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1213'. [ 137.725850][T10560] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 137.728958][T10561] tmpfs: Bad value for 'mpol' [ 137.742294][T10560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1214'. [ 137.760077][ T5935] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 137.764460][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.766833][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.776022][T10560] can0: slcan on ttyS3. [ 137.815899][T10566] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1216'. [ 137.828372][T10566] hsr_slave_1 (unregistering): left promiscuous mode [ 137.836427][T10568] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1217'. [ 137.841226][T10568] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1217'. [ 137.845078][T10568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1217'. [ 137.861907][T10559] can0 (unregistered): slcan off ttyS3. [ 137.952072][ T40] audit: type=1400 audit(2000000084.106:30328): avc: denied { setopt } for pid=10570 comm="syz.3.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 138.090648][ T7736] net_ratelimit: 49 callbacks suppressed [ 138.090660][ T7736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.095105][ T6007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.210319][T10592] team0: Port device team_slave_0 removed [ 138.280930][T10594] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 138.612250][T10602] new mount options do not match the existing superblock, will be ignored [ 138.621821][T10602] netlink: 'syz.3.1229': attribute type 1 has an invalid length. [ 138.642873][T10602] 8021q: adding VLAN 0 to HW filter on device bond6 [ 138.659121][T10602] bond6: (slave gretap2): making interface the new active one [ 138.663038][T10602] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 138.694167][T10607] binder: Bad value for 'max' [ 138.703187][T10607] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 138.708106][ T7597] Bluetooth: hci2: Frame reassembly failed (-84) [ 138.708533][T10608] binder: Bad value for 'max' [ 138.713424][ T7597] Bluetooth: hci2: Frame reassembly failed (-84) [ 139.126317][ T6007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.223983][T10632] [U] zÍ»´iœùÊý®Ò[27| [ 139.226064][T10632] [U] ‘BsŠ«w×AÓer®ÇOU]~èAÖö`1e…ÊX™!Ój5iÓ5ÿ‰Ÿîßy2ÂÚ‚_îSÇ"qµh$²±ç¨ìÁ‘‰6íÎä\PÏ[2ç*/Ç£Wb_$þ0Aó’7Ì X¦Û–(wc# ‚ýÙÔ =¡ÁgÎö®<ï [ 139.231766][T10632] [U] µIø¸wØuõ¦b:l®‘EúeÜiBHÁ‹káï^¯VI|È¥Ä\x®dÕ„ [ 139.239233][T10632] [U] Ëòü­|KßIHŒƒ»Þú;F~ò{IÃÓŽ«¡ÿ‰ª=Mkq%„±°ÿhd9©!ë@aü*ŒøŒlzš’~`E‚Üõ=ýÅ[>me§ÚLh»c»ü`ÆÛ'°uùÅÛ~+Û¤±mþÍ·LÃÄçû×X—…³®‡ßæéXóðËÒ舂€i '„j«ž3€e=:3à/ÒCœ_ßͯ 81ë(FW [ 139.254991][T10632] [U] 8)¢¤XÍ)°YvxRÄ»¶øØb¡‰mªb®Ný@ox²;JD‡¶ ¹ƒ, [ 139.257044][T10632] [U] *CÃn¯3¿Àv7‰KE¯Xgt_3êê §ëé [ 139.258685][T10632] [U] D‰¶/QÊa‡¹ÏzÒ¬EàH‘ºgE1$_k½´£s«=óR@ [ 139.261665][T10632] [U] ‰ϼcEv‹û @ý [ 139.262906][T10632] [U] aÆ„% [ 139.263932][T10632] [U] ’@¿Ëø±·’äæëcÃ_-Ʊ¯¢Zþ¯Ë×&ý<Z9Íah§_ÏL@bKÈÔs¤3J¨JÓ5¿ÂÂÜD¹¤;wõWÑçˆUu–yL¾…¯bÒ³53ûż²ø{Õ4XRQº÷ÿr£H=M"ß/ç@ o›¬»ƒèáÀ¨p¢ÌS”¯´‹‡~{P¹‡–Ó¡ä~i*ÑT¨º‡~WìÔÉ)ÉQ¦~ȵåŠ_ßœ‰Í¬z—~VqàÛª` [ 139.270444][T10632] [U] éf1Ïp±3 [ 139.271876][T10632] [U] N0[L;aÛ_´îlÕ&ÍkÿMëCï× [ 139.273614][T10632] [U] Àr6w^âûæçg—©P$üu§í¶í4Œ~GC‰›“ÖßšpÊk½¾FtÍÚwÈç~Î@ùL1è [ 139.276790][T10631] [U] Ô:¢äK!:¡¿Yå’‘Æ;R’ÿôôádmÿ¥–a9Ötb¨‹ð„õtýºû=‚ Òªï+ésS¼ i÷-íY©Jcà ø(š¼‡ðÒ‘„îxƒ|]k|§â_VÀí·ÀéÚÒ‰ÝTÒ8MN´i¢…–׎ͪ²´˜Y΃æzAMö"eÌv3¼KÄ›O0q]^Œ)”‘?ס8â…´ìõS°ñ ŸÜX†e´Ý¢êÝ%4°<¥g±!¼èØy.Öòçûw›µa©ûШ˜×¹‡ÉòÛ)³0¯Põ/óäQº¬Ý{»›‡n [ 139.682010][ T7736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.169967][ T6007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.311072][T10664] FAT-fs (sr0): bogus number of reserved sectors [ 140.313626][T10664] FAT-fs (sr0): Can't find a valid FAT filesystem [ 140.422962][T10664] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 140.519816][ T840] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 140.561692][T10670] netlink: zone id is out of range [ 140.563380][T10670] netlink: zone id is out of range [ 140.565056][T10670] netlink: zone id is out of range [ 140.566705][T10670] netlink: zone id is out of range [ 140.568340][T10670] netlink: zone id is out of range [ 140.669813][ T840] usb 11-1: Using ep0 maxpacket: 32 [ 140.673865][ T840] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.677347][ T840] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.680767][ T840] usb 11-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 140.683719][ T840] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.694179][ T840] usb 11-1: config 0 descriptor?? [ 140.719869][ T5935] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 140.723382][ T5927] Bluetooth: hci2: command 0x1003 tx timeout [ 140.762337][T10675] __nla_validate_parse: 2 callbacks suppressed [ 140.762349][T10675] netlink: 344 bytes leftover after parsing attributes in process `syz.5.1248'. [ 140.767637][T10675] tmpfs: Unknown parameter 'mper:0' [ 140.821670][T10682] sp0: Synchronizing with TNC [ 140.842913][T10682] [U] è [ 140.989509][T10687] tmpfs: Unknown parameter '' [ 141.031221][ T40] audit: type=1400 audit(2000000087.187:30329): avc: denied { mount } for pid=10688 comm="syz.5.1252" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 141.040632][ T6007] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 141.043090][T10689] netlink: 'syz.5.1252': attribute type 1 has an invalid length. [ 141.103655][ T840] hid_parser_main: 29 callbacks suppressed [ 141.103669][ T840] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 141.107716][ T840] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 141.113350][ T840] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 141.116729][ T840] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 141.119888][ T840] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 141.124624][ T840] savu 0003:1E7D:2D5A.0007: unbalanced collection at end of report description [ 141.133682][ T840] savu 0003:1E7D:2D5A.0007: parse failed [ 141.136994][ T840] savu 0003:1E7D:2D5A.0007: probe with driver savu failed with error -22 [ 141.180707][T10693] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 141.201801][ T6007] usb 8-1: Using ep0 maxpacket: 8 [ 141.206261][ T6007] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 141.208870][ T6007] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 141.214069][ T6007] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 141.218175][ T6007] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 141.221521][ T6007] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.225712][ T6007] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 141.228557][ T6007] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.318865][ T40] audit: type=1400 audit(2000000087.467:30330): avc: denied { kexec_image_load } for pid=10661 comm="syz.6.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 141.429857][ T24] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 141.437495][ T6007] usb 8-1: GET_CAPABILITIES returned 0 [ 141.439287][ T6007] usbtmc 8-1:16.0: can't read capabilities [ 141.602839][ T24] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 141.606532][ T24] usb 9-1: config 0 has no interface number 0 [ 141.609246][ T24] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 141.614346][ T24] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 141.619373][ T24] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 17840, setting to 64 [ 141.626315][ T24] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 141.630548][ T24] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 141.634000][ T24] usb 9-1: Product: syz [ 141.635786][ T24] usb 9-1: SerialNumber: syz [ 141.640959][ T24] usb 9-1: config 0 descriptor?? [ 141.649118][ T7736] usb 8-1: USB disconnect, device number 9 [ 141.652581][T10698] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 141.659466][ T24] cm109 9-1:0.8: invalid payload size 64, expected 4 [ 141.670553][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input17 [ 141.858484][ T5935] Bluetooth: hci4: unexpected event for opcode 0x0401 [ 141.864286][ C2] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 141.864306][ T6007] usb 9-1: USB disconnect, device number 12 [ 141.866629][ C2] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 141.892765][ T6007] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 141.949963][ T840] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 141.996184][ T29] usb 11-1: USB disconnect, device number 15 [ 141.998539][T10717] overlayfs: missing 'lowerdir' [ 142.099815][ T840] usb 10-1: Using ep0 maxpacket: 16 [ 142.103061][ T840] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.106203][ T840] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 142.110425][ T840] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 142.114004][ T840] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 142.117285][ T840] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.123132][ T840] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 142.126075][ T840] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 142.128730][ T840] usb 10-1: Manufacturer: syz [ 142.131849][ T840] usb 10-1: config 0 descriptor?? [ 142.260796][ T1146] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.379872][ T840] rc_core: IR keymap rc-hauppauge not found [ 142.381833][ T840] Registered IR keymap rc-empty [ 142.383708][ T840] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 142.410042][ T840] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 142.433007][ T840] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 142.437914][ T840] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input18 [ 142.438289][ T1146] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.443582][ T840] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 142.459754][ T840] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 142.479975][ T840] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 142.513692][ T840] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 142.517579][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1268'. [ 142.522426][T10731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1268'. [ 142.539323][ T40] audit: type=1400 audit(2000000088.687:30331): avc: denied { mount } for pid=10707 comm="syz.5.1258" name="/" dev="configfs" ino=2124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 142.539741][ T840] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 142.570972][ T840] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 142.571617][ T5927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 142.576703][ T5927] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 142.579765][ T5927] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 142.582253][T10734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1268'. [ 142.585931][ T1146] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.586465][ T5927] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 142.593125][ T5927] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 142.600073][ T840] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 142.620190][ T840] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 142.639908][ T840] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 142.656316][ T1146] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.660055][ T840] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 142.685476][ T840] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 142.690713][ T840] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 142.722681][T10732] chnl_net:caif_netlink_parms(): no params data found [ 142.796688][T10732] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.799088][T10732] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.801599][T10732] bridge_slave_0: entered allmulticast mode [ 142.804273][T10732] bridge_slave_0: entered promiscuous mode [ 142.808601][T10732] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.810940][T10732] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.813238][T10732] bridge_slave_1: entered allmulticast mode [ 142.815888][T10732] bridge_slave_1: entered promiscuous mode [ 142.839456][T10745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1270'. [ 142.877429][T10732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.881261][T10754] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1272'. [ 142.889223][T10754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10754 comm=syz.4.1272 [ 142.901008][ T40] audit: type=1400 audit(2000000089.057:30332): avc: denied { search } for pid=10707 comm="syz.5.1258" name="/" dev="configfs" ino=2124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 142.905008][T10732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.911046][ T40] audit: type=1400 audit(2000000089.057:30333): avc: denied { search } for pid=10707 comm="syz.5.1258" name="/" dev="configfs" ino=2124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 142.918483][ T40] audit: type=1400 audit(2000000089.057:30334): avc: denied { search } for pid=10707 comm="syz.5.1258" name="/" dev="configfs" ino=2124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 142.928134][ T40] audit: type=1400 audit(2000000089.067:30335): avc: denied { search } for pid=10707 comm="syz.5.1258" name="/" dev="configfs" ino=2124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 142.941512][T10765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1274'. [ 142.948991][ T1146] bridge_slave_1: left allmulticast mode [ 142.952673][ T1146] bridge_slave_1: left promiscuous mode [ 142.954844][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.958646][ T1146] bridge_slave_0: left allmulticast mode [ 142.960705][ T1146] bridge_slave_0: left promiscuous mode [ 142.962897][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.235114][ T1146] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.240436][ T1146] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.244087][ T1146] .` (unregistering): Released all slaves [ 143.249860][ T1146] bond1 (unregistering): Released all slaves [ 143.259087][T10732] team0: Port device team_slave_0 added [ 143.264976][T10732] team0: Port device team_slave_1 added [ 143.287121][T10732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.289651][T10732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.291124][ T6007] net_ratelimit: 59 callbacks suppressed [ 143.291135][ T6007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.299819][T10732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.309904][T10732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.312844][T10732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.322730][T10732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.346459][T10732] hsr_slave_0: entered promiscuous mode [ 143.349237][T10732] hsr_slave_1: entered promiscuous mode [ 143.352064][T10732] debugfs: 'hsr0' already exists in 'hsr' [ 143.354309][T10732] Cannot create hsr debugfs directory [ 143.506151][T10732] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 143.510712][T10732] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 143.515863][T10732] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 143.521600][T10732] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 143.551406][ T1146] hsr_slave_0: left promiscuous mode [ 143.553703][ T1146] hsr_slave_1: left promiscuous mode [ 143.555889][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.558406][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.561557][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.563924][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.568981][ T1146] veth1_macvtap: left promiscuous mode [ 143.570916][ T1146] veth0_macvtap: left promiscuous mode [ 143.572773][ T1146] veth1_vlan: left promiscuous mode [ 143.574439][ T1146] veth0_vlan: left promiscuous mode [ 143.688973][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 143.784806][T10732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.797292][T10732] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.803670][ T7597] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.805971][ T7597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.811644][ T7596] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.813962][ T7596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.951230][T10732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.066774][T10732] veth0_vlan: entered promiscuous mode [ 144.071634][T10732] veth1_vlan: entered promiscuous mode [ 144.088391][T10732] veth0_macvtap: entered promiscuous mode [ 144.092567][T10732] veth1_macvtap: entered promiscuous mode [ 144.101482][T10732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.107316][T10732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.113070][ T7596] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.116424][ T7596] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.127614][ T7592] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.134399][ T7592] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.161205][ T7596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.169329][ T7596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.185016][ T7596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.187614][ T7596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.319698][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.551221][T10831] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1279'. [ 144.554038][T10831] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1279'. [ 144.556802][T10831] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1279'. [ 144.639754][ T5935] Bluetooth: hci0: command tx timeout [ 144.721738][ T7333] usb 10-1: USB disconnect, device number 15 [ 144.790600][T10843] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 144.791420][ T40] audit: type=1400 audit(2000000090.947:30336): avc: denied { connect } for pid=10842 comm="syz.5.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 144.861170][T10851] binder: 10840:10851 ioctl c0306201 200000000640 returned -22 [ 144.880173][T10852] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0 [ 144.883742][ T40] audit: type=1400 audit(2000000091.037:30337): avc: denied { accept } for pid=10849 comm="syz.5.1283" lport=56417 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 145.025293][T10856] x_tables: ip_tables: osf match: only valid for protocol 6 [ 145.063285][T10858] FAT-fs (sr0): bogus number of reserved sectors [ 145.065398][T10858] FAT-fs (sr0): Can't find a valid FAT filesystem [ 145.088803][ T40] audit: type=1400 audit(2000000091.237:30338): avc: denied { accept } for pid=10857 comm="syz.5.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 145.135764][ T40] audit: type=1400 audit(2000000091.287:30339): avc: denied { getopt } for pid=10868 comm="syz.5.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 145.144781][ T40] audit: type=1400 audit(2000000091.287:30340): avc: denied { listen } for pid=10868 comm="syz.5.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 145.155475][ T40] audit: type=1400 audit(2000000091.287:30341): avc: denied { override_creds } for pid=10866 comm="syz.7.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 145.205737][T10874] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 145.224463][T10874] dlm: non-version read from control device 8224 [ 145.274805][T10872] hid-generic 0003:0627:0001.0001: pid 10872 passed too large report [ 145.279707][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.359633][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.489808][T10875] xt_hashlimit: size too large, truncated to 1048576 [ 145.778402][T10899] __nla_validate_parse: 5 callbacks suppressed [ 145.778413][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1299'. [ 145.783812][T10899] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1299'. [ 146.062280][ T7735] hid-generic 0005:0006:5508.0008: hidraw1: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 146.089760][T10924] fido_id[10924]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci0/hci0:200/report_descriptor': No such file or directory [ 146.149990][ T7333] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 146.300639][ T7333] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 146.304438][ T7333] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 146.308400][ T7333] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 146.312440][ T7333] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 146.316712][ T7333] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 146.320684][ T7333] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.324914][ T7333] usb 12-1: config 0 descriptor?? [ 146.400472][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.435675][T10951] tmpfs: Unknown parameter 'grpq' [ 146.437426][T10951] tmpfs: Unknown parameter 'grpq' [ 146.439318][T10951] tmpfs: Unknown parameter 'grpq' [ 146.441421][T10951] tmpfs: Unknown parameter 'grpq' [ 146.443638][T10951] tmpfs: Unknown parameter '€' [ 146.491575][T10782] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 146.569422][ T7333] usbhid 12-1:0.0: can't add hid device: -71 [ 146.571562][ T7333] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 146.576474][ T7333] usb 12-1: USB disconnect, device number 2 [ 146.581314][T10963] syz.5.1318 (10963) used greatest stack depth: 19112 bytes left [ 146.708559][T10971] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1320'. [ 146.730491][ T5935] Bluetooth: hci0: command tx timeout [ 146.776484][T10977] syzkaller0: entered promiscuous mode [ 146.778340][T10977] syzkaller0: entered allmulticast mode [ 146.923383][ T1146] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.085260][ T1146] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.156006][ T5927] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.160178][ T5927] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.163246][ T5927] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.166911][ T5927] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.170274][ T5927] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.258616][T10979] chnl_net:caif_netlink_parms(): no params data found [ 147.275016][ T1146] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.320997][T10979] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.323287][T10979] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.325566][T10979] bridge_slave_0: entered allmulticast mode [ 147.328187][T10979] bridge_slave_0: entered promiscuous mode [ 147.331449][T10979] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.333718][T10979] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.336027][T10979] bridge_slave_1: entered allmulticast mode [ 147.338741][T10979] bridge_slave_1: entered promiscuous mode [ 147.362125][T10979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.367236][T10979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.384214][T10979] team0: Port device team_slave_0 added [ 147.387784][T10979] team0: Port device team_slave_1 added [ 147.397488][ T1146] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.415347][T10979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.417607][T10979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.426253][T10979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.430930][T10979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.433224][T10979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.441514][T10979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.473777][T10988] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1325'. [ 147.493506][T10988] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1325'. [ 147.495621][T10979] hsr_slave_0: entered promiscuous mode [ 147.498615][T10979] hsr_slave_1: entered promiscuous mode [ 147.500980][T10979] debugfs: 'hsr0' already exists in 'hsr' [ 147.502819][T10979] Cannot create hsr debugfs directory [ 147.647839][ T1146] bridge0: port 1(batadv0) entered disabled state [ 147.670220][T11007] Bluetooth: MGMT ver 1.23 [ 147.753390][T11010] fuse: Bad value for 'fd' [ 147.943801][ T1146] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 147.947284][ T1146] bond0 (unregistering): Released all slaves [ 147.951761][ T1146] bond1 (unregistering): Released all slaves [ 147.958231][ T1146] bond2 (unregistering): Released all slaves [ 147.986262][T10979] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 147.990980][T10979] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 148.012856][T10979] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 148.023501][T10979] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 148.073149][ T1146] IPVS: stopping master sync thread 9187 ... [ 148.083328][T10979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.099840][T10979] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.107779][ T7592] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.110101][ T7592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.122635][ T7594] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.124911][ T7594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.270687][T10979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.294172][ T1146] hsr_slave_0: left promiscuous mode [ 148.296326][ T1146] hsr_slave_1: left promiscuous mode [ 148.301706][ T1146] veth1_macvtap: left promiscuous mode [ 148.303476][ T1146] veth0_macvtap: left promiscuous mode [ 148.305232][ T1146] veth1_vlan: left promiscuous mode [ 148.375959][ T1146] vlan0 (unregistering): left allmulticast mode [ 148.378777][ T1146] veth0_vlan (unregistering): left allmulticast mode [ 148.384119][ T1146] team0 (unregistering): Port device vlan0 removed [ 148.638248][T10979] veth0_vlan: entered promiscuous mode [ 148.645994][T10979] veth1_vlan: entered promiscuous mode [ 148.665346][T10979] veth0_macvtap: entered promiscuous mode [ 148.670370][T10979] veth1_macvtap: entered promiscuous mode [ 148.681005][T10979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.686484][T10979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.691892][ T61] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.694777][ T61] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.697945][ T61] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.700886][ T61] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.741836][ T7594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.744345][ T7594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.756700][ T7594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.759440][ T7594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.800023][ T5935] Bluetooth: hci0: command tx timeout [ 148.906276][T11071] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 149.199634][ T5935] Bluetooth: hci2: command tx timeout [ 150.889397][ T5935] Bluetooth: hci0: command tx timeout [ 151.289212][ T5935] Bluetooth: hci2: command tx timeout [ 153.359572][ T5935] Bluetooth: hci2: command tx timeout [ 155.448937][ T5935] Bluetooth: hci2: command tx timeout [ 162.295886][T11144] bridge0: port 3(syz_tun) entered blocking state [ 162.298868][T11144] bridge0: port 3(syz_tun) entered disabled state [ 162.302843][T11144] syz_tun: entered allmulticast mode [ 162.306166][T11144] syz_tun: entered promiscuous mode [ 162.316091][T11144] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1339'. [ 162.319135][T11144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1339'. [ 162.360729][T11149] xt_l2tp: v2 doesn't support IP mode [ 162.530401][T11172] sch_tbf: peakrate 5120 is lower than or equals to rate 4294927007 ! [ 162.757345][T11170] kvm_intel: kvm [11169]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x5d9e [ 162.770405][T11170] kvm: kvm [11169]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xeae0 [ 162.773364][T11170] kvm: kvm [11169]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x3807 [ 162.828485][T11189] can0: slcan on ttyS3. [ 162.926900][T11193] netlink: 'syz.7.1352': attribute type 10 has an invalid length. [ 162.933480][T11193] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 162.951935][T11189] can0 (unregistered): slcan off ttyS3. [ 162.959445][T11195] autofs: Bad value for 'fd' [ 163.013884][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 163.013895][ T40] audit: type=1400 audit(2000000109.168:30346): avc: denied { append } for pid=11199 comm="syz.7.1356" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 163.017087][T11200] sp0: Synchronizing with TNC [ 163.037709][T11198] [U] è [ 163.052813][T11205] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1357'. [ 163.068721][T11205] bond1: entered promiscuous mode [ 163.070600][T11205] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.076940][T11205] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1357'. [ 163.080501][T11205] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1357'. [ 163.083438][T11205] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1357'. [ 163.121824][T11208] loop6: detected capacity change from 0 to 8 [ 163.132362][ T40] audit: type=1326 audit(2000000109.288:30347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11209 comm="syz.5.1359" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48a619bf79 code=0x0 [ 163.159360][T11208] loop6: detected capacity change from 8 to 7 [ 163.175169][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 163.179228][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 163.182354][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 163.188436][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 163.191388][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 163.198894][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 163.201898][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 163.207034][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 163.210066][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 163.214324][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 163.217297][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 163.225274][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 163.228519][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 163.230389][T11215] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1361'. [ 163.231396][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 163.231497][ C1] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 163.239718][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 163.242155][ C1] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 163.245125][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 163.247582][ C1] Buffer I/O error on dev loop6, logical block 3, async page read [ 163.250065][ C1] Buffer I/O error on dev loop6, logical block 4, async page read [ 163.280936][T11221] autofs: Bad value for 'fd' [ 163.384104][T11225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1364'. [ 163.437900][ T40] audit: type=1400 audit(2000000109.588:30348): avc: denied { setattr } for pid=11228 comm="syz.3.1365" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 163.469200][T11232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1366'. [ 163.677081][T11232] Mount JFS Failure: -5 [ 163.679208][T11232] jfs_mount failed w/return code = -5 [ 164.002208][T11248] autofs: Bad value for 'fd' [ 164.066796][T11250] gfs2: error -5 reading superblock [ 164.139108][ T9116] IPVS: starting estimator thread 0... [ 164.154158][ T40] audit: type=1400 audit(2000524398.296:30349): avc: denied { execute_no_trans } for pid=11257 comm="syz.7.1375" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F522C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=46113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 164.197408][T11263] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1377'. [ 164.203255][T11263] netlink: 'syz.5.1377': attribute type 26 has an invalid length. [ 164.231545][T11255] IPVS: using max 45 ests per chain, 108000 per kthread [ 164.262074][ T40] audit: type=1400 audit(2000524398.403:30350): avc: denied { accept } for pid=11262 comm="syz.5.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 164.329422][ T5935] Bluetooth: hci1: Malformed HCI Event [ 164.437366][ T7737] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 164.614263][ T7737] usb 12-1: config index 0 descriptor too short (expected 23569, got 27) [ 164.616954][ T7737] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.620779][ T7737] usb 12-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 164.624317][ T7737] usb 12-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 164.626879][ T7737] usb 12-1: Manufacturer: syz [ 164.629685][ T7737] usb 12-1: config 0 descriptor?? [ 164.653689][ T40] audit: type=1400 audit(2000524398.780:30351): avc: denied { shutdown } for pid=11285 comm="syz.3.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 164.685349][ T7737] rc_core: IR keymap rc-hauppauge not found [ 164.687421][ T7737] Registered IR keymap rc-empty [ 164.689878][ T7737] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0 [ 164.694392][ T7737] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0/input19 [ 164.845661][T11261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.849280][T11261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.863245][T11261] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffe [ 164.867390][ T7737] usb 12-1: USB disconnect, device number 3 [ 164.949571][T11313] autofs: Unknown parameter '¦ؤï~Q:m ¦mr@hŒðé÷rÝLµ' [ 165.435583][T11321] netdevsim netdevsim7: Direct firmware load for . failed with error -2 [ 165.439333][T11321] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 165.439351][ T40] audit: type=1400 audit(2000524399.546:30352): avc: denied { firmware_load } for pid=11320 comm="syz.7.1393" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 165.449521][ T40] audit: type=1400 audit(2000524399.546:30353): avc: denied { lock } for pid=11322 comm="syz.3.1394" path="socket:[46146]" dev="sockfs" ino=46146 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 165.671272][T11331] libceph: resolve '4' (ret=-3): failed [ 165.724054][T11335] autofs: Unknown parameter '0x0000000000000000' [ 165.812094][T11340] binder: 11336:11340 ioctl c0306201 2000000003c0 returned -14 [ 165.815068][T11340] binder_alloc: 11336: binder_alloc_buf size 8232 failed, no address space [ 165.818227][T11340] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192) [ 165.881306][T11342] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 166.632291][ T6007] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 166.648100][T11366] netlink: 'syz.3.1404': attribute type 17 has an invalid length. [ 166.650700][T11366] macvtap0: entered allmulticast mode [ 166.652395][T11366] veth0_macvtap: entered allmulticast mode [ 166.655285][T11366] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 166.686937][ T40] audit: type=1400 audit(2000524400.760:30354): avc: denied { setopt } for pid=11371 comm="syz.3.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 166.796923][ T6007] usb 12-1: Using ep0 maxpacket: 8 [ 166.799782][ T6007] usb 12-1: config 0 has no interfaces? [ 166.801553][ T6007] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 166.804409][ T6007] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.810374][ T6007] usb 12-1: config 0 descriptor?? [ 166.972012][ T6007] usb 10-1: new low-speed USB device number 16 using dummy_hcd [ 167.121636][ T8279] usb 12-1: USB disconnect, device number 4 [ 167.147101][ T6007] usb 10-1: Invalid ep0 maxpacket: 16 [ 167.279805][ T6007] usb 10-1: new low-speed USB device number 17 using dummy_hcd [ 167.435025][ T40] audit: type=1400 audit(2000524401.490:30355): avc: denied { read } for pid=11405 comm="syz.7.1411" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 167.444178][ T6007] usb 10-1: Invalid ep0 maxpacket: 16 [ 167.447656][ T6007] usb usb10-port1: attempt power cycle [ 167.793331][ T6007] usb 10-1: new low-speed USB device number 18 using dummy_hcd [ 167.812457][T11421] tmpfs: Unknown parameter '' [ 167.815155][ T6007] usb 10-1: Invalid ep0 maxpacket: 16 [ 167.958048][ T6007] usb 10-1: new low-speed USB device number 19 using dummy_hcd [ 167.978836][ T6007] usb 10-1: Invalid ep0 maxpacket: 16 [ 167.981732][ T6007] usb usb10-port1: unable to enumerate USB device [ 168.107869][T11428] autofs: Unknown parameter 'fd0x0000000000000000' [ 168.153043][T11432] __nla_validate_parse: 2 callbacks suppressed [ 168.153054][T11432] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1421'. [ 168.226975][T11432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=11432 comm=syz.7.1421 [ 168.231871][T11432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.397172][T11450] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1425'. [ 168.401660][T11450] netlink: 'syz.8.1425': attribute type 1 has an invalid length. [ 168.406009][T11450] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1425'. [ 168.432352][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 168.432363][ T40] audit: type=1400 audit(2000524402.455:30358): avc: denied { execstack } for pid=11451 comm="syz.7.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 168.611119][T11462] autofs: Unknown parameter 'fd0x0000000000000000' [ 168.612309][T11463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1427'. [ 168.640693][T11467] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 168.738456][T11480] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 168.741327][T11480] SELinux: failed to load policy [ 168.995105][T11501] autofs: Unknown parameter 'fd0x0000000000000000' [ 169.025434][ T40] audit: type=1326 audit(2000524403.040:30359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11502 comm="syz.7.1440" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f266bf9bf79 code=0x0 [ 169.157040][ T5978] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 169.174654][ T40] audit: type=1400 audit(2000524403.177:30360): avc: denied { write } for pid=11506 comm="syz.8.1441" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 169.311931][ T5978] usb 8-1: config 0 has no interfaces? [ 169.315682][ T5978] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 169.318544][ T5978] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.321079][ T5978] usb 8-1: Product: syz [ 169.322371][ T5978] usb 8-1: Manufacturer: syz [ 169.323778][ T5978] usb 8-1: SerialNumber: syz [ 169.326552][ T5978] usb 8-1: config 0 descriptor?? [ 169.534659][ T40] audit: type=1800 audit(2000524403.529:30361): pid=11516 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.1445" name="file0" dev="tmpfs" ino=137 res=0 errno=0 [ 169.568102][T11521] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 169.586478][ T53] usb 8-1: USB disconnect, device number 10 [ 169.587737][T11521] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 169.719614][T11523] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1447'. [ 169.874044][T11532] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 169.881189][T11532] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1450'. [ 169.941817][T11537] IPv6: NLM_F_CREATE should be specified when creating new route [ 170.242016][T11549] UHID_CREATE from different security context by process 1188 (syz.3.1456), this is not allowed. [ 170.387126][T11568] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1462'. [ 170.484488][ T40] audit: type=1326 audit(2000524404.457:30362): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11569 comm="syz.5.1463" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48a619bf79 code=0x0 [ 170.497304][ T53] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 170.562497][ T40] audit: type=1107 audit(2000524404.536:30363): pid=11578 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='º¹ÊÓX©×âرÁÁçb 7' [ 170.625712][T11579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11579 comm=syz.7.1465 [ 170.630879][ T53] usb 8-1: device descriptor read/64, error -71 [ 170.886993][ T53] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 170.946983][T11613] macsec0: entered promiscuous mode [ 170.949194][T11613] macsec0: entered allmulticast mode [ 170.954401][T11613] veth1_macvtap: entered allmulticast mode [ 170.956640][T11613] macsec0: left promiscuous mode [ 170.958819][T11612] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1478'. [ 170.958967][T11613] macsec0: left allmulticast mode [ 170.963444][T11613] veth1_macvtap: left allmulticast mode [ 170.969078][T11613] macsec0: entered promiscuous mode [ 170.970724][T11613] macsec0: entered allmulticast mode [ 170.995708][T11618] syzkaller0: entered promiscuous mode [ 170.997959][T11618] syzkaller0: entered allmulticast mode [ 171.028926][ T53] usb 8-1: device descriptor read/64, error -71 [ 171.110559][ T10] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 171.151577][ T53] usb usb8-port1: attempt power cycle [ 171.257726][T11633] netlink: 'syz.7.1483': attribute type 1 has an invalid length. [ 171.263727][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 171.267884][ T10] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 171.270584][ T10] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 171.270672][T11633] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.273299][ T10] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 171.280762][ T10] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 171.283490][ T10] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.287292][ T10] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 171.289821][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.339420][ T40] audit: type=1400 audit(2000524405.299:30364): avc: denied { mount } for pid=11631 comm="syz.7.1483" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 171.345728][ T40] audit: type=1400 audit(2000524405.299:30365): avc: denied { mounton } for pid=11631 comm="syz.7.1483" path="/78/file0" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 171.368863][ T40] audit: type=1400 audit(2000524405.328:30366): avc: denied { unmount } for pid=10732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 171.397849][T11646] netlink: 1 bytes leftover after parsing attributes in process `syz.7.1485'. [ 171.408581][ T5935] Bluetooth: unknown link type 112 [ 171.410083][ T5935] Bluetooth: hci0: connection err: -111 [ 171.498517][ T53] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 171.502181][ T10] usb 10-1: GET_CAPABILITIES returned 0 [ 171.504249][ T10] usbtmc 10-1:16.0: can't read capabilities [ 171.520221][ T53] usb 8-1: device descriptor read/8, error -71 [ 171.541683][ T40] audit: type=1400 audit(2000524405.495:30367): avc: denied { watch_mount } for pid=11647 comm="syz.7.1486" path="/80" dev="tmpfs" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 171.736256][T11659] 8021q: adding VLAN 0 to HW filter on device bond3 [ 171.784260][ T53] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 171.805445][ T53] usb 8-1: device descriptor read/8, error -71 [ 171.927830][ T53] usb usb8-port1: unable to enumerate USB device [ 171.988406][ T10] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 172.151665][ T10] usb 12-1: Using ep0 maxpacket: 16 [ 172.154902][ T10] usb 12-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 172.157622][ T10] usb 12-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 172.160393][ T10] usb 12-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.164123][ T10] usb 12-1: config 1 interface 0 has no altsetting 0 [ 172.168223][ T10] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 172.170784][ T10] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.173217][ T10] usb 12-1: Product: syz [ 172.174424][ T10] usb 12-1: Manufacturer: syz [ 172.175735][ T10] usb 12-1: SerialNumber: syz [ 172.233220][T11664] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1490'. [ 172.286335][ T6007] usb 10-1: USB disconnect, device number 20 [ 172.331002][T11668] [U]  [ 172.387200][ T10] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 172.643127][T11659] usblp0:failed reading printer status (-32) [ 172.649861][T11659] bond_slave_0: entered promiscuous mode [ 172.652101][T11659] bond_slave_1: entered promiscuous mode [ 172.653896][T11659] dummy0: entered promiscuous mode [ 172.656692][T11659] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 172.661081][T11659] bond3: (slave macvlan2): Enslaving as a backup interface with an up link [ 172.666032][ T6007] usb 12-1: USB disconnect, device number 5 [ 172.670004][ T6007] usblp0: removed [ 173.362497][ C1] blk_print_req_error: 32 callbacks suppressed [ 173.362508][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 173.367743][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.370672][ C1] buffer_io_error: 30 callbacks suppressed [ 173.370680][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 173.374847][ C1] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.378374][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 173.381305][ C1] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.384466][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 173.386840][ C1] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.389851][ C1] Buffer I/O error on dev loop6, logical block 3, async page read [ 173.392297][ C1] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.395209][ C1] Buffer I/O error on dev loop6, logical block 4, async page read [ 173.397781][ C1] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.400672][ C1] Buffer I/O error on dev loop6, logical block 5, async page read [ 173.403066][ C1] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.405983][ C1] Buffer I/O error on dev loop6, logical block 6, async page read [ 173.421820][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.425658][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 173.428937][ C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.432696][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 173.435842][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 173.560328][T11741] __nla_validate_parse: 1 callbacks suppressed [ 173.560344][T11741] netlink: 168 bytes leftover after parsing attributes in process `syz.8.1513'. [ 173.572480][T11744] netlink: 'syz.3.1514': attribute type 21 has an invalid length. [ 173.575111][T11744] IPv6: NLM_F_CREATE should be specified when creating new route [ 173.773878][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 173.773889][ T40] audit: type=1400 audit(2000524407.682:30375): avc: denied { setattr } for pid=11769 comm="syz.7.1523" name="v4l-subdev4" dev="devtmpfs" ino=969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 173.837777][ T40] audit: type=1400 audit(2000524407.751:30376): avc: granted { setsecparam } for pid=11769 comm="syz.7.1523" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 174.121903][T11788] Cannot find set identified by id 0 to match [ 174.538661][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1535'. [ 174.708397][ T40] audit: type=1400 audit(2000524408.596:30377): avc: denied { map } for pid=11821 comm="syz.7.1539" path="socket:[50213]" dev="sockfs" ino=50213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 174.859686][T11829] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1541'. [ 174.863921][T11826] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1540'. [ 174.868404][ T40] audit: type=1107 audit(2000524408.754:30378): pid=11825 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 174.915024][T11831] binder: BINDER_SET_CONTEXT_MGR already set [ 174.943295][T11829] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 174.947073][T11829] IPv6: NLM_F_CREATE should be set when creating new route [ 174.949507][T11831] binder: 11830:11831 ioctl 4018620d 200000004a80 returned -16 [ 174.950090][T11829] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 174.954147][T11829] IPv6: NLM_F_CREATE should be set when creating new route [ 175.027119][ T5978] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 175.047585][ T5978] hid-generic 0000:0000:0000.0009: hidraw1: HID v0.00 Device [syz1] on syz0 [ 175.181331][ T40] audit: type=1400 audit(2000524409.068:30379): avc: denied { ioctl } for pid=11734 comm="syz.5.1511" path="/248/file0" dev="tmpfs" ino=1381 ioctlcmd=0x1285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 175.196562][T11835] netlink: 'syz.8.1544': attribute type 4 has an invalid length. [ 175.199721][T11835] netlink: 'syz.8.1544': attribute type 1 has an invalid length. [ 175.203592][T11835] netlink: 228 bytes leftover after parsing attributes in process `syz.8.1544'. [ 175.362132][T11853] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1548'. [ 175.366464][T11853] netlink: 'syz.7.1548': attribute type 29 has an invalid length. [ 175.369777][T11853] netlink: 'syz.7.1548': attribute type 29 has an invalid length. [ 175.397318][ T53] hid-generic 0362:07FF:7FFFFFFF.000A: item fetching failed at offset 0/2 [ 175.402116][ T53] hid-generic 0362:07FF:7FFFFFFF.000A: probe with driver hid-generic failed with error -22 [ 175.407835][ T40] audit: type=1400 audit(2000524409.285:30380): avc: denied { create } for pid=11856 comm="syz.7.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 175.523351][ T40] audit: type=1400 audit(2000524409.403:30381): avc: denied { write } for pid=11869 comm="syz.8.1547" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 175.597726][T11879] dvmrp1: entered allmulticast mode [ 175.652975][ T40] audit: type=1400 audit(2000524409.531:30382): avc: denied { connect } for pid=11878 comm="syz.8.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 175.841675][ T40] audit: type=1400 audit(2000524409.718:30383): avc: denied { map } for pid=11891 comm="syz.7.1560" path="socket:[49298]" dev="sockfs" ino=49298 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 175.937892][ T5978] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 176.032206][ T40] audit: type=1400 audit(2000524409.905:30384): avc: denied { unmount } for pid=10732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 176.063156][T11899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11899 comm=syz.7.1562 [ 176.122923][ T5978] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 176.123965][T11899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11899 comm=syz.7.1562 [ 176.141347][ T5978] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.144151][ T5978] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.147321][ T5978] usb 10-1: config 0 interface 0 has no altsetting 0 [ 176.150101][ T5978] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.161395][ T5978] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.164721][ T5978] usb 10-1: config 0 interface 0 has no altsetting 0 [ 176.167659][ T5978] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.170771][ T5978] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.174668][ T5978] usb 10-1: config 0 interface 0 has no altsetting 0 [ 176.177689][T11904] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.1563'. [ 176.183342][ T5978] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.186280][ T5978] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.189909][ T5978] usb 10-1: config 0 interface 0 has no altsetting 0 [ 176.192825][ T5978] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.195470][ T5978] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.198747][ T5978] usb 10-1: config 0 interface 0 has no altsetting 0 [ 176.201561][ T5978] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.204940][ T5978] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.208208][ T5978] usb 10-1: config 0 interface 0 has no altsetting 0 [ 176.211619][ T5978] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.214615][ T5978] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.217945][ T5978] usb 10-1: config 0 interface 0 has no altsetting 0 [ 176.220675][ T5978] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.223686][ T5978] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.226946][ T5978] usb 10-1: config 0 interface 0 has no altsetting 0 [ 176.230487][ T5978] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 176.233550][ T5978] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 176.236116][ T5978] usb 10-1: Product: syz [ 176.237499][ T5978] usb 10-1: Manufacturer: syz [ 176.238987][ T5978] usb 10-1: SerialNumber: syz [ 176.242137][ T5978] usb 10-1: config 0 descriptor?? [ 176.248305][ T5978] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 176.450166][ T5978] usb 10-1: USB disconnect, device number 21 [ 176.464051][ T5978] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 176.518758][T11915] tmpfs: Unknown parameter 'usrbeCï' [ 176.689384][ T5935] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 177.154212][T11937] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.188041][T11939] random: crng reseeded on system resumption [ 177.269792][T11931] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 177.452810][T11953] veth0: entered promiscuous mode [ 177.455170][T11953] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1581'. [ 177.616419][ T7597] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.731103][ T7597] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.745325][T11970] ================================================================== [ 177.748575][T11970] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 [ 177.751670][T11970] Read of size 8 at addr ffff88802f672018 by task syz.3.1590/11970 [ 177.756201][T11970] [ 177.757552][T11970] CPU: 0 UID: 0 PID: 11970 Comm: syz.3.1590 Tainted: G L syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 177.757580][T11970] Tainted: [L]=SOFTLOCKUP [ 177.757586][T11970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.757596][T11970] Call Trace: [ 177.757604][T11970] [ 177.757612][T11970] dump_stack_lvl+0x100/0x190 [ 177.757642][T11970] print_report+0x156/0x4c9 [ 177.757668][T11970] ? __virt_addr_valid+0x81/0x620 [ 177.757691][T11970] ? __phys_addr+0xe8/0x180 [ 177.757712][T11970] ? dvb_device_open+0x33f/0x3b0 [ 177.757736][T11970] kasan_report+0xdf/0x1a0 [ 177.757758][T11970] ? dvb_device_open+0x33f/0x3b0 [ 177.757784][T11970] ? __pfx_dvb_device_open+0x10/0x10 [ 177.757809][T11970] dvb_device_open+0x33f/0x3b0 [ 177.757833][T11970] ? __pfx_dvb_device_open+0x10/0x10 [ 177.757857][T11970] chrdev_open+0x234/0x6a0 [ 177.757880][T11970] ? __pfx_chrdev_open+0x10/0x10 [ 177.757903][T11970] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 177.757931][T11970] do_dentry_open+0x6d8/0x1660 [ 177.757952][T11970] ? __pfx_chrdev_open+0x10/0x10 [ 177.757975][T11970] vfs_open+0x82/0x3f0 [ 177.758001][T11970] path_openat+0x208c/0x31a0 [ 177.758036][T11970] ? __pfx_path_openat+0x10/0x10 [ 177.758062][T11970] do_file_open+0x20e/0x430 [ 177.758086][T11970] ? __pfx_do_file_open+0x10/0x10 [ 177.758115][T11970] ? alloc_fd+0x476/0x790 [ 177.758140][T11970] ? do_getname+0x191/0x390 [ 177.758157][T11970] do_sys_openat2+0x10d/0x1e0 [ 177.758207][T11970] ? __pfx_do_sys_openat2+0x10/0x10 [ 177.758239][T11970] __x64_sys_openat+0x12d/0x210 [ 177.758271][T11970] ? __pfx___x64_sys_openat+0x10/0x10 [ 177.758298][T11970] ? do_user_addr_fault+0x8d6/0x12f0 [ 177.758319][T11970] do_syscall_64+0x106/0xf80 [ 177.758357][T11970] ? clear_bhb_loop+0x40/0x90 [ 177.758379][T11970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.758397][T11970] RIP: 0033:0x7f00c255c84e [ 177.758414][T11970] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 177.758432][T11970] RSP: 002b:00007f00c34e6b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 177.758450][T11970] RAX: ffffffffffffffda RBX: 00007f00c34e76c0 RCX: 00007f00c255c84e [ 177.758460][T11970] RDX: 0000000000000002 RSI: 00007f00c34e6c00 RDI: ffffffffffffff9c [ 177.758472][T11970] RBP: 00007f00c34e6c00 R08: 0000000000000000 R09: 0000000000000000 [ 177.758483][T11970] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 177.758496][T11970] R13: 00007f00c2816038 R14: 00007f00c2815fa0 R15: 00007ffcbfd399a8 [ 177.758513][T11970] [ 177.758519][T11970] [ 177.763355][ T5927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.764216][T11970] Allocated by task 11962: [ 177.764226][T11970] kasan_save_stack+0x30/0x50 [ 177.764243][T11970] kasan_save_track+0x14/0x30 [ 177.773619][ T5927] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.773967][T11970] __kasan_kmalloc+0xaa/0xb0 [ 177.779164][ T5927] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.780058][T11970] __kmalloc_noprof+0x301/0x850 [ 177.783368][ T5927] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.783935][T11970] security_inode_init_security+0x113/0x370 [ 177.789211][ T5927] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.790300][T11970] shmem_symlink+0x138/0x9b0 [ 177.878871][T11970] vfs_symlink+0x178/0x4d0 [ 177.880319][T11970] filename_symlinkat+0x2a6/0x560 [ 177.881972][T11970] __x64_sys_symlinkat+0x9c/0xe0 [ 177.883568][T11970] do_syscall_64+0x106/0xf80 [ 177.885052][T11970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.886936][T11970] [ 177.887711][T11970] Freed by task 11962: [ 177.889008][T11970] kasan_save_stack+0x30/0x50 [ 177.890516][T11970] kasan_save_track+0x14/0x30 [ 177.892023][T11970] kasan_save_free_info+0x3b/0x70 [ 177.893626][T11970] __kasan_slab_free+0x5f/0x80 [ 177.895168][T11970] kfree+0x1aa/0x670 [ 177.896432][T11970] security_inode_init_security+0x2bf/0x370 [ 177.898393][T11970] shmem_symlink+0x138/0x9b0 [ 177.900120][T11970] vfs_symlink+0x178/0x4d0 [ 177.901604][T11970] filename_symlinkat+0x2a6/0x560 [ 177.903446][T11970] __x64_sys_symlinkat+0x9c/0xe0 [ 177.905312][T11970] do_syscall_64+0x106/0xf80 [ 177.907092][T11970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.909198][T11970] [ 177.909995][T11970] The buggy address belongs to the object at ffff88802f672000 [ 177.909995][T11970] which belongs to the cache kmalloc-256 of size 256 [ 177.914602][T11970] The buggy address is located 24 bytes inside of [ 177.914602][T11970] freed 256-byte region [ffff88802f672000, ffff88802f672100) [ 177.919516][T11970] [ 177.920403][T11970] The buggy address belongs to the physical page: [ 177.922616][T11970] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f672 [ 177.925593][T11970] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 177.928542][T11970] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 177.931266][T11970] page_type: f5(slab) [ 177.932794][T11970] raw: 00fff00000000040 ffff88801b842b40 dead000000000100 dead000000000122 [ 177.935961][T11970] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 177.938934][T11970] head: 00fff00000000040 ffff88801b842b40 dead000000000100 dead000000000122 [ 177.942227][T11970] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 177.945330][T11970] head: 00fff00000000001 ffffea0000bd9c81 00000000ffffffff 00000000ffffffff [ 177.948189][T11970] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 177.951522][T11970] page dumped because: kasan: bad access detected [ 177.953734][T11970] page_owner tracks the page as allocated [ 177.955555][T11970] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 21793496207, free_ts 0 [ 177.961684][T11970] post_alloc_hook+0x153/0x170 [ 177.963226][T11970] get_page_from_freelist+0x111d/0x3140 [ 177.964972][T11970] __alloc_frozen_pages_noprof+0x27d/0x2ae0 [ 177.966804][T11970] new_slab+0xa6/0x6e0 [ 177.968078][T11970] refill_objects+0x26b/0x400 [ 177.969561][T11970] __pcs_replace_empty_main+0x19f/0x600 [ 177.971273][T11970] __kmalloc_cache_noprof+0x493/0x6f0 [ 177.972941][T11970] bus_add_driver+0x92/0x5b0 [ 177.974408][T11970] driver_register+0x1e2/0x360 [ 177.976075][T11970] usb_register_driver+0x21c/0x3e0 [ 177.977821][T11970] do_one_initcall+0x11d/0x690 [ 177.979599][T11970] kernel_init_freeable+0x6e5/0x7a0 [ 177.981424][T11970] kernel_init+0x1f/0x1e0 [ 177.982929][T11970] ret_from_fork+0x754/0xd80 [ 177.984577][T11970] ret_from_fork_asm+0x1a/0x30 [ 177.986294][T11970] page_owner free stack trace missing [ 177.988160][T11970] [ 177.989028][T11970] Memory state around the buggy address: [ 177.990971][T11970] ffff88802f671f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 177.993908][T11970] ffff88802f671f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 177.996333][T11970] >ffff88802f672000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 177.998876][T11970] ^ [ 178.000600][T11970] ffff88802f672080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 178.003512][T11970] ffff88802f672100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 178.006563][T11970] ================================================================== [ 178.019926][T11970] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 178.022160][T11970] CPU: 2 UID: 0 PID: 11970 Comm: syz.3.1590 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.025397][T11970] Tainted: [L]=SOFTLOCKUP [ 178.026724][T11970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 178.030248][T11970] Call Trace: [ 178.031306][T11970] [ 178.032253][T11970] dump_stack_lvl+0x100/0x190 [ 178.033701][T11970] vpanic+0x552/0x970 [ 178.034940][T11970] ? __pfx_vpanic+0x10/0x10 [ 178.036308][T11970] ? dvb_device_open+0x33f/0x3b0 [ 178.037883][T11970] panic+0xd1/0xe0 [ 178.039088][T11970] ? __pfx_panic+0x10/0x10 [ 178.040442][T11970] ? dvb_device_open+0x33f/0x3b0 [ 178.041932][T11970] ? preempt_schedule_common+0x42/0xc0 [ 178.043607][T11970] check_panic_on_warn.cold+0x19/0x34 [ 178.045209][T11970] end_report.part.0+0x3a/0x90 [ 178.046667][T11970] kasan_report.cold+0xe/0x18 [ 178.048123][T11970] ? dvb_device_open+0x33f/0x3b0 [ 178.049622][T11970] ? __pfx_dvb_device_open+0x10/0x10 [ 178.051221][T11970] dvb_device_open+0x33f/0x3b0 [ 178.052647][T11970] ? __pfx_dvb_device_open+0x10/0x10 [ 178.054263][T11970] chrdev_open+0x234/0x6a0 [ 178.055660][T11970] ? __pfx_chrdev_open+0x10/0x10 [ 178.057187][T11970] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 178.059089][T11970] do_dentry_open+0x6d8/0x1660 [ 178.060532][T11970] ? __pfx_chrdev_open+0x10/0x10 [ 178.062024][T11970] vfs_open+0x82/0x3f0 [ 178.063290][T11970] path_openat+0x208c/0x31a0 [ 178.064693][T11970] ? __pfx_path_openat+0x10/0x10 [ 178.066215][T11970] do_file_open+0x20e/0x430 [ 178.067609][T11970] ? __pfx_do_file_open+0x10/0x10 [ 178.069157][T11970] ? alloc_fd+0x476/0x790 [ 178.070477][T11970] ? do_getname+0x191/0x390 [ 178.071844][T11970] do_sys_openat2+0x10d/0x1e0 [ 178.073259][T11970] ? __pfx_do_sys_openat2+0x10/0x10 [ 178.074822][T11970] __x64_sys_openat+0x12d/0x210 [ 178.076294][T11970] ? __pfx___x64_sys_openat+0x10/0x10 [ 178.077901][T11970] ? do_user_addr_fault+0x8d6/0x12f0 [ 178.079520][T11970] do_syscall_64+0x106/0xf80 [ 178.080932][T11970] ? clear_bhb_loop+0x40/0x90 [ 178.082424][T11970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.084231][T11970] RIP: 0033:0x7f00c255c84e [ 178.085573][T11970] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 178.091255][T11970] RSP: 002b:00007f00c34e6b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 178.093860][T11970] RAX: ffffffffffffffda RBX: 00007f00c34e76c0 RCX: 00007f00c255c84e [ 178.096251][T11970] RDX: 0000000000000002 RSI: 00007f00c34e6c00 RDI: ffffffffffffff9c [ 178.098673][T11970] RBP: 00007f00c34e6c00 R08: 0000000000000000 R09: 0000000000000000 [ 178.101024][T11970] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 178.103397][T11970] R13: 00007f00c2816038 R14: 00007f00c2815fa0 R15: 00007ffcbfd399a8 [ 178.105763][T11970] [ 178.107379][T11970] Kernel Offset: disabled [ 178.108716][T11970] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:48:28 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff856f4785 RDI=ffffffff9b45a780 RBP=ffffffff9b45a740 RSP=ffffc90003a9f2e8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000032 R14=0000000000000010 R15=ffffffff856f4720 RIP=ffffffff856f47af RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f00c34e76c0 ffffffff 00c00000 GS =0000 ffff8880d638b000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f00c2585640 CR3=000000003467a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000044 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000f8000000 Opmask01=0000000000000000 Opmask02=000000002802fefc Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcbfd39e96 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcbfd39e96 00007ffcbfd39e9c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00c2632e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00c2632e86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00c2632fea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00c2632e78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000030646e 65746e6f72662f30 726574706164612f 6276642f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000013474d 46574d4c51450c13 514657534247420c 4155470c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00c27ea498 00007f00c27ea468 00007f00c27ea4a0 00007f00c27ea480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000017 RCX=ffffffff84f5c9cf RDX=0000000000000001 RSI=0000000000000004 RDI=ffff88803cdba480 RBP=0000000000000014 RSP=ffffc9000349f1c0 R8 =0000000000000005 R9 =0000000000000004 R10=0000000000000001 R11=0000000000000000 R12=ffffffff8c1b05bd R13=0000000000000000 R14=0000000000000001 R15=ffffc9000349f400 RIP=ffffffff82070c9b RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ff70c36c300 ffffffff 00c00000 GS =0000 ffff8880d648b000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055b83d8c6000 CR3=000000003916a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000063e 0000001400000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f7665642f01ffff ffffffffffffed08 0280031200000532 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000208060601 1f98000404a7c408 0001000004080606 0124d60020808080 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8200080302020006 0302f60200040302 f60200020302f602 0000030010000a10 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0016100006047682 05b9c00800010000 02080604011f9400 100005b882080001 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000080606021f 9a000400748e8208 0002800401c71000 08004bd6006d766b ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000001ffffffff fffffffff70829b6 03038c020029b403 18020029b2030c02 ZMM25=9cd0eae79cd0eae7 9cd0eae79cd0eae7 9cd0eae79cd0eae7 9cd0eae79cd0eae7 9cd0eae79cd0eae7 9cd0eae79cd0eae7 9cd0eae79cd0eae7 9cd0eae79cd0eae7 ZMM26=3b24c7643b24c764 3b24c7643b24c764 3b24c7643b24c764 3b24c7643b24c764 3b24c7643b24c764 3b24c7643b24c764 3b24c7643b24c764 3b24c7643b24c764 ZMM27=41b96e9041b96e90 41b96e9041b96e90 41b96e9041b96e90 41b96e9041b96e90 41b96e9041b96e90 41b96e9041b96e90 41b96e9041b96e90 41b96e9041b96e90 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=af070000af070000 af070000af070000 af070000af070000 af070000af070000 af070000af070000 af070000af070000 af070000af070000 af070000af070000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffffff8ce3a761 RCX=ffffffff961beaa8 RDX=0000000000000000 RSI=ffff88802e5f6b00 RDI=ffffffff8ce3a760 RBP=0000000000000000 RSP=ffffc9000168fa60 R8 =0000000000000000 R9 =fffffbfff21b1a1a R10=ffffffff90d8d0d7 R11=0000000000000001 R12=0000000000000000 R13=dffffc0000000000 R14=000000000000060a R15=ffff888039de9138 RIP=ffffffff8b7c5dde RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d658b000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f48a6f456b8 CR3=0000000049ffd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0023646e65746e6f 72662f2372657470 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcbfd39e96 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcbfd39e96 00007ffcbfd39e9c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00c2632e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00c2632e86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00c2632fea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00c2632e78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00c27ea4a0 00007f00c27ea480 00007f00c27ea488 00007f00c27ea4b8 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00c27ea498 00007f00c27ea468 00007f00c27ea4a0 00007f00c27ea480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff96109450 RBX=00000000000000b8 RCX=ffffffff9611ec40 RDX=ffffffff961bce88 RSI=ffffc90006987550 RDI=ffffffff97baa308 RBP=0000000000000030 RSP=ffffc900069874a8 R8 =ffffffff961bceb8 R9 =00000000000000b5 R10=ffffc90006987640 R11=0000000000000000 R12=ffffffff81e30ae0 R13=ffffc90006987550 R14=ffffffff81e318f0 R15=ffffffff979db118 RIP=ffffffff81e32294 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555593dc8500 ffffffff 00c00000 GS =0000 ffff8880d668b000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6a49e52380 CR3=0000000050379000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6a4ab4d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6a49fea4a0 00007f6a49fea480 00007f6a49fea488 00007f6a49fea4b8 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6a4ab4d020 00007f6a49fea460 00007f6a49fea470 00007f6a49fea4b0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6a49fea498 00007f6a49fea468 00007f6a49fea4a0 00007f6a49fea480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000