last executing test programs: 2m35.720523533s ago: executing program 3 (id=804): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc800, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r6, 0x11, 0x66, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=@newtfilter={0x24, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0xe, 0x10}, {0x8}, {0x8, 0xfff0}}}, 0x24}, 0x1, 0x0, 0x0, 0x884}, 0x2) 2m35.602045507s ago: executing program 3 (id=811): syz_emit_ethernet(0x46, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x89, 0x0, @loopback, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xc, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000080180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000002feffffb702000008000000b70300000000000085000000ca0000009500000000000000"], &(0x7f0000000040)='GPL\x00'}, 0x90) 2m35.541493506s ago: executing program 3 (id=814): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f0000000200)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/stat\x00') fstat(r4, &(0x7f0000004800)) r5 = epoll_create(0x10002e78) epoll_wait(r5, &(0x7f00000001c0)=[{}], 0x1, 0xb55) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000280)={0x10002007}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8005) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) r7 = io_uring_setup(0x142b, &(0x7f0000000040)={0x0, 0x2150, 0x80, 0x4, 0xce, 0x0, r4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r7, 0xea4, 0xcd74, 0x1e, 0x0, 0x15) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2040) syz_fuse_handle_req(r8, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xfffffffffffffffd, {0x4, 0x3, 0x3, 0x8, 0x0, 0x80, {0x5, 0x80000000000, 0x1, 0xfffffffffffffffa, 0x16f, 0xdbf, 0x10, 0x0, 0x0, 0x8000, 0x2, r10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r8, &(0x7f0000000380)={0x50, 0x0, r9, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x41}}, 0x50) 2m34.621691681s ago: executing program 3 (id=821): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x98d0d9, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000)='udf\x00', 0x0, &(0x7f0000000380)='acl') 2m34.553188952s ago: executing program 3 (id=822): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) (async) listxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) 2m34.25269162s ago: executing program 3 (id=823): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd720000000000390000000800030086fa610005f9a41bb6fa37476ba9f81c9573add70f47e229b268f0d861c0", @ANYRES32=r2, @ANYBLOB="1c005a801800018014000300010000000100270301010600e1028300"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_open_dev$video4linux(&(0x7f0000000100), 0x100000000007, 0x42) accept4$alg(r4, 0x0, 0x0, 0x80000) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x10040) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10000, 0xffffff87}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x8001, 0x400056}]}}}}}}}, 0x0) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 2m34.19992955s ago: executing program 32 (id=823): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd720000000000390000000800030086fa610005f9a41bb6fa37476ba9f81c9573add70f47e229b268f0d861c0", @ANYRES32=r2, @ANYBLOB="1c005a801800018014000300010000000100270301010600e1028300"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_open_dev$video4linux(&(0x7f0000000100), 0x100000000007, 0x42) accept4$alg(r4, 0x0, 0x0, 0x80000) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x10040) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10000, 0xffffff87}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x8001, 0x400056}]}}}}}}}, 0x0) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 2m10.832850708s ago: executing program 2 (id=1151): r0 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r2, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) 2m10.700509843s ago: executing program 2 (id=1153): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0xf030000, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xfe46ac0cad8edeb8, 0x8000, '\x00', @ptr=0x20001102}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x169840, 0x40) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESOCT=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf250200000002000005000000000500130001"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x8080) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000005c0)={[0x5, 0x8, 0x7, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x600200000006, 0xffffdffffffffffe, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000001, 0x40000000009, 0x8000000000005, 0x800040068], 0x54000, 0x154592}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r9 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r9, 0x6a, 0x3, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_getnetconf={0x0, 0x52, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NETCONFA_PROXY_NEIGH={0x0, 0x5, 0xfffffb73}, @NETCONFA_PROXY_NEIGH={0x0, 0x5, 0x9}, @NETCONFA_PROXY_NEIGH={0x0, 0x5, 0x5}, @NETCONFA_RP_FILTER={0x0, 0x3, 0x4}, @NETCONFA_PROXY_NEIGH={0x0, 0x5, 0x4}, @NETCONFA_RP_FILTER, @NETCONFA_IFINDEX={0x0, 0x1, r8}, @NETCONFA_FORWARDING={0x0, 0x2, 0x4}]}, 0x40}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000080)={'veth0_to_hsr\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r10, &(0x7f0000000240)=[{&(0x7f0000000280)="c0a1852a6a8e", 0x6}, {&(0x7f0000000040)="a43b2eaab4feffffff0088a89ce0", 0xe}, {&(0x7f0000000100)="1e4d4e2d", 0x4}], 0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m10.43905386s ago: executing program 2 (id=1162): clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x0, 0x989680}, 0xfffffffffffffffe) (async) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x0, 0x989680}, 0xfffffffffffffffe) syz_emit_ethernet(0x30, &(0x7f0000000080)={@empty, @remote, @val={@val={0x88a8, 0x2, 0x1, 0x4}, {0x8100, 0x7, 0x1, 0x2}}, {@generic={0x8, "c0c25bd3cc20d87a308173add0f26031c06443e592d8d7abb061"}}}, 0x0) 2m10.392184313s ago: executing program 2 (id=1164): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) kexec_load(0x3, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e4571520", 0xad, 0x5, 0xffffffff}, {0x0, 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0", 0x39}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d", 0x8b}], 0x4}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe186347", 0x16}], 0x2, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe186347", 0x16}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) memfd_create(&(0x7f0000000880)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) 2m10.170533063s ago: executing program 2 (id=1173): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@gettaction={0x18, 0x32, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000880)={0x0, &(0x7f0000000400)=[@uexit={0x0, 0x18, 0x4}, @cpuid={0x64, 0x18, {0x400000, 0x101}}, @wr_crn={0x67, 0x20, {0x2, 0x3}}, @nested_load_syzos={0x136, 0x108, {0x1, 0xf3, [@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x27, 0x9, 0x1, 0x4}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area, 0x7, 0x5, 0x4}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x4da, 0x80, 0x3}}, @wrmsr={0x65, 0x20, {0x95f, 0x10000}}, @in_dx={0x69, 0x20, {0xaa41, 0x1}}]}}, @wrmsr={0x65, 0x20, {0x883, 0x4}}, @cpuid={0x64, 0x18, {0x45f4, 0x7fffffff}}, @set_irq_handler={0xc8, 0x20, {0x5d, 0x1}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x42, 0x6, 0xf9, 0x1}}, @wr_drn={0x68, 0x20, {0xfffffffffffffff9, 0xe89}}, @wr_crn={0x67, 0x20, {0x4, 0x51fb}}, @wr_drn={0x68, 0x20, {0x1, 0x3}}, @in_dx={0x69, 0x20, {0xadc9, 0x1}}, @rdmsr={0x66, 0x18, {0x9b3}}, @wr_crn={0x67, 0x20, {0x2, 0x5}}], 0x2b0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000940)=[@text16={0x10, &(0x7f00000008c0)="66b9800000c00f326635000800000f30f4baf80c66b818c4d08466efbafc0cedf30fbd99d700660f3a171206baf80c66b8af5a588f66efbafc0cb0bcee66b91c0200000f320f00910000440f20c0663501000000440f22c036660fe7930f00", 0x5f}], 0x1, 0x0, &(0x7f0000000980)=[@dstype0={0x6, 0x7}], 0x1) r1 = socket$alg(0x26, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x11) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) io_submit(0x0, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340), 0x41}]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000080)=0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) 2m9.882278067s ago: executing program 2 (id=1179): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x22043, 0x69) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x2, 0x2, 0x4, 0x3, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x1, 0x1, 0x3, 0x9}}) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x40d, 0x70bd28}, 0x20}}, 0x20008851) (async) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x40d, 0x70bd28}, 0x20}}, 0x20008851) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000001700010324bd7002fadb09258f923601"], 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14010000000000000000000000000a48000000090a010400000000000000000100f4f031144fca6b7a4e287932000008000a4000000000090002725f053ac8584da7e49e0073797a32000000000900010073797a302cb00000000008000540000000210c0009800800020000000000000000000000000a000000000000000000000000000000000033054408c23c22822c35b8d760745034ce8855d880c7b479c507d90aaf7e75fa97000047b37b"], 0x70}}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x0, 0x8}) 2m9.878456774s ago: executing program 33 (id=1179): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x22043, 0x69) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x2, 0x2, 0x4, 0x3, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x1, 0x1, 0x3, 0x9}}) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x40d, 0x70bd28}, 0x20}}, 0x20008851) (async) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x40d, 0x70bd28}, 0x20}}, 0x20008851) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000001700010324bd7002fadb09258f923601"], 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14010000000000000000000000000a48000000090a010400000000000000000100f4f031144fca6b7a4e287932000008000a4000000000090002725f053ac8584da7e49e0073797a32000000000900010073797a302cb00000000008000540000000210c0009800800020000000000000000000000000a000000000000000000000000000000000033054408c23c22822c35b8d760745034ce8855d880c7b479c507d90aaf7e75fa97000047b37b"], 0x70}}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x0, 0x8}) 1m48.032378601s ago: executing program 0 (id=1494): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async) sendto$inet6(r1, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) (async) shutdown(r1, 0x1) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000005000000a30c03b5"]) 1m48.031967334s ago: executing program 0 (id=1495): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x48002, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x19, 0x0, &(0x7f0000000280)) close(r1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) 1m47.961831949s ago: executing program 0 (id=1496): syz_open_dev$media(&(0x7f00000012c0), 0x8000066, 0x660002) 1m47.961402095s ago: executing program 0 (id=1497): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@redirect_dir_off}]}) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x1100001, &(0x7f0000000640)={[{@huge_never}, {@inode64}, {@huge_advise}, {@mpol={'mpol', 0x3d, {'bind', '=relative', @void}}}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x8000000000000000, 0xb3f, 0x3, 0x40000000000001a, 0x6, 0x6, 0xffffffffffffffff, 0x100fff}) chdir(&(0x7f0000000140)='./file0\x00') symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}]}, 0x48}}, 0x0) 1m47.652687823s ago: executing program 0 (id=1502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = mq_open(&(0x7f0000000000)='{~\x00', 0x80, 0x1c5, &(0x7f0000000100)={0x5cf, 0x18, 0xffffffffffffff7f, 0x5}) mq_notify(r1, &(0x7f00000002c0)={0x0, 0xe, 0x4, @thr={&(0x7f0000000140)="05af930da8c5f7f1ba6b1eb5ff756d5f316e9aefb65821fbf710440d8c44ebd943e17050dbb5e5efeb64ad8450f96b7a96c852e90a0ee65a25641ab42e3ccabcf7b709a551bb5b64a420aba8b28f09328e05175c71604b0e3929a19c4113ba02f4d1b3af9553a9f475facc49d8000ba7180106942609148517c7c1b7cb5f5c3f10446cbb37de58f01f89b359f4d454ddffdd661a82d26eed7261862c", &(0x7f0000000200)="beab25f58859b9205115b8af504ea1d6898f08126703d42c2d7e7393d0ab3aac5420071f37a8eae6c9a031a86319ce62c55e49ec117d46f6731d597a592bc45831c45f837dd2df01f31f67260033cabdb33fe947ea03cdc4fbc40847aba94360e3b658a2e14d142a3d35affeee7a59580397eac78159ffd165499810286f5a09257ea9908925e217ad2f7e"}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1802000043000701fefffffffcdbdf25037c000004004580000201"], 0x218}}, 0xc000) r3 = dup3(r1, r2, 0x80000) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000c00)={0x0, 0x0, 0x20, 0x16, 0x117, &(0x7f0000000800)="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"}) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xf0b, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x10, '\x00', 0x5, 0x40000003, 0x200, 0x8001}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4005820) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1m47.222245146s ago: executing program 0 (id=1506): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4004, 0xfffffffd}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000004200010a"], 0x18}}, 0x890) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f00000000c0)=0xa) 1m47.172133709s ago: executing program 34 (id=1506): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4004, 0xfffffffd}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000004200010a"], 0x18}}, 0x890) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f00000000c0)=0xa) 1m36.591921893s ago: executing program 1 (id=1715): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00') lseek(r1, 0x20000000000002, 0x1) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000080)={0x3, 0x3ff, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xe, 0x9}) syz_open_procfs(r2, &(0x7f0000000100)='net/rt_acct\x00') ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffff9, 0x80, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) close_range(r0, r0, 0x0) 1m36.469740378s ago: executing program 1 (id=1716): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000040)={{0x8, 0x4}, 0x100, './file0\x00'}) (async) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x6e) r2 = accept4(r1, 0x0, &(0x7f0000000240), 0x80000) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x6, &(0x7f0000000280)=[{0x0, 0xf, 0x5, 0x4}, {0x8, 0x3, 0xb8, 0x6}, {0x0, 0x5, 0xc, 0x5}, {0xc8eb, 0x7f, 0x9, 0x2}, {0x3, 0x6, 0x7f, 0xfffffffd}, {0x1000, 0xd4, 0x6, 0x9343}]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000300)={0x10003, 0x1, 0x60000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) r3 = openat$cgroup_ro(r0, &(0x7f0000000340)='blkio.bfq.io_serviced\x00', 0x0, 0x0) (async) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvfrom$x25(r4, &(0x7f0000000380), 0x0, 0x40012023, 0x0, 0x0) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0xbd72e000) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x1e4, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x40105) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x1, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf9}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1b}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000780)='0000:00:10.0\x00', 0xd) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x480, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r6, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048020}, 0xc041) (async) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000980)='/sys/power/mem_sleep', 0x20000, 0x100) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) r9 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000000ac0)={0x2, {0x2, 0x91b1, 0x2, 0x6, 0xffff, 0x4}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x81) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000b40)={0x8b, 0x1, 0x0, 0x2}) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000b80), r10) (async) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0xa8, r6, 0x0, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x10, 0x39}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "0798f73f3cea5e68c6463f0683a777ac"}, @NL80211_ATTR_PMK={0x14, 0xfe, "ff85093d649f084ba19a588f0e62d10a"}, @NL80211_ATTR_PMK={0x14, 0xfe, "38ef588a9058d36a24bd765414d34914"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "3dbaf68579b6959f29e4529120f73d12"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "66b57d7df4265c6abaa7add56a932673"}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24040001}, 0x8000) (async) sendto(r4, &(0x7f0000000d40)="2d8a9fe135cd5c6641c3871b9a4d14163f4c03cb34eca6f5e96768b13f3ed534fa9c509d6621fabe402c6033b1ca4cfe97be7b42e3d62d499650dd9c4b1cd4e20bb97c6a43f73c801de1f9dd7128e4982f9000b04d7d74d7afca2fd9a2d125f234636f9e1432dd5cb8ec230f3381047b998b8680be18e9ab3d8ac55f0f98e850642824b23a6450954209bcc9", 0x8c, 0x14, &(0x7f0000000e00)=@l2={0x1f, 0x765, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0x80) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000e80)={0x4b, 0x1, 0x4, 0x0, 0x2}) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r5, 0x800455d1, &(0x7f0000000ec0)) mq_timedsend(r3, &(0x7f0000000f00)="c0d402fefce3ad7b2c5933e6cfa0dfa564cf60c934ea8487bfe0c20e98d8aa640f030216159da7be4df0d92f592de2fc7c1a0759c454a06038043b801d021a2be19e3064d5edc5d0037764bb6570d42a7a9b6f4780e054beaca2a21b53445408638122dfbf3dba0e8e1a606013c912e8403c057712595b0a844b67b920b2aeff02028edd9e7c24305f6d432b46f9f4d74b712bef38dacd88ba71a3d0a9b9178eadd4ae269336fcea6338cd6b62a14d13c013cb933091662a9757a6e3d969e943cd23d8dc555f0379a98bdc09c46ab66f32a6ed", 0xd3, 0x7, &(0x7f0000001000)={0x0, 0x3938700}) 1m36.469516832s ago: executing program 1 (id=1717): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) mprotect(&(0x7f00005cc000/0x1000)=nil, 0x1000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000380)={&(0x7f0000000280)=""/253, 0xfd, 0x2, 0x4}) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) 1m34.649668203s ago: executing program 1 (id=1750): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x7f9f, 0x0) ioctl$I2C_PEC(r2, 0x708, 0x2) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000380)={0x1, 0x77, 0x0, 0x0}) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYRES32=r0], 0x34}}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0xf01c, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0xfffffffe, {0x2a00, 0x80010000, 0x0, 0x400, 0x0, 0x0, 0x0, 0x23, 0x8, "fee8a2ab791b5e3ed1e00d96072000001ee36327bebe983af96d80b8785d9600010000000003000094d75396dccd0ff600000000a81b00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x1]}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd29, 0xfffefffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cc40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xdab21e441a2f3b7}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd414}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}]}, 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x4000) 1m34.602261665s ago: executing program 1 (id=1752): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) accept4$llc(r0, 0x0, 0x0, 0x80000) 1m33.681469959s ago: executing program 1 (id=1773): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x17) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r0, 0x4) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) (async) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000940)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffe00000000003, 0x7fb, 0x0, 0x200, 0x0, 0x28, 0x4e0, 0xd54bf2b9c9a9a4fb}) (async) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000280)) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x4, 0x3, 0x0, 0x2, 0x2}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x2, 0x0, 0x1, 0x2}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000001300)={0x6, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x0, "d9ec5e161cc2eb"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000004300)={0x0, [{r184, r321}, {r374, r382}, {r248, r289}, {r369, r376}, {r182, r329}, {r75, r291}, {r358, r108}, {r6, r301}, {r161, r389}, {r367, r308}, {r365, r253}, {r328, r141}, {r378, r280}, {r392, r138}, {r176, r10}, {r356, r177}, {0x0, r83}, {r88, r81}, {r173, r387}, {r292, r78}, {r124, r384}, {r107, r119}, {0x0, r308}, {r145, r9}, {r347, r140}, {r99, r276}, {r364, r144}, {0x0, r105}, {r197, r382}, {r118, r96}, {r132, r377}, {r212, r215}, {r381, r329}, {r95, r201}, {r8, r119}, {r237, r162}, {r323, r240}, {r316, r50}, {r84, r138}, {r184, r72}, {r88, r58}, {r304, r269}, {r28, r131}, {r218, r66}, {r225, r25}, {r211, r298}, {0x0, r249}, {r165, r229}, {r350, r89}, {r11, r48}, {r288, r54}, {r40, r66}, {r204, r112}, {r320, r210}, {r16, r15}, {r174, r391}, {r99, r64}, {r307, r203}, {r285, r255}, {r171, r220}, {r362, r68}, {r221, r348}, {r106, r294}, {r367}, {r378, r282}, {r82}, {r151, r191}, {r392, r59}, {r212, r298}, {r209, r355}, {r86, r46}, {r297, r319}, {r354, r54}, {0x0, r166}, {r309, r189}, {r258, r31}, {r147, r44}, {0x0, r391}, {0x0, r15}, {r323, r61}, {r113, r157}, {r158, r170}, {r95, r269}, {r365, r286}, {r311, r148}, {r295, r340}, {r156, r72}, {r396, r397}, {r60, r9}, {r143, r233}, {r185, r391}, {r154, r50}, {r196, r83}, {r139, r282}, {r381, r357}, {r279, r42}, {r33, r138}, {r130, r85}, {r156, r146}, {r216, r351}, {r41, r387}, {r309, r59}, {r188, r229}, {r152, r324}, {r100, r245}, {r343, r359}, {r209, r201}, {r8, r146}, {r169, r361}, {r336, r61}, {0x0, r299}, {r163, r12}, {r275, r135}, {r23, r168}, {r77, r114}, {r57, r110}, {r200, r385}, {r228, r306}, {r20, r153}, {r246, r144}, {r79, r137}, {r104, r349}, {r300, r91}, {r45, r39}, {r117, r201}, {r244, r160}, {r52, r7}, {r254, r389}, {r244, r205}, {r94, r101}, {r90, r22}, {r118, r387}, {r380}, {r362, r278}, {r92, r385}, {r77, r128}, {r264, r213}, {r145, r257}, {r216}, {r204, r298}, {r94, r34}, {r116, r291}, {r149, r56}, {r126, r7}, {r63, r384}, {r71, r259}, {r272, r376}, {r345, r321}, {r30, r127}, {r159, r335}, {r260, r39}, {r327, r7}, {r18, r67}, {r350, r22}, {r103, r251}, {r97, r394}, {r250, r298}, {r216, r215}, {r192, r377}, {r92, r195}, {r90, r370}, {r378, r74}, {r179, r359}, {r339, r74}, {r182, r298}, {r248, r114}, {r227, r371}, {r71, r42}, {r109, r263}, {r196, r15}, {r102, r80}, {r190, r280}, {r270, r177}, {r315}, {0x0, r98}, {r196, r253}, {r336, r395}, {r53, r155}, {r390, r153}, {r328, r74}, {r232, r9}, {r390, r91}, {r75, r332}, {r362, r170}, {0x0, r319}, {r270, r269}, {r214}, {r358, r394}, {r270, r137}, {r180, r284}, {r23, r379}, {r136, r219}, {r212, r61}, {r378, r298}, {r202, r353}, {r65, r37}, {r277, r247}, {r75, r205}, {r318, r110}, {r325, r46}, {r8, r119}, {r71, r70}, {r21, r338}, {r386, r98}, {r374, r83}, {r352, r119}, {r24, r222}, {r188, r384}, {r339, r78}, {0x0, r101}, {r126}, {r381, r9}, {r275, r342}, {r333, r112}, {r24, r245}, {r99, r177}, {r49, r164}, {r14, r267}, {r242, r31}, {r55, r166}, {r380, r280}, {r214, r370}, {r116, r168}, {r262, r384}, {r106, r353}, {r256, r274}, {r51, r278}, {0x0, r238}, {r234, r224}, {r118, r87}, {r239, r224}, {r123, r375}, {r262, r348}, {r373, r22}, {r13, r269}, {r147, r282}, {r188, r306}, {r378, r387}, {r55, r193}, {r129, r226}, {r293, r370}, {r266, r162}, {r28, r261}, {r302, r359}, {r179, r157}, {r147, r322}, {r111, r195}, {r49}, {r360, r56}, {r62, r25}, {r35, r306}, {r252, r226}, {r95, r321}, {r290, r294}, {r331, r189}], 0x9, "a0fd7bed43b376"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000002c0)={{r292, 0x3, 0x7, 0x8, 0x2, 0x9, 0xfffffffffffffffb, 0x3, 0x1000, 0x9, 0x1ff, 0x10, 0x100000000, 0x2a926f56, 0xf}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000005300)={0x6, [{r552, r324}, {r380, r26}, {r176, r509}, {r270, r417}, {r20, r506}, {r461, r503}, {r343, r135}, {r468, r484}, {r495, r537}, {r206, r421}, {r117, r439}, {r147, r463}, {r352, r501}, {0x0, r545}, {r250, r287}, {r398, r486}, {r311, r501}, {r491, r523}, {r77, r36}, {0x0, r512}, {r95, r133}, {r77, r479}, {r79, r150}, {r260, r416}, {r345, r344}, {r374, r67}, {r262, r19}, {r532, r125}, {r197, r278}, {r547, r372}, {r129, r473}, {r120, r543}, {r461, r551}, {r47, r29}, {r99, r59}, {r358, r291}, {r313, r424}, {r129}, {r194, r439}, {r92, r496}, {r182, r164}, {r429, r172}, {r305, r187}, {r490, r298}, {r49, r133}, {r541, r144}, {r356, r142}, {r559, r332}, {r47, r561}, {r69, r183}, {r555, r581}, {r492, r32}, {r396, r524}, {r508, r460}, {r403, r438}, {r173, r334}, {r235, r238}, {r487, r303}, {r567, r26}, {r587, r413}, {r410, r434}, {r585, r483}, {r102, r273}, {r586, r452}, {r522, r257}, {r489, r452}, {r505, r560}, {r443, r42}, {r513, r150}, {r407, r542}, {r534, r486}, {r437, r222}, {r410, r570}, {r402, r575}, {r383}, {r165, r370}, {r426, r330}, {r268, r475}, {r511, r348}, {r450, r198}, {r504, r452}, {r538, r539}, {r589, r306}, {r345, r148}, {r347, r545}, {r453, r36}, {r461, r183}, {r574, r201}, {r468, r591}, {r185, r137}, {r590, r243}, {r518, r520}, {r527, r195}, {r178, r560}, {r331, r42}, {r477, r155}, {r281, r314}, {r129, r222}, {r390, r236}, {r30, r419}, {r111, r514}, {r63, r344}, {r218, r213}, {r199, r578}, {r529, r148}, {r285, r157}, {r517, r157}, {r381, r346}, {0x0, r310}, {r482, r330}, {r497, r87}, {r223, r478}, {r104, r326}, {r566, r546}, {r264}, {r465, r387}, {r447}, {0x0, r577}, {r553, r519}, {r502, r572}, {r250, r423}, {r11, r469}, {r47, r433}, {r426, r436}, {r474, r243}, {0x0, r133}, {r207, r155}, {r513, r247}, {r99, r91}, {r582, r523}, {r309, r442}, {r499, r91}, {r214, r15}, {r576, r34}, {r482}, {r459, r488}, {r480, r485}, {r435, r494}, {r487, r431}, {r526, r271}, {r540, r319}, {r550, r54}, {r43, r140}, {r457, r583}, {r422, r265}, {r563, r421}, {r388, r444}, {r113, r530}, {r228, r375}, {r579, r434}, {r116, r286}, {r186, r531}, {r82, r115}, {r565, r545}, {0x0, r70}, {r211, r471}, {r403, r571}, {r409, r466}, {r445, r101}, {r467, r231}, {r190, r543}, {r414}, {r472, r231}, {r304, r317}, {r430, r68}, {r507, r50}, {r590, r142}, {r476, r433}, {r455}, {r258, r183}, {r446, r580}, {r554, r76}, {r63, r404}, {r38, r73}, {r536, r451}, {r120, r140}, {r432, r70}, {r584, r37}, {r102, r419}, {r197, r449}, {r481, r175}, {r399, r181}, {r318, r15}, {r199, r167}, {r163, r46}, {r445, r533}, {r562, r226}, {r482, r217}, {r154, r257}, {r400, r535}, {r499, r368}, {r549, r420}, {r97, r27}, {r283, r406}, {r441, r464}, {r489, r303}, {r336, r261}, {r84, r208}, {r490, r500}, {r283, r401}, {0x0, r229}, {r333, r514}, {r411, r142}, {r522, r80}, {r422, r189}, {r320}, {r129, r363}, {r171, r428}, {r312, r516}, {r415, r284}, {r515, r366}, {r573, r131}, {r544, r236}, {r556, r205}, {r447, r87}, {r51, r500}, {r508, r433}, {r207, r308}, {r418, r427}, {r568, r296}, {r425, r528}, {r230, r166}, {0x0, r493}, {r33, r379}, {r337, r412}, {r507, r183}, {r272, r393}, {r235, r160}, {r246, r440}, {r405, r557}, {r525, r475}, {r448, r241}, {r409, r542}, {r75, r195}, {r470, r588}, {r517, r408}, {r453, r17}, {0x0, r299}, {r462, r551}, {r558, r172}, {r28, r389}, {r309, r122}, {r498, r172}, {r565, r581}, {r564, r25}, {r118, r346}, {r454, r548}, {r121, r458}, {r569, r387}, {r134, r514}, {0x0, r421}, {r587, r229}, {r510, r205}, {r556, r48}, {r365, r456}], 0x81, "65c3b8f64cf742"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000002300)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r593}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {0x0, r306}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r592}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r93}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r276}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r341}, {}, {}, {}, {}, {}, {}, {}, {r378}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r521}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r294}], 0x3, "f4af94f12d722a"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000003300)={r253, r594, "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", "3a60dd08f19262ca9df4a33f29c8e47ae1f2d7fa812b4a9ad6985764e46296a1128751e08f8f6458539bb8d7dc0ae88783e5dc2176bd038a866fac7c525318ddb79a6a583f8c426dfee5817bf97a438e738582b7349106ddbdf7cafb16daa117db36e4f5092905a97357bfafa806b692d6ae467268750fb59c4b383bf83cb09b4d9ac277a17e766bef564f7e7a9b9f68757fae0da104854c7b65a2bc5d70adcf515cc878cbb7e4c3d6516d40eff4976dd75583dbd41501831d9f50b2d355f9d0142a071bc033bd1bd2e7450203b7f496e45e29c3959a8a5a08a73243bebeb9ba337a336b51f3cc7721f4c8265b3cb6b7dd118031650acb8ebb0925623eb1967faef1556e90453d6d90c8ae7b6885a19fc20014e2f72eeefc3176b58334e6ec9e3aab1c2a21633f0995eca4aac465f4f684e3f6f10960fdc01b3eb34d59df45cef946450cc24f9f321ce2e88d40181067d9ac4afe496cff6d92b685636f59272f3b736bdd1cf1d00ddae4b068fe96b999934d835d823018c0be803ab9198d73ecdca44b92200da767d94cc21f15cb7ff4f8beb8a96569de039411e76c2a268ab0f73bbace3118dc03cbe76183e675696b287c70f39458fad4c42ee56c9e1bdd35b81b33d18688a1d1054198e94a4f3308ea50b3e5b3f245f306d6b1f42f8fa21d3157aa287ba75ea03786e64f21759781db3902431a44052babe0d54897a21d1543d66ad8665e1e1795e0b824b38e643f9d2d63734a361d1a92b5d85a69d19601f351847a273e16539e3e12cb1765a7174549b4047cc7794880a5f2c81240f1fae741bdd030769c6c6cbc5d40437ed47124ddc5a21b39fbc92b4e6e7aba58c84ac7b6b43b91ac369d6135f5ae2c54d40922126ded08678ba6a5314994ca9538cc21e52e12ece6896c5b765716c40215f7d1b8c6c14f24982dd686c915732da8368f6217f735a8d6dce8168de0e76eb5fd367af3ee6037f59afa96e2785d878d44a20d727a1d9a026e2c83dd8e7355adb4e3ff8e9b46963e3d1c3e7c9026fbea80a2adc85563295e354a55552b90cff7179ddf654c2c00f4da06d94343c0ce44e8dea3b1cefaff08dc7d1921c53c2e0ff56ac7b23fee67e23cb7e5928b79ac5f7869a44923a60752ef01d8b8db125d687b601c151a14b2981ffbd081d18ad01fda9178b506f7493f9a3d48cc4d05c9f8cf0c677222dbfc045776921f9bf2d9fe82627a4c56e758a78c91d9cad7005cf78a4adb99ac6a80a8671417b82a9518f20eb43f3d8f50487021934adc0dfabe8bbdaf17d73873e9a6a4aa0fc3b1f60ad00e3e16c58811ef56b410bf13092d839582e3d9616163351568926d79fc3a0f9df070a2570fe03045d07eabfee00e16212092256af4ab365bc0ee663df71be64189582f91aea9edfd188adf5e915ba5efe33f5a562ebe412cf24631c280521a7fef5357ad96650904bfc1685c29b8293a6d654f974626f5d3cc0a6386bfe01a64c8119d9838c79038e87d4fcfdcdbacb549c91d8afc16ecfb58c6b2cce86ab47b99d30b4590c27353d0a5e120a3462151fb1493bcd04afd74eb7b129163ef22de3ca6773fd881fa149a382eb6d22a57199bb0c6ed968c04723a41693433a9965deadbcf56c0ea80d347a526e3cf8f3c2f38586943b956c991f0c78513ef4eebb972fe6de807ae0f561361074f072fca7bf5eb04b8e0c20cb882037e39ce62f6cd5d399815f30d9ad2769d881ca5500e18c003dd8f60766bd7ea02c840c97646e24306c13857db34a2b737457c01fa30dd12421ef0e0d2411bd39e53f4d1bf04dc7f4556528cd6951e1408d412aaee0718b66946460ece5aa3ff55a4e0bab1456edc7ad8c9b4e12863ff4fe8f1f9158ece48c79f39dece06ce5526fadff5d7c62c57f69173ed26742145ae1bde5cb762cc197938577191b64e59a9e824e0728a09309ec562b7cf53d9f2059cd8ce92ff17480358b62e406436cb7fcaba2f7f89cf8240f9ea939ddff47312fa4546911112bd07f1ea6b73839fcf1827f76da0af17c0b10d6f3b029664ce3993d218b946bac5da7090c304b367cca580a342e12e4cde6f375aa03869984a5ccd56392a59801839d2447f73b602e78d56b2b1be431dccff406cdfa9e68d6a34dfd53a870104925bddfaab4181d94cc6fbf6730ccb3f1c2907a701d029f52b93b25d22545587bf59a7b8b6c1ecfdb18282d04cb98cf88858c156273e132b22aa5484eed0d3660101e5cd74ea3ce951658de00de056172777584de2cbcc1e5834848c3b9bc7a96cb24dbf312f52676876719c30773751207127cfbd7b95760fc10612dc0aacf86f7f350c88aca31fe4558b5cb9e8f6c829e69b907ebe794cb41a4fa795db34d299a0caf601809838ba26dee2b0fb0daae5c84c81acdec65345b039cb3d8ef2aa2b546eddba387782dfe1cbf7c23b9783603d1a4912bd184d9ffb5b52cd99facafda55ccde7a5aba3dab49001ffd087445ce78f932e0047fda80d702642eded7c753542fac3a93ad754ef47cf23264174020043e5a8bb98953a541502263d88c02a20e2e8690e88abf8a9cc80c01821b2c0576f9ac65094629b3a9e28215bd24dfc66e721cc9215fd2eeaeb1dfa35b3166dc23a3da8a98df32197e28fda3ebe695a4668391f24e6a0bdac28554c407747efc305d995c64e67703c891b8a378fedba67b7359d171e94ccb3a1c0c3227888724749eaedb110a36fcd46857147b73f8fc81f795f848ccf72aefa457f5b088cc92a13b81c75a1dee6d6053b9a12c826231d20be12622c1ffd2dd4193dc8982248f1b625ac0d1269877bb99989c252e086b9f3488a76f3e4cd6ab58ad256697d0af790ef6bc6991fb6d5f9d69210e2444c4dd1fa07b29f1616d005ddc6f205ae2d83a57efc5a0d0911e8c25f886ae0064f739006ea5c22643abaf758e4548a672f627a8321d3a7d307c60006aa1a9839eb939bef0e7c537bf0f2ed4fe664799e4c3dd3c7cab32080320dbf25a5fc3946714abce57e2a82dab91c8e559ba57dda9262ed6a09491a12336f0a4ba9a1c737a1967bbb9b81c4ffe9f30dd6d5173018457cbdde74b143413f2038909197897a8a5814bdd52a9b6108fcad5466c75fdfb6e81502452ca3e504f73b36e04705743e16e944e86fdd0955587235b3d163e8974aeddd39a8d83ce10440b124e9c007a17efd3fd2502df6be12d77382808a7bc7224a720703c2a8fe1d114b660629021dd5ed916f04fe544695b8a9d29fbbc70d99ce7ed9cd06e5c64f9b436cb89c30039b615fb673dceceadcdf859a1fed414369bca2c303aac260950dc5f1de1e870c8b306128cc77818797c7ffd7315ff4217b26caef557afb8961182f3dd4e0eed48f379670058b746f79dce34be6713b46b43065a016bfbc2ecf1fb5932366a8fb754a577892f413bb00efcb63cb53888f1131410c2fe46039881b2e31a7642c7e2d9d8a7189af712b2a3e33c544adf63cc595bd67631dbdf9eb8b88922531b9251f2135272ccc61922d4d8776588ff43843ef7f0b36d74d46de73fd6d43be1e4f4f808af5583ca4f082c404d49d72334fea69ebf1e2f39dc3059848ba39bf1a44e69ca9f794d23557f96290a76e92f32c308e0a0711e2e52b4bd152bc9ac6dfe52d58e1e005ed03139b69d80c04dae521bac10d6dc8dc6367a4756947ed0074fa37b14618b7e7772c1520df1c5b5b297f9c7b9b27c2ec2d57806e5910b976ab42f3752d7c8f6b90cb8f3fdf2242830e72790d33f17e0f9c5d32d9644d2cedc0aed7ba1ac2c37bf9772627030a1e8b950a75f86b2a1f65fcd9bc0799e5fb053f1b2b003fbe5fabd55227d70293ab46b16951f4683e910ae17feb50e330fe8b1e40f9aa14e7e93dd6d98741272e0f00c41b13892b7e413e00d09d78f7283e90308bb3ff8b00d036c14153b549159e5b049a0d2ef43b38997cc52912569b5d17fd8b64a83f158d43fc997159fe101918760259e9e2d69a7ad62c922f42d8ace3d1091675767ae41b383d9d8184231f835e29d20a9189b942ce08534c8dc2cc0c7c641ff9935e9bbf9b763e18f7e9d269c79645a9b94adb5fe5943d6086e6465d78ff6d2eeba0261732c20f2941f9cb81834511714efb827431df67d3ab98be7286aad3d9c3a6cd6bf9783db774843b6e31296b7a7d1d6c85db8f85eb19e228a697213ad62138a2a1ec93a0bbdecb44f026ba41f5f094395b35376b5715d6749a1a40a0e8656ec906795b5ccf9ccaa13ad2d2715f4b2aa6a66ca6f93dd54b94b8fb39666a01be7354fa00c068dbc27cc61f41bcf50bbbe53070495c81e7f179cad9313897a07eebaac5a7035cd79b485354c220210fa2324a3de725f9eb2341d33e95248f110ea2fc0c037a19a69b67a11c15f99580ad51326116b19befc7e23ed2adaa5dffeac65d3250cc57202b34005b66ce0aeb75513883a00e87d331a9ecadae33efa04d1d10b6def6ce07f578398aa98d7735fc820b427e9361e5dbc0aa67b19df25254e88687cc493fdfb073a394406be1478c8331d39eeea6ff6284af6968dbb2933404e3b1f1b06508743d5225349cd6fee325cff86d02facb9841ef331a306f727f00c927c5764a79575a820c944dd3d9e47d6663ab35c01cc8b762e9a98d8b210fa6a01d92cefd47f3d62ac37032d29521236f2eb607594dd7c8bbe14b42fcb46a66bb8397215f1492382a332b26a1d53288cc2ab1f7e68cd62667944e6d3509f9df0924c5294c27fb2405ee511e4f0e524da3ccaa7c7142e42b982cd014849551e31273b5ccfab08d23e6d9e0dc9e99388342225b6322f37e42328bc00f0d1f78b94dd2f4f90d97ec4a1fee079715c53bc7f43c490e39a7b4d94a42a01e04f21918ba48e0001885055e1ed43abb2e7b0b96b68eda19d602acbcef08b33aff3fe24c1fa812b6e690d1cc4c46ae1295fc6e94ea78ef51374b4ed2b6519262887625fa5792079743f49619c534448b7f6af5f432a98e9822e337cae02ddf6d117aa74f77dfa063a9455737e88c54240ba98d948130a37ee7df70996d4bfe47530a37c31003ce71e62592c8ee7623413291edc59cf2eeee3636882c526bd4138c109f380127868093b02e10f83a06adb95faf9f4cb01d02fe97bbb31f3f55bc200d82a747a38c125734beab4bdae9c51f3f7b81545cd037b3ec2a58fc1812777c1c84e349ea25b83bbd3bd297f4ace11faf52c2f635f7ede531d9c088b51297a8246837d4f8b663b5d40e55f65f3c359fb2434c79d1fa7befdf674431cc7e97bb184268c9075b323a0236ac1856d6bd2574901ad0bfb79989183abe7afa799db2e2197e4bc96fbd592dc4875d5fdf0a9884f9303dd625697d1fb5418176d236ded3537b7bfff2ce77d356db5e2199c1b49efed92215ce47620cca07a05068"}) (async) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000180)=""/64, 0x40}], 0x1, 0x9, 0x1) (async) r595 = socket$nl_generic(0x10, 0x3, 0x10) r596 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r595, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r596, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0x3c}}, 0x4000050) (async) r597 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r597, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x2c, 0x3f, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x37, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='qtr(4\x14\xd6\xbb\xa9\x19sm4)\x00'}]}]}, 0x2c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="000000000000000081104d5c07a720ba4d00000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) 1m30.489089851s ago: executing program 4 (id=1836): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x401, 0x100bf28, @empty, 0xfffffffd}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='team_slave_0\x00', 0x10) sendto$inet6(r1, 0x0, 0x0, 0x800, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000000000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d00000000000800220003"], 0x148}}, 0x0) 1m30.201511183s ago: executing program 4 (id=1837): open(&(0x7f0000000280)='.\x00', 0x0, 0xd4) (async) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0xd4) unshare(0x2a020400) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000040)=0x7fff) openat$cgroup_pressure(r2, &(0x7f0000000080)='memory.pressure\x00', 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) 1m30.199808417s ago: executing program 4 (id=1838): rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) (async) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) io_submit(0x0, 0x2, &(0x7f0000000300)=[0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x6, r0, 0x0}]) syz_open_dev$sndctrl(0x0, 0x0, 0x801) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0x5) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r4, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000006480)=ANY=[@ANYBLOB="1c00000027000100f8ffffffffffffff0c00008008003f00", @ANYRES32=0x0, @ANYBLOB], 0x1c}], 0x1}, 0x0) (async) sendmsg$netlink(r4, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000006480)=ANY=[@ANYBLOB="1c00000027000100f8ffffffffffffff0c00008008003f00", @ANYRES32=0x0, @ANYBLOB], 0x1c}], 0x1}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000400)={0x9, 0x5, 0x2, 0x2d19, r6}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000000)={r6, 0x75}, 0x8) chdir(&(0x7f0000000080)='./file0\x00') ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x2, "94c492eb0165203d36bec70800890100000000000000e1100a0000005900"}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x2, "94c492eb0165203d36bec70800890100000000000000e1100a0000005900"}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) userfaultfd(0x80801) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x3f, 0x69, 0xfd, 0x4}, {0x80a0000, 0xeeee8000, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x1, 0x2, 0x0, 0xff, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0x8, 0x8, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x41000, 0xfffc}, 0xddf8ffdb, 0x0, 0x100000, 0x110, 0x0, 0xf801, 0xeeee0000, [0x80000000, 0x0, 0x1, 0x1]}) (async) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x3f, 0x69, 0xfd, 0x4}, {0x80a0000, 0xeeee8000, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x1, 0x2, 0x0, 0xff, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0x8, 0x8, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x41000, 0xfffc}, 0xddf8ffdb, 0x0, 0x100000, 0x110, 0x0, 0xf801, 0xeeee0000, [0x80000000, 0x0, 0x1, 0x1]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) 1m29.555175428s ago: executing program 4 (id=1846): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000004c0)='%pB \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, r0, 0x3}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, r0, 0x3}, 0x50) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r4, &(0x7f0000ff7000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x65, 0x3, 0xd913, 0x81, 0x1}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}}}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x34}, 0x28) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1091, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') lseek(r11, 0x3, 0x0) (async) lseek(r11, 0x3, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') (async) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') sendfile(r10, r9, &(0x7f0000002080)=0x3a, 0x2) (async) sendfile(r10, r9, &(0x7f0000002080)=0x3a, 0x2) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r9, @ANYRES16=r9], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1c, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r12, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) mount(&(0x7f0000000640)=@sg0, &(0x7f0000000680)='./file0/../file0\x00', &(0x7f00000006c0)='nilfs2\x00', 0x100000, &(0x7f0000000700)='/proc/partitions\x00') (async) mount(&(0x7f0000000640)=@sg0, &(0x7f0000000680)='./file0/../file0\x00', &(0x7f00000006c0)='nilfs2\x00', 0x100000, &(0x7f0000000700)='/proc/partitions\x00') 1m29.301568294s ago: executing program 4 (id=1847): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0xa10001, 0x1, '\x00', @p_u8=0x0}}) r1 = socket$inet(0x2, 0x1, 0x100) open_tree(0xffffffffffffffff, 0x0, 0x101) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x107) socket$kcm(0x2b, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@allocspi={0x11c, 0x16, 0x1, 0x0, 0x0, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x36}, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}, [@lifetime_val={0x24, 0x9, {0x5, 0x7, 0x2, 0x7}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0x9}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f00000002c0)={0x0, "c81b67a7d165bfed7bb07026fbcaefa0d9e4fb6c90344e4d92cf9091da08e3ed", 0x10, 0x7, 0x0, 0x10, 0x2}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000140)={0x0, 0x8, [0x224, 0x401, 0x3, 0x34a, 0x3, 0x7]}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f0000080041007278650014003300776732"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000380)=0x4, 0x4) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000280)={0x1c, r4, 0x200, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) r9 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$instantiate(0xc, r9, &(0x7f0000000580)=ANY=[@ANYBLOB="75706461746520656372797074667320757365723a2f6465762f726164696f230000784777304a60747d783eea0cb1cdb43f201a6648239d0ab52098acc0061309149d7486a64871cc7b621617a4a625688d4e5c4744674314073d93c3c8a9d5b4ec57688b43a38eb74934b972937c8df7d39704ad7ba63761a025def30a8b6ab28ea2900182b3f7409acd03f504c378775bbcced2d976d8df3f1dc1323b5e77f24db79e188c2479bb01fa7ac8ead0995181fb95824d336d213fe0bc4649176b414224310a"], 0x22, 0xfffffffffffffff9) syz_emit_ethernet(0x94, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x72, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/90}}}}}}, 0x0) 1m29.131758019s ago: executing program 4 (id=1848): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000001b00)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000001b00)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) r1 = io_uring_setup(0x1b7b, &(0x7f0000000180)={0x0, 0xc89f, 0x4, 0x80007, 0xa2}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0x800, 0x1000, 0x3, 0xff, 0x8, 0x7, 0x9, 0xd}}) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) (async) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000100)={{0x9, 0xfffffffa}, {0x1, 0x1003ff}, 0xffdfffff, 0x1}) io_uring_enter(r1, 0x2219, 0x7721, 0x1a, 0x0, 0x0) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f00000000c0)={0x400, 0x400, 0x10, 0x80, 0x3, 0xbb5, 0x20, 0x1, {0xc, 0x3}, {0x1, 0x2, 0x400001}, {0x81, 0x10000}, {0x7fffffff, 0x2, 0x1}, 0x1, 0x180, 0x0, 0x3, 0x1, 0x0, 0x0, 0x7fff, 0x5, 0xdb, 0x0, 0x6, 0x8, 0x100, 0x1, 0x7}) (async) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f00000000c0)={0x400, 0x400, 0x10, 0x80, 0x3, 0xbb5, 0x20, 0x1, {0xc, 0x3}, {0x1, 0x2, 0x400001}, {0x81, 0x10000}, {0x7fffffff, 0x2, 0x1}, 0x1, 0x180, 0x0, 0x3, 0x1, 0x0, 0x0, 0x7fff, 0x5, 0xdb, 0x0, 0x6, 0x8, 0x100, 0x1, 0x7}) 1m29.054971827s ago: executing program 35 (id=1848): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000001b00)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000001b00)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) r1 = io_uring_setup(0x1b7b, &(0x7f0000000180)={0x0, 0xc89f, 0x4, 0x80007, 0xa2}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0x800, 0x1000, 0x3, 0xff, 0x8, 0x7, 0x9, 0xd}}) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) (async) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000100)={{0x9, 0xfffffffa}, {0x1, 0x1003ff}, 0xffdfffff, 0x1}) io_uring_enter(r1, 0x2219, 0x7721, 0x1a, 0x0, 0x0) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f00000000c0)={0x400, 0x400, 0x10, 0x80, 0x3, 0xbb5, 0x20, 0x1, {0xc, 0x3}, {0x1, 0x2, 0x400001}, {0x81, 0x10000}, {0x7fffffff, 0x2, 0x1}, 0x1, 0x180, 0x0, 0x3, 0x1, 0x0, 0x0, 0x7fff, 0x5, 0xdb, 0x0, 0x6, 0x8, 0x100, 0x1, 0x7}) (async) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f00000000c0)={0x400, 0x400, 0x10, 0x80, 0x3, 0xbb5, 0x20, 0x1, {0xc, 0x3}, {0x1, 0x2, 0x400001}, {0x81, 0x10000}, {0x7fffffff, 0x2, 0x1}, 0x1, 0x180, 0x0, 0x3, 0x1, 0x0, 0x0, 0x7fff, 0x5, 0xdb, 0x0, 0x6, 0x8, 0x100, 0x1, 0x7}) 1m18.644083944s ago: executing program 36 (id=1773): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x17) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r0, 0x4) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) (async) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000940)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffe00000000003, 0x7fb, 0x0, 0x200, 0x0, 0x28, 0x4e0, 0xd54bf2b9c9a9a4fb}) (async) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000280)) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x4, 0x3, 0x0, 0x2, 0x2}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x2, 0x0, 0x1, 0x2}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000001300)={0x6, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x0, "d9ec5e161cc2eb"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000004300)={0x0, [{r184, r321}, {r374, r382}, {r248, r289}, {r369, r376}, {r182, r329}, {r75, r291}, {r358, r108}, {r6, r301}, {r161, r389}, {r367, r308}, {r365, r253}, {r328, r141}, {r378, r280}, {r392, r138}, {r176, r10}, {r356, r177}, {0x0, r83}, {r88, r81}, {r173, r387}, {r292, r78}, {r124, r384}, {r107, r119}, {0x0, r308}, {r145, r9}, {r347, r140}, {r99, r276}, {r364, r144}, {0x0, r105}, {r197, r382}, {r118, r96}, {r132, r377}, {r212, r215}, {r381, r329}, {r95, r201}, {r8, r119}, {r237, r162}, {r323, r240}, {r316, r50}, {r84, r138}, {r184, r72}, {r88, r58}, {r304, r269}, {r28, r131}, {r218, r66}, {r225, r25}, {r211, r298}, {0x0, r249}, {r165, r229}, {r350, r89}, {r11, r48}, {r288, r54}, {r40, r66}, {r204, r112}, {r320, r210}, {r16, r15}, {r174, r391}, {r99, r64}, {r307, r203}, {r285, r255}, {r171, r220}, {r362, r68}, {r221, r348}, {r106, r294}, {r367}, {r378, r282}, {r82}, {r151, r191}, {r392, r59}, {r212, r298}, {r209, r355}, {r86, r46}, {r297, r319}, {r354, r54}, {0x0, r166}, {r309, r189}, {r258, r31}, {r147, r44}, {0x0, r391}, {0x0, r15}, {r323, r61}, {r113, r157}, {r158, r170}, {r95, r269}, {r365, r286}, {r311, r148}, {r295, r340}, {r156, r72}, {r396, r397}, {r60, r9}, {r143, r233}, {r185, r391}, {r154, r50}, {r196, r83}, {r139, r282}, {r381, r357}, {r279, r42}, {r33, r138}, {r130, r85}, {r156, r146}, {r216, r351}, {r41, r387}, {r309, r59}, {r188, r229}, {r152, r324}, {r100, r245}, {r343, r359}, {r209, r201}, {r8, r146}, {r169, r361}, {r336, r61}, {0x0, r299}, {r163, r12}, {r275, r135}, {r23, r168}, {r77, r114}, {r57, r110}, {r200, r385}, {r228, r306}, {r20, r153}, {r246, r144}, {r79, r137}, {r104, r349}, {r300, r91}, {r45, r39}, {r117, r201}, {r244, r160}, {r52, r7}, {r254, r389}, {r244, r205}, {r94, r101}, {r90, r22}, {r118, r387}, {r380}, {r362, r278}, {r92, r385}, {r77, r128}, {r264, r213}, {r145, r257}, {r216}, {r204, r298}, {r94, r34}, {r116, r291}, {r149, r56}, {r126, r7}, {r63, r384}, {r71, r259}, {r272, r376}, {r345, r321}, {r30, r127}, {r159, r335}, {r260, r39}, {r327, r7}, {r18, r67}, {r350, r22}, {r103, r251}, {r97, r394}, {r250, r298}, {r216, r215}, {r192, r377}, {r92, r195}, {r90, r370}, {r378, r74}, {r179, r359}, {r339, r74}, {r182, r298}, {r248, r114}, {r227, r371}, {r71, r42}, {r109, r263}, {r196, r15}, {r102, r80}, {r190, r280}, {r270, r177}, {r315}, {0x0, r98}, {r196, r253}, {r336, r395}, {r53, r155}, {r390, r153}, {r328, r74}, {r232, r9}, {r390, r91}, {r75, r332}, {r362, r170}, {0x0, r319}, {r270, r269}, {r214}, {r358, r394}, {r270, r137}, {r180, r284}, {r23, r379}, {r136, r219}, {r212, r61}, {r378, r298}, {r202, r353}, {r65, r37}, {r277, r247}, {r75, r205}, {r318, r110}, {r325, r46}, {r8, r119}, {r71, r70}, {r21, r338}, {r386, r98}, {r374, r83}, {r352, r119}, {r24, r222}, {r188, r384}, {r339, r78}, {0x0, r101}, {r126}, {r381, r9}, {r275, r342}, {r333, r112}, {r24, r245}, {r99, r177}, {r49, r164}, {r14, r267}, {r242, r31}, {r55, r166}, {r380, r280}, {r214, r370}, {r116, r168}, {r262, r384}, {r106, r353}, {r256, r274}, {r51, r278}, {0x0, r238}, {r234, r224}, {r118, r87}, {r239, r224}, {r123, r375}, {r262, r348}, {r373, r22}, {r13, r269}, {r147, r282}, {r188, r306}, {r378, r387}, {r55, r193}, {r129, r226}, {r293, r370}, {r266, r162}, {r28, r261}, {r302, r359}, {r179, r157}, {r147, r322}, {r111, r195}, {r49}, {r360, r56}, {r62, r25}, {r35, r306}, {r252, r226}, {r95, r321}, {r290, r294}, {r331, r189}], 0x9, "a0fd7bed43b376"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000002c0)={{r292, 0x3, 0x7, 0x8, 0x2, 0x9, 0xfffffffffffffffb, 0x3, 0x1000, 0x9, 0x1ff, 0x10, 0x100000000, 0x2a926f56, 0xf}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000005300)={0x6, [{r552, r324}, {r380, r26}, {r176, r509}, {r270, r417}, {r20, r506}, {r461, r503}, {r343, r135}, {r468, r484}, {r495, r537}, {r206, r421}, {r117, r439}, {r147, r463}, {r352, r501}, {0x0, r545}, {r250, r287}, {r398, r486}, {r311, r501}, {r491, r523}, {r77, r36}, {0x0, r512}, {r95, r133}, {r77, r479}, {r79, r150}, {r260, r416}, {r345, r344}, {r374, r67}, {r262, r19}, {r532, r125}, {r197, r278}, {r547, r372}, {r129, r473}, {r120, r543}, {r461, r551}, {r47, r29}, {r99, r59}, {r358, r291}, {r313, r424}, {r129}, {r194, r439}, {r92, r496}, {r182, r164}, {r429, r172}, {r305, r187}, {r490, r298}, {r49, r133}, {r541, r144}, {r356, r142}, {r559, r332}, {r47, r561}, {r69, r183}, {r555, r581}, {r492, r32}, {r396, r524}, {r508, r460}, {r403, r438}, {r173, r334}, {r235, r238}, {r487, r303}, {r567, r26}, {r587, r413}, {r410, r434}, {r585, r483}, {r102, r273}, {r586, r452}, {r522, r257}, {r489, r452}, {r505, r560}, {r443, r42}, {r513, r150}, {r407, r542}, {r534, r486}, {r437, r222}, {r410, r570}, {r402, r575}, {r383}, {r165, r370}, {r426, r330}, {r268, r475}, {r511, r348}, {r450, r198}, {r504, r452}, {r538, r539}, {r589, r306}, {r345, r148}, {r347, r545}, {r453, r36}, {r461, r183}, {r574, r201}, {r468, r591}, {r185, r137}, {r590, r243}, {r518, r520}, {r527, r195}, {r178, r560}, {r331, r42}, {r477, r155}, {r281, r314}, {r129, r222}, {r390, r236}, {r30, r419}, {r111, r514}, {r63, r344}, {r218, r213}, {r199, r578}, {r529, r148}, {r285, r157}, {r517, r157}, {r381, r346}, {0x0, r310}, {r482, r330}, {r497, r87}, {r223, r478}, {r104, r326}, {r566, r546}, {r264}, {r465, r387}, {r447}, {0x0, r577}, {r553, r519}, {r502, r572}, {r250, r423}, {r11, r469}, {r47, r433}, {r426, r436}, {r474, r243}, {0x0, r133}, {r207, r155}, {r513, r247}, {r99, r91}, {r582, r523}, {r309, r442}, {r499, r91}, {r214, r15}, {r576, r34}, {r482}, {r459, r488}, {r480, r485}, {r435, r494}, {r487, r431}, {r526, r271}, {r540, r319}, {r550, r54}, {r43, r140}, {r457, r583}, {r422, r265}, {r563, r421}, {r388, r444}, {r113, r530}, {r228, r375}, {r579, r434}, {r116, r286}, {r186, r531}, {r82, r115}, {r565, r545}, {0x0, r70}, {r211, r471}, {r403, r571}, {r409, r466}, {r445, r101}, {r467, r231}, {r190, r543}, {r414}, {r472, r231}, {r304, r317}, {r430, r68}, {r507, r50}, {r590, r142}, {r476, r433}, {r455}, {r258, r183}, {r446, r580}, {r554, r76}, {r63, r404}, {r38, r73}, {r536, r451}, {r120, r140}, {r432, r70}, {r584, r37}, {r102, r419}, {r197, r449}, {r481, r175}, {r399, r181}, {r318, r15}, {r199, r167}, {r163, r46}, {r445, r533}, {r562, r226}, {r482, r217}, {r154, r257}, {r400, r535}, {r499, r368}, {r549, r420}, {r97, r27}, {r283, r406}, {r441, r464}, {r489, r303}, {r336, r261}, {r84, r208}, {r490, r500}, {r283, r401}, {0x0, r229}, {r333, r514}, {r411, r142}, {r522, r80}, {r422, r189}, {r320}, {r129, r363}, {r171, r428}, {r312, r516}, {r415, r284}, {r515, r366}, {r573, r131}, {r544, r236}, {r556, r205}, {r447, r87}, {r51, r500}, {r508, r433}, {r207, r308}, {r418, r427}, {r568, r296}, {r425, r528}, {r230, r166}, {0x0, r493}, {r33, r379}, {r337, r412}, {r507, r183}, {r272, r393}, {r235, r160}, {r246, r440}, {r405, r557}, {r525, r475}, {r448, r241}, {r409, r542}, {r75, r195}, {r470, r588}, {r517, r408}, {r453, r17}, {0x0, r299}, {r462, r551}, {r558, r172}, {r28, r389}, {r309, r122}, {r498, r172}, {r565, r581}, {r564, r25}, {r118, r346}, {r454, r548}, {r121, r458}, {r569, r387}, {r134, r514}, {0x0, r421}, {r587, r229}, {r510, r205}, {r556, r48}, {r365, r456}], 0x81, "65c3b8f64cf742"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000002300)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r593}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {0x0, r306}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r592}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r93}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r276}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r341}, {}, {}, {}, {}, {}, {}, {}, {r378}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r521}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r294}], 0x3, "f4af94f12d722a"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000003300)={r253, r594, "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", "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"}) (async) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000180)=""/64, 0x40}], 0x1, 0x9, 0x1) (async) r595 = socket$nl_generic(0x10, 0x3, 0x10) r596 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r595, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r596, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0x3c}}, 0x4000050) (async) r597 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r597, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x2c, 0x3f, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x37, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='qtr(4\x14\xd6\xbb\xa9\x19sm4)\x00'}]}]}, 0x2c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="000000000000000081104d5c07a720ba4d00000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) 17.380942204s ago: executing program 7 (id=2882): arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) r0 = socket$inet(0x2, 0x3, 0x4) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000000)={0x3, 0x9}) 17.379510565s ago: executing program 7 (id=2883): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000080)={&(0x7f0000000000)=""/65, 0x41, 0x3, 0x8}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r3, 0x5, 0x70bd27, 0x8, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="b2"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r1, &(0x7f0000001b00)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x6, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) close(0x3) 17.239469717s ago: executing program 7 (id=2884): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x101242, 0x0) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x101242, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x241, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000004c0)={'c6xdigio\x00', [0x100, 0x4, 0x2, 0x200000c, 0xe, 0x7, 0x79, 0xffffffff, 0x3, 0x64, 0x2, 0x42f, 0x7, 0xffffffcd, 0x2, 0xfb, 0xfffffffb, 0x8007, 0xbe, 0x7ffffffc, 0x89, 0x6, 0x0, 0x21001e58, 0x10001, 0x78, 0x20000000, 0x7, 0x7fff, 0x100, 0xfffffff7]}) (async) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000004c0)={'c6xdigio\x00', [0x100, 0x4, 0x2, 0x200000c, 0xe, 0x7, 0x79, 0xffffffff, 0x3, 0x64, 0x2, 0x42f, 0x7, 0xffffffcd, 0x2, 0xfb, 0xfffffffb, 0x8007, 0xbe, 0x7ffffffc, 0x89, 0x6, 0x0, 0x21001e58, 0x10001, 0x78, 0x20000000, 0x7, 0x7fff, 0x100, 0xfffffff7]}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000240)={r6, @in={{0x2, 0x4e23, @multicast2}}}, &(0x7f0000000040)=0x84) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xf0b, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xa, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004001}, 0x4005820) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000580)={&(0x7f0000000300)=[r9], &(0x7f00000003c0)=[0x10, 0x78bf, 0x100000001, 0x8, 0x7a117dc2, 0x7f, 0x8f, 0x9, 0x7], 0x1, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000580)={&(0x7f0000000300)=[r9], &(0x7f00000003c0)=[0x10, 0x78bf, 0x100000001, 0x8, 0x7a117dc2, 0x7f, 0x8f, 0x9, 0x7], 0x1, 0x1}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r10, 0x4004ae99, &(0x7f0000000040)) (async) ioctl$KVM_SET_MP_STATE(r10, 0x4004ae99, &(0x7f0000000040)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a000100000000000000000081000000000000000000000008000f00fe"], 0x24}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a000100000000000000000081000000000000000000000008000f00fe"], 0x24}}, 0x0) r11 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x40) ioctl$SG_IO(r11, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x50, &(0x7f0000000440)=""/80}, &(0x7f0000000380)="259374c94982", 0x0, 0x2, 0x1c, 0xffffffffffffffff, 0x0}) (async) ioctl$SG_IO(r11, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x50, &(0x7f0000000440)=""/80}, &(0x7f0000000380)="259374c94982", 0x0, 0x2, 0x1c, 0xffffffffffffffff, 0x0}) 17.050942723s ago: executing program 7 (id=2886): prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x136) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x6020400) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) (async) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 17.05068867s ago: executing program 7 (id=2887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000240000000030800034000000001080001400000001414000000110001"], 0xdc}, 0x1, 0x0, 0x0, 0x8050}, 0x8040) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40186f40, &(0x7f0000000700)={0x8, 0x0, 0xb, 0x1, 'syz1\x00', 0x1}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@o_path={&(0x7f0000000080)='./file0\x00', r2, 0x4000, r0}, 0x18) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)=0x80) 16.989997652s ago: executing program 7 (id=2888): r0 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000300), 0x20040, 0x0) read$ptp(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="2eaa00000000100071101362419dea3d6600000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0x12) sendfile(r1, r2, 0x0, 0x101) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000005c0)='fd', 0x0, r5) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x2) fchdir(r7) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r9, r9) setpgid(0x0, r9) move_mount(r7, 0x0, r8, &(0x7f00000000c0)='./file0\x00', 0x14) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0x9362, 0x0) r10 = socket$inet6(0xa, 0x80000, 0x0) setsockopt$inet6_int(r10, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r10, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) mkdir(&(0x7f00000003c0)='./file0\x00', 0x136) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) 16.889476148s ago: executing program 37 (id=2888): r0 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000300), 0x20040, 0x0) read$ptp(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="2eaa00000000100071101362419dea3d6600000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0x12) sendfile(r1, r2, 0x0, 0x101) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000005c0)='fd', 0x0, r5) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x2) fchdir(r7) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r9, r9) setpgid(0x0, r9) move_mount(r7, 0x0, r8, &(0x7f00000000c0)='./file0\x00', 0x14) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0x9362, 0x0) r10 = socket$inet6(0xa, 0x80000, 0x0) setsockopt$inet6_int(r10, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r10, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) mkdir(&(0x7f00000003c0)='./file0\x00', 0x136) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) 5.680552034s ago: executing program 9 (id=3044): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400840, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000005a3081bb468e2cee8d5e910c97acfabc990482b2e146a4a572f1569ebacac52a10519d6075bc5069573458795af874ec1c78ee9ff48f51073fcc713a7f63c3a21533c471b6106459febb2406b9d5b4165d5f76c666638299dbc29d17cd3cfb7e3a2eb0954c3d51559e64b30e23", @ANYRES16=0x0, @ANYBLOB="000227bd7000fedbdf250c00000004000b00050008000100000014006e80040002000400020004000100040002000800090001ac0f00"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x54, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x36, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @default, 0x4001, @void, @val, @val={0x3, 0x1, 0xe}, @void, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x2, 0x6d}}, @void, @void, @void, @void}}]}, 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r4, 0x0, 0x0) syz_usb_disconnect(r3) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40045}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) acct(&(0x7f0000000040)='./file0\x00') 1.43061011s ago: executing program 6 (id=3081): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) (rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0003005801ce2d7a80325067209968320a7d9fbe8caabed0c361fd07aa263d9f977a5e5f6c2d63c0b9b5ae19d232b31297ab5349936944a01f0394fe32021b7b7ea283a1fb42e60210494938e1b5e4945f0e3a51366d149d85", @ANYRES16=r1, @ANYBLOB="05002bbd7400fcdbdf252e00000008000300", @ANYRES32=r2, @ANYBLOB="0a003400010101010101000004000801"], 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x4004084) (async) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e26, @local}, 0x10) (async) setsockopt$inet_int(r5, 0x0, 0x1, 0x0, 0x0) (async, rerun: 64) bind$alg(r4, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) (async, rerun: 64) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="fbd89b3e8977042b8d347071ecb9ced6ca30c62d075a011fd70630380f4fb526e74634260eaa7b3bddf26611e940db08172fad84fa1395", 0x37}, {&(0x7f0000000100)="24adae2b5c2fb0d06e", 0x9}], 0x2, 0x0, 0x60}, 0x34000051) 1.369875868s ago: executing program 6 (id=3084): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, 0x0) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r3, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r3, 0x2) ppoll(&(0x7f0000000000)=[{r3, 0x124a}], 0x1, 0x0, 0x0, 0x0) 1.310452262s ago: executing program 9 (id=3085): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000379000/0x18000)=nil, &(0x7f0000001100)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b8000001000f01725900bbc9000f302f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x65}], 0x1, 0x14, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff05"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, 0x1}) (async) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async, rerun: 64) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x5, 0x7f, 0x20, '\x00', 0x8}) (async, rerun: 64) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) (async, rerun: 64) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r10], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 64) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@multicast2, @remote, 0x0}, &(0x7f0000000200)=0xc) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl2\x00', r6, 0x8, 0x8000, 0x1, 0x6, {{0x20, 0x4, 0x0, 0x39, 0x80, 0x67, 0x0, 0x2, 0x4, 0x0, @remote, @remote, {[@end, @lsrr={0x83, 0x13, 0x9e, [@broadcast, @loopback, @broadcast, @private=0xa010100]}, @ssrr={0x89, 0x7, 0xf1, [@rand_addr=0x64010101]}, @noop, @noop, @timestamp_addr={0x44, 0x4c, 0xe2, 0x1, 0x2, [{@multicast1, 0x1000}, {@broadcast, 0x5}, {@remote, 0x7}, {@loopback, 0xa}, {@multicast2, 0xd1}, {@loopback, 0xfb}, {@remote, 0x6}, {@local, 0x6}, {@loopback, 0x80}]}, @noop, @noop]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf250f0000004000018008000100", @ANYRES32=r6, @ANYBLOB="080003000200000014000200766c616e300000000000000000000000080003000100000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="380068fd6f5eeb8a6100019f68899bf4e10004000000000000", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000300020000001400020064766d7270300000000000000000000008000100", @ANYBLOB="ae1a32529b0b9974fb8f8f", @ANYBLOB="0c00018008000100", @ANYRES32=r6, @ANYBLOB="4c00018008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="080003000100000008000100", @ANYRES32=r6, @ANYBLOB="6400018008000100", @ANYRES32=r6, @ANYBLOB="080003000200000008000300020000001400020069705f767469300000000000000000000800030003000000140002007465616d300000000000000000000000080003000000000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB], 0x148}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) writev(r0, &(0x7f0000001c00)=[{&(0x7f0000000bc0)="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", 0xa2a}], 0x1) 1.120523688s ago: executing program 9 (id=3089): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) lsm_get_self_attr(0x69, &(0x7f00000003c0)={0x0, 0x0, 0x7f, 0x5f, ""/95}, &(0x7f0000000280)=0x7f, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c34f138c39cd7a1676a6dbcf5efcdab0739baa7891c2e05e9385997f058e01b8986f41e61e12c83471ea067a458fedfce092007c2fc3e5ae99c6ae5bfd32679807434b8d2a16535bf9ab8455399346572161b10e9b6c57fbc2f0bb1b36e6d640f4e9abd3822502cab099687fe9a46399c8d09fdfb9c3eb3826726cade435314a6f6961e49d1c8e8eb56c7e35d861c628c170c3d1e182838e8335153f2d3a9f"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r2}, 0x20) fchdir(r1) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000300)={0x1, 0xff}, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000440)=@ccm_128={{}, "8dc1aa99192008d6", "1177cc1e8e41e7b4f15baaaa8c769139", "b60749aa", "65476e98c1c2dabc"}, 0x28) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYRES16=r6, @ANYBLOB="49600828fce2eeb72bd8b6470037f27fa67535935329a226d5d69cd7e47b27393ed0a478034d22f003ff125d81b5558e6984e71238334242c5292b18820e6d2ae79d2026d896be2b7f05f0d5d0f13bfbc9ce4794537450fac2a9b809d0bfb05219e1608f66cbb825675779eaae55540f4d07c7e1a8eddf8a69ad94c04cdd7c32fe3bb507b3e234d463fde436a629cd67d9cd6ff8c359741f", @ANYRES64=r4, @ANYRES64=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="00022bbd7008fcdbdf251200000008000100", @ANYRES32=0x0, @ANYBLOB="0cfc52e5306f17814509e48965e89e490022df2102e33e5f113b11df295939702bab0fabed41bfedf931d12a36964f2a7570c77aa526d1b77d33bdd9ba63e807545627d076ccd2170960c85821b1ed4381348b0e569d1e1c3eb90ccfa4c66311fea2aaa09c657ac93355d3f9bfcd87d518f9f2868cfcaeaf9a340490ba66805e1308b11a89e78af3f5653a0eb92f9e4eeb96bfc121c1ad7ce53ef66ad6fed46a1ffa39e796d4bb769d92893fdd4029ee6c2255da25ec42186b2a43961a74825362adfe96bc8b"], 0x1c}, 0x1, 0x0, 0x0, 0x4040001}, 0x40) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r9 = socket(0x11, 0x2, 0x1) bind(r9, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a78000000060a030400000000000000000a0000010900010073797a31000000004c000480480001800b000100746172676574000038000280240003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700000000000000000800024000000000080001004c4f47000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r10 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) r11 = syz_open_dev$vbi(&(0x7f0000000200), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r11, 0xc0205648, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f905, 0xffffbfff, '\x00', @p_u16=&(0x7f0000000680)=0x1}}) r12 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r12) r13 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r13, 0x1, 0xa, &(0x7f00006dbffc), 0xd) bind$bt_hci(r13, &(0x7f00000006c0)={0x1f, 0x0, 0x4}, 0x6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r10, &(0x7f0000000040)='stat\x00') 1.050905868s ago: executing program 9 (id=3091): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x1, 0x58, 0x66, 0x0, 0x7, 0x2f, 0x0, @loopback, @loopback}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x9, 0x1, 0x1, 0x1, 0x5, 0x9f}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x3, {{0xa, 0x2, 0x3, 0x2, 0x1, 0x1, 0x1, 0x4}, 0x2, {0x1, 0x8, 0x2, 0x1c, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@gettaction={0x14, 0x5a, 0x1, 0xffffffff}, 0x14}}, 0x24004000) flock(r1, 0x1) flock(r0, 0x1) 901.05482ms ago: executing program 9 (id=3094): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c728a85746d6f64653d303030303030303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=r0]) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x8400040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, 0x50) link(&(0x7f00000000c0)='./file0/../file0/file0\x00', 0x0) chown(&(0x7f0000000080)='./file0/../file0/file0\x00', 0xee00, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x7fffffff, {0x0, 0x3, 0x800000000000000, 0x0, 0xf7, 0x2, {0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 850.680183ms ago: executing program 8 (id=3095): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0xb5d5, 0xc000, 0xc, 0xa0002f7}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000000)=0x1201a, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c005001c2603600e1208000f0000000401a8001600a4000140000000007fffffffb94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x20004000) socket$key(0xf, 0x3, 0x2) io_uring_enter(r0, 0x2219, 0x7721, 0x14, 0x0, 0x0) 780.896254ms ago: executing program 8 (id=3096): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c0012800b0001006970766c616e00000c000280060002000100000008000500", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) syz_emit_ethernet(0x3c5, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x38f, 0x3a, 0xff, @mcast1, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a508020000ebf04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bcfbbb7d71138537d68e2d242c6393a9f3cc271a9ff09a48b5b303f400"/87}, {0xe, 0x16, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a02744000000000000000000000097ef342bc641b51f87841dae06119824f756c06216ea359c851737c0bf27804fccb419df644589b398b0ff72e9fc608228c986fe0503f4fae47e0b54c9d8f1e4414aebd2fd36e7f3681aff428ba437d0b4c839ff5d3a8e0f460562a248ab4c52dcb57adb013b98744ca08017b2083999da13a897bdc2f8"}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 780.310337ms ago: executing program 8 (id=3097): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002100010025bd7000fddbdf250200001400000000010001001400030069703665767370616e3000000089a454976054d9c2b55f9d1dcf3514c2e42195cf6d13847282e21173c0231b0253f979f06d4b333e46a6f8fc21eba225028f9fa3baed179ff6428298156f1337b84eb4eefba2e43c9bb623e3b3f1589a9da43cf217c4f26761bd7060d2e7312e97fd1afb8dbd8abe5c"], 0x30}, 0x1, 0x0, 0x0, 0x20044080}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) (rerun: 64) 720.76422ms ago: executing program 8 (id=3098): syz_clone3(&(0x7f0000000300)={0x10000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x26}, &(0x7f0000000180)=""/17, 0x11, &(0x7f0000000240)=""/118, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1}, 0x58) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)) lseek(0xffffffffffffffff, 0x3, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) (async) getdents64(0xffffffffffffffff, &(0x7f0000003440)=""/99, 0x63) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bff000/0x400000)=nil) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000340)='\xcd\xd4\xdc\x8b\'\x00\xb9\x11JX\xc2\x0eP\va\x84\xcb\xa0\xa1r\xab\xd2\xaf\x81\xfd\x14M\xf4\x844z\xc8\xf8x\xa5&v\xe1\x12\xbb\x95\xae u\x1b\xeb\x11\xed\x9a\x83n\xc30L \a\xa7\xf6\xeb\xcb+\xa0\xc8\xb8eo\xb8\x89\xfaWy2\xee\x88\xab\xfb\f \x88\x95C_\r!\xd4\xc2\xa5c\xc6\x1f\x95\x83\x04\xa5\xeb\xa16\xba\a\xe7', &(0x7f0000000780)='&\b\x1a\x16\xd7\xd3K\x18YquL\xf1y\x14\x96:\xfco3\xe2\a\b\xd0\xe3\xd9\x1c!\x8f\xca\x9b\xaf\xc1\xeb\xe4\xde\xbb7O\xf1O\xb8\x05_\x11\x04\a\x82\x1c7h\xfbU\x03T\xf4\xc1\xe2\xd1\xcd<\f\x8bOHb#\x9d\x192\x9aAX\xa2\'\xd8\xb2U\xdbb\xba\xa9C\x8a/\x8d\xdb\x96\xed;A\x8aX\xc4\x14\xb0\x90\xfa4\x16\xdb\xb7\xd8\x05\xb42\x01\xb7\xa1S@\t\xb8.d\x9bT\f\xfa\xbe\xd5qT\xb6\x1e\xcc\xed\xa1\x8c\xa2\x0e\xda\x0fSk\x86\xe7W\xc5\x95\xf6\xda\x8f\xadRt\x9c\xed\xe97\x9dk\x8b\xb8\xc4+l>\x05\xdeJ\xd6\xe9\xb3g\xc050q\x82LL\xe9\xd6\x0e\xd7\x12\xf8\x8f\x1e\x9fj\x0f/\xc7\x91U\xcd\xb0k\x10\xa3#6a\t\xb9\xd3\xbe\xbc\x1f\xfd@\xdd\xb6\x02UJ\xb6\x90\x98\xbed\x1e\xfa\x81 \x0fh?\xb0G\xd2\xa0:$`a\xfd\t\xed\x9aF\\\xdd\xe6*\x1bR;\xe8D\x95\x12uw\xdc8\x06\xfel\xd6\xc7\xc0\xd9)J^\x1b\x14\v\xfc\x9d\xc8\xa1\x89C\xdcH\xb2\x03\x9a\x18\xd93\xd4\xda\x9d\x94\x18\x15\xc54\x8bf\x01\xff\xd1\\\xa6\xdb\xa6\x83\xdc\xcf\xbf\xf1p\xec\x82\xf3\x01\x88\xd4\x87\x02\xf1\xb0[\xbf\x1cr\xc3_1\xd6\xb3Z\xaa\xd7\x81L\xc2{\xfeuIk\xa7\x15\x15', 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000540)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0xb, @private2, 0x7fff}], 0x1c) 609.70974ms ago: executing program 8 (id=3099): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_ENABLE_HIGH_LNB_VOLTAGE(r2, 0x6f44, 0x7fffffffffffffff) fchdir(r1) r3 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = syz_open_procfs(r3, &(0x7f0000000040)='stat\x00') pread64(r5, &(0x7f0000000140)=""/15, 0xf, 0x4) 550.731494ms ago: executing program 8 (id=3100): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffff8001, 0x1000007, 0x1, 0x7}) syz_io_uring_setup(0x2afd, &(0x7f0000000380)={0x0, 0x0, 0x13090, 0x1, 0x800000}, 0x0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 550.479294ms ago: executing program 6 (id=3101): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x9, 0x0, 0xffff, 0x1}, 'syz0\x00', 0x40}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20001, 0x2}) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) r4 = fsmount(r2, 0x1, 0x0) fchdir(r4) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r3}, 0x18) close_range(r1, 0xffffffffffffffff, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f00000028c0)={0x2020}, 0x2020) 408.311373ms ago: executing program 6 (id=3102): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0xd, 0xd, 0x7fff, 0x2, @dev={0xfe, 0x80, '\x00', 0x35}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x700, 0x2, 0x82}}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={r1, @rand_addr=0x64010101, @empty}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x104) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) syz_emit_ethernet(0x35, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@x25={0x805, {0x1, 0x4, 0x1, "077f3ef5244830045fcc0a17ff2cd2b0671bff7c83ee94dfab68a0d2cb2b3fe47fc16c6e"}}}}, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x802, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x4008630a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x103841, 0x192) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000040)) lseek(r3, 0x0, 0x1) 340.461582ms ago: executing program 6 (id=3103): r0 = syz_open_dev$evdev(&(0x7f0000000800), 0x0, 0x2840) socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000200)='./file0/../file0/../file0/../file0/file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000840)=""/160) syz_open_dev$evdev(&(0x7f0000000800), 0x0, 0x2840) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r0, &(0x7f0000000040), 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000200)='./file0/../file0/../file0/../file0/file0\x00') (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') (async) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000840)=""/160) (async) 340.141434ms ago: executing program 5 (id=3104): timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r0, &(0x7f0000000080)) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x2, 0xe000, 0xfc, 0x11, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x0, 0x5c, 0x0, @gue={{0x1, 0x1, 0x0, 0x4, 0x0, @void}, "241c77361514454aafbe8042703e20660334e88cc80696bf47485302813145c198f464434e783cb28f8afdbb0f94af4be105be6100af0c158a04b49a1d0e6fd8d1665eca9898c16e60f08a11b4436879"}}}}}}, 0x0) 334.282137ms ago: executing program 6 (id=3105): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) syz_clone(0x3100000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x108, 0x0, 0x65dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe0}, {0xffff, 0x7ff8}, {0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0xffffff22}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x400, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = getpgid(0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x4, 0x0, 0x4) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) (async) landlock_restrict_self(r0, 0x0) (async) syz_clone(0x3100000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x108, 0x0, 0x65dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe0}, {0xffff, 0x7ff8}, {0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0xffffff22}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) (async) landlock_create_ruleset(&(0x7f0000000040)={0x400, 0x3}, 0x18, 0x0) (async) landlock_restrict_self(r2, 0x0) (async) getpgid(0x0) (async) syz_pidfd_open(r3, 0x0) (async) pidfd_send_signal(r4, 0x4, 0x0, 0x4) (async) 280.738841ms ago: executing program 5 (id=3106): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) preadv(r1, &(0x7f0000000f40)=[{&(0x7f0000000800)=""/147, 0x93}], 0x1, 0x3, 0x1) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)=ANY=[@ANYBLOB="160000001a00210103eb33d3c01940330a"], 0x1c}}, 0x0) (async) r4 = socket(0x10, 0x80003, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) (async) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000080)={'sit0\x00'}) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}]}, 0x30}}, 0x4) 197.633303ms ago: executing program 5 (id=3107): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801c}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0xf0f01a, 0x2}) 194.748245ms ago: executing program 5 (id=3108): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = syz_open_procfs(r2, &(0x7f0000000040)='stat\x00') pread64(r4, &(0x7f0000000140)=""/15, 0xf, 0x4) 65.427136ms ago: executing program 5 (id=3109): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x8003, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000280)={{0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000280)={0x48, 0x13, r3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000400488014000180100010800400058005000400000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4004040) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000003440), 0x4000, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) 65.134184ms ago: executing program 9 (id=3110): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0x5}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r0, &(0x7f00000000c0)='\'!,(::^!\x00', 0x10002, &(0x7f0000000100)={@_ha_fsid={[0x8, 0x7ff]}, {0x401, 0x1, 0x0, 0x7fff}}, 0x6, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0xfffffffe}) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000200)={0x10200, 0x0, &(0x7f0000ffc000/0x3000)=nil}) recvmmsg(r0, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 0s ago: executing program 5 (id=3111): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000010000000a000000090002008d001f106f194eb3050001"], 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000010000000a000000090002008d001f106f194eb3050001"], 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) (async) umount2(&(0x7f0000000340)='./file0\x00', 0x8) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) (async) kernel console output (not intermixed with test programs): tributes in process `syz.5.2216'. [ 205.730544][T13644] netlink: 'syz.5.2216': attribute type 11 has an invalid length. [ 205.735597][ T6478] netdevsim netdevsim5 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 205.741393][ T5881] usb 13-1: reset high-speed USB device number 3 using dummy_hcd [ 205.745030][T13648] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2218'. [ 205.760347][ T6478] netdevsim netdevsim5 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 205.923238][ T40] audit: type=1400 audit(1780426567.227:31906): avc: denied { read } for pid=13660 comm="syz.8.2223" path="socket:[54011]" dev="sockfs" ino=54011 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 206.079692][T13671] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2227'. [ 206.082600][T13671] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 206.153743][ T40] audit: type=1400 audit(1780426567.457:31907): avc: denied { bind } for pid=13674 comm="syz.6.2229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 206.162536][ T40] audit: type=1400 audit(1780426567.467:31908): avc: denied { setopt } for pid=13674 comm="syz.6.2229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 206.170448][ T40] audit: type=1400 audit(1780426567.467:31909): avc: denied { getopt } for pid=13674 comm="syz.6.2229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 206.197841][T13678] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2230'. [ 206.449278][T13697] netlink: 4388 bytes leftover after parsing attributes in process `syz.7.2236'. [ 206.470342][T13697] netlink: 4388 bytes leftover after parsing attributes in process `syz.7.2236'. [ 206.592122][T13711] syzkaller1: entered promiscuous mode [ 206.593927][T13711] syzkaller1: entered allmulticast mode [ 206.598695][ T40] audit: type=1400 audit(1780426567.897:31910): avc: denied { ioctl } for pid=13706 comm="syz.6.2239" path="/171/file0/file0" dev="fuse" ino=64 ioctlcmd=0x910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 206.615722][T13718] fuse: fd is not a fuse device [ 206.781624][ T5881] usb 13-1: device descriptor read/64, error -32 [ 206.790831][T13734] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 206.804479][T13734] overlayfs: conflicting lowerdir path [ 207.031787][ T5881] usb 13-1: reset high-speed USB device number 3 using dummy_hcd [ 207.052371][ T5881] usb 13-1: device firmware changed [ 207.073712][T13758] bridge0: port 3(erspan0) entered blocking state [ 207.074714][ T9] usb 13-1: USB disconnect, device number 3 [ 207.077506][T13758] bridge0: port 3(erspan0) entered disabled state [ 207.092429][T13758] erspan0: entered allmulticast mode [ 207.103857][T13758] erspan0: entered promiscuous mode [ 207.111977][T13758] bridge0: port 3(erspan0) entered blocking state [ 207.116077][T13758] bridge0: port 3(erspan0) entered forwarding state [ 207.414191][ T9] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 207.424163][T13776] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.562208][ T9] usb 13-1: Using ep0 maxpacket: 32 [ 207.568109][ T9] usb 13-1: unable to get BOS descriptor or descriptor too short [ 207.572446][ T9] usb 13-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 232, changing to 7 [ 207.577886][ T9] usb 13-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 207.580532][ T9] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.584912][ T9] usb 13-1: Product: syz [ 207.586757][ T9] usb 13-1: Manufacturer: syz [ 207.588521][ T9] usb 13-1: SerialNumber: syz [ 207.602476][ T9] usb 13-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 207.999593][T13805] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 208.129615][ T9] snd-usb-audio 13-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 208.144961][ T9] usb 13-1: USB disconnect, device number 4 [ 208.173794][ T5740] udevd[5740]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb13/13-1/13-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.545886][T13843] netlink: 'syz.6.2273': attribute type 1 has an invalid length. [ 208.597120][T13847] netlink: 'syz.6.2274': attribute type 2 has an invalid length. [ 208.611561][T13847] netlink: 'syz.6.2274': attribute type 1 has an invalid length. [ 208.718359][T13852] NILFS (nullb0): couldn't find nilfs on the device [ 208.804842][T13862] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 208.808011][T13861] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 208.988707][T13872] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 209.105580][T13888] openvswitch: netlink: IP tunnel dst address not specified [ 209.145585][T13892] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 209.606666][T13919] cgroup: fork rejected by pids controller in /syz8 [ 209.716092][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 209.716174][ T40] audit: type=1400 audit(1780426571.017:31926): avc: denied { mount } for pid=13957 comm="syz.6.2300" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 209.728204][T13961] devpts: Bad value for 'max' [ 209.750986][ T40] audit: type=1400 audit(1780426571.027:31927): avc: denied { remount } for pid=13957 comm="syz.6.2300" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 209.778715][T13967] xt_hashlimit: size too large, truncated to 1048576 [ 209.788674][ T40] audit: type=1400 audit(1780426571.087:31928): avc: denied { unmount } for pid=11118 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 210.132471][T13995] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 210.250100][ T40] audit: type=1400 audit(1780426571.547:31929): avc: denied { write } for pid=14013 comm="syz.8.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 210.264024][ T40] audit: type=1400 audit(1780426571.567:31930): avc: denied { getopt } for pid=14013 comm="syz.8.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 210.439034][ T40] audit: type=1400 audit(1780426571.737:31931): avc: denied { node_bind } for pid=14019 comm="syz.7.2310" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 210.448238][T14020] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 210.452256][T14020] SELinux: failed to load policy [ 210.631002][ T40] audit: type=1400 audit(1780426571.927:31932): avc: denied { listen } for pid=14023 comm="syz.7.2312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 211.251763][ T58] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 211.414581][ T58] usb 11-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 211.417770][ T58] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.420564][ T58] usb 11-1: Product: syz [ 211.422090][ T58] usb 11-1: Manufacturer: syz [ 211.423904][ T58] usb 11-1: SerialNumber: syz [ 211.600174][T14065] __nla_validate_parse: 14 callbacks suppressed [ 211.600188][T14065] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2324'. [ 211.604873][T14065] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2324'. [ 211.849832][ T58] lan78xx 11-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 211.855287][ T58] lan78xx 11-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 211.860548][ T58] lan78xx 11-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 211.865043][ T58] lan78xx 11-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 211.868694][ T58] lan78xx 11-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 211.874499][ T58] lan78xx 11-1:1.0: probe with driver lan78xx failed with error -71 [ 211.879918][ T58] usb 11-1: USB disconnect, device number 5 [ 211.917616][T14076] fuse: fd is not a fuse device [ 211.986381][T14077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42822 sclass=netlink_route_socket pid=14077 comm=syz.5.2328 [ 212.729132][ T9] IPVS: starting estimator thread 0... [ 212.733701][ T40] audit: type=1400 audit(1780426574.037:31933): avc: denied { getopt } for pid=14097 comm="syz.7.2334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 212.801382][ T5882] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 212.822945][T14099] IPVS: using max 44 ests per chain, 105600 per kthread [ 212.880409][T14112] overlayfs: failed to clone lowerpath [ 212.925138][ T40] audit: type=1400 audit(1780426574.227:31934): avc: denied { name_bind } for pid=14115 comm="syz.5.2338" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 212.925221][T14116] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2338'. [ 212.941297][ T5882] usb 11-1: device descriptor read/64, error -71 [ 213.201303][ T5882] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 213.351320][ T5882] usb 11-1: device descriptor read/64, error -71 [ 213.363416][T14141] macsec2: entered promiscuous mode [ 213.365063][T14141] macsec2: entered allmulticast mode [ 213.382043][T14141] vlan2: entered promiscuous mode [ 213.384257][T14141] hsr0: entered promiscuous mode [ 213.386232][T14141] vlan2: entered allmulticast mode [ 213.388253][T14141] hsr0: entered allmulticast mode [ 213.390513][T14141] hsr_slave_0: entered allmulticast mode [ 213.393788][T14141] hsr_slave_1: entered allmulticast mode [ 213.464216][ T5882] usb usb11-port1: attempt power cycle [ 213.474246][T14145] netlink: 348 bytes leftover after parsing attributes in process `syz.5.2347'. [ 213.494195][ T40] audit: type=1400 audit(1780426574.797:31935): avc: denied { mounton } for pid=14144 comm="syz.5.2347" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 213.562785][T14148] can: request_module (can-proto-0) failed. [ 213.630769][T14155] batadv_slave_1: entered promiscuous mode [ 213.637578][T14154] batadv_slave_1: left promiscuous mode [ 213.726101][T14159] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2351'. [ 213.801363][ T5882] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 213.821866][ T5882] usb 11-1: device descriptor read/8, error -71 [ 214.062235][ T5882] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 214.082605][ T5882] usb 11-1: device descriptor read/8, error -71 [ 214.106561][T14171] netlink: 'syz.7.2355': attribute type 11 has an invalid length. [ 214.109681][T14171] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2355'. [ 214.201985][ T5882] usb usb11-port1: unable to enumerate USB device [ 214.233137][T14173] netlink: 348 bytes leftover after parsing attributes in process `syz.7.2356'. [ 214.285649][T14176] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2357'. [ 214.289383][T14176] netlink: 'syz.7.2357': attribute type 3 has an invalid length. [ 214.720453][T14201] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2366'. [ 214.784747][T14214] bridge_slave_1: entered allmulticast mode [ 214.820285][T14215] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14215 comm=syz.7.2371 [ 214.823992][T14217] IPv6: NLM_F_CREATE should be specified when creating new route [ 214.825930][T14220] fuse: fd is not a fuse device [ 215.169752][T14249] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2381'. [ 215.221557][T14255] fuse: fd is not a fuse device [ 215.445356][T14263] ip6gre2: entered promiscuous mode [ 215.447827][T14263] ip6gre2: entered allmulticast mode [ 215.452553][ T12] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 215.454178][T14262] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 215.456114][ T12] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 215.481311][ T29] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 215.710840][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 215.710856][ T40] audit: type=1400 audit(2000000000.739:31937): avc: denied { ioctl } for pid=14278 comm="syz.5.2390" path="socket:[59883]" dev="sockfs" ino=59883 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 215.771701][ T5882] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 215.934749][ T40] audit: type=1400 audit(2000000000.969:31938): avc: denied { setattr } for pid=14298 comm="syz.5.2395" name="SCTPv6" dev="sockfs" ino=59900 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 215.995053][T14306] sctp: [Deprecated]: syz.8.2397 (pid 14306) Use of int in maxseg socket option. [ 215.995053][T14306] Use struct sctp_assoc_value instead [ 216.035734][T14310] netlink: 'syz.8.2399': attribute type 7 has an invalid length. [ 216.039809][T14310] netlink: 'syz.8.2399': attribute type 7 has an invalid length. [ 216.047276][T14310] Falling back ldisc for ttyS3. [ 216.211422][ T5882] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 216.333084][ T40] audit: type=1400 audit(2000000001.369:31939): avc: denied { mounton } for pid=14329 comm="syz.8.2407" path="/syzcgroup/unified/syz8" dev="cgroup2" ino=899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 216.390053][ T40] audit: type=1400 audit(2000000001.419:31940): avc: denied { bind } for pid=14337 comm="syz.8.2409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 216.447968][T14341] bond7: entered promiscuous mode [ 216.464258][ T6478] Bluetooth: Checksum failed: computed 5a30 received 005e [ 216.494810][T14345] team0: Port device team_slave_0 removed [ 216.690386][T14356] __nla_validate_parse: 12 callbacks suppressed [ 216.690467][T14356] netlink: 348 bytes leftover after parsing attributes in process `syz.5.2414'. [ 217.708719][ T40] audit: type=1400 audit(2000000002.739:31941): avc: denied { mounton } for pid=14376 comm="syz.6.2420" path="/syzcgroup/net/syz6/devices.allow" dev="cgroup" ino=496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 217.709776][T14377] overlayfs: failed to resolve '/es.allow': -2 [ 217.719022][T14377] ufs: Unknown parameter '+'#J:/' [ 217.755749][ T40] audit: type=1400 audit(2000000002.789:31942): avc: denied { connect } for pid=14381 comm="syz.6.2422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 217.763361][ T40] audit: type=1400 audit(2000000002.789:31943): avc: denied { write } for pid=14381 comm="syz.6.2422" path="socket:[60571]" dev="sockfs" ino=60571 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 217.829958][T14385] syzkaller1: entered promiscuous mode [ 217.833508][T14385] syzkaller1: entered allmulticast mode [ 217.837643][ T40] audit: type=1400 audit(2000000002.869:31944): avc: denied { map } for pid=14384 comm="syz.6.2423" path="/dev/net/tun" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 217.846133][ T40] audit: type=1400 audit(2000000002.869:31945): avc: denied { execute } for pid=14384 comm="syz.6.2423" path="/dev/net/tun" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 217.853902][ T40] audit: type=1400 audit(2000000002.869:31946): avc: denied { execheap } for pid=14384 comm="syz.6.2423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 218.025078][T14390] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 218.085859][T14393] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2426'. [ 218.088836][T14393] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2426'. [ 218.093003][T14393] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2426'. [ 218.096260][T14393] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2426'. [ 218.157295][T14397] bond4: entered promiscuous mode [ 218.162101][T14400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.472630][T14411] tmpfs: Bad value for 'mpol' [ 218.541614][ T5746] Bluetooth: hci4: command 0x1003 tx timeout [ 218.547403][ T62] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 218.614639][T14419] syzkaller0: entered promiscuous mode [ 218.614696][T14421] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 218.616866][T14419] syzkaller0: entered allmulticast mode [ 218.623929][T14421] block device autoloading is deprecated and will be removed. [ 218.758245][T14434] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 218.857060][T14445] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2441'. [ 218.861059][T14434] syz.8.2439 (14434): drop_caches: 2 [ 218.863043][T14445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.217605][T14468] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.452810][T14474] loop5: detected capacity change from 0 to 7 [ 219.459098][T14474] Dev loop5: unable to read RDB block 7 [ 219.462521][T14474] loop5: AHDI p1 [ 219.464044][T14474] loop5: partition table partially beyond EOD, truncated [ 219.729419][T14482] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2451'. [ 219.741326][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 219.959668][T14487] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2454'. [ 220.100329][T14493] netlink: 'syz.7.2453': attribute type 1 has an invalid length. [ 220.104223][T14493] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2453'. [ 220.330853][T14502] fuse: Bad value for 'rootmode' [ 220.413020][T14512] netlink: 'syz.8.2460': attribute type 1 has an invalid length. [ 220.416460][T14512] netlink: 164 bytes leftover after parsing attributes in process `syz.8.2460'. [ 220.442067][T14512] syzkaller0: entered promiscuous mode [ 220.444602][T14512] syzkaller0: entered allmulticast mode [ 220.569421][T14522] comedi comedi3: comedi_config --init_data is deprecated [ 220.655942][T14528] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 220.674235][T14530] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 220.676377][T14530] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 220.683614][T14530] vhci_hcd vhci_hcd.0: Device attached [ 220.689458][T14531] vhci_hcd: connection closed [ 220.694816][ T6530] vhci_hcd vhci_hcd.7: stop threads [ 220.699546][ T6530] vhci_hcd vhci_hcd.7: release socket [ 220.702749][ T6530] vhci_hcd vhci_hcd.7: disconnect device [ 220.978055][T14557] netlink: 'syz.8.2471': attribute type 15 has an invalid length. [ 220.982374][T14556] /dev/nullb0: Can't lookup blockdev [ 221.568412][T14583] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 221.576477][T14584] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 221.643110][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 221.643123][ T40] audit: type=1326 audit(2000000006.679:31950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14589 comm="syz.6.2483" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e7699ce59 code=0x0 [ 221.693096][T14596] __nla_validate_parse: 8 callbacks suppressed [ 221.693113][T14596] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2484'. [ 221.698433][T14596] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2484'. [ 221.705023][T14596] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2484'. [ 221.707853][T14596] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2484'. [ 221.764462][ T40] audit: type=1400 audit(2000000006.799:31951): avc: denied { read } for pid=14595 comm="syz.6.2484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 221.769335][T14596] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.847952][T14604] binder: 14603:14604 ioctl c0306201 200000000080 returned -22 [ 221.850563][T14607] netlink: 'syz.5.2486': attribute type 7 has an invalid length. [ 221.856423][T14607] netlink: 'syz.5.2486': attribute type 7 has an invalid length. [ 222.100119][T14636] xt_hashlimit: size too large, truncated to 1048576 [ 222.771551][ T40] audit: type=1400 audit(2000000007.809:31952): avc: denied { listen } for pid=14702 comm="syz.8.2513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 222.778413][ T40] audit: type=1400 audit(2000000007.809:31953): avc: denied { create } for pid=14702 comm="syz.8.2513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 222.785534][ T40] audit: type=1400 audit(2000000007.809:31954): avc: denied { setopt } for pid=14702 comm="syz.8.2513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 222.801040][ T40] audit: type=1400 audit(2000000007.819:31955): avc: denied { write } for pid=14702 comm="syz.8.2513" path="socket:[59385]" dev="sockfs" ino=59385 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 223.068056][T14722] input: syz1 as /devices/virtual/input/input35 [ 223.101364][ T40] audit: type=1400 audit(2000000008.129:31956): avc: denied { listen } for pid=14721 comm="syz.6.2518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 223.282725][T14734] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2521'. [ 223.499309][T14740] netlink: 'syz.6.2524': attribute type 1 has an invalid length. [ 223.551072][T14743] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 223.553695][T14743] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 223.557092][T14743] vhci_hcd vhci_hcd.0: Device attached [ 223.654779][T14748] vhci_hcd vhci_hcd.0: port 0 already used [ 223.725620][T14754] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 223.841292][ T5882] usb 50-1: SetAddress Request (2) to port 0 [ 223.847965][ T5882] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 223.859836][ T40] audit: type=1400 audit(2000000008.889:31957): avc: denied { write } for pid=14756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.906472][ T40] audit: type=1400 audit(2000000008.939:31958): avc: denied { write } for pid=14760 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.005357][T14765] 9p: Bad value for 'rfdno' [ 224.030829][ T40] audit: type=1400 audit(2000000009.059:31959): avc: denied { write } for pid=14762 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.384719][T14744] vhci_hcd: connection reset by peer [ 224.390735][ T8560] vhci_hcd vhci_hcd.6: stop threads [ 224.395587][ T8560] vhci_hcd vhci_hcd.6: release socket [ 224.396347][T14790] usb usb7: usbfs: process 14790 (syz.7.2535) did not claim interface 0 before use [ 224.399983][ T8560] vhci_hcd vhci_hcd.6: disconnect device [ 224.441687][ T9] usb 13-1: new full-speed USB device number 5 using dummy_hcd [ 224.614095][ T9] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 224.618970][ T9] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 224.627331][ T9] usb 13-1: config 0 interface 0 has no altsetting 0 [ 224.639230][ T9] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 224.643501][ T9] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 224.646974][ T9] usb 13-1: Product: syz [ 224.648836][ T9] usb 13-1: Manufacturer: syz [ 224.650908][ T9] usb 13-1: SerialNumber: syz [ 224.657249][ T9] usb 13-1: config 0 descriptor?? [ 224.668775][ T9] usb 13-1: selecting invalid altsetting 0 [ 224.869603][T14775] gfs2: Unknown parameter 'aclõ' [ 224.954473][ T24] usb 13-1: USB disconnect, device number 5 [ 224.965512][T14793] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2536'. [ 224.968559][T14793] openvswitch: netlink: Flow key attr not present in new flow. [ 225.081754][T14798] netlink: 'syz.6.2537': attribute type 10 has an invalid length. [ 225.084354][T14798] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2537'. [ 225.248416][T14806] rdma_op ffff8880300b49f0 conn xmit_rdma 0000000000000000 [ 225.270722][T14810] fuse: Bad value for 'fd' [ 225.295652][T14813] loop9: detected capacity change from 0 to 255852544 [ 225.362775][T14812] loop9: detected capacity change from 255852544 to 524287871 [ 225.377308][T14820] netlink: 'syz.6.2544': attribute type 1 has an invalid length. [ 225.406842][T14820] 8021q: adding VLAN 0 to HW filter on device bond8 [ 225.473996][T14830] fuse: fd is not a fuse device [ 225.478974][T14820] bond8: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 225.498336][T14820] bond8: entered allmulticast mode [ 225.520932][T14820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14820 comm=syz.6.2544 [ 225.597769][T14848] overlayfs: failed to clone upperpath [ 225.695205][T14856] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2554'. [ 225.751335][ T7822] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 225.777084][T14863] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 225.783707][T14863] xt_hashlimit: size too large, truncated to 1048576 [ 225.911409][ T7822] usb 12-1: Using ep0 maxpacket: 8 [ 225.923499][ T7822] usb 12-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 225.930825][ T7822] usb 12-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 225.935830][ T7822] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.939192][ T7822] usb 12-1: Product: syz [ 225.940989][ T7822] usb 12-1: Manufacturer: syz [ 225.943641][ T7822] usb 12-1: SerialNumber: syz [ 226.154327][T14841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.160606][T14841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.166839][T14841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.173375][T14841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.231765][T14883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.237097][T14883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.512603][T14894] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2564'. [ 226.517107][T14894] No source specified [ 226.615504][T14909] overlayfs: unescaped trailing colons in lowerdir mount option. [ 226.999410][T14930] netlink: 136 bytes leftover after parsing attributes in process `syz.6.2576'. [ 227.002514][T14930] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2576'. [ 227.036519][T14945] vxcan0: tx address claim with dlc 0 [ 227.074729][T14947] netlink: 'syz.8.2581': attribute type 1 has an invalid length. [ 227.129253][T14948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19216 sclass=netlink_route_socket pid=14948 comm=syz.8.2581 [ 227.380657][T14956] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2584'. [ 227.527989][T14961] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2586'. [ 227.531014][T14961] openvswitch: netlink: Flow key attr not present in new flow. [ 227.610504][T14963] netlink: 'syz.5.2587': attribute type 3 has an invalid length. [ 227.932180][T14972] fuse: Bad value for 'fd' [ 227.977752][T14977] program syz.8.2591 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.997162][T14977] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2591'. [ 228.113143][T14989] veth0_vlan: left promiscuous mode [ 228.116219][T14989] veth0_vlan: entered promiscuous mode [ 228.129935][T14989] veth1_macvtap: entered promiscuous mode [ 228.150996][T14989] 8021q: adding VLAN 0 to HW filter on device bond2 [ 228.163448][T14989] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 228.204644][T14991] can0: slcan on ttynull. [ 228.237017][T14996] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 228.240812][T14996] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 228.322123][T14990] can0 (unregistered): slcan off ttynull. [ 228.326753][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 228.326765][ T40] audit: type=1400 audit(2000000013.359:31964): avc: denied { write } for pid=14998 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.390875][ T40] audit: type=1400 audit(2000000013.419:31965): avc: denied { write } for pid=15006 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.439113][T15015] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2600'. [ 228.446925][T15015] syzkaller0: entered promiscuous mode [ 228.450802][T15015] syzkaller0: entered allmulticast mode [ 228.491043][ T40] audit: type=1400 audit(2000000013.519:31966): avc: denied { write } for pid=15018 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.538367][ T40] audit: type=1400 audit(2000000013.569:31967): avc: denied { write } for pid=15022 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.567301][ T7822] usb 12-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 228.574207][ T7822] usb 12-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 228.578847][T15025] sctp: [Deprecated]: syz.7.2602 (pid 15025) Use of struct sctp_assoc_value in delayed_ack socket option. [ 228.578847][T15025] Use struct sctp_sack_info instead [ 228.581870][ T7822] usb 12-1: unit 1 not found! [ 228.615800][ T40] audit: type=1400 audit(2000000013.649:31968): avc: denied { write } for pid=15024 comm="syz.7.2602" name="file0" dev="9p" ino=75006329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 228.621506][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 228.623706][ T40] audit: type=1400 audit(2000000013.649:31969): avc: denied { open } for pid=15024 comm="syz.7.2602" path="/144/file0/file0" dev="9p" ino=75006329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 228.642383][ T7822] usb 12-1: USB disconnect, device number 7 [ 228.921796][ T9] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 228.932212][ T5882] usb 50-1: device descriptor read/8, error -110 [ 229.091606][ T9] usb 13-1: Using ep0 maxpacket: 16 [ 229.094857][ T9] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.100695][ T9] usb 13-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 229.104528][ T9] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.107816][ T9] usb 13-1: Product: syz [ 229.109610][ T9] usb 13-1: Manufacturer: syz [ 229.111636][ T9] usb 13-1: SerialNumber: syz [ 229.114744][ T9] usb 13-1: config 0 descriptor?? [ 229.324630][T15030] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2604'. [ 229.329104][ T9] usb 13-1: USB disconnect, device number 6 [ 229.343311][ T5882] usb usb50-port1: attempt power cycle [ 229.912478][ T5882] usb usb50-port1: unable to enumerate USB device [ 229.953296][T15087] binder: 15086:15087 ioctl c0306201 200000000640 returned -22 [ 229.955749][T15087] binder: 15086:15087 ioctl 81204101 2000000010c0 returned -22 [ 229.969859][T15087] tipc: Started in network mode [ 229.973754][T15087] tipc: Node identity 3a607666cbb2, cluster identity 4711 [ 229.976461][T15087] tipc: Enabled bearer , priority 0 [ 229.979738][T15088] syzkaller0: MTU too low for tipc bearer [ 229.982996][T15088] tipc: Disabling bearer [ 229.986358][T15088] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2620'. [ 229.989600][T15087] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2620'. [ 230.101311][ T7822] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 230.251647][ T7822] usb 12-1: Using ep0 maxpacket: 16 [ 230.260957][ T7822] usb 12-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.265945][ T7822] usb 12-1: config 0 interface 0 has no altsetting 0 [ 230.268105][ T7822] usb 12-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 230.270745][ T7822] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.276204][ T7822] usb 12-1: config 0 descriptor?? [ 230.465473][T15113] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2628'. [ 230.542099][ T34] usb 11-1: new low-speed USB device number 10 using dummy_hcd [ 230.708869][ T34] usb 11-1: config 3 has an invalid interface number: 20 but max is 1 [ 230.720988][ T34] usb 11-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 230.728415][ T34] usb 11-1: config 3 has an invalid interface number: 2 but max is 1 [ 230.728531][ T40] audit: type=1400 audit(2000000015.759:31970): avc: denied { read } for pid=15123 comm="syz.5.2631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 230.738599][ T34] usb 11-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 230.743647][ T7822] nzxt-smart2 0003:1E71:2009.0008: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.7-1/input0 [ 230.748509][ T34] usb 11-1: config 3 has an invalid interface number: 230 but max is 1 [ 230.753614][ T34] usb 11-1: config 3 has 3 interfaces, different from the descriptor's value: 2 [ 230.756497][ T34] usb 11-1: config 3 has no interface number 0 [ 230.758424][ T34] usb 11-1: config 3 has no interface number 1 [ 230.760490][ T34] usb 11-1: config 3 interface 20 altsetting 128 endpoint 0xF has invalid maxpacket 16, setting to 0 [ 230.764127][ T34] usb 11-1: config 3 interface 20 altsetting 128 endpoint 0xE has invalid maxpacket 1023, setting to 8 [ 230.767604][ T34] usb 11-1: config 3 interface 20 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 230.772339][ T34] usb 11-1: config 3 interface 20 altsetting 128 endpoint 0x8 has invalid maxpacket 64, setting to 8 [ 230.775711][ T34] usb 11-1: config 3 interface 20 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 230.779048][ T34] usb 11-1: config 3 interface 20 altsetting 128 has a duplicate endpoint with address 0xE, skipping [ 230.783438][ T34] usb 11-1: config 3 interface 20 altsetting 128 endpoint 0xC has invalid maxpacket 1023, setting to 8 [ 230.787294][ T34] usb 11-1: config 3 interface 20 altsetting 128 endpoint 0x7 has invalid maxpacket 1024, setting to 8 [ 230.790934][ T34] usb 11-1: config 3 interface 2 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 8 [ 230.794546][ T34] usb 11-1: config 3 interface 2 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 8 [ 230.798255][ T34] usb 11-1: config 3 interface 2 altsetting 0 has an endpoint descriptor with address 0x49, changing to 0x9 [ 230.803467][ T34] usb 11-1: config 3 interface 2 altsetting 0 endpoint 0x9 is Bulk; changing to Interrupt [ 230.807761][ T34] usb 11-1: config 3 interface 2 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 230.818466][ T34] usb 11-1: config 3 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 32, setting to 8 [ 230.827133][ T34] usb 11-1: config 3 interface 2 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 230.839783][ T34] usb 11-1: config 3 interface 2 altsetting 0 endpoint 0xD has invalid maxpacket 1536, setting to 8 [ 230.844789][ T34] usb 11-1: config 3 interface 2 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 230.851994][ T34] usb 11-1: config 3 interface 2 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 230.856541][ T34] usb 11-1: config 3 interface 2 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 230.861065][ T34] usb 11-1: config 3 interface 2 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 230.866356][ T34] usb 11-1: config 3 interface 2 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 230.870695][ T34] usb 11-1: config 3 interface 2 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 13 [ 230.876347][ T34] usb 11-1: too many endpoints for config 3 interface 230 altsetting 47: 124, using maximum allowed: 30 [ 230.881021][ T34] usb 11-1: config 3 interface 230 altsetting 47 has a duplicate endpoint with address 0x6, skipping [ 230.885405][ T34] usb 11-1: config 3 interface 230 altsetting 47 has a duplicate endpoint with address 0x2, skipping [ 230.889793][ T34] usb 11-1: config 3 interface 230 altsetting 47 has 2 endpoint descriptors, different from the interface descriptor's value: 124 [ 230.896824][ T34] usb 11-1: config 3 interface 20 has no altsetting 0 [ 230.898865][ T34] usb 11-1: config 3 interface 230 has no altsetting 0 [ 230.936446][T15135] overlayfs: failed to resolve './file0': -2 [ 230.986124][T15142] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 231.100967][ T7822] usb 12-1: USB disconnect, device number 8 [ 231.271353][ T9] usb 13-1: new low-speed USB device number 7 using dummy_hcd [ 231.423022][ T9] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 231.426119][ T9] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 231.430505][ T9] usb 13-1: config 168 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 231.436510][ T9] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 231.439671][ T9] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 231.444531][ T9] usb 13-1: config 168 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 231.450548][ T9] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 231.453754][ T9] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 231.457892][ T9] usb 13-1: config 168 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 231.465095][ T9] usb 13-1: string descriptor 0 read error: -22 [ 231.468028][ T9] usb 13-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 231.471663][ T9] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.480364][ T9] adutux 13-1:168.0: interrupt endpoints not found [ 231.685381][ T9] usb 13-1: USB disconnect, device number 7 [ 232.277845][T15184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15184 comm=syz.5.2649 [ 232.505268][T15200] netlink: 'syz.8.2654': attribute type 1 has an invalid length. [ 232.508893][T15200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15200 comm=syz.8.2654 [ 232.517098][T15200] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2654'. [ 232.679750][T15218] netlink: 'syz.8.2659': attribute type 15 has an invalid length. [ 232.682403][T15218] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2659'. [ 232.691594][T15218] netlink: 'syz.8.2659': attribute type 15 has an invalid length. [ 232.691800][ T6485] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 232.694458][T15218] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2659'. [ 232.697711][ T6485] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 232.704467][ T6485] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 232.709341][ T6485] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 232.771884][T15220] cgroup: fork rejected by pids controller in /syz7 [ 232.910098][T15364] hfs: can't find a HFS filesystem on dev sr0 [ 232.957354][ T40] audit: type=1400 audit(2000000017.989:31971): avc: denied { shutdown } for pid=15368 comm="syz.8.2664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 232.962282][T15369] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2664'. [ 232.964599][T15364] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 233.269787][T15372] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 233.272173][T15372] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 233.282262][T15372] vhci_hcd vhci_hcd.0: Device attached [ 233.286515][T15372] ªªªªªª: renamed from hsr0 (while UP) [ 233.313999][ T34] usb 11-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 4.ec [ 233.317943][ T34] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.323944][ T34] usb 11-1: can't set config #3, error -71 [ 233.326789][ T34] usb 11-1: USB disconnect, device number 10 [ 233.417648][T15383] /dev/nullb0: Can't lookup blockdev [ 233.541309][ T24] usb 51-1: new high-speed USB device number 2 using vhci_hcd [ 233.598333][T15398] netlink: 'syz.5.2673': attribute type 1 has an invalid length. [ 233.615476][T15398] bond8: entered promiscuous mode [ 233.617735][T15398] 8021q: adding VLAN 0 to HW filter on device bond8 [ 233.632489][T15398] 8021q: adding VLAN 0 to HW filter on device bond8 [ 233.634863][T15398] bond8: (slave vti0): The slave device specified does not support setting the MAC address [ 233.638047][T15398] bond8: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 233.646345][T15398] bond8: (slave vti0): making interface the new active one [ 233.649641][T15398] vti0: entered promiscuous mode [ 233.653533][T15398] bond8: (slave vti0): Enslaving as an active interface with an up link [ 233.661855][ T34] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 233.793582][ T34] usb 11-1: device descriptor read/64, error -71 [ 233.949510][T15378] vhci_hcd: connection reset by peer [ 233.954343][ T8565] vhci_hcd vhci_hcd.7: stop threads [ 233.956293][ T8565] vhci_hcd vhci_hcd.7: release socket [ 233.963794][ T8565] vhci_hcd vhci_hcd.7: disconnect device [ 233.998115][ T40] audit: type=1400 audit(2000000019.029:31972): avc: denied { getattr } for pid=15410 comm="syz.7.2675" name="secretmem" dev="secretmem" ino=62948 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 234.041709][ T34] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 234.181284][ T34] usb 11-1: device descriptor read/64, error -71 [ 234.276635][T15438] loop7: detected capacity change from 0 to 127 [ 234.293064][ T34] usb usb11-port1: attempt power cycle [ 234.307144][T15438] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2682'. [ 234.402821][ T5740] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 234.534454][T15440] overlay: Unknown parameter 'fowner' [ 234.631998][ T34] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 234.651919][ T34] usb 11-1: device descriptor read/8, error -71 [ 234.703491][T15442] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2684'. [ 234.901335][ T34] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 234.922201][ T34] usb 11-1: device descriptor read/8, error -71 [ 235.031824][ T34] usb usb11-port1: unable to enumerate USB device [ 235.596185][T15452] syz.7.2687 (15452): attempted to duplicate a private mapping with mremap. This is not supported. [ 235.602815][ T40] audit: type=1400 audit(2000000020.639:31973): avc: denied { accept } for pid=15451 comm="syz.7.2687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 235.696926][T15456] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 235.906681][ T40] audit: type=1400 audit(2000000020.939:31974): avc: denied { create } for pid=15465 comm="syz.5.2692" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 235.914849][ T40] audit: type=1400 audit(2000000020.939:31975): avc: denied { read write } for pid=15465 comm="syz.5.2692" name="file0" dev="ramfs" ino=63024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 235.924120][ T40] audit: type=1400 audit(2000000020.939:31976): avc: denied { open } for pid=15465 comm="syz.5.2692" path="/file0" dev="ramfs" ino=63024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 235.933461][ T40] audit: type=1400 audit(2000000020.939:31977): avc: denied { execute } for pid=15465 comm="syz.5.2692" name="file1" dev="ramfs" ino=63023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 235.942025][ T40] audit: type=1400 audit(2000000020.939:31978): avc: denied { execute_no_trans } for pid=15465 comm="syz.5.2692" path="/file1" dev="ramfs" ino=63023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 236.414954][T15474] bridge0: port 3(erspan0) entered disabled state [ 236.449574][T15474] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.513563][T15481] kvm: kvm [15480]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 236.518021][T15481] kvm: kvm [15480]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 236.544313][T15474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.701296][ T6530] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.712827][ T134] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.716448][ T134] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.720016][ T134] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.754383][T15501] bond9 (unregistering): Released all slaves [ 236.766234][ T9] hid-generic 0000:0004:261D.0009: unknown main item tag 0x0 [ 236.770363][ T9] hid-generic 0000:0004:261D.0009: unknown main item tag 0x0 [ 236.776867][ T9] hid-generic 0000:0004:261D.0009: unknown main item tag 0x0 [ 236.788534][ T9] hid-generic 0000:0004:261D.0009: unknown main item tag 0x0 [ 236.794223][ T9] hid-generic 0000:0004:261D.0009: unknown main item tag 0x0 [ 236.801807][ T9] hid-generic 0000:0004:261D.0009: unknown main item tag 0x0 [ 236.809127][ T9] hid-generic 0000:0004:261D.0009: unknown main item tag 0x0 [ 236.819248][ T9] hid-generic 0000:0004:261D.0009: unknown main item tag 0x0 [ 236.824227][ T9] hid-generic 0000:0004:261D.0009: unknown main item tag 0x0 [ 236.827394][ T9] hid-generic 0000:0004:261D.0009: unknown main item tag 0x0 [ 236.858504][T15510] bond5: entered promiscuous mode [ 236.861681][ T9] hid-generic 0000:0004:261D.0009: hidraw1: HID v0.03 Device [syz1] on syz0 [ 236.863095][T15510] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 236.877496][T15519] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 236.919128][T15521] fido_id[15521]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 237.113871][T15549] netlink: 'syz.5.2715': attribute type 2 has an invalid length. [ 237.118866][T15549] netlink: 'syz.5.2715': attribute type 1 has an invalid length. [ 237.277340][ T40] audit: type=1400 audit(2000000022.309:31979): avc: denied { create } for pid=15551 comm="syz.8.2716" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 237.296992][ T40] audit: type=1400 audit(2000000022.319:31980): avc: denied { unlink } for pid=15551 comm="syz.8.2716" name="file0" dev="tmpfs" ino=846 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 237.350827][ T40] audit: type=1400 audit(2000000022.379:31981): avc: denied { shutdown } for pid=15556 comm="syz.8.2718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 237.782554][T15565] overlayfs: missing 'lowerdir' [ 237.974491][T15570] overlayfs: failed to resolve '/003': -2 [ 238.620215][T15585] Cannot find del_set index 14804 as target [ 238.681314][ T24] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 239.048796][T15591] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2730'. [ 239.138614][T15596] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.2731'. [ 239.183179][T15600] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2732'. [ 239.189103][T15599] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2733'. [ 239.198365][T15599] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2733'. [ 239.234960][T15606] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2734'. [ 239.246036][T15606] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2734'. [ 239.249126][T15606] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2734'. [ 239.253533][T15606] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2734'. [ 239.257290][T15606] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2734'. [ 239.481636][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 239.481654][ T40] audit: type=1326 audit(2000000024.509:31984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15628 comm="syz.7.2741" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f930dd9ce59 code=0x0 [ 239.510080][T15633] overlayfs: failed to resolve './file0': -2 [ 240.406319][ T40] audit: type=1400 audit(2000000025.439:31985): avc: denied { name_bind } for pid=15647 comm="syz.5.2746" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 240.406733][T15648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.418649][T15648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.421469][T15643] loop9: detected capacity change from 0 to 524287871 [ 240.425603][T15648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.429130][T15648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.876831][T15662] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 241.005928][ T40] audit: type=1400 audit(2000000026.039:31986): avc: denied { unmount } for pid=12253 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 241.133515][ T40] audit: type=1400 audit(2000000026.169:31987): avc: denied { accept } for pid=15671 comm="syz.7.2753" path=0069214E000066732F62696E6465723000000C000000140000001C0000002C00000040000000280000000000000000000000000000000000000000000000852A6273000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 241.245807][ T40] audit: type=1400 audit(2000000026.279:31988): avc: denied { mounton } for pid=15673 comm="syz.7.2754" path="/177/file0" dev="tmpfs" ino=969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 241.791370][ T24] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 241.925593][T15700] gretap1: entered promiscuous mode [ 241.941285][ T24] usb 12-1: Using ep0 maxpacket: 8 [ 241.945728][ T24] usb 12-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.949814][ T24] usb 12-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.953083][ T24] usb 12-1: config 0 interface 0 has no altsetting 0 [ 241.955235][ T24] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 241.959233][ T24] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.967337][ T24] usb 12-1: config 0 descriptor?? [ 242.071908][T15714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15714 comm=syz.8.2764 [ 242.210275][T15724] openvswitch: netlink: Duplicate key (type 6). [ 242.284365][T15727] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15727 comm=syz.5.2768 [ 242.337274][T15731] openvswitch: netlink: Flow key attr not present in new flow. [ 242.375069][T15733] program syz.8.2770 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.516950][ T24] usbhid 12-1:0.0: can't add hid device: -71 [ 242.519318][ T24] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 242.526458][ T24] usb 12-1: USB disconnect, device number 9 [ 243.161987][T15771] binder: 15768:15771 ioctl 3b86 200000000080 returned -22 [ 243.541350][T15793] netlink: 'syz.5.2785': attribute type 1 has an invalid length. [ 243.678589][T15812] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=15812 comm=syz.5.2791 [ 243.892657][ T5882] IPVS: starting estimator thread 0... [ 243.895042][T15836] tipc: Started in network mode [ 243.896588][T15836] tipc: Node identity ac1414aa, cluster identity 4711 [ 243.899392][T15836] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 243.907520][T15836] tipc: Enabled bearer , priority 10 [ 243.972634][T15839] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 243.975401][T15839] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 243.979889][T15839] vhci_hcd vhci_hcd.0: Device attached [ 244.001494][T15837] IPVS: using max 45 ests per chain, 108000 per kthread [ 244.031713][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 244.057202][T15855] netlink: 'syz.5.2801': attribute type 4 has an invalid length. [ 244.074511][T15855] netlink: 'syz.5.2801': attribute type 4 has an invalid length. [ 244.086807][T15855] fuse: fd is not a fuse device [ 244.151279][ T34] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 244.157059][T15860] fuse: fd is not a fuse device [ 244.160816][T15860] __nla_validate_parse: 12 callbacks suppressed [ 244.160831][T15860] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2802'. [ 244.167576][T15860] ksmbd: Unknown IPC event: 0, ignore. [ 244.181243][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 244.193495][ T40] audit: type=1400 audit(2000000029.229:31989): avc: denied { cmd } for pid=15861 comm="syz.8.2803" path="/dev/ublk-control" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 244.201382][T15863] ublk_ctrl_add_dev: invalid recovery flags 10 [ 244.211458][ T34] usb 51-1: new full-speed USB device number 3 using vhci_hcd [ 244.292679][T15875] comedi comedi1: aio_iiro_16: I/O port conflict (0x100,8) [ 244.331311][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 244.471266][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 244.559699][T15880] netlink: 'syz.8.2808': attribute type 12 has an invalid length. [ 244.611490][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 244.751259][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 244.757755][T15846] vhci_hcd: connection reset by peer [ 244.760841][ T6482] vhci_hcd vhci_hcd.7: stop threads [ 244.762912][ T6482] vhci_hcd vhci_hcd.7: release socket [ 244.765465][ T6482] vhci_hcd vhci_hcd.7: disconnect device [ 244.891368][ T5882] tipc: Node number set to 2886997162 [ 245.041216][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 245.101614][T15884] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2809'. [ 245.156191][T15891] overlayfs: regular lower layers cannot follow data lower layers [ 245.184402][ T40] audit: type=1400 audit(2000000030.219:31990): avc: denied { watch_mount } for pid=15892 comm="syz.5.2812" path="/582" dev="tmpfs" ino=3102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 245.217018][T15895] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2813'. [ 245.663616][T15938] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2824'. [ 245.786898][T15942] netlink: 5 bytes leftover after parsing attributes in process `syz.8.2826'. [ 246.255964][T15949] netlink: 'syz.6.2829': attribute type 1 has an invalid length. [ 247.181322][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 247.501967][T15944] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 247.510351][T15949] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 247.575479][ T40] audit: type=1400 audit(2000000032.609:31991): avc: denied { write } for pid=15966 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.664803][ T40] audit: type=1400 audit(2000000032.689:31992): avc: denied { write } for pid=15974 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.721257][T15988] F2FS-fs (nbd8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 247.726460][T15988] F2FS-fs (nbd8): Can't find valid F2FS filesystem in 1th superblock [ 247.729775][T15988] F2FS-fs (nbd8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 247.733591][T15988] F2FS-fs (nbd8): Can't find valid F2FS filesystem in 2th superblock [ 247.793177][ T40] audit: type=1400 audit(2000000032.829:31993): avc: denied { nlmsg_write } for pid=15993 comm="syz.8.2843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 247.817645][ T40] audit: type=1107 audit(2000000032.829:31994): pid=15993 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 247.876028][ T5746] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 247.904029][ C1] net_ratelimit: 5 callbacks suppressed [ 247.904043][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 247.915342][ T5746] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 247.920252][ T5746] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 247.926977][ T5746] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 247.929960][ T5746] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 248.013945][T15979] bond0: (slave syz_tun): Releasing backup interface [ 248.037512][T16025] SELinux: ebitmap: empty map [ 248.039596][T16025] SELinux: failed to load policy [ 248.090518][T16033] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2851'. [ 248.095253][T16033] netlink: 'syz.8.2851': attribute type 7 has an invalid length. [ 248.098624][T16033] netlink: 'syz.8.2851': attribute type 8 has an invalid length. [ 248.102799][T16033] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2851'. [ 248.110441][T16033] erspan0: entered promiscuous mode [ 248.120876][T16033] gretap0: entered promiscuous mode [ 248.126711][T16033] erspan0: left promiscuous mode [ 248.131407][T16033] gretap0: left promiscuous mode [ 248.150061][ T40] audit: type=1400 audit(2000000033.179:31995): avc: denied { associate } for pid=16030 comm="syz.7.2852" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 248.218766][ T8542] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 248.222646][ T8542] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 248.226772][ T8542] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.230974][ T8542] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 248.237453][ T8542] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 248.242320][ T8542] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 3] type 2 family 0 port 256 - 0 [ 248.343937][ T8542] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 248.348040][ T8542] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 248.354292][ T8542] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.358520][ T8542] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 248.363415][ T8542] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 248.367079][ T8542] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 3] type 2 family 0 port 256 - 0 [ 248.378892][T16045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16045 comm=syz.6.2853 [ 248.384466][T16045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16045 comm=syz.6.2853 [ 248.455112][ T8542] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 248.459329][ T8542] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 248.464096][ T8542] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.468341][ T8542] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 248.473057][ T8542] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 248.477354][ T8542] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 3] type 2 family 0 port 256 - 0 [ 248.564232][ T8542] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 248.568272][ T8542] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 248.572060][ T8542] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.576150][ T8542] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 248.580286][ T8542] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 248.584605][ T8542] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 3] type 2 family 0 port 256 - 0 [ 248.730936][ T8542] dvmrp0: left allmulticast mode [ 248.772991][ T40] audit: type=1400 audit(2000000033.809:31996): avc: denied { write } for pid=16049 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.838086][ T40] audit: type=1400 audit(2000000033.869:31997): avc: denied { write } for pid=16052 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.862276][ T8542] bond8 (unregistering): (slave vti0): Releasing backup interface [ 248.864748][ T8542] vti0 (unregistering): left promiscuous mode [ 248.917945][T16032] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 248.921488][T16032] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 248.924581][ T8542] bond2 (unregistering): (slave geneve2): Releasing active interface [ 248.935624][T16032] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 248.941240][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 249.035152][ T40] audit: type=1400 audit(2000000034.069:31998): avc: denied { write } for pid=16054 comm="syz.6.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 249.110413][ T8542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.115358][T16068] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 249.120459][ T8542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.129039][ T8542] bond0 (unregistering): Released all slaves [ 249.139695][ T8542] bond1 (unregistering): Released all slaves [ 249.159211][ T8542] bond2 (unregistering): Released all slaves [ 249.178799][ T8542] bond3 (unregistering): Released all slaves [ 249.191407][ T8542] bond4 (unregistering): Released all slaves [ 249.203843][ T8542] bond5 (unregistering): Released all slaves [ 249.223293][ T8542] bond6 (unregistering): Released all slaves [ 249.231289][ T9968] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 249.240364][ T8542] bond7 (unregistering): Released all slaves [ 249.247779][ T8542] bond8 (unregistering): Released all slaves [ 249.255622][ T5445] 8021q: adding VLAN 0 to HW filter on device eth14 [ 249.336680][ T34] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 249.370329][ T9968] usb 13-1: device descriptor read/64, error -71 [ 249.405902][ T40] audit: type=1400 audit(2000000034.439:31999): avc: denied { write } for pid=16081 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.428256][T16004] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.430829][T16004] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.433289][T16004] bridge_slave_0: entered allmulticast mode [ 249.435922][T16004] bridge_slave_0: entered promiscuous mode [ 249.439004][T16004] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.441649][T16004] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.443988][T16004] bridge_slave_1: entered allmulticast mode [ 249.446819][T16004] bridge_slave_1: entered promiscuous mode [ 249.473290][T16004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.479930][T16004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.525406][T16004] team0: Port device team_slave_0 added [ 249.530265][T16004] team0: Port device team_slave_1 added [ 249.574579][T16004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.577515][T16004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.589601][T16004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.608825][ T5445] 8021q: adding VLAN 0 to HW filter on device eth15 [ 249.614298][T16004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.617211][T16004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.623005][ T9968] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 249.628868][T16004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.698498][T16004] hsr_slave_0: entered promiscuous mode [ 249.701886][T16004] hsr_slave_1: entered promiscuous mode [ 249.704559][T16004] debugfs: 'hsr0' already exists in 'hsr' [ 249.706957][T16004] Cannot create hsr debugfs directory [ 249.761344][ T9968] usb 13-1: device descriptor read/64, error -71 [ 249.881437][ T9968] usb usb13-port1: attempt power cycle [ 249.920530][ T8542] hsr_slave_0: left promiscuous mode [ 249.924200][ T8542] hsr_slave_1: left promiscuous mode [ 249.928992][ T8542] veth1_macvtap: left promiscuous mode [ 249.930650][ T8542] veth0_macvtap: left promiscuous mode [ 249.933515][ T8542] veth1_vlan: left promiscuous mode [ 249.935245][ T8542] veth0_vlan: left promiscuous mode [ 249.981246][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 250.114960][T16114] XFS (nullb0): Invalid superblock magic number [ 250.149897][ T8542] team0 (unregistering): Port device team_slave_1 removed [ 250.177324][ T8542] team0 (unregistering): Port device team_slave_0 removed [ 250.221359][ T62] Bluetooth: hci4: command 0x041b tx timeout [ 250.228469][T16124] tmpfs: Unknown parameter 'çpol' [ 250.247141][ T8542] team0 (unregistering): Port device veth0 removed [ 250.261407][ T9968] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 250.286316][ T5445] 8021q: adding VLAN 0 to HW filter on device eth16 [ 250.292996][ T9968] usb 13-1: device descriptor read/8, error -71 [ 250.400792][T16133] loop2: detected capacity change from 0 to 7 [ 250.405867][T16133] loop2: [ 250.406926][T16133] loop2: partition table partially beyond EOD, truncated [ 250.422032][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 250.422042][ T40] audit: type=1400 audit(2000000035.459:32003): avc: denied { write } for pid=16132 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.483888][ T40] audit: type=1400 audit(2000000035.519:32004): avc: denied { write } for pid=16136 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.531430][ T9968] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 250.563743][T16128] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 250.567146][ T9968] usb 13-1: device descriptor read/8, error -71 [ 250.611878][ T8542] IPVS: stop unused estimator thread 0... [ 250.621317][T16143] xt_l2tp: unknown flags: 51 [ 250.642238][ T40] audit: type=1400 audit(2000000035.669:32005): avc: denied { write } for pid=16139 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.671465][ T9968] usb usb13-port1: unable to enumerate USB device [ 250.688112][ T40] audit: type=1400 audit(2000000035.719:32006): avc: denied { write } for pid=16151 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.760463][T16157] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2874'. [ 250.782663][ T40] audit: type=1400 audit(2000000035.809:32007): avc: denied { write } for pid=16155 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.793276][T16004] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 250.797121][T16004] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 250.799785][T16004] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 250.803567][T16004] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 250.804136][T16163] loop5: detected capacity change from 0 to 2640 [ 250.806172][T16004] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 250.811486][T16163] buffer_io_error: 10 callbacks suppressed [ 250.811496][T16163] Buffer I/O error on dev loop5, logical block 0, async page read [ 250.818786][T16004] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 250.823867][T16004] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 250.826259][T16163] Buffer I/O error on dev loop5, logical block 0, async page read [ 250.830606][T16004] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 250.835298][T16163] Buffer I/O error on dev loop5, logical block 0, async page read [ 250.840257][T16163] Buffer I/O error on dev loop5, logical block 0, async page read [ 250.844074][T16163] Buffer I/O error on dev loop5, logical block 0, async page read [ 250.848490][T16163] Buffer I/O error on dev loop5, logical block 0, async page read [ 250.853631][ T40] audit: type=1400 audit(2000000035.879:32008): avc: denied { write } for pid=16166 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.854578][T16163] Buffer I/O error on dev loop5, logical block 0, async page read [ 250.864387][T16163] Buffer I/O error on dev loop5, logical block 0, async page read [ 250.867629][T16163] ldm_validate_partition_table(): Disk read failed. [ 250.870353][T16163] Buffer I/O error on dev loop5, logical block 0, async page read [ 250.880083][T16163] Buffer I/O error on dev loop5, logical block 0, async page read [ 250.884027][T16163] Dev loop5: unable to read RDB block 0 [ 250.892539][T16163] loop5: unable to read partition table [ 250.893545][T16004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.904401][T16163] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 250.913217][T16171] ldm_validate_partition_table(): Disk read failed. [ 250.913915][T16004] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.916062][T16171] Dev loop5: unable to read RDB block 0 [ 250.920824][T16171] loop5: unable to read partition table [ 250.923744][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.926713][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.940229][ T6492] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.942436][ T6492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.011254][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 251.073481][T16179] kvm: user requested TSC rate below hardware speed [ 251.077563][T16179] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 251.085073][T16179] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2876'. [ 251.205745][ T40] audit: type=1400 audit(2000000036.239:32009): avc: denied { getattr } for pid=16183 comm="syz.7.2877" path="socket:[68899]" dev="sockfs" ino=68899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 251.236249][T16179] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2876'. [ 251.263477][T16004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.414805][T16004] veth0_vlan: entered promiscuous mode [ 251.419892][T16004] veth1_vlan: entered promiscuous mode [ 251.440108][T16004] veth0_macvtap: entered promiscuous mode [ 251.444775][T16004] veth1_macvtap: entered promiscuous mode [ 251.454267][T16004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.461785][T16004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.468032][ T6482] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.473435][ T6482] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.478281][ T6482] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.480750][ T6482] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.586207][ T6492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.588701][ T6492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.610926][ T8545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.613654][ T8545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.616671][T16216] comedi comedi1: c6xdigio: I/O port conflict (0x100,3) [ 251.619707][T16217] comedi comedi1: c6xdigio: I/O port conflict (0x100,3) [ 251.625699][ T40] audit: type=1400 audit(2000000036.659:32010): avc: denied { mounton } for pid=16004 comm="syz-executor" path="/syzkaller.NiMEue/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=69847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 251.680009][T16219] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2842'. [ 251.708992][T16219] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.713156][T16219] bridge_slave_1: left allmulticast mode [ 251.715222][T16219] bridge_slave_1: left promiscuous mode [ 251.717348][T16219] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.725163][T16219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2842'. [ 251.728597][T16219] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2842'. [ 251.760508][T16222] vxcan0: tx address claim with different name [ 251.763404][T16223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2885'. [ 251.766329][T16222] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2885'. [ 251.769137][T16222] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2885'. [ 251.771443][T16223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2885'. [ 251.904843][ T40] audit: type=1326 audit(2000000036.939:32011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16227 comm="syz.5.2889" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f78da79ce59 code=0x0 [ 251.936053][ T6482] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.028843][ T6482] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.061314][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 252.078303][ T5746] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.084744][ T5746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.085143][ T5739] Bluetooth: hci4: Malformed Event: 0x13 [ 252.090249][ T5746] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.095199][ T5746] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.098104][ T5746] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.116158][ T6482] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.257658][ T6482] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.276777][T16248] Invalid argument reading file caps for ./file0 [ 252.291279][ T62] Bluetooth: hci4: command 0x041b tx timeout [ 252.526077][ T6482] bridge_slave_1: left allmulticast mode [ 252.528312][ T6482] bridge_slave_1: left promiscuous mode [ 252.530659][ T6482] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.536704][ T6482] bridge_slave_0: left allmulticast mode [ 252.538963][ T6482] bridge_slave_0: left promiscuous mode [ 252.543682][ T6482] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.602194][ T40] audit: type=1400 audit(2000000037.629:32012): avc: denied { write } for pid=16266 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.816294][ T6482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.823585][ T6482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.829720][ T6482] bond0 (unregistering): Released all slaves [ 252.837918][ T6482] bond1 (unregistering): Released all slaves [ 252.850747][ T6482] bond2 (unregistering): Released all slaves [ 252.866334][ T6482] bond3 (unregistering): Released all slaves [ 252.878417][ T6482] bond4 (unregistering): Released all slaves [ 252.890204][ T6482] bond5 (unregistering): Released all slaves [ 252.916480][ T5445] 8021q: adding VLAN 0 to HW filter on device eth14 [ 252.922182][T16275] tipc: Started in network mode [ 252.924405][T16275] tipc: Node identity ac14142f, cluster identity 4711 [ 252.927631][T16275] tipc: New replicast peer: 0.0.0.0 [ 252.930536][T16275] tipc: Enabled bearer , priority 10 [ 252.938223][T16275] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001 [ 253.042549][ T6482] : left promiscuous mode [ 253.053324][T16243] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 253.082683][T16234] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.085051][T16234] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.087840][T16234] bridge_slave_0: entered allmulticast mode [ 253.091942][T16234] bridge_slave_0: entered promiscuous mode [ 253.101327][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 253.102996][T16234] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.106473][T16234] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.109425][T16234] bridge_slave_1: entered allmulticast mode [ 253.115645][T16234] bridge_slave_1: entered promiscuous mode [ 253.173132][T16234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.181886][T16234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.222867][T16234] team0: Port device team_slave_0 added [ 253.227691][T16234] team0: Port device team_slave_1 added [ 253.259739][T16234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.262527][T16234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.271608][T16234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.277705][ T5445] 8021q: adding VLAN 0 to HW filter on device eth15 [ 253.325670][T16234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.328237][T16234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.339596][T16234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.457993][T16234] hsr_slave_0: entered promiscuous mode [ 253.460504][T16234] hsr_slave_1: entered promiscuous mode [ 253.466104][T16234] debugfs: 'hsr0' already exists in 'hsr' [ 253.467941][T16234] Cannot create hsr debugfs directory [ 253.501112][T16305] syz.8.2902 (16305): drop_caches: 2 [ 253.681661][ T10] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 253.720210][ T6482] hsr_slave_0: left promiscuous mode [ 253.726980][ T6482] hsr_slave_1: left promiscuous mode [ 253.735378][ T6482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.739980][ T6482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.748612][ T6482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.751845][ T6482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.764315][ T6482] veth1_macvtap: left promiscuous mode [ 253.766280][ T6482] veth0_macvtap: left promiscuous mode [ 253.768015][ T6482] veth1_vlan: left promiscuous mode [ 253.770074][ T6482] veth0_vlan: left promiscuous mode [ 253.831410][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 253.838498][ T10] usb 10-1: config 0 has no interfaces? [ 253.844581][ T10] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 253.847519][ T10] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 253.850021][ T10] usb 10-1: Product: syz [ 253.851890][ T10] usb 10-1: Manufacturer: syz [ 253.853435][ T10] usb 10-1: SerialNumber: syz [ 253.858783][ T10] usb 10-1: config 0 descriptor?? [ 253.890411][T16351] nbd: couldn't find a device at index -2146435068 [ 253.971125][ T6482] team0 (unregistering): Port device team_slave_1 removed [ 253.980016][ T6482] team0 (unregistering): Port device team_slave_0 removed [ 254.088875][ T5445] 8021q: adding VLAN 0 to HW filter on device eth16 [ 254.093568][ T24] tipc: Node number set to 2886997039 [ 254.121840][ T9968] usb 10-1: USB disconnect, device number 8 [ 254.131354][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 254.212389][ T62] Bluetooth: hci0: command tx timeout [ 254.290981][T16234] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 254.300664][T16234] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 254.309753][T16234] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 254.316785][T16234] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 254.319527][T16234] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 254.329029][T16234] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 254.332591][T16234] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 254.349660][T16234] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 254.371278][ T62] Bluetooth: hci4: command 0x041b tx timeout [ 254.429148][T16379] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 254.435702][T16234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.475077][ T5445] 8021q: adding VLAN 0 to HW filter on device eth17 [ 254.487390][T16234] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.496667][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.499192][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.512855][T16370] FAT-fs (nullb0): bogus number of reserved sectors [ 254.513250][ T8542] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.517994][T16370] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 254.518424][ T8542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.590643][ T6482] IPVS: stop unused estimator thread 0... [ 254.888691][T16407] kvm: kvm [16406]: vcpu0, guest rIP: 0x9133 Unhandled WRMSR(0x11e) = 0x0 [ 254.913922][T16234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.931765][T16421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=16421 comm=syz.6.2926 [ 255.039755][T16429] netlink: 'syz.5.2928': attribute type 1 has an invalid length. [ 255.113473][T16429] veth3: entered promiscuous mode [ 255.143110][T16234] veth0_vlan: entered promiscuous mode [ 255.150656][T16234] veth1_vlan: entered promiscuous mode [ 255.171414][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 255.178917][T16234] veth0_macvtap: entered promiscuous mode [ 255.185734][T16234] veth1_macvtap: entered promiscuous mode [ 255.201448][T16234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.215512][T16234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.227284][ T6492] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.230950][ T6492] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.235598][ T6492] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.239121][ T6492] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.308292][ T8545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.310871][ T8545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.372343][ T8545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.376054][ T8545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.970776][T16469] efs: cannot read volume header [ 256.042756][T16472] FAULT_INJECTION: forcing a failure. [ 256.042756][T16472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.051587][T16472] CPU: 0 UID: 0 PID: 16472 Comm: syz.9.2940 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.051616][T16472] Tainted: [L]=SOFTLOCKUP [ 256.051622][T16472] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 256.051633][T16472] Call Trace: [ 256.051639][T16472] [ 256.051646][T16472] dump_stack_lvl+0x100/0x190 [ 256.051683][T16472] should_fail_ex.cold+0x5/0xa [ 256.051708][T16472] _copy_to_iter+0x5a4/0x1720 [ 256.051744][T16472] ? __pfx__copy_to_iter+0x10/0x10 [ 256.051769][T16472] ? proc_single_show+0x179/0x1f0 [ 256.051788][T16472] ? single_next+0xd/0x40 [ 256.051804][T16472] ? single_stop+0x9/0x10 [ 256.051819][T16472] ? traverse.part.0.constprop.0+0x2c5/0x650 [ 256.051849][T16472] seq_read_iter+0x691/0x1270 [ 256.051880][T16472] seq_read+0x33b/0x4c0 [ 256.051902][T16472] ? __pfx_seq_read+0x10/0x10 [ 256.051928][T16472] ? avc_policy_seqno+0x9/0x20 [ 256.051945][T16472] ? selinux_file_permission+0x8f/0x6d0 [ 256.051994][T16472] ? rw_verify_area+0xce/0x6d0 [ 256.052013][T16472] ? __pfx_seq_read+0x10/0x10 [ 256.052034][T16472] vfs_read+0x1e4/0xb30 [ 256.052056][T16472] ? __pfx_vfs_read+0x10/0x10 [ 256.052073][T16472] ? find_held_lock+0x2b/0x80 [ 256.052090][T16472] ? __fget_files+0x215/0x3d0 [ 256.052111][T16472] ? __fget_files+0x215/0x3d0 [ 256.052137][T16472] ? __fget_files+0x21f/0x3d0 [ 256.052166][T16472] __x64_sys_pread64+0x1eb/0x250 [ 256.052188][T16472] ? __pfx___x64_sys_pread64+0x10/0x10 [ 256.052210][T16472] ? rcu_is_watching+0x12/0xc0 [ 256.052238][T16472] do_syscall_64+0x115/0x870 [ 256.052275][T16472] ? clear_bhb_loop+0x40/0x90 [ 256.052298][T16472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.052315][T16472] RIP: 0033:0x7f37f279ce59 [ 256.052331][T16472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.052346][T16472] RSP: 002b:00007f37f357e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 256.052365][T16472] RAX: ffffffffffffffda RBX: 00007f37f2a15fa0 RCX: 00007f37f279ce59 [ 256.052375][T16472] RDX: 000000000000000f RSI: 0000200000000140 RDI: 0000000000000006 [ 256.052386][T16472] RBP: 00007f37f357e090 R08: 0000000000000000 R09: 0000000000000000 [ 256.052396][T16472] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 256.052406][T16472] R13: 00007f37f2a16038 R14: 00007f37f2a15fa0 R15: 00007fff84cd63c8 [ 256.052431][T16472] [ 256.071002][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 256.071017][ T40] audit: type=1326 audit(2000000041.099:32024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16474 comm="syz.6.2941" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e7699ce59 code=0x0 [ 256.123211][T16477] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 256.124281][ T40] audit: type=1400 audit(2000000041.159:32025): avc: denied { append } for pid=16474 comm="syz.6.2941" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 256.211458][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 256.294190][ T5746] Bluetooth: hci0: command tx timeout [ 256.451801][ T5746] Bluetooth: hci4: command 0x041b tx timeout [ 256.490225][T16491] __nla_validate_parse: 10 callbacks suppressed [ 256.490239][T16491] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2943'. [ 256.498164][ T6477] bond0: (slave bond_slave_0): interface is now down [ 256.501380][ T6477] bond0: (slave bond_slave_1): interface is now down [ 256.636053][T16504] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2949'. [ 256.639103][T16504] netlink: 'syz.5.2949': attribute type 2 has an invalid length. [ 256.644549][ T40] audit: type=1400 audit(2000000041.679:32026): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=57408 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 256.646266][ T6477] bond0: (slave bond_slave_0): interface is now down [ 256.661300][ T40] audit: type=1400 audit(2000000041.679:32027): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=57408 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 256.661509][ T6477] bond0: (slave bond_slave_1): interface is now down [ 256.695937][T16508] fuse: Unknown parameter 'uyser_id' [ 256.706537][ T6477] bond0: now running without any active interface! [ 256.772087][ T5746] Bluetooth: hci1: command 0x1003 tx timeout [ 256.782625][ T62] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 256.851733][T16519] afs: Unknown parameter 'flocÿš‹¤' [ 256.920404][T16523] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 256.980622][T16537] netlink: 'syz.9.2959': attribute type 20 has an invalid length. [ 256.983179][T16537] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2959'. [ 256.993608][T16537] netlink: 'syz.9.2959': attribute type 20 has an invalid length. [ 256.995381][T16541] overlay: ./file0 is not a directory [ 256.998300][T16537] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2959'. [ 257.005915][ T8542] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.009594][ T8542] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.029101][ T8542] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.035816][ T8542] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.036167][T16541] set match dimension is over the limit! [ 257.045153][T16541] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2958'. [ 257.077347][T16546] netlink: 'syz.8.2961': attribute type 4 has an invalid length. [ 257.077587][T16547] netlink: 'syz.8.2961': attribute type 4 has an invalid length. [ 257.080122][T16547] netlink: 156 bytes leftover after parsing attributes in process `syz.8.2961'. [ 257.080319][T16548] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 257.084436][T16546] netlink: 156 bytes leftover after parsing attributes in process `syz.8.2961'. [ 257.102315][T16546] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 257.115121][T16547] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 257.127705][T16550] IPv6: sit1: Disabled Multicast RS [ 257.132794][T16550] sit1: entered allmulticast mode [ 257.253253][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 257.301067][T16565] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2970'. [ 257.383942][ T40] audit: type=1400 audit(2000000042.389:32028): avc: denied { ioctl } for pid=16564 comm="syz.9.2970" path="socket:[70535]" dev="sockfs" ino=70535 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 257.631371][T16569] syzkaller0: entered promiscuous mode [ 257.633997][T16569] syzkaller0: entered allmulticast mode [ 257.699769][T16577] ubi8: attaching mtd0 [ 257.709267][T16577] ubi8 error: validate_ec_hdr: bad VID header offset 64, expected 3901 [ 257.714546][T16577] ubi8 error: validate_ec_hdr: bad EC header [ 257.717098][T16577] Erase counter header dump: [ 257.719133][T16577] magic 0x55424923 [ 257.721111][T16577] version 1 [ 257.722840][T16577] ec 1 [ 257.724044][T16577] vid_hdr_offset 64 [ 257.725251][T16577] data_offset 128 [ 257.726498][T16577] image_seq -978116182 [ 257.727953][T16577] hdr_crc 0x1ab4827c [ 257.729410][T16577] erase counter header hexdump: [ 257.731539][T16577] CPU: 2 UID: 0 PID: 16577 Comm: syz.8.2972 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.731581][T16577] Tainted: [L]=SOFTLOCKUP [ 257.731588][T16577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 257.731599][T16577] Call Trace: [ 257.731607][T16577] [ 257.731614][T16577] dump_stack_lvl+0x100/0x190 [ 257.731642][T16577] validate_ec_hdr+0x2d0/0x330 [ 257.731676][T16577] ubi_io_read_ec_hdr+0x656/0x6d0 [ 257.731699][T16577] ubi_attach+0x601/0x4d30 [ 257.731731][T16577] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 257.731755][T16577] ? ubi_msg+0x114/0x159 [ 257.731777][T16577] ? __pfx_ubi_msg+0x10/0x10 [ 257.731799][T16577] ? __pfx_ubi_attach+0x10/0x10 [ 257.731821][T16577] ? lockdep_init_map_type+0x5c/0x250 [ 257.731847][T16577] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 257.731871][T16577] ? __vmalloc_node_noprof+0xad/0xf0 [ 257.731901][T16577] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 257.731930][T16577] ubi_attach_mtd_dev+0x139f/0x32a0 [ 257.731968][T16577] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 257.731990][T16577] ? __pfx_get_mtd_device+0x10/0x10 [ 257.732014][T16577] ctrl_cdev_ioctl+0x36a/0x400 [ 257.732038][T16577] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 257.732064][T16577] ? selinux_file_ioctl+0x13b/0x290 [ 257.732090][T16577] ? selinux_file_ioctl+0xb6/0x290 [ 257.732120][T16577] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 257.732147][T16577] __x64_sys_ioctl+0x18e/0x210 [ 257.732168][T16577] do_syscall_64+0x115/0x870 [ 257.732192][T16577] ? clear_bhb_loop+0x40/0x90 [ 257.732216][T16577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.732237][T16577] RIP: 0033:0x7f55e879ce59 [ 257.732253][T16577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.732272][T16577] RSP: 002b:00007f55e966c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.732290][T16577] RAX: ffffffffffffffda RBX: 00007f55e8a15fa0 RCX: 00007f55e879ce59 [ 257.732303][T16577] RDX: 0000200000000700 RSI: 0000000040186f40 RDI: 0000000000000005 [ 257.732315][T16577] RBP: 00007f55e8832d6f R08: 0000000000000000 R09: 0000000000000000 [ 257.732325][T16577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.732336][T16577] R13: 00007f55e8a16038 R14: 00007f55e8a15fa0 R15: 00007ffd9ba17818 [ 257.732361][T16577] [ 257.733529][T16577] ubi8 error: ubi_io_read_ec_hdr: validation failed for PEB 0 [ 258.036007][T16577] ubi8 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 258.141395][T16454] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 258.301296][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 258.309864][T16454] usb 11-1: Using ep0 maxpacket: 32 [ 258.314940][T16454] usb 11-1: config index 0 descriptor too short (expected 156, got 27) [ 258.318559][T16454] usb 11-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 258.323299][T16454] usb 11-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 201, changing to 11 [ 258.327947][T16454] usb 11-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 42299, setting to 1024 [ 258.332827][T16454] usb 11-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 258.337994][T16454] usb 11-1: config 0 interface 0 has no altsetting 0 [ 258.343003][T16454] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 258.346897][T16454] usb 11-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 258.350379][T16454] usb 11-1: Product: syz [ 258.352456][T16454] usb 11-1: Manufacturer: syz [ 258.354344][T16454] usb 11-1: SerialNumber: syz [ 258.357780][T16454] usb 11-1: config 0 descriptor?? [ 258.360100][T16581] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 258.365611][T16454] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 258.370901][T16454] ldusb 11-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 258.372929][ T62] Bluetooth: hci0: command tx timeout [ 258.531318][ T62] Bluetooth: hci4: command 0x041b tx timeout [ 258.624684][T16581] ldusb 11-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 258.625204][T16454] usb 11-1: USB disconnect, device number 15 [ 258.627770][ C1] ldusb 11-1:0.0: usb_submit_urb failed (-19) [ 258.652508][T16454] ldusb 11-1:0.0: LD USB Device #0 now disconnected [ 258.835310][T16599] ldusb: No device or device unplugged -19 [ 259.331442][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 259.341526][ T40] audit: type=1400 audit(2000000044.379:32029): avc: denied { sendto } for pid=23 comm="ksoftirqd/2" saddr=fe80::1b daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 259.350397][ T40] audit: type=1400 audit(2000000044.379:32030): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 260.248075][T16617] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2983'. [ 260.254467][T16616] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 260.266559][T16616] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2983'. [ 260.324027][ T40] audit: type=1400 audit(2000000045.359:32031): avc: denied { bind } for pid=16613 comm="syz.6.2982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 260.353916][T16622] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 260.358607][ T40] audit: type=1400 audit(2000000045.389:32032): avc: denied { relabelto } for pid=16621 comm="syz.5.2985" name="27" dev="tmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 260.371370][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 260.383596][ T40] audit: type=1400 audit(2000000045.389:32033): avc: denied { associate } for pid=16621 comm="syz.5.2985" name="27" dev="tmpfs" ino=156 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 260.413607][T16267] hid_parser_main: 4 callbacks suppressed [ 260.413619][T16267] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 260.454796][T16267] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 260.463390][ T62] Bluetooth: hci0: command tx timeout [ 260.494514][T16632] usb usb8: usbfs: process 16632 (syz.6.2989) did not claim interface 0 before use [ 260.611484][ T62] Bluetooth: hci4: command 0x041b tx timeout [ 260.632908][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.672801][T16644] (syz.6.2992,16644,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 260.676558][T16644] (syz.6.2992,16644,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 260.751850][T16644] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 260.792072][T16649] netlink: 'syz.6.2995': attribute type 1 has an invalid length. [ 260.845301][T16649] 8021q: adding VLAN 0 to HW filter on device bond9 [ 260.897910][T16650] bond9: (slave geneve3): making interface the new active one [ 260.912697][T16650] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 260.923575][ T6492] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.930705][ T6492] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.938232][ T6492] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.941990][ T6492] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.979611][T16662] netlink: 'syz.5.2999': attribute type 10 has an invalid length. [ 260.996303][T16666] JFS: discard option not supported on device [ 261.005049][T16666] Mount JFS Failure: -5 [ 261.007316][T16662] team0 (unregistering): Port device team_slave_0 removed [ 261.022970][T16662] team0 (unregistering): Port device team_slave_1 removed [ 261.088315][T16679] sctp: [Deprecated]: syz.8.3002 (pid 16679) Use of int in maxseg socket option. [ 261.088315][T16679] Use struct sctp_assoc_value instead [ 261.240029][T16696] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 261.411535][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 261.415011][T16698] block nbd2: server does not support multiple connections per device. [ 261.418946][T16698] block nbd2: shutting down sockets [ 261.486554][T16706] overlayfs: missing 'workdir' [ 262.022581][T16718] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 262.078026][T16728] __nla_validate_parse: 4 callbacks suppressed [ 262.078043][T16728] netlink: 200 bytes leftover after parsing attributes in process `syz.9.3017'. [ 262.159909][T16732] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 262.177046][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 262.177059][ T40] audit: type=1400 audit(2000000047.199:32044): avc: denied { mount } for pid=16733 comm="syz.8.3019" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 262.182092][T16734] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3019'. [ 262.274302][T16742] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3020'. [ 262.284699][T16744] Bluetooth: MGMT ver 1.23 [ 262.293902][T16744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16744 comm=syz.5.3023 [ 262.352816][T16750] binder: 16749:16750 ioctl c0306201 200000000080 returned -14 [ 262.358048][T16752] binder: 16749:16752 unknown command 0 [ 262.363864][T16752] binder: 16749:16752 ioctl c0306201 200000000500 returned -22 [ 262.367349][T16751] binder: 16749:16751 ioctl c0306201 2000000003c0 returned -14 [ 262.428016][ T40] audit: type=1400 audit(2000000047.459:32045): avc: denied { read append } for pid=16758 comm="syz.9.3027" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 262.441290][ T40] audit: type=1400 audit(2000000047.459:32046): avc: denied { open } for pid=16758 comm="syz.9.3027" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 262.451583][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 262.452944][T16762] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3029'. [ 262.456533][ T40] audit: type=1400 audit(2000000047.469:32047): avc: denied { map } for pid=16758 comm="syz.9.3027" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 262.466669][ T40] audit: type=1400 audit(2000000047.469:32048): avc: denied { write execute } for pid=16758 comm="syz.9.3027" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 262.692287][ T62] Bluetooth: hci4: command 0x041b tx timeout [ 262.715057][ T5881] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 262.733917][ T5881] hid-generic 0000:0000:0000.000B: hidraw1: HID v0.00 Device [syz1] on syz0 [ 262.905928][ T40] audit: type=1400 audit(2000000047.939:32049): avc: denied { node_bind } for pid=16785 comm="syz.8.3037" saddr=::ffff:0.0.0.0 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 262.922901][T16774] overlayfs: unescaped trailing colons in lowerdir mount option. [ 262.946979][T16788] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3038'. [ 263.069695][ T40] audit: type=1326 audit(2000000048.099:32050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16796 comm="syz.8.3040" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55e879ce59 code=0x0 [ 263.082059][T16799] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3041'. [ 263.084798][T16799] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3041'. [ 263.092433][T16801] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3042'. [ 263.174005][T16806] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3040'. [ 263.199663][ T5812] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 263.210405][T16806] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3040'. [ 263.247049][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.252109][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.256817][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.262256][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.267383][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.273514][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.277267][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.281762][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.286206][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.290079][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.295645][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.300502][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.305567][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.310201][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.315003][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.319499][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.325323][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.330367][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.335541][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.340382][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.345587][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.350371][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.355406][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.360522][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.365426][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.370158][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.375138][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.379960][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.384831][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.389422][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.394136][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.398784][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.403355][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.407521][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.412105][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.416563][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.421070][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.425738][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.430352][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.434544][T16813] xt_hashlimit: size too large, truncated to 1048576 [ 263.435443][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.442399][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.447748][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.451234][ T5881] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 263.452279][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.459589][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.464307][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.468935][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.474073][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.478585][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.483688][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.488150][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.492762][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 263.495824][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.500567][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.505898][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.510401][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.515185][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.520194][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.525090][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.529551][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.534158][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.538648][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.543100][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.547655][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.552013][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.556538][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.561081][T16809] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 263.613452][ T5881] usb 14-1: Using ep0 maxpacket: 8 [ 263.617571][ T5881] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.622066][ T5881] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 263.626081][ T5881] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 263.631116][ T5881] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 263.635875][ T5881] usb 14-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 263.639957][ T5881] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.652198][ T5881] hub 14-1:1.0: bad descriptor, ignoring hub [ 263.657913][ T5881] hub 14-1:1.0: probe with driver hub failed with error -5 [ 263.667176][ T5881] cdc_wdm 14-1:1.0: skipping garbage [ 263.669647][ T5881] cdc_wdm 14-1:1.0: skipping garbage [ 263.676166][ T5881] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device [ 263.679050][ T5881] cdc_wdm 14-1:1.0: Unknown control protocol [ 263.688030][T16816] use of bytesused == 0 is deprecated and will be removed in the future, [ 263.690783][T16816] use the actual size instead. [ 263.855269][ T40] audit: type=1400 audit(2000000048.889:32051): avc: denied { read write } for pid=16805 comm="syz.9.3044" name="cdc-wdm0" dev="devtmpfs" ino=3377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 263.862776][ T40] audit: type=1400 audit(2000000048.889:32052): avc: denied { open } for pid=16805 comm="syz.9.3044" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 264.432688][T16830] (syz.6.3050,16830,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 264.433641][ T40] audit: type=1400 audit(2000000049.469:32053): avc: denied { write } for pid=16829 comm="syz.6.3050" name="/" dev="ocfs2_dlmfs" ino=71628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 264.531340][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 265.571502][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 266.041318][ T5783] usb 11-1: new full-speed USB device number 16 using dummy_hcd [ 266.199420][ T5783] usb 11-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 266.205993][ T5783] usb 11-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 266.219580][ T5783] usb 11-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 266.223458][ T5783] usb 11-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 156, setting to 64 [ 266.226808][ T5783] usb 11-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 266.232895][ T5783] usb 11-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 266.235853][ T5783] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.238395][ T5783] usb 11-1: Product: syz [ 266.239770][ T5783] usb 11-1: Manufacturer: syz [ 266.242844][ T5783] usb 11-1: SerialNumber: syz [ 266.243113][T16898] vxcan0: tx address claim with dlc 0 [ 266.249612][T16881] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 266.256547][ C0] imon 11-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 266.261580][ T5783] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/input/input36 [ 266.266353][T16898] macvtap1: entered allmulticast mode [ 266.471453][ T5783] imon 11-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 266.477158][ T5783] (id 0x00) [ 266.508179][T16925] fuse: Bad value for 'user_id' [ 266.510905][T16924] fuse: Bad value for 'user_id' [ 266.512873][T16924] fuse: Bad value for 'user_id' [ 266.515235][T16925] fuse: Bad value for 'user_id' [ 266.521656][ T5783] rc_core: IR keymap rc-imon-pad not found [ 266.523470][ T5783] Registered IR keymap rc-empty [ 266.527754][ T5783] imon 11-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 266.531129][ T5783] imon 11-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 266.536401][ T5783] imon:send_packet: packet tx failed (-71) [ 266.552946][ T5783] imon 11-1:155.0: remote input dev register failed [ 266.557153][ T5783] imon 11-1:155.0: imon_init_intf0: rc device setup failed [ 266.583172][ T5783] imon 11-1:155.0: unable to initialize intf0, err 0 [ 266.585275][ T5783] imon:imon_probe: failed to initialize context! [ 266.587362][ T5783] imon 11-1:155.0: unable to register, err -19 [ 266.590969][ T5783] usb 11-1: USB disconnect, device number 16 [ 266.611317][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 266.746440][T16935] ip6tnl0: Caught tx_queue_len zero misconfig [ 267.393370][T16974] bond1: entered promiscuous mode [ 267.399069][T16974] __nla_validate_parse: 7 callbacks suppressed [ 267.399085][T16974] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3080'. [ 267.411481][T16974] nbd: nbd0 already in use [ 267.474016][T16985] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3083'. [ 267.488650][T16985] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3083'. [ 267.500625][ T24] usb 14-1: USB disconnect, device number 2 [ 267.502961][T16807] cdc_wdm 14-1:1.0: Error autopm - -16 [ 267.661702][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 267.754916][T17014] netlink: 'syz.9.3089': attribute type 4 has an invalid length. [ 267.880914][T17028] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3092'. [ 267.956255][T17036] fuse: Unknown parameter 'rŠ…tmode' [ 268.027914][T17038] netlink: 'syz.8.3095': attribute type 21 has an invalid length. [ 268.033024][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 268.033036][ T40] audit: type=1400 audit(2000000053.069:32065): avc: denied { create } for pid=17037 comm="syz.8.3095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 268.082336][T17041] ipvlan2: entered allmulticast mode [ 268.084825][T17041] veth0_to_bridge: entered allmulticast mode [ 268.358921][T17055] input: syz0 as /devices/virtual/input/input38 [ 268.476175][T17059] binder: BC_ATTEMPT_ACQUIRE not supported [ 268.478654][T17059] binder: 17058:17059 ioctl c0306201 200000000100 returned -22 [ 268.691379][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 268.729899][T17075] overlayfs: missing 'workdir' [ 268.820403][T17078] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 268.830234][T17078] openvswitch: netlink: IP tunnel dst address not specified [ 268.840188][T17080] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3110'. [ 268.853006][T17080] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3110'. [ 268.856616][T17080] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3110'. [ 268.861572][T17080] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3110'. [ 268.888911][T17080] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3110'. [ 268.942321][T16064] ------------[ cut here ]------------ [ 268.944972][T16064] workqueue: cannot queue hci_conn_timeout on wq hci4 [ 268.947149][T16064] WARNING: kernel/workqueue.c:2297 at __queue_work+0xcee/0x1270, CPU#3: syz.6.2855/16064 [ 268.950270][T16064] Modules linked in: [ 268.952048][T16064] CPU: 3 UID: 0 PID: 16064 Comm: syz.6.2855 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.955311][T16064] Tainted: [L]=SOFTLOCKUP [ 268.956707][T16064] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 268.960987][T16064] RIP: 0010:__queue_work+0xcf2/0x1270 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 268.963472][T16064] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 3d 05 00 00 48 8d 3d 72 04 0b 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 268.972031][T16064] RSP: 0018:ffffc90004827698 EFLAGS: 00010046 [ 268.974562][T16064] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff110046e614b [ 268.977910][T16064] RDX: ffff8880577a8970 RSI: ffffffff8a826380 RDI: ffffffff90da1e80 [ 268.981074][T16064] RBP: ffff888023730a40 R08: 0000000000000005 R09: 0000000000000000 [ 268.984311][T16064] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880577a8800 [ 268.986764][T16064] R13: ffff88802578a540 R14: ffff888023730a88 R15: ffff888023730a48 [ 268.989254][T16064] FS: 0000000000000000(0000) GS:ffff8880d6683000(0000) knlGS:0000000000000000 [ 268.991267][ T40] audit: type=1400 audit(2000000053.999:32066): avc: denied { write } for pid=5721 comm="syz-executor" path="pipe:[5739]" dev="pipefs" ino=5739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 268.992110][T16064] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 269.002933][T16064] CR2: 00007f78db57cff8 CR3: 0000000025336000 CR4: 0000000000352ef0 [ 269.005873][T16064] Call Trace: [ 269.007020][T16064] [ 269.008021][T16064] ? __cancel_work+0x2b5/0x340 [ 269.009601][T16064] ? lockdep_hardirqs_on+0x78/0x100 [ 269.011448][T16064] ? __cancel_work+0x245/0x340 [ 269.013007][T16064] __queue_delayed_work+0x357/0x450 [ 269.014619][T16064] queue_delayed_work_on+0x180/0x1e0 [ 269.016161][T16064] l2cap_chan_del+0x649/0x930 [ 269.017492][T16064] l2cap_chan_close+0x3b0/0xa70 [ 269.018934][T16064] ? __pfx_l2cap_chan_close+0x10/0x10 [ 269.020643][T16064] ? __pfx_l2cap_conn_hold_unless_zero+0x10/0x10 [ 269.022970][T16064] l2cap_sock_shutdown+0x3cc/0x1160 [ 269.025116][T16064] ? do_raw_spin_lock+0x128/0x260 [ 269.027110][T16064] ? __pfx_l2cap_sock_shutdown+0x10/0x10 [ 269.029301][T16064] ? do_raw_write_lock+0x11e/0x260 [ 269.031471][T16064] ? __pfx_do_raw_write_lock+0x10/0x10 [ 269.033731][T16064] ? find_held_lock+0x2b/0x80 [ 269.035703][T16064] ? l2cap_sock_release+0x80/0x280 [ 269.037816][T16064] ? l2cap_sock_release+0x80/0x280 [ 269.039943][T16064] l2cap_sock_release+0x8d/0x280 [ 269.042147][T16064] __sock_release+0xb3/0x260 [ 269.044055][T16064] ? __pfx_sock_close+0x10/0x10 [ 269.046081][T16064] sock_close+0x1c/0x30 [ 269.047757][T16064] __fput+0x3ff/0xb50 [ 269.049023][T16064] task_work_run+0x150/0x240 [ 269.050431][T16064] ? __pfx_task_work_run+0x10/0x10 [ 269.052277][T16064] do_exit+0x951/0x2af0 [ 269.053990][T16064] ? __pfx_do_exit+0x10/0x10 [ 269.055993][T16064] ? cgroup_update_frozen_flag+0x107/0x210 [ 269.058389][T16064] ? find_held_lock+0x2b/0x80 [ 269.060349][T16064] ? get_signal+0x1872/0x2210 [ 269.062051][T16064] do_group_exit+0xd5/0x2a0 [ 269.063483][T16064] get_signal+0x20ff/0x2210 [ 269.064882][T16064] ? __pfx_get_signal+0x10/0x10 [ 269.066534][T16064] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 269.068396][T16064] arch_do_signal_or_restart+0x91/0x7e0 [ 269.070096][T16064] ? get_timespec64+0x147/0x240 [ 269.071733][T16064] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 269.074241][T16064] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 269.076812][T16064] ? rcu_is_watching+0x12/0xc0 [ 269.078781][T16064] exit_to_user_mode_loop+0x98/0x670 [ 269.080979][T16064] ? rcu_is_watching+0x12/0xc0 [ 269.082862][T16064] do_syscall_64+0x666/0x870 [ 269.084572][T16064] ? clear_bhb_loop+0x40/0x90 [ 269.086631][T16064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.089289][T16064] RIP: 0033:0x7f8e7695d68e [ 269.091274][T16064] Code: Unable to access opcode bytes at 0x7f8e7695d664. [ 269.094208][T16064] RSP: 002b:00007f8e778d8f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 269.097830][T16064] RAX: fffffffffffffdfc RBX: 00007f8e778d96c0 RCX: 00007f8e7695d68e [ 269.101439][T16064] RDX: 00007f8e778d8fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 269.104835][T16064] RBP: 00007f8e76a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 269.108052][T16064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.111120][T16064] R13: 00007f8e76c16128 R14: 00007f8e76c16090 R15: 00007fff14022b78 [ 269.114029][T16064] [ 269.115073][T16064] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 269.117403][T16064] CPU: 3 UID: 0 PID: 16064 Comm: syz.6.2855 Tainted: G L syzkaller #0 PREEMPT(full) [ 269.120944][T16064] Tainted: [L]=SOFTLOCKUP [ 269.122387][T16064] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 269.125607][T16064] Call Trace: [ 269.126697][T16064] [ 269.127654][T16064] dump_stack_lvl+0x100/0x190 [ 269.129166][T16064] vpanic+0x552/0x970 [ 269.130456][T16064] ? __pfx_vpanic+0x10/0x10 [ 269.132197][T16064] panic+0xd1/0xe0 [ 269.133879][T16064] ? __pfx_panic+0x10/0x10 [ 269.135580][T16064] ? check_panic_on_warn+0x1f/0x90 [ 269.137255][T16064] check_panic_on_warn.cold+0x19/0x34 [ 269.138933][T16064] ? __queue_work+0xcee/0x1270 [ 269.140651][T16064] __warn.cold+0x191/0x328 [ 269.142183][T16064] __report_bug+0x296/0x3d0 [ 269.143682][T16064] ? __queue_work+0xcee/0x1270 [ 269.145186][T16064] ? __pfx___report_bug+0x10/0x10 [ 269.146793][T16064] ? __pfx_hci_conn_timeout+0x10/0x10 [ 269.148597][T16064] ? __pfx_debug_object_assert_init+0x10/0x10 [ 269.150642][T16064] report_bug_entry+0xe1/0x290 [ 269.152256][T16064] ? __queue_work+0xcf2/0x1270 [ 269.153826][T16064] handle_bug+0x1cd/0x2a0 [ 269.155404][T16064] exc_invalid_op+0x17/0x50 [ 269.156896][T16064] asm_exc_invalid_op+0x1a/0x20 [ 269.158591][T16064] RIP: 0010:__queue_work+0xcf2/0x1270 [ 269.160377][T16064] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 3d 05 00 00 48 8d 3d 72 04 0b 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 269.166394][T16064] RSP: 0018:ffffc90004827698 EFLAGS: 00010046 [ 269.168332][T16064] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff110046e614b [ 269.171242][T16064] RDX: ffff8880577a8970 RSI: ffffffff8a826380 RDI: ffffffff90da1e80 [ 269.174276][T16064] RBP: ffff888023730a40 R08: 0000000000000005 R09: 0000000000000000 [ 269.177393][T16064] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880577a8800 [ 269.180422][T16064] R13: ffff88802578a540 R14: ffff888023730a88 R15: ffff888023730a48 [ 269.183571][T16064] ? __pfx_hci_conn_timeout+0x10/0x10 [ 269.185805][T16064] ? __queue_work+0xcc0/0x1270 [ 269.187719][T16064] ? __cancel_work+0x2b5/0x340 [ 269.189608][T16064] ? lockdep_hardirqs_on+0x78/0x100 [ 269.191388][T16064] ? __cancel_work+0x245/0x340 [ 269.193009][T16064] __queue_delayed_work+0x357/0x450 [ 269.194867][T16064] queue_delayed_work_on+0x180/0x1e0 [ 269.196796][T16064] l2cap_chan_del+0x649/0x930 [ 269.198472][T16064] l2cap_chan_close+0x3b0/0xa70 [ 269.200344][T16064] ? __pfx_l2cap_chan_close+0x10/0x10 [ 269.202329][T16064] ? __pfx_l2cap_conn_hold_unless_zero+0x10/0x10 [ 269.204610][T16064] l2cap_sock_shutdown+0x3cc/0x1160 [ 269.206435][T16064] ? do_raw_spin_lock+0x128/0x260 [ 269.208170][T16064] ? __pfx_l2cap_sock_shutdown+0x10/0x10 [ 269.210059][T16064] ? do_raw_write_lock+0x11e/0x260 [ 269.211914][T16064] ? __pfx_do_raw_write_lock+0x10/0x10 [ 269.213908][T16064] ? find_held_lock+0x2b/0x80 [ 269.215687][T16064] ? l2cap_sock_release+0x80/0x280 [ 269.217523][T16064] ? l2cap_sock_release+0x80/0x280 [ 269.219370][T16064] l2cap_sock_release+0x8d/0x280 [ 269.221336][T16064] __sock_release+0xb3/0x260 [ 269.223040][T16064] ? __pfx_sock_close+0x10/0x10 [ 269.224797][T16064] sock_close+0x1c/0x30 [ 269.226302][T16064] __fput+0x3ff/0xb50 [ 269.227752][T16064] task_work_run+0x150/0x240 [ 269.229588][T16064] ? __pfx_task_work_run+0x10/0x10 [ 269.231461][T16064] do_exit+0x951/0x2af0 [ 269.232966][T16064] ? __pfx_do_exit+0x10/0x10 [ 269.234649][T16064] ? cgroup_update_frozen_flag+0x107/0x210 [ 269.236743][T16064] ? find_held_lock+0x2b/0x80 [ 269.238498][T16064] ? get_signal+0x1872/0x2210 [ 269.240323][T16064] do_group_exit+0xd5/0x2a0 [ 269.242049][T16064] get_signal+0x20ff/0x2210 [ 269.243792][T16064] ? __pfx_get_signal+0x10/0x10 [ 269.245666][T16064] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 269.247723][T16064] arch_do_signal_or_restart+0x91/0x7e0 [ 269.249788][T16064] ? get_timespec64+0x147/0x240 [ 269.251523][T16064] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 269.253587][T16064] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 269.255572][T16064] ? rcu_is_watching+0x12/0xc0 [ 269.257226][T16064] exit_to_user_mode_loop+0x98/0x670 [ 269.259043][T16064] ? rcu_is_watching+0x12/0xc0 [ 269.260763][T16064] do_syscall_64+0x666/0x870 [ 269.262406][T16064] ? clear_bhb_loop+0x40/0x90 [ 269.264051][T16064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.266086][T16064] RIP: 0033:0x7f8e7695d68e [ 269.267856][T16064] Code: Unable to access opcode bytes at 0x7f8e7695d664. [ 269.270474][T16064] RSP: 002b:00007f8e778d8f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 269.273520][T16064] RAX: fffffffffffffdfc RBX: 00007f8e778d96c0 RCX: 00007f8e7695d68e [ 269.276257][T16064] RDX: 00007f8e778d8fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 269.278832][T16064] RBP: 00007f8e76a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 269.281588][T16064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.284154][T16064] R13: 00007f8e76c16128 R14: 00007f8e76c16090 R15: 00007fff14022b78 [ 269.286736][T16064] [ 269.288650][T16064] Kernel Offset: disabled [ 269.290032][T16064] Rebooting in 86400 seconds..