last executing test programs: 4m32.68049378s ago: executing program 3 (id=110): r0 = socket$inet_tcp(0x2, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x70, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000080)={{r1, r2+60000000}, {r6, r7+10000000}}, &(0x7f00000000c0)) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r8, 0x65, 0x3, &(0x7f00000002c0)=0x1, 0x4) r9 = timerfd_create(0x4, 0x0) timerfd_gettime(r9, &(0x7f0000000100)) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 4m32.431469913s ago: executing program 3 (id=112): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000ffffff000700000000170000000000000044", @ANYRES32=0x0, @ANYBLOB="7b130000000000001c0012800b00010067656e65766500000c000280060005004e200000"], 0x3c}}, 0x40800) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x6, 0x0, 0x35314142, 0x0, 0x0, [{0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {0x20}]}}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000000c0)={0x10000, 0x1, 0xb1ea, 0x7, 0xf8, "beeee9085f7264eefb782a565e7355ec82a482", 0x8, 0x1104d6f4}) syz_clone3(&(0x7f00000003c0)={0x4000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x16}, &(0x7f0000000200)=""/5, 0x5, &(0x7f0000000300)=""/144, &(0x7f0000000240)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x58) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x9, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4}, 0xe) shutdown(r4, 0x1) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000080)) write$tun(r3, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x22eb, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef) r5 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000000)=[{0x1, 0x2, {0x1, 0xf0, 0x1}, {0x0, 0x0, 0x2}, 0x1, 0x1}], 0x20) 4m32.191444182s ago: executing program 3 (id=116): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="80602a920c363a1e2072776d00"], 0xa) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x200, 0x8000, 0x1}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}}, 0x84) close_range(r0, r1, 0x2) mkdirat$cgroup(r0, &(0x7f0000000140)='syz0\x00', 0x1ff) 4m32.190581533s ago: executing program 3 (id=118): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800610001"], 0x48) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800610001"], 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCXONC(r2, 0x540a, 0x2) (async) ioctl$TCXONC(r2, 0x540a, 0x2) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x802}, 0x880) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000300), &(0x7f0000000340)='%pK \x00'}, 0x20) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x80, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = syz_io_uring_setup(0x106, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x5, 0x296}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) accept(r7, 0x0, 0x0) (async) accept(r7, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r4, 0x203516, 0x4addf, 0x2, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') (async) chdir(&(0x7f0000000100)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) (async) r8 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x9, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r8, r8, &(0x7f0000000080), 0x7f04) 4m31.951279779s ago: executing program 3 (id=124): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) 4m31.701398048s ago: executing program 3 (id=127): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="243a6da680ec9f988a2d90c61aac0d30957f59652b84bcc52f983a7ec49a2918ca4619336bc62e270152e138e4f47e4f353d0897579a86ab9ac5bf0ce073d3725049d8618874e68ff7940db29a2f81aafb1d2bafc5ec972ed0f7880c5f7e23195ce6d1e1dc1332549bf6410fa9d762a35fdd1c8d13608dab8b3fe998015c8b2fc51dd2ba28a62ab44726c5efb12417bdfce71b4dbf72dfc231aa2612a749bca3abc7e1184060ae54a9a5fc4b11a65df85a5664e0310e29abe9ec908c9fb26f58e669e1390c3a48e916fe4d8097c0f627d56b", 0xd2}, {&(0x7f0000001080)="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", 0x1000}, {&(0x7f0000000000)="dfd3b2b3a93cd4699e73a2661bc781", 0xf}], 0x3) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) creat(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1843, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x2}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x44f0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="243a6da680ec9f988a2d90c61aac0d30957f59652b84bcc52f983a7ec49a2918ca4619336bc62e270152e138e4f47e4f353d0897579a86ab9ac5bf0ce073d3725049d8618874e68ff7940db29a2f81aafb1d2bafc5ec972ed0f7880c5f7e23195ce6d1e1dc1332549bf6410fa9d762a35fdd1c8d13608dab8b3fe998015c8b2fc51dd2ba28a62ab44726c5efb12417bdfce71b4dbf72dfc231aa2612a749bca3abc7e1184060ae54a9a5fc4b11a65df85a5664e0310e29abe9ec908c9fb26f58e669e1390c3a48e916fe4d8097c0f627d56b", 0xd2}, {&(0x7f0000001080)="59f0316bb9077dae132d56d30945393239e174ae661e9c3a88f7470d1f74ddfc43908f448b0a2234ca895844bdb75890fbabfa9c6354867a690100ed8a9fed462672011dd3c1c6286fb2c601ee7cb661e520105a44f073a81ea620ed8f3f157ce6314eea03831523fa7b063126dde063ad790746e23f1a17a1c1756f42810f0f42539e57c12be6f50c2a68d44b290cb37574e4e2ab3d564bc6924b290b8a243b21475d9d0ca8c161cfa111f3abc3fec373f1e9454c508d5bb9c8e88317ca250ac2322ee7bf06468182fff9c2f5394caf301da939140ec2036a4de41010888243f6f8989cc44e0de342428082c0ce0320ad646f2a91ec2aef514da26b1a1c9f044ee206b7e8d059b7360dc66a28cf2e1430325070530ecc2afad32ddd1a816e70dfaa49bad47d54a2c71648e4175536d9b9c006858ac2006e1b4b39e924f098ab1f6e35d71e35cec4f49d8a2c0cb4e054e7e9ab2bef5660033ffe8a8d0c352e85000d6c07083b1168b33f5060573330bbb0f67b4849547006c87c01a4ddb3837337b8d66e07390cacae73e6b0dde802fbafdadecce8874693033dc0e72eb054906f3ba37c1d2a02f074de5d92423ef5ea6a4849af7f448cb5df1fd74efc421a98491e8baf055830012f2b18315b78539af1512ac2f572a175032dfa17eda4fe39475feea1c2206d412684a9cae1f16596754a948fddd3f8e546e6a25d9f4de163ad59efae1429ed867b8112bf3dd444452e022a2c7cd7817dcef409ae86768fa1f4f363fb9765b615e79d7ff4bf32c2cf1f3453eeb61f8ffbffc0709f49f886440264aaf3151761b3dd7331a2ca5efcd2f4088434259fcd8fbb1c72f5d339183945195565336c04733195d294d24568676774bcd226a5759a60fa4d6fd53530734b403b06526c893b8f20c0bf5b36437e1f325439c28db375aeaf61704fca2f286eb1f8b18eaeb0b546ca3eaf64e41239b17f95e86d90d2209695ccedd258bbdb1bb8334c3395688731e550fd2cdca6c81250656eef1f70d2c2a59b5ab36b8895ed90a9ebeedb67aea06b014540f95774ad2b429adf196b34d472adb554062d86ddd2e8a1389f34c88757da4e209d115554979e3cffa185a64e64052a8963df07785ceaea33c258047cc8b6fee7d226bfbf9e2d78095a692062cbad8f7d4275b8c7b8d0173dc403d23e7f42306d4c1834a8718f3bdf3f06b30080de4cbe69624ab5fbbf6c057e56039c81869bc5024e496b958aa873ff97ff475e73ec1541b54812b02e90507a473db1a9df65c40b0ee93352c5c5c853daa586c909e5aff4e163ed5409736f9151a81338db6d25301f161119dce708eeb2efb4d0584ae4926912471d879e237ff98560e7f6242102136bd297017da1a49b3003338a2db1af4fde80e8be6ca7fbcc1e46a9557943b667386fcb5d9273356f6beb605230f69589c6b051a85fc4e109e0133105eff449f197cf278268e5c55414e75ea6d6913b365a74e047a49430a2b4d2679561a3dcfdd159a21fdf5cd5375c3177dfa4a3e60c6d1fae3fef98779c90a40b958f81e2d8eb035c47aeeb36a949b8e0dde27e4fb0c58d9820a464cdc68134123f1c2002af904de0273b4487fc24f8a62f0c1254a4423ccf91220e29147e9dc653331ed710d57c659ee5b0df7547fe2148295d4b4f104dde46dbdd2a06b819b76bd443acc7d56b71892f123c210dc4862eafa73d696430677e10540d62e38586642a904cfad08703f0ad4399195980ae56cb5951755fac0d9d53e92bdf2b51c4f3e664f52e6f10d52281fa5b717acda71aa54472ded5e9687deb4023ebb5362a10b61409cf3a46463915f09602a075e01fd847af240d500274b5fd4e4c86fa385bd2b2370449abd94e36c3040365596ec149cc2c72ea61028e0ebbc483d8c733bd209dfa5bba9961481e0904ac700252c1ea95af69b6bdecfd7f4d1ffe30a1932ffd7f8fa4045d2cd41f45e97414e53a3dc97f000a27ed37ca5bfe9d8b79edaea516df381463e169479b7c784a774a4b56d0759490d88d4d7cdca9b4b1b3c74152b6757580f882dd19261be4dd0638f8042a3ea5f67cd02bde8eae683fbe8e4b21f3b2f586d5faba10f20feb0da941f9737a6b46940c81b59440288bd6ca0360131bd7673aa9b271d366a7c3d065f45ba9a3db45581bc4194991124c0384b3a81540d56389f0efc64f85d9f2139f858e75f4497e1c1658cde45d94ea1c62886c0440da5b1bf7a452801659987f4fba84660d82021585326946f6328f23490faee705003464e2b5be9401442a306e381963b3b527c10b0c41c10c0013e4c0a20842b533874739dd4055e344a234e68e476ac039b6ea18e5a4d06950e89e467c7b9be1a67cd163ca0c17273036f9bdf1cc5248fdeba633112059e0131808ef83e0dbd8b34e7f9434d4fc671253fd6a94a423d105263b0e90a3817ef3e16611197814242ded36445df8672215aa8d3864be5833475637c3a58bdc1e1b246aaa6f952c92517b1b11711f9a45209ed3d5ec4b89716726788887f84db090ad7cea1d602fed4fa21bc48d4d495bcd3459c70be158bc7e3ec8b9576ed6a3933cd69826eab80541434fa31a487b28f6ae449d11de375d9250bbc70441a6694138c4d013ad6bca02b072265b54ea4051a30af0f129532b77de094d4a32a9d5252fdf669849d078bc846207514656b2a202b35aa0c1e08a645894983b52f5523190292e1eea1a1df73dff95f234db946e534ef8b43dc5680d18673366581bd2ebb30ec0f1aeedf04358a63f95593f62e4bf890b4144ca70871d053d813154498711849efec3a2a260aa2a983a64c3c76868f64b4c574294253715237b275465c0a1247be60ad5376c5bba182dec265996669cb4f6c666a226e254a85feefc44f9d2519a163f01ffe7e71ffa66a11e68946db4b5e2218a6e92461fecef6bdcf7c40df2e7122cd40ab10513c3736760e68fa0e518919a64244bd650d058af89a4b4cd7847fd24fa0ec5cdfa6d39d7a74d2d129eb82bbc51460f5acc3640a4e6fd8c5428bd99076a298f00cff91399b883c838cf65f40d3d1af6d89bbad536a3eb9dbf653bc6a502bbe57f4f38eabb684febb0e0e3b385f79c200dc231fe382a0d24919c5da69c42c59c71fb1df1fa5a5ffc1b2247da5461a2180463b28057664075c9802b1383f9fef7ce56e37dd61498ecbcf813e66884db584bc3103d0bce13af06ae72c7e738e911f79adf30934e859bb95e15473952d223128fcc3987cd39729f551f94d19e19f1a576887d5b560e97f73de63e3910072522f5af9ee71f1249fa7fcd2ef746b75bc98a7ce4568ef1a2524556a56a601c61e9c8b94f4f867c0af94b55adbe2cb69f67e7c2f0f3f5a94287a26593879662353d568166868837fba9fdbc185baaa0e82b1e598389ffb431e51c339ff2c4e86758b92667e93d4cc09fd1f54fad137f5e467bb603515f9a99e15d761afd03940ca14654799025aa88af80f3911e4ffa4d92341d85e9787cb02e828e87fac8baa4a6bf45509bd07f8edc81bb90abcd1e277b0cb5f8d70a0942292321edf40d5d578b6692357228462916ea17fd00857b1958e0b54418a03c66fdfe63b08d504502792a00374b653a39a97a4fc3352a952ac952252679e9b2f9fbaa97635f422537f6e2f8bad1a5de1f1b963baae1dc71b150bb301461af877a4046cb25708c6cef71ec06a339bc4f92c6cd2c607aa2cd771c02f6a675a91ce3a6ae411b13605298f41046b0ec37ef7c9421b9a495877d495438bc2285ee1ca5af5edfdda3c93de607170ec55f80c4c124cc2f6074fd75ee7b1b2d8ec8cfcceca5b76390b4d15f55ae16d4668cf5136712295a9b150cc861060f802c21dd52bc2668acb0e2645f5419c874c26ce704d1d8ec1b95f12358bb73a0d2de081f99b85e4176c9cec5c3f7c336e1ec9bc2a7c8a865e9c6efaff3dda7c3504e9dc214f609f99d9cf59da589dc89dfee6f25c4cd035ba5fff353ecb7fd961cfb92aa61555bf054a425d7429a8e7cd27d8cb95f7b7927be1b5d5d3af48dd95fcecf6a929a172f7da32ebd35bc7461f83ce2745e8d29b20eb25d599d6389501d99f2be5708f1dc1566b34dc6df07e83b7d73af1bbc38c64312b92c51f80f7c8da207facfe6b97a60f2b59caca03f04d6a442973817247d8cd7245b25067184fc6554512216077b7299c1905e5fb6346a7d1445dac537fb6421bc6a71c63d7106c75b36379b0a77bce231774206b7887506b458d8fcb9e381075a834d8a73724cfdc12019eaed0b8b0d59da8bb0759a08bc1b54df3889549123dd4d240a727939324b355c89251e80e7c983bb9523fb3de173474ac477fd8bbbebefea37befa0fc867ebd5f34f91e2a0c8adf8937642e6b8cc11393ed71781ff7143ffbea64474aa8795fc899e9a14b229bab5c65b200ed2f71594a8852e2c7d29aad68d9c2aa511dd1eda5c8c8c629c02a35b168d8a8869fe2df70182419f4a90497890312c0fb56726a91666d029a255df6448da07375f47e51aeb7df42541cf264dfd5b6f183753c911795eefa2fd63904a96f378273521a3e4e9e334dbed3c8e087b61acdae02631288173791777820e0365d78421f3ff4ab2ccbcc41c5169aec1963f74abfaf5d0fd885a99c025d0976954a18237ab7e86e23db61c6cff0acfc807cca228d08ce84185efede446f43ca3d32047e0c6285f9d6eb280ba95f392e5c1a4a3275ebec604712d24ad6d204a44030032bc7bb06bbcaee06b27d4c420686c334921efd766c9977f4de04fc5353ac2f488310f6c2f5ea4ee886103611c975c8aac6eab950b0c9ea222cb221bcf34b3167c181536a1ecdeb8318c55efef5a58acaa861a13608353f2d7e6c422d3e3070c04a99b6ec7a1233d24eb86008fd3f2213ad606cad980321afa9853fe05e3c25e54acfbacb2573b2b6ca2005700f3d4e610121af378acd5c5f99a8f3b036e0f649d2a4e9041ed6147b68cd1a4d40612e1642629edcf316b471db7d1ee164f009b1518ed912ee82206e770e580f59ddbd89de78cfda09ce9b829b62d90692e7f3b37203c1667ad7980530fa0b06503e044270f3bfc60faa8e66f63eb0d35999d4919aadbb797c2be54ae2b07f06dd4b8764c307e9bca56aaba6b7981af4fd0dd063b053d43b79e53eb1171be9dea3fad3c2ebb7c45c9b984c36f6f2b871cb1bb58c78de2f3dfd0849b2ddeb6110507f2ad26457f010c953c709ad25402e883d19b9362532b4d9e5a6a73d7570821918a4b80ae31306b5040be52d61441b5552f122f0dcd1c5e8205614778c2fed59280ec04668919870fe4c88e08a5a3b317815f6f791047eb7a2e1765432ad9b393a03c735291743a5853317159e1b0081ce11919c46e0e08bbae5f6c5f86f83c14ab70b34d6bb7a3a74611a8e5d375ca8c915300d3082fe18a801d9417f3bb98e4902c1617466d3ee821f298cb91afb3cada64661a0f86ae2cb76c02c0cd9aceccd811f4149facb5201d5715d3fc9f5ac2763aaef8ae047d070cc6266b835177579d802f0c9225853c8e40cf5765fa40bd60f41cf4e3dce3376b047d0463be6dde565f80264ca8f851fda8489bff01560907246aa1f5ebbdbb75a7976f96756b54b61abc823ab9f5e51ea84bc29c8d42e385127c901b618f0f3fc91f553831d912dfdb81dba2d929fc24282c6993913289a9fc05199c2b0665c71554e3f894fe0cc42ce5898d71cb3e6c05fd2a65fdbcbaa0a5e60ec158165d96781df8597084fa3e1cf01f8f488f3ad5a9f8c05e8bdcfe72ff1caf", 0x1000}, {&(0x7f0000000000)="dfd3b2b3a93cd4699e73a2661bc781", 0xf}], 0x3) (async) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) (async) creat(0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1843, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x2}) (async) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x44f0) (async) 4m31.599621509s ago: executing program 32 (id=127): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="243a6da680ec9f988a2d90c61aac0d30957f59652b84bcc52f983a7ec49a2918ca4619336bc62e270152e138e4f47e4f353d0897579a86ab9ac5bf0ce073d3725049d8618874e68ff7940db29a2f81aafb1d2bafc5ec972ed0f7880c5f7e23195ce6d1e1dc1332549bf6410fa9d762a35fdd1c8d13608dab8b3fe998015c8b2fc51dd2ba28a62ab44726c5efb12417bdfce71b4dbf72dfc231aa2612a749bca3abc7e1184060ae54a9a5fc4b11a65df85a5664e0310e29abe9ec908c9fb26f58e669e1390c3a48e916fe4d8097c0f627d56b", 0xd2}, {&(0x7f0000001080)="59f0316bb9077dae132d56d30945393239e174ae661e9c3a88f7470d1f74ddfc43908f448b0a2234ca895844bdb75890fbabfa9c6354867a690100ed8a9fed462672011dd3c1c6286fb2c601ee7cb661e520105a44f073a81ea620ed8f3f157ce6314eea03831523fa7b063126dde063ad790746e23f1a17a1c1756f42810f0f42539e57c12be6f50c2a68d44b290cb37574e4e2ab3d564bc6924b290b8a243b21475d9d0ca8c161cfa111f3abc3fec373f1e9454c508d5bb9c8e88317ca250ac2322ee7bf06468182fff9c2f5394caf301da939140ec2036a4de41010888243f6f8989cc44e0de342428082c0ce0320ad646f2a91ec2aef514da26b1a1c9f044ee206b7e8d059b7360dc66a28cf2e1430325070530ecc2afad32ddd1a816e70dfaa49bad47d54a2c71648e4175536d9b9c006858ac2006e1b4b39e924f098ab1f6e35d71e35cec4f49d8a2c0cb4e054e7e9ab2bef5660033ffe8a8d0c352e85000d6c07083b1168b33f5060573330bbb0f67b4849547006c87c01a4ddb3837337b8d66e07390cacae73e6b0dde802fbafdadecce8874693033dc0e72eb054906f3ba37c1d2a02f074de5d92423ef5ea6a4849af7f448cb5df1fd74efc421a98491e8baf055830012f2b18315b78539af1512ac2f572a175032dfa17eda4fe39475feea1c2206d412684a9cae1f16596754a948fddd3f8e546e6a25d9f4de163ad59efae1429ed867b8112bf3dd444452e022a2c7cd7817dcef409ae86768fa1f4f363fb9765b615e79d7ff4bf32c2cf1f3453eeb61f8ffbffc0709f49f886440264aaf3151761b3dd7331a2ca5efcd2f4088434259fcd8fbb1c72f5d339183945195565336c04733195d294d24568676774bcd226a5759a60fa4d6fd53530734b403b06526c893b8f20c0bf5b36437e1f325439c28db375aeaf61704fca2f286eb1f8b18eaeb0b546ca3eaf64e41239b17f95e86d90d2209695ccedd258bbdb1bb8334c3395688731e550fd2cdca6c81250656eef1f70d2c2a59b5ab36b8895ed90a9ebeedb67aea06b014540f95774ad2b429adf196b34d472adb554062d86ddd2e8a1389f34c88757da4e209d115554979e3cffa185a64e64052a8963df07785ceaea33c258047cc8b6fee7d226bfbf9e2d78095a692062cbad8f7d4275b8c7b8d0173dc403d23e7f42306d4c1834a8718f3bdf3f06b30080de4cbe69624ab5fbbf6c057e56039c81869bc5024e496b958aa873ff97ff475e73ec1541b54812b02e90507a473db1a9df65c40b0ee93352c5c5c853daa586c909e5aff4e163ed5409736f9151a81338db6d25301f161119dce708eeb2efb4d0584ae4926912471d879e237ff98560e7f6242102136bd297017da1a49b3003338a2db1af4fde80e8be6ca7fbcc1e46a9557943b667386fcb5d9273356f6beb605230f69589c6b051a85fc4e109e0133105eff449f197cf278268e5c55414e75ea6d6913b365a74e047a49430a2b4d2679561a3dcfdd159a21fdf5cd5375c3177dfa4a3e60c6d1fae3fef98779c90a40b958f81e2d8eb035c47aeeb36a949b8e0dde27e4fb0c58d9820a464cdc68134123f1c2002af904de0273b4487fc24f8a62f0c1254a4423ccf91220e29147e9dc653331ed710d57c659ee5b0df7547fe2148295d4b4f104dde46dbdd2a06b819b76bd443acc7d56b71892f123c210dc4862eafa73d696430677e10540d62e38586642a904cfad08703f0ad4399195980ae56cb5951755fac0d9d53e92bdf2b51c4f3e664f52e6f10d52281fa5b717acda71aa54472ded5e9687deb4023ebb5362a10b61409cf3a46463915f09602a075e01fd847af240d500274b5fd4e4c86fa385bd2b2370449abd94e36c3040365596ec149cc2c72ea61028e0ebbc483d8c733bd209dfa5bba9961481e0904ac700252c1ea95af69b6bdecfd7f4d1ffe30a1932ffd7f8fa4045d2cd41f45e97414e53a3dc97f000a27ed37ca5bfe9d8b79edaea516df381463e169479b7c784a774a4b56d0759490d88d4d7cdca9b4b1b3c74152b6757580f882dd19261be4dd0638f8042a3ea5f67cd02bde8eae683fbe8e4b21f3b2f586d5faba10f20feb0da941f9737a6b46940c81b59440288bd6ca0360131bd7673aa9b271d366a7c3d065f45ba9a3db45581bc4194991124c0384b3a81540d56389f0efc64f85d9f2139f858e75f4497e1c1658cde45d94ea1c62886c0440da5b1bf7a452801659987f4fba84660d82021585326946f6328f23490faee705003464e2b5be9401442a306e381963b3b527c10b0c41c10c0013e4c0a20842b533874739dd4055e344a234e68e476ac039b6ea18e5a4d06950e89e467c7b9be1a67cd163ca0c17273036f9bdf1cc5248fdeba633112059e0131808ef83e0dbd8b34e7f9434d4fc671253fd6a94a423d105263b0e90a3817ef3e16611197814242ded36445df8672215aa8d3864be5833475637c3a58bdc1e1b246aaa6f952c92517b1b11711f9a45209ed3d5ec4b89716726788887f84db090ad7cea1d602fed4fa21bc48d4d495bcd3459c70be158bc7e3ec8b9576ed6a3933cd69826eab80541434fa31a487b28f6ae449d11de375d9250bbc70441a6694138c4d013ad6bca02b072265b54ea4051a30af0f129532b77de094d4a32a9d5252fdf669849d078bc846207514656b2a202b35aa0c1e08a645894983b52f5523190292e1eea1a1df73dff95f234db946e534ef8b43dc5680d18673366581bd2ebb30ec0f1aeedf04358a63f95593f62e4bf890b4144ca70871d053d813154498711849efec3a2a260aa2a983a64c3c76868f64b4c574294253715237b275465c0a1247be60ad5376c5bba182dec265996669cb4f6c666a226e254a85feefc44f9d2519a163f01ffe7e71ffa66a11e68946db4b5e2218a6e92461fecef6bdcf7c40df2e7122cd40ab10513c3736760e68fa0e518919a64244bd650d058af89a4b4cd7847fd24fa0ec5cdfa6d39d7a74d2d129eb82bbc51460f5acc3640a4e6fd8c5428bd99076a298f00cff91399b883c838cf65f40d3d1af6d89bbad536a3eb9dbf653bc6a502bbe57f4f38eabb684febb0e0e3b385f79c200dc231fe382a0d24919c5da69c42c59c71fb1df1fa5a5ffc1b2247da5461a2180463b28057664075c9802b1383f9fef7ce56e37dd61498ecbcf813e66884db584bc3103d0bce13af06ae72c7e738e911f79adf30934e859bb95e15473952d223128fcc3987cd39729f551f94d19e19f1a576887d5b560e97f73de63e3910072522f5af9ee71f1249fa7fcd2ef746b75bc98a7ce4568ef1a2524556a56a601c61e9c8b94f4f867c0af94b55adbe2cb69f67e7c2f0f3f5a94287a26593879662353d568166868837fba9fdbc185baaa0e82b1e598389ffb431e51c339ff2c4e86758b92667e93d4cc09fd1f54fad137f5e467bb603515f9a99e15d761afd03940ca14654799025aa88af80f3911e4ffa4d92341d85e9787cb02e828e87fac8baa4a6bf45509bd07f8edc81bb90abcd1e277b0cb5f8d70a0942292321edf40d5d578b6692357228462916ea17fd00857b1958e0b54418a03c66fdfe63b08d504502792a00374b653a39a97a4fc3352a952ac952252679e9b2f9fbaa97635f422537f6e2f8bad1a5de1f1b963baae1dc71b150bb301461af877a4046cb25708c6cef71ec06a339bc4f92c6cd2c607aa2cd771c02f6a675a91ce3a6ae411b13605298f41046b0ec37ef7c9421b9a495877d495438bc2285ee1ca5af5edfdda3c93de607170ec55f80c4c124cc2f6074fd75ee7b1b2d8ec8cfcceca5b76390b4d15f55ae16d4668cf5136712295a9b150cc861060f802c21dd52bc2668acb0e2645f5419c874c26ce704d1d8ec1b95f12358bb73a0d2de081f99b85e4176c9cec5c3f7c336e1ec9bc2a7c8a865e9c6efaff3dda7c3504e9dc214f609f99d9cf59da589dc89dfee6f25c4cd035ba5fff353ecb7fd961cfb92aa61555bf054a425d7429a8e7cd27d8cb95f7b7927be1b5d5d3af48dd95fcecf6a929a172f7da32ebd35bc7461f83ce2745e8d29b20eb25d599d6389501d99f2be5708f1dc1566b34dc6df07e83b7d73af1bbc38c64312b92c51f80f7c8da207facfe6b97a60f2b59caca03f04d6a442973817247d8cd7245b25067184fc6554512216077b7299c1905e5fb6346a7d1445dac537fb6421bc6a71c63d7106c75b36379b0a77bce231774206b7887506b458d8fcb9e381075a834d8a73724cfdc12019eaed0b8b0d59da8bb0759a08bc1b54df3889549123dd4d240a727939324b355c89251e80e7c983bb9523fb3de173474ac477fd8bbbebefea37befa0fc867ebd5f34f91e2a0c8adf8937642e6b8cc11393ed71781ff7143ffbea64474aa8795fc899e9a14b229bab5c65b200ed2f71594a8852e2c7d29aad68d9c2aa511dd1eda5c8c8c629c02a35b168d8a8869fe2df70182419f4a90497890312c0fb56726a91666d029a255df6448da07375f47e51aeb7df42541cf264dfd5b6f183753c911795eefa2fd63904a96f378273521a3e4e9e334dbed3c8e087b61acdae02631288173791777820e0365d78421f3ff4ab2ccbcc41c5169aec1963f74abfaf5d0fd885a99c025d0976954a18237ab7e86e23db61c6cff0acfc807cca228d08ce84185efede446f43ca3d32047e0c6285f9d6eb280ba95f392e5c1a4a3275ebec604712d24ad6d204a44030032bc7bb06bbcaee06b27d4c420686c334921efd766c9977f4de04fc5353ac2f488310f6c2f5ea4ee886103611c975c8aac6eab950b0c9ea222cb221bcf34b3167c181536a1ecdeb8318c55efef5a58acaa861a13608353f2d7e6c422d3e3070c04a99b6ec7a1233d24eb86008fd3f2213ad606cad980321afa9853fe05e3c25e54acfbacb2573b2b6ca2005700f3d4e610121af378acd5c5f99a8f3b036e0f649d2a4e9041ed6147b68cd1a4d40612e1642629edcf316b471db7d1ee164f009b1518ed912ee82206e770e580f59ddbd89de78cfda09ce9b829b62d90692e7f3b37203c1667ad7980530fa0b06503e044270f3bfc60faa8e66f63eb0d35999d4919aadbb797c2be54ae2b07f06dd4b8764c307e9bca56aaba6b7981af4fd0dd063b053d43b79e53eb1171be9dea3fad3c2ebb7c45c9b984c36f6f2b871cb1bb58c78de2f3dfd0849b2ddeb6110507f2ad26457f010c953c709ad25402e883d19b9362532b4d9e5a6a73d7570821918a4b80ae31306b5040be52d61441b5552f122f0dcd1c5e8205614778c2fed59280ec04668919870fe4c88e08a5a3b317815f6f791047eb7a2e1765432ad9b393a03c735291743a5853317159e1b0081ce11919c46e0e08bbae5f6c5f86f83c14ab70b34d6bb7a3a74611a8e5d375ca8c915300d3082fe18a801d9417f3bb98e4902c1617466d3ee821f298cb91afb3cada64661a0f86ae2cb76c02c0cd9aceccd811f4149facb5201d5715d3fc9f5ac2763aaef8ae047d070cc6266b835177579d802f0c9225853c8e40cf5765fa40bd60f41cf4e3dce3376b047d0463be6dde565f80264ca8f851fda8489bff01560907246aa1f5ebbdbb75a7976f96756b54b61abc823ab9f5e51ea84bc29c8d42e385127c901b618f0f3fc91f553831d912dfdb81dba2d929fc24282c6993913289a9fc05199c2b0665c71554e3f894fe0cc42ce5898d71cb3e6c05fd2a65fdbcbaa0a5e60ec158165d96781df8597084fa3e1cf01f8f488f3ad5a9f8c05e8bdcfe72ff1caf", 0x1000}, {&(0x7f0000000000)="dfd3b2b3a93cd4699e73a2661bc781", 0xf}], 0x3) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) creat(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1843, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x2}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x44f0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="243a6da680ec9f988a2d90c61aac0d30957f59652b84bcc52f983a7ec49a2918ca4619336bc62e270152e138e4f47e4f353d0897579a86ab9ac5bf0ce073d3725049d8618874e68ff7940db29a2f81aafb1d2bafc5ec972ed0f7880c5f7e23195ce6d1e1dc1332549bf6410fa9d762a35fdd1c8d13608dab8b3fe998015c8b2fc51dd2ba28a62ab44726c5efb12417bdfce71b4dbf72dfc231aa2612a749bca3abc7e1184060ae54a9a5fc4b11a65df85a5664e0310e29abe9ec908c9fb26f58e669e1390c3a48e916fe4d8097c0f627d56b", 0xd2}, {&(0x7f0000001080)="59f0316bb9077dae132d56d30945393239e174ae661e9c3a88f7470d1f74ddfc43908f448b0a2234ca895844bdb75890fbabfa9c6354867a690100ed8a9fed462672011dd3c1c6286fb2c601ee7cb661e520105a44f073a81ea620ed8f3f157ce6314eea03831523fa7b063126dde063ad790746e23f1a17a1c1756f42810f0f42539e57c12be6f50c2a68d44b290cb37574e4e2ab3d564bc6924b290b8a243b21475d9d0ca8c161cfa111f3abc3fec373f1e9454c508d5bb9c8e88317ca250ac2322ee7bf06468182fff9c2f5394caf301da939140ec2036a4de41010888243f6f8989cc44e0de342428082c0ce0320ad646f2a91ec2aef514da26b1a1c9f044ee206b7e8d059b7360dc66a28cf2e1430325070530ecc2afad32ddd1a816e70dfaa49bad47d54a2c71648e4175536d9b9c006858ac2006e1b4b39e924f098ab1f6e35d71e35cec4f49d8a2c0cb4e054e7e9ab2bef5660033ffe8a8d0c352e85000d6c07083b1168b33f5060573330bbb0f67b4849547006c87c01a4ddb3837337b8d66e07390cacae73e6b0dde802fbafdadecce8874693033dc0e72eb054906f3ba37c1d2a02f074de5d92423ef5ea6a4849af7f448cb5df1fd74efc421a98491e8baf055830012f2b18315b78539af1512ac2f572a175032dfa17eda4fe39475feea1c2206d412684a9cae1f16596754a948fddd3f8e546e6a25d9f4de163ad59efae1429ed867b8112bf3dd444452e022a2c7cd7817dcef409ae86768fa1f4f363fb9765b615e79d7ff4bf32c2cf1f3453eeb61f8ffbffc0709f49f886440264aaf3151761b3dd7331a2ca5efcd2f4088434259fcd8fbb1c72f5d339183945195565336c04733195d294d24568676774bcd226a5759a60fa4d6fd53530734b403b06526c893b8f20c0bf5b36437e1f325439c28db375aeaf61704fca2f286eb1f8b18eaeb0b546ca3eaf64e41239b17f95e86d90d2209695ccedd258bbdb1bb8334c3395688731e550fd2cdca6c81250656eef1f70d2c2a59b5ab36b8895ed90a9ebeedb67aea06b014540f95774ad2b429adf196b34d472adb554062d86ddd2e8a1389f34c88757da4e209d115554979e3cffa185a64e64052a8963df07785ceaea33c258047cc8b6fee7d226bfbf9e2d78095a692062cbad8f7d4275b8c7b8d0173dc403d23e7f42306d4c1834a8718f3bdf3f06b30080de4cbe69624ab5fbbf6c057e56039c81869bc5024e496b958aa873ff97ff475e73ec1541b54812b02e90507a473db1a9df65c40b0ee93352c5c5c853daa586c909e5aff4e163ed5409736f9151a81338db6d25301f161119dce708eeb2efb4d0584ae4926912471d879e237ff98560e7f6242102136bd297017da1a49b3003338a2db1af4fde80e8be6ca7fbcc1e46a9557943b667386fcb5d9273356f6beb605230f69589c6b051a85fc4e109e0133105eff449f197cf278268e5c55414e75ea6d6913b365a74e047a49430a2b4d2679561a3dcfdd159a21fdf5cd5375c3177dfa4a3e60c6d1fae3fef98779c90a40b958f81e2d8eb035c47aeeb36a949b8e0dde27e4fb0c58d9820a464cdc68134123f1c2002af904de0273b4487fc24f8a62f0c1254a4423ccf91220e29147e9dc653331ed710d57c659ee5b0df7547fe2148295d4b4f104dde46dbdd2a06b819b76bd443acc7d56b71892f123c210dc4862eafa73d696430677e10540d62e38586642a904cfad08703f0ad4399195980ae56cb5951755fac0d9d53e92bdf2b51c4f3e664f52e6f10d52281fa5b717acda71aa54472ded5e9687deb4023ebb5362a10b61409cf3a46463915f09602a075e01fd847af240d500274b5fd4e4c86fa385bd2b2370449abd94e36c3040365596ec149cc2c72ea61028e0ebbc483d8c733bd209dfa5bba9961481e0904ac700252c1ea95af69b6bdecfd7f4d1ffe30a1932ffd7f8fa4045d2cd41f45e97414e53a3dc97f000a27ed37ca5bfe9d8b79edaea516df381463e169479b7c784a774a4b56d0759490d88d4d7cdca9b4b1b3c74152b6757580f882dd19261be4dd0638f8042a3ea5f67cd02bde8eae683fbe8e4b21f3b2f586d5faba10f20feb0da941f9737a6b46940c81b59440288bd6ca0360131bd7673aa9b271d366a7c3d065f45ba9a3db45581bc4194991124c0384b3a81540d56389f0efc64f85d9f2139f858e75f4497e1c1658cde45d94ea1c62886c0440da5b1bf7a452801659987f4fba84660d82021585326946f6328f23490faee705003464e2b5be9401442a306e381963b3b527c10b0c41c10c0013e4c0a20842b533874739dd4055e344a234e68e476ac039b6ea18e5a4d06950e89e467c7b9be1a67cd163ca0c17273036f9bdf1cc5248fdeba633112059e0131808ef83e0dbd8b34e7f9434d4fc671253fd6a94a423d105263b0e90a3817ef3e16611197814242ded36445df8672215aa8d3864be5833475637c3a58bdc1e1b246aaa6f952c92517b1b11711f9a45209ed3d5ec4b89716726788887f84db090ad7cea1d602fed4fa21bc48d4d495bcd3459c70be158bc7e3ec8b9576ed6a3933cd69826eab80541434fa31a487b28f6ae449d11de375d9250bbc70441a6694138c4d013ad6bca02b072265b54ea4051a30af0f129532b77de094d4a32a9d5252fdf669849d078bc846207514656b2a202b35aa0c1e08a645894983b52f5523190292e1eea1a1df73dff95f234db946e534ef8b43dc5680d18673366581bd2ebb30ec0f1aeedf04358a63f95593f62e4bf890b4144ca70871d053d813154498711849efec3a2a260aa2a983a64c3c76868f64b4c574294253715237b275465c0a1247be60ad5376c5bba182dec265996669cb4f6c666a226e254a85feefc44f9d2519a163f01ffe7e71ffa66a11e68946db4b5e2218a6e92461fecef6bdcf7c40df2e7122cd40ab10513c3736760e68fa0e518919a64244bd650d058af89a4b4cd7847fd24fa0ec5cdfa6d39d7a74d2d129eb82bbc51460f5acc3640a4e6fd8c5428bd99076a298f00cff91399b883c838cf65f40d3d1af6d89bbad536a3eb9dbf653bc6a502bbe57f4f38eabb684febb0e0e3b385f79c200dc231fe382a0d24919c5da69c42c59c71fb1df1fa5a5ffc1b2247da5461a2180463b28057664075c9802b1383f9fef7ce56e37dd61498ecbcf813e66884db584bc3103d0bce13af06ae72c7e738e911f79adf30934e859bb95e15473952d223128fcc3987cd39729f551f94d19e19f1a576887d5b560e97f73de63e3910072522f5af9ee71f1249fa7fcd2ef746b75bc98a7ce4568ef1a2524556a56a601c61e9c8b94f4f867c0af94b55adbe2cb69f67e7c2f0f3f5a94287a26593879662353d568166868837fba9fdbc185baaa0e82b1e598389ffb431e51c339ff2c4e86758b92667e93d4cc09fd1f54fad137f5e467bb603515f9a99e15d761afd03940ca14654799025aa88af80f3911e4ffa4d92341d85e9787cb02e828e87fac8baa4a6bf45509bd07f8edc81bb90abcd1e277b0cb5f8d70a0942292321edf40d5d578b6692357228462916ea17fd00857b1958e0b54418a03c66fdfe63b08d504502792a00374b653a39a97a4fc3352a952ac952252679e9b2f9fbaa97635f422537f6e2f8bad1a5de1f1b963baae1dc71b150bb301461af877a4046cb25708c6cef71ec06a339bc4f92c6cd2c607aa2cd771c02f6a675a91ce3a6ae411b13605298f41046b0ec37ef7c9421b9a495877d495438bc2285ee1ca5af5edfdda3c93de607170ec55f80c4c124cc2f6074fd75ee7b1b2d8ec8cfcceca5b76390b4d15f55ae16d4668cf5136712295a9b150cc861060f802c21dd52bc2668acb0e2645f5419c874c26ce704d1d8ec1b95f12358bb73a0d2de081f99b85e4176c9cec5c3f7c336e1ec9bc2a7c8a865e9c6efaff3dda7c3504e9dc214f609f99d9cf59da589dc89dfee6f25c4cd035ba5fff353ecb7fd961cfb92aa61555bf054a425d7429a8e7cd27d8cb95f7b7927be1b5d5d3af48dd95fcecf6a929a172f7da32ebd35bc7461f83ce2745e8d29b20eb25d599d6389501d99f2be5708f1dc1566b34dc6df07e83b7d73af1bbc38c64312b92c51f80f7c8da207facfe6b97a60f2b59caca03f04d6a442973817247d8cd7245b25067184fc6554512216077b7299c1905e5fb6346a7d1445dac537fb6421bc6a71c63d7106c75b36379b0a77bce231774206b7887506b458d8fcb9e381075a834d8a73724cfdc12019eaed0b8b0d59da8bb0759a08bc1b54df3889549123dd4d240a727939324b355c89251e80e7c983bb9523fb3de173474ac477fd8bbbebefea37befa0fc867ebd5f34f91e2a0c8adf8937642e6b8cc11393ed71781ff7143ffbea64474aa8795fc899e9a14b229bab5c65b200ed2f71594a8852e2c7d29aad68d9c2aa511dd1eda5c8c8c629c02a35b168d8a8869fe2df70182419f4a90497890312c0fb56726a91666d029a255df6448da07375f47e51aeb7df42541cf264dfd5b6f183753c911795eefa2fd63904a96f378273521a3e4e9e334dbed3c8e087b61acdae02631288173791777820e0365d78421f3ff4ab2ccbcc41c5169aec1963f74abfaf5d0fd885a99c025d0976954a18237ab7e86e23db61c6cff0acfc807cca228d08ce84185efede446f43ca3d32047e0c6285f9d6eb280ba95f392e5c1a4a3275ebec604712d24ad6d204a44030032bc7bb06bbcaee06b27d4c420686c334921efd766c9977f4de04fc5353ac2f488310f6c2f5ea4ee886103611c975c8aac6eab950b0c9ea222cb221bcf34b3167c181536a1ecdeb8318c55efef5a58acaa861a13608353f2d7e6c422d3e3070c04a99b6ec7a1233d24eb86008fd3f2213ad606cad980321afa9853fe05e3c25e54acfbacb2573b2b6ca2005700f3d4e610121af378acd5c5f99a8f3b036e0f649d2a4e9041ed6147b68cd1a4d40612e1642629edcf316b471db7d1ee164f009b1518ed912ee82206e770e580f59ddbd89de78cfda09ce9b829b62d90692e7f3b37203c1667ad7980530fa0b06503e044270f3bfc60faa8e66f63eb0d35999d4919aadbb797c2be54ae2b07f06dd4b8764c307e9bca56aaba6b7981af4fd0dd063b053d43b79e53eb1171be9dea3fad3c2ebb7c45c9b984c36f6f2b871cb1bb58c78de2f3dfd0849b2ddeb6110507f2ad26457f010c953c709ad25402e883d19b9362532b4d9e5a6a73d7570821918a4b80ae31306b5040be52d61441b5552f122f0dcd1c5e8205614778c2fed59280ec04668919870fe4c88e08a5a3b317815f6f791047eb7a2e1765432ad9b393a03c735291743a5853317159e1b0081ce11919c46e0e08bbae5f6c5f86f83c14ab70b34d6bb7a3a74611a8e5d375ca8c915300d3082fe18a801d9417f3bb98e4902c1617466d3ee821f298cb91afb3cada64661a0f86ae2cb76c02c0cd9aceccd811f4149facb5201d5715d3fc9f5ac2763aaef8ae047d070cc6266b835177579d802f0c9225853c8e40cf5765fa40bd60f41cf4e3dce3376b047d0463be6dde565f80264ca8f851fda8489bff01560907246aa1f5ebbdbb75a7976f96756b54b61abc823ab9f5e51ea84bc29c8d42e385127c901b618f0f3fc91f553831d912dfdb81dba2d929fc24282c6993913289a9fc05199c2b0665c71554e3f894fe0cc42ce5898d71cb3e6c05fd2a65fdbcbaa0a5e60ec158165d96781df8597084fa3e1cf01f8f488f3ad5a9f8c05e8bdcfe72ff1caf", 0x1000}, {&(0x7f0000000000)="dfd3b2b3a93cd4699e73a2661bc781", 0xf}], 0x3) (async) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) (async) creat(0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1843, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x2}) (async) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x44f0) (async) 3m55.75079628s ago: executing program 4 (id=639): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r1, 0x932, 0x5) openat$cgroup_subtree(r1, &(0x7f0000000380), 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000580)={r1, &(0x7f0000000540)="5c94a8fb9d972896ab7a2de30e019c206d339861888484d81302c425b01a48f087df60b64c1187f863", &(0x7f0000000ac0)=""/4096}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000240)=""/148, 0x94, 0x0, &(0x7f00000001c0)=""/21, 0x15}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000003ff6)='GPL\x00', 0x802, 0xc6, &(0x7f0000000440)=""/198, 0x0, 0x41, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r5, &(0x7f0000000180)="957c6e040c", 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c0002801800028008000180fffffffd09000200d48598570000000008000140000000000900010073797a30000000000900020073797a3200"], 0xa8}}, 0x0) cachestat(r4, &(0x7f0000000100)={0xa, 0x17daaf06}, &(0x7f0000000140), 0x0) 3m55.748653735s ago: executing program 4 (id=640): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x7, 0x140000, 0x0, 0x12, 0x2, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xf7fffffffffffffc, 0x400]}}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x801, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f0000001080)) 3m55.660962322s ago: executing program 4 (id=641): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_usb_connect(0x1, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0000000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000540001610900000050005a0007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="000002000000000000000000000000000000000186"], 0x38}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m52.609786111s ago: executing program 4 (id=691): mkdir(&(0x7f0000000580)='./file0\x00', 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd2b, 0x6, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r2, 0x4, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x1, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) read$FUSE(r2, &(0x7f00000006c0)={0x2020}, 0x2020) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, r4, 0x608, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4011}, 0x4040095) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r8, &(0x7f00000000c0)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x2, 0x7, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000885}, 0x40000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000c00078008001240000621000500010006000000050005000a00000005000400000000000900020073797a310000000014000300686173683a69702c706f7274"], 0x58}}, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000080a01010000000000000000010000000900010073797a3000000000090002"], 0xc8}}, 0x0) 3m52.440374975s ago: executing program 4 (id=695): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000300)={0x200000, 0x200000, 0xfffffffe}) (async) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x50) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, r2, 0x0, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80080, 0x0) (async) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xc0) close(r5) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r5, &(0x7f000000e400)={0x2020, 0x0, 0x0, 0x0}, 0x204a) write$FUSE_INIT(r6, &(0x7f0000000100)={0x50, 0x0, r7, {0x7, 0x1f, 0xffffffff, 0x240009, 0x1, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x20, 0x7}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000a3c0)="61ddaf21c1282a5a6352f350c2f614ede5b0c406f5488574ed6fcb609ce20f648ee274c8dfeaa625b1fd332f70f776ae0b6e3f959c24f3876756c20e05c82079387520764f2446820d53242898a90e51c5b68297e39b7fcf558b450e9608326c3dc6704a054216a8c6f0d689e5eb6b8564854376910eff147682d2378b9c5b95a626493ce628b1bb6b524ed7e90ebe6eb0246399eac6d624dcf4e824be2de9c1d5d06eab13f2770577304eb676106fd9868a030192067ac009482e03a817f1abd909a94702479fe30b2594ca60b4acc37148cf04e8c0e76dd69e29d243596f8174129ac6ab9dbb79ace8f0fae14234845725102a027d4163f97f3971d207500defeaa2c7318f7e82e591701f9d3f78592ea7ec28806a53278a35a20251eeb2735fa9f37bf0045b5e6faf5f751c7ad31d8426be7b09027b2092f49247159a33b580d2691ebf00797962168bdc368f57282ce5b8526eacb80952ffba771626c0016b8a010546f0b4daf470814cee0ea418b76331c34616cea0459dbd1f196364c99e4a47bcdd64b518ef51833e6f8041fbbbe86e808bdbade7009985f2c4d7ffd76a0e7dc7d542bdee1d136d2096dfa997f98ac83c6341b306a3a8cf81642566d7777480d4dc61b0182f0d418ce95d74c9aadb182326d6671412a1f0c62c93a0ba873ff5daa4ece4b2fc73ed5b02b60890374acc0cd25cbf1707016a542fafd6af098f9737304c726712c8243dcd5eb15c0996e9e03dd741d519cb3e86ea214e20408c2cc5ea607585f1bfd268ba3084ffa69425512571d263fd1ae49b488b2964bd3e78943122006489cc22191dec2900a7fdf798c9f683461f2a7b940f4112b805dc077a7b99071b5b454f7c6d2b13a6b23091f74ecc65a24ac0d11e2ffd7332fb2b2b11aeec3c809d78cc2e168f126f38dddfe3e1d0ec1c6fb25f880690f97a70dc5fbea5d25dba3b24c01d9bd228c58deca660625511127a62220429c94be65d6ad4ce7e79e97af67931b46ccfabca5dbaea11e2dc76279b0244cc2845f31beff418fe4bd892d3676079d9d4eb0251dfead9e0a07a11c0a7e597ac89ec77de60a5f6e0ff4a62374856b8e1659e885d3a0d90293daa0c7bb041cbcd54bf098b66b2ddec28dcba4cfbad969e3b97e4bf680f901485d1cd4b231a9115c22ab2f911415ad0efe0eb7f4bee15c6de7d0f818acd687a117286f9e3c33df5206df918ea4ac52927487968d88f4a18d4889a4060f20487e4cec19250fe48a16b1f9f7250a6ab81fbaa2ad451a936ee98021bf859b9a635132a0dcf7530c0e2c84a459241a1fc9fe45b4a4f32fa8e95185db92660292ece6b5ddbb0b9f69bd7435cd4944f8ff2ed51172f0683fbae1013cde202498f2e1be54d1a2e17b3984b17d1994915a477c87697f465781e41b44c6a40ae035e75a4d9f9c0926bec533db0d4c26d605cb1ae225e692ed315062e8c3283716929e25a22b25105e018d81c07cb7600d1bae16d8beec33c88f1cdb52ac988b4677ed604c28ff1cdeeeb74c332dc526cff5ee935016984cabf117694cccabae944de4d2d2daff8f281b6434475b52c1910210598c684da99c108000a53d2ca03afd42b0200691d92341616353a22a8dacd8cb7eee85953b251236603d2ef1e450675f8d0f3cd0e28ef36457f79c267d836d14ed758148e979b9749ddcef14aec903939c69567a1697aae8f9ed72a16be0267a3a967727937f609720802570287c4e08641b9b7b979c6541add0e8600dd2d75a1dc0822ceb7a7e4e1afda2940d127f488589963b46417d7a7474545e5b08a621c1a7637b3fcb62b0aee10d999505907bd14033370e391f6192ff7d718e1db3ef861d30b2d477f11cd45ecb296d4babcccc34901165e3fcdbef6fa1ee478a97f7d21dc5562582d67c448ae352d3157d83e8ab0122a2bb056bdff8043a91b8f3abe4d788fe741483997a8e3fe126626a14b4243d3ff8ada8dd555c95d5e30b68cc053dfbbb61940cbb552cc1fe211ea5ea13cbfb6a577cde339282d84e92f866145e7b1de4d5a1705fc24fc8843f1a69f4c604adf0d715ad88c6a4ac80a35375662610e0ed07af9c4c76326716a77b106ef87782804ca353eaade28a1ca522d706282ebe48c0b23fd42b2e0297f5997d3aab40615f143e868c6aaf920bc827224946db3e3b3e65ea66dbfa5fe6c45dab930877852e86df251024e4ae46ee8e04cf40f2b3239f4df40062cfddada61700959deaeed3a44fb185ce51685fcab793184435b3e668e7d80820a613acde8d61e24571b9de7ce4581a4751d70a28e8d098660e81941fe40b6844a3204b512457194e100c995c75921569f735afee321080ed6310610887ca842001f5112c5af8c9083e3d088a404b48ee82e1e8be16fd493a2a643816488447706f3e86d2d0ed48f7397aad0cf105a4a71d928a15413ab3813e42478cf7a5be2e03d15ccb90a625863cb2ca1059110f90186cf4c370469f4d7e1ccda56ed9c427cce46e7d1c82641554ffa0c7c42697cbc754702b62be5ab03c995ac8cda3145959c440c4d6ead7d6398faf189de77645a05a54d6c33c9678daec6e5ac0048f91e15b2fdb808d712e662007da5e228ddc7370f575723a0018a1da70fa27e6624c8c75047eb584bf3399a8fce999df94f6fb54fb6c1fc954b1d899459fcd2f459e57c214ae590513ed268ed2d1114d8276642510a2eb99feecb58d8476550553a9f3d1f04c9bb442dae6dd84628b60cc9fd3c1e5c4fe3b9ad5f43b5d06e31ba4644f7499c03fd68cd2207027eeb1908a8022d70eb8fc8f55fee7be7e3af525d4fb1ab3e9b458246cbb5371e8145e1d04762c62068e03795a5a6b48d8643a83927c47000b7766e320e0ef2339d5423813e8d7845b939a9567745f6e2d6070764669c905ea77943a31f0df838a5d046f25d516bb654336f759c05dcc0febbbf1d214382a76fa09aa32be9799252f1d0fd8bacfe3f32574fdc82c6ed77f1c08d4aef88c157cbdac947346e3e015af60125d3e36ec6bd8dc5127c7ab1ed773c8beffc9dba99bd9fa1498a5a49bcce4ddb13fb85e256fcac569aab1c815527710d2c350c7cc84db5a7eb243227973fd5e2d1d8450077ececa0d96884c90ac0146d37b13f1aacc1eaddec3f0d475df6ceafe73f9076fcfeaf496efcae22d09745453a5e4776876ecfb1d004361f82f76b2bfba050d0fd5060f50fd74f9908a62649955e2f90e4ac4a4f0b29484cf80eebcbecb12db8586ee58443c181a59c046c657ecbb067a1e70d4c548e8b291a5aa681624747d9a52a6184a5fc82d824d9ab6156ec5fd73a038b38d86974e7a89b55a95b609e12c98f4168c0e48139749fce33397948224641e9823588858f82247d9abf8f84250564189676325e43944e888cef6918cd2b842b3a42751475a37656b3f04a02430705f16908d638212f69cf96d5311038e00e048468810d1cfefb0a9aeaf46d1bd31f7156a97542d9373abd3c069aa096486244389312031398a35e0ebca6668ed06dbe80290ac9a2a15ac9c208cdbcb2c1e18f008741649b4fe2ac1e6ca0a19980b6276fa09c5c0e67e748c1669add6fd4c70ba522be4428df305c3313929a4eec348f03fc6a6dfd1d6740a61230a977555b6b4d5165c98323871d750e80f9205231af03ab430a720dcaad03d113f38574ebada74f5b34a05a6abb7ba9b8b280401a3a21dd7e1e026deb438ed020d09fc93ffd7376ced7b5d6c9c35072c7f28ddb7fea3ffa7b7e6766892be2015c20e2cc7fa8bcb5832b97e964947ae940d5ce215ff3a0d74851d5735f3573d533cca9b3a89f9494f150cb732139cc2282304f6a375ee1062f6f850ebf89548973b6c5e7aee8b98b18b443332d3be20fea086653d52756b40ec4f08ad52f4d0a5a61004c700f070b83548670ef36dcbd8daf13ae6d382aaba3c3bac3c1efd953781d69e7365e1393d2c3f34d3dc91999ab9a545bc167e50ea6874fe8f49e93e452ad4710d7127c430ab2caf3ec1627e6a2a6a57604a5da490087991b68cd58d456f6818f22e38007e1628c6a78f6a8a321e3f0d5d5e1bc7f9ef53c4780b451dad949962c8a6a464b25cb161159b72f40fed8280daec34135f77373b9432f411b232e9374e9cb3fcd85a599c20d0b8e294835c60c2e034eb8385c507095c6eb6748180fd1ad97cb0a4b2ffa70c90891d373459538f4106078162bc46b425572466aa4769153b994698bbff1a98b5948e40d98bb2900445eebe95c4892bcb92b4c28b734ea7e106accc9836767e0881f970c9d69063dd918de44a484ef3f860b0dcec58f22b3f1a0abb9c0c2b6cd5bdacdc194f188588c0888d6abfa2d0b79d0b33a41e3b6a0f9fbf811ba20f346025b3a4be17eb5ce583b860cad5424bcaf1ef4a255678706052c1cae9cd77cc78639f975f07737b791831c64f0c974b23a5c428091b8b8e17a037ac3c6d56da4b4c7e4752736cbbc8d67b1b823e87d51ffc95fe9752e8479fc15a6fe7b96fbd7b93dc2144381c424ec7782d7f8b2637010dca11ccdaab1bad652a9ecd8b6ba2c116fa419c8582a0ccf754a294d9de5b457d9b1a4120fd53667862e50cb028e2f92c73a38f77ff57c93b410e7f3257bd56e5aa504f0643bd2bcfae2168046ad2737a36b21f6d993de1fe7b31e9ef7c79d545e5364b65011a6d26e0a2f1018a5280ca88d3d1e30c68195f8cf1a3ece813f22e44d83867c9f711218203d1adf2869ed89babca094b8def7ae0abd0245f522930db59c4b2eeec4d564bfdb931d435a986daba4b604d5bf30b1cfdf6960986ba0dab216dfd7ad95ca2555e0573d073dccd407ddd5ed7920c788aa0213aec90b38981a91bc370ede38d171648316d59478e66c068eec33295345162e9896ffc82f8d94b995d3a3a7a4f459e564632b5918b4fd850da380937655f19e2820376e7deb48edb0f5e295521a9a153f5ef69de397d88acc20be99779d7ea2c38445bd70aeeb68cc6c68c1bc603ab580b632866497a3dbcbfd933e2074323f66f1db73129eec8331c8872aa92a33e2180fc0cf2e28d198faef4421064b8435f37b5bfb9b531332b3b0838015fe848f0ce859db8706f2e53fb07ce4d0fd017d85ac9ce2943ab172f08b13c948c3778d2469257d412b1a5305526cc8dcb4a8645f825cca66a63b7134d8b7c760db6a8fa21f2df3456e9b460867303a9d53fb01db8548800d800e49c08c8d731bbf9a642206f4cc6673e4fc0f7106661abfde1eb8a8d384b26d88c16d15f238556ff4b205145d860228038430cd8a342bc15849afd81666b55b358e3ec584fa96f119b77495c4ec36616070237bb170fc04d3befebdaff66643814eb8519abaaf1e9bf939bf5bfefa33c32fe9909055393e383268e426436305b370867db76991ca600bf6211dece3b6b7b4dc5cd4569ff4538080fec318a9e0cce4a8cf26aca8359b503781aaedc2d58b0bb1a82c163425e678b488bdc7362d0be24a7a8238deb31482c332d4d385005ca84c836933b0fce21685ec067adb9490d1a416f83e36e6e3b87d05ab6973f4e359a1fb5a4dbf2ff6a85d235e50d893f222c2a7d84252be9015e104ee3609c83cafdd796a8422257c9ca9172888d91c0f2f2afe36dccada9a713cfc026cf25e113fc543d522e9254f5e129d7ffd61b43ee25bdd63545a81a2b086b616e23abd380a7bb8e54b8341f42c663da1fc8451f21da7315aea416e6856d4d45128dcd34a0f3aeb7aed00c54c348f38888b8c8fec59028d38344a92249c95943d3ff8608bc11406102ebe8269892b2e909bd82ba467aabef127713a0993df779ba7b0816a990566699e4926d75fd47c3f1b9cae3e58771a6ae8776fdb672ee70f215fd908d6dfddb8a2ad10f27b749fa6e67171848d70d3ae135ee3defb2546bb35a3ad2d8ac0e838ff8abb1cd733d80047bc8626960a257b704b43bf0390b7fee656ca7831d23e8ba940533c16c17de68270bb3b2d3bf142b34899b3a106cf9569b4f46f148297c61390733ff9f399c669122dd045187d0a35fe54b4f17e4090c56cfcfa47498b1701a855827d35cf3624624906f997092b010b1da616325a090770694d028fae9874a91f8d21fea85804956594b8252c24d05df5775148ecbf8ab38f131c268cc263f6a2dcd375acfbf39a2defc9869801a720d83add1ff01ac7fc389bc7e35c2eee2b44f808508e6e02ea31cf23ea9f2118bce520101e307b394e5fdd28e90870a327b0a1444b552b7227134a8e5397474a6c0e1ce89d918c899d292660ea44294e07b1645ff9e85f65156f92d55ae795e134250b5359dec6c31d4892d83f363cb09632bb738c4e7f351361adc3ab54776a5c55d6ff4895516c82cc6387b1a424f3af2bb0398d0d4a71fe44c5132b7ad5fdfa732bbcff9f02395df587714072caca65f5fc1215dc9068585e1fbcee22cd69c0386a6482230540ec9ff8e373018e4e2788b9502e5be3e3247f997800c68a634e4490c91d01144a63a7a55afbfa4f0ef5ad538aeec8ea203ef2716ff989e11ce4985263898b8e36b0d3386b816ce484e81404a01ac0ed9f18ef5643f93d46705c949acddca2b74ad53441090f658d22dd081aaf49a7bb07c93ab8dfb5213cba354b4d37d9899423d3b3d45e9463c506ccd69747162d2d64b54291d11fdc6c9b89114543d6948f10e68008973cc485df080b84e0d098f962715ba009f2aa1fb41f7199ea5b9b70df0e1c378da164f7257b4ed04a9fee7cc2de065ad35a60b882d78e26d5804942ed1f2bcf85fc63795fb9164a5f94ffe6bfbf838c9197bce2160d24f88dca14c3e733d18ff1fb7acb0ebdfc4e2ce268a676fb27cc34d4b6b5d7e8db29c020c4c498d793931b0fc7d91ad68d3d8463e36a267833edbdd7062f4d62aa9fd1cb7f8e561d3939bbfa118b897167168832c0aff17fb6cdcf75ad6ef0a18e2b37fb24c85d0866f2e5f191b2ef8fe9b5997635a74cb06aec67363435eb175559629c09316f96dc56de6c7785335d121fc2e4d47c2f50c37c5bf7950ae5de07b3b73830f4299d5009742d4eca98df821a95d244967a42b5a4f3375edc41c5281ca3104bd247c14e838912634d4764c1b6e440860d98f258aa8a24e8af643497366edc2b781aec0567451884aec0343ced1fbddfae585db1012a6d9245ad85c56aa33d5bc30307515bccc8d36d7848c99884db4a49d748e1953b4673e4286393fc97c233d529435faf7ed9f9aa64029814b7cd6a36c3dd9ca7be95e5c4d48e024a3d23651cc81c00a52e2fa2d094435ebdb4ae5be8e6b53cf628ddc87a4bc2dccc98ac38019c91789a40d103fb95785bde5992de08ecdca1dff2ab7cf5013420b3d29b8a7f0af455c4e86285422b986bdf482b87297061084b50684e936acbb075a84e720a2d03892efec7dc1af2fae2a7ce7725cf0d19f39403b273be262c7a4ff638898f6caf84bfb358c580ba4adfd8664bcc539b82792e39ab4f1d8393b1f98f6dd5aae14bc6b73feeeaef7c3accde4d9b098f2d5c7ed68621851f37d27980c4b44df095d865493eeef2724db90aa53a3c37bd345ea75b4e76e8878deae1b4f3204c2957f3806e36a03e995f7633de9b863ff6b3309d330ade917c82f3286d9500105755efac22a4220f457debd861df3c0925dc4ba8913cea12b8deb93cec87c972421bb8442ef2a2a9d638471108ae0152aefdc45eac6ff786dae370a21bfe1e5777df8070bcefba8596cb8f71a516b505b1f83de1129cee91d3a4d6383daac7b9de46a99bc34661f3d805d2e138a769fd6489e4d058a3ab35ccbc81251aa2f23f83d7740bd8869465634e10e114c62bdfd640d69cebf6e78eb0970fa442746f7c3bea77d8589ab131827a95b274dd63ea04fba4c822aed4f8d0cd83ed83177d90332c7e66f103d4eb1dffb9ec0f52094bc7324a7c59819dca343776d6adb6850e7e7e83e2316db1c32feb4ea1c6f47a2ee41bb09d0a931f4fa3cdf7ada2bac7fe5ae2b997e24b8f8c52b0bee1482b74af68b407f0d78f3767bdcb42557c9f3aff0c2c2ea7745a0f588b00a751c1c8d2124a8bfd4d7f756587d239cc43a8cae1d67cf15c73dc8569a1ebdd7b8559e969541a547c272e52d57e5924ced9afc87cd2cdcdf8e30f423ebe26170393ecec06afa093839fc3a10fdc3f9ae19e79e4df6a9af6027e1129a7a6cb4517607eac80fa2b5f7853fe84028a66976ec4b4af50abe9ca959b844d7b2ab94903efec6dfc99ed9df2c329c0e8449b4d2a0a5bc2506d170884d2c6ea8aefebcaaf2abbfa3c4d9e4d201369a47792124a7909e247dc98b777b60a30b1461d857f164e3df983d9a900f8b11bddbdcf47c29d483033c9250f30e268ddf97e0ecbdd99d6fb3dc4562bb75f8f1e03d1aec424293fa5fc786444411a512fc582a9b577d5e88fb9d6f7346bd489f6eb4296e576e25c45e114fb6a3d0b6b831fb4ffe7486daadf2f0ad78aad8f8f7eba17e524de06e81a5af9c1aa09019fcc51611afc45fd30b8ecd2a2ae19758a1ffa55f79cdf53ef1bb55e49cb58d8b291664be61586ace94c7b378d685e54aeee09af828a3ce7335f9d03f8daabcf3543b8099956f60913db6ab401a427aca83772df4fce9081409ab426dae09739b50a8ab4c04a6d2e63b2c4c0b5f7fbd9dc76722057ab6cefc9ccae3abf251259f999fe09dbe1232b8ecf0e26b3d88d13a1001840f6b5942359c3ac75bfc321d9504bcc0e3f4add741125941ece20b4f90416b1f14edb4ecb1ced79cef883aa1d5193f3efeeae7e103891ae4840978fbe74d2cc90b7e02b4d839f15c75576b74e05f7a8af71823317a851bf0ff9171bdb16ffa36f57ccdef61065a62d64ba434571db0d476995e2bf4f148f0a6276b2fad82f03b91fe53f9a7acff3ecdfcedcc1eae42e52e1f7443114b8edc8a9d5c8a55727f7ee1d20e1ca55b42e51b47fc4d2313458ab9a5f05c1411dc8f11e4c57d3fe87183763bd24cfb8dc583c82ce9c0abbeb76310666d2236e2ca164c66e6336fd571967f35b2b0ba847922f5aabf97aea061d19eb9cc3cd6e764da9651f9e66577d9c8870734fe8e03d20ba107e6e2997ef7c42f940b88410c6bf46635cb5e402113411a98c75e8cfd3760235d7a486bfeea1a1dc188b7886172ac66d45a4bd87f60b8502382888f3806e47ffb74d9aef2519e91536f7798b7c22ee70566e686ae2b577f6341f7c47dc1ae41f2af983b80f7db23a3466b4f14e2afd591b19d36375acbc0c8ebf21654c8cf44ea49103299eb1ac6e96bb282a33a6ea204aa266b7d627c53757daa176f6cde932e7e0342977dbf7d5668e8ba984bf05dc610e5450eb4c3dcf7965eedc9b168a9c274ef6a050e93234a9bb5488a5aefaea9c442729b5416dcee6bac23f238bea2f1f4615c863a3ff7c7a081558237f2097b9ffa869f4b69fa32784f62c0b7a458411efd3a9108735de667c63c34af2225e382a17600acecc118ac1f81ec5ed9a26fa966bee8dc6f55c17bbd89a94932bf930b081fd310ef94c490855453551e9eb809e9d568500e6662564b65701a721208dcbef9a07650f9faa5a503d37f2e1b1912fbfb437f1f4c2d4a830a2dcfae905d323fe9a6a01cc8d88ff82a26a1c228103396b6756659b6a8a9ff8b31494cd8bde6205d6f62e698d9ae43ec740fafc60d798a85e5f8598486b6e82f23506c6004ec2f733cde633c3b45d9ef14fb223c020a67f305e33b5d3b239b5026ca679004e212725a4090818734435247b918dc9c65d2f0c580722651217ce7a2dec34c0f8c49e3dc051c01f5d445dca8675339f5c8b30ddc19f51ffa9e9c513f5fc9892dbe5ee5bc148ebf3033635401c8675f0fb43e503d73cd432e3ae2f25bf29b4088a3193c208f5ba51882364202dc3eed6f3ab9a871b4afa960f1776cc92deb7098ae6f61af30e715ab60d44f378bbb79f8fb663de164a5f4f582e6a17fd7e553e677632d1e8489a8138bc780418de30c0a95ae3ec3b0cdee51901869acc318a6725c0c06273dc67d393129278225b9384d978512befdf449f85146fbbe92e6b52cf02008b13d77ccc68e7b65e0c1a25f1f9d17b06b17f216729684fec1b4c0c3fdaf40af5dd1a3f4492d49e018f60f41d91524bc5d750789fd39b6e69cb66b1d86b2c1405331e3e793fb38dc447161f1ba02cee1519b72727aee9ede2898c5195adb0dc1c29fe6eca6598c5612a7f98bfe0d1853e44f47c94ae57bfdaee16711135226c9b44440abbeca5ed53b0aa58d34fa0faf766087135599d7b88a04d5ba7d69c148f3ebaee211a06438146d762c9f85d9007a228edd7d71ad18fe69a1af0caa6176eade25bea11504c2f0498a450d4d265bf97dea5b23c10560c9844d761702a5814fb355827ed6f46bcebb61d0a06c21746625a438c38496a941f447c2150c9125990ff7feef9d551a7adcbe0fd828ef4397c0799507599899259f61ff914f76be6077d0daa67ac0ab9093ecd0f78455b605a7885cae38a88b2955cecd37f972841f440de12831263ae64c7c78970138a738bcc66aae8c1a5c3ca0e166dde9860bbfc4c7bdb854cdb3d94ad4c723b2de03a50dfd120041a9b3107a480e7e108f729484d0df0d8e47c3a6b7ce0376e642ec5a267a91dd2bb1f1b3fe56a5097edddba482627cf79b66801fdd4ecb733067ad52e8fb9970be01a397ede6a3eaee6b8524f8e1cf00e0c5aed165b8b1533afaaeeaa82153f9840760b58b8a12e8168956db4522f2dd5a13183cf861acb0c0bb2735ff5cb683f633bd99ba2bfa7f1fcdd0a54d3b4fa9a7d3de250d7e40bd7b3a829a4f04fd71c64ed4f2503094773b45fdd821688d10ced9da17089b7c954f7e4a7f3e56226abee46d7eb93a6f3d039a7cf3dc14c18dd7502aa0e29e1c54bd1c2182138e06326f3cd4cddcf1997c9739f9e4a0899ce919f20b2def0ff103e5a9e123a1db4a544d438f789a0ed26664523bd55902364f4a21b2a92fcc111392dcdcf7ac0ece18c474d47a11d544b64836a62e3e1e0e9d15f8066315f000b7d8603f772704ed5b96798f28e4f699a671023a4d49c5a1e30d14145b9179e4b0f3424fd46cc22ca48cde74904876cc037a04aee32b53d02e4869427b6b18bf0ce7b5ffb75268788ca5029d2d12b2df068219af12d4e17e56f83e581b0fd6cb7048204803342ab8b146b0c237d6ac7aeb2ee21550c00da60286994f1e7ca53de19d874f7bb27c8c5e263fa350448ea28f4ac0cdfdc4c0d5096f2ab328d089dacb5e87f0a29814e8461470a22ee8a4a318f5e2b5317a027da39789b7b17bdcc9b26bdad1ba5e4580f671a3179a9fde91408aa41a68f47c71c524f8e413557b0656cc2a67e36da5a07ee7c55b0877ecf41a8616ec20f59d370f3eff6b10e68a6c55feff6f52f498bc9ab77224a7548ccdfa3de41ff44ee4bd32295a42d9fdac1a4c8484a7383a6bd5e39cb0249e939fe7f53075d6d4a54bcfbaec50853c5e4bfda256665ed56dcd20fbd04a1d40c200223ddac36a7229df6003f335227a6bde261f7e2f7c980e7e522c68abc63601b3b1a9ebdd4530e4f33b9986f582300", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x800000001, 0x1000, 0x7, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x8001, 0x0, r8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) read$msr(r4, 0x0, 0x0) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$nfs4(&(0x7f0000000240)='fuse\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340), 0x1000000, &(0x7f0000000480)={[{'rootmode'}, {'*-{:-\\!^a'}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'fd'}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x31, 0x37, 0x66, 0xa1, 0x37, 0x30, 0x65], 0x2d, [0x36, 0x35, 0x38, 0x66], 0x2d, [0x31, 0x35, 0x31, 0x39], 0x2d, [0x0, 0x2, 0x30, 0x32], 0x2d, [0x65, 0x30, 0x36, 0x33, 0x62, 0x66, 0x50, 0x66]}}}, {@obj_type={'obj_type', 0x3d, 'user_id'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '$:(::'}}, {@subj_user}, {@subj_user}, {@uid_eq={'uid', 0x3d, r9}}, {@uid_eq={'uid', 0x3d, r10}}, {@euid_lt={'euid<', r8}}]}) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r11 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x41, &(0x7f0000000040)=0x10, 0x4) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f00008a1000/0x400000)=nil, 0x400000, 0x4, 0x0, 0x0, 0x2) 3m52.161326717s ago: executing program 4 (id=702): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = io_uring_setup(0x1d10, &(0x7f0000002380)={0x0, 0xffffffff, 0x1000, 0x2, 0xfffffffe}) pselect6(0x40, &(0x7f0000002e80)={0x9, 0x7fffffff, 0x2, 0xffffffffffffff35, 0xedbf, 0x4, 0x9, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1) (async, rerun: 64) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_nofollow}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 64) chdir(&(0x7f00000000c0)='./bus\x00') (async, rerun: 64) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) (rerun: 64) chdir(&(0x7f0000000080)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x6883, 0x3d) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 3m52.106518605s ago: executing program 33 (id=702): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = io_uring_setup(0x1d10, &(0x7f0000002380)={0x0, 0xffffffff, 0x1000, 0x2, 0xfffffffe}) pselect6(0x40, &(0x7f0000002e80)={0x9, 0x7fffffff, 0x2, 0xffffffffffffff35, 0xedbf, 0x4, 0x9, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1) (async, rerun: 64) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_nofollow}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 64) chdir(&(0x7f00000000c0)='./bus\x00') (async, rerun: 64) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) (rerun: 64) chdir(&(0x7f0000000080)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x6883, 0x3d) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 3m32.110416097s ago: executing program 2 (id=912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x34, 0x0, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0xc014) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x2, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8014}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x34, 0x0, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0xc014) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x2, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8014}, 0x4000) (async) 3m32.049106478s ago: executing program 2 (id=914): r0 = socket(0x2, 0x80805, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000100)={0xae, [0xff, 0x20001], 0x6}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e4, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010) r3 = syz_io_uring_setup(0xc32, &(0x7f0000000180)={0x0, 0x8, 0x8000, 0x2, 0x2e1, 0x0, r0}, &(0x7f0000000000), &(0x7f0000000240)) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfd, 0xfd, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x8}}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x5}, @float={0x1}, @fwd={0x10}, @ptr={0xf, 0x0, 0x0, 0x2, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8000}}, @typedef={0xb, 0x0, 0x0, 0x8, 0x5}, @datasec={0xf, 0x2, 0x0, 0xf, 0x1, [{0x4, 0x8, 0x6}, {0x3, 0x7, 0xf}], 'x'}, @enum={0xe, 0x9, 0x0, 0x6, 0x4, [{0x0, 0xfffffffb}, {0x3, 0x302}, {0xd, 0x101}, {0x1, 0xffffffff}, {0x3, 0xe3}, {0x10, 0x81}, {0x4, 0x3ff}, {0x8, 0xbf0}, {0x4, 0x9}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x4}}]}, {0x0, [0x61, 0x30, 0x0]}}, &(0x7f0000000280)=""/108, 0x11d, 0x6c, 0x1, 0x6}, 0x28) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x121000, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000540)=[r0, r0, r2, 0xffffffffffffffff, r1, r1, r1, r4, r5], 0x9) 3m31.958919264s ago: executing program 2 (id=915): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0xc080}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3m31.87055049s ago: executing program 2 (id=916): syz_io_uring_setup(0x3a, &(0x7f0000000040)={0x0, 0x0, 0x10100, 0x40000000, 0xc9}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000600)=@IORING_OP_SHUTDOWN={0x22, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x11030, 0xffffffffffffffff, 0x10000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a05000000000000000000020001000c00054008000000000000020900010073797a30"], 0x54}, 0x1, 0x0, 0x0, 0x4048000}, 0x880) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000040)=@IORING_OP_MKDIRAT={0x25, 0x41, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x28, 0x0, 0x0, {0x0, r4}}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r5, 0x6, 0x2b, &(0x7f0000000c00), &(0x7f0000002000)=0x2) 3m31.810787384s ago: executing program 2 (id=918): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="29b48708") r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) socket(0x2, 0x80805, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r3]) ioctl$KVM_GET_VCPU_EVENTS(r4, 0xc048aeca, &(0x7f0000000080)) syz_clone3(&(0x7f0000000240)={0x24000000, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3m31.039286941s ago: executing program 2 (id=930): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x218}) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x218}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) write(0xffffffffffffffff, &(0x7f00000003c0)="66156489145a5d861c85e1865a950fd03a4959f942c47e62cf15219f4a03365fd26d3ea92a91f7b46e7f5d7ec4009555b8748ca140381bb9de6363bb77a245da5d361a44508f2a01fb77ae487b45c38498f54028682bacabae2cb1bf0bdb563b3b76baf08162265d7c886e50c63d778be62c5294a062661db6b7dd7f9163e6d69a7378bf79ea456d60fdd0803d7a6e11340c79078d1b510f", 0x98) (async) write(0xffffffffffffffff, &(0x7f00000003c0)="66156489145a5d861c85e1865a950fd03a4959f942c47e62cf15219f4a03365fd26d3ea92a91f7b46e7f5d7ec4009555b8748ca140381bb9de6363bb77a245da5d361a44508f2a01fb77ae487b45c38498f54028682bacabae2cb1bf0bdb563b3b76baf08162265d7c886e50c63d778be62c5294a062661db6b7dd7f9163e6d69a7378bf79ea456d60fdd0803d7a6e11340c79078d1b510f", 0x98) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000cd9000/0x4000)=nil, 0x4000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000026f000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000026f000/0x400000)=nil) poll(&(0x7f0000000340)=[{r0, 0x19}], 0x1, 0xffffff01) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/4, 0x4, 0x100, &(0x7f0000000180)={0xa, 0x4e21, 0xffffffff, @private0, 0xffff8001}, 0x1c) 3m16.028799778s ago: executing program 34 (id=930): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x218}) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x218}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) write(0xffffffffffffffff, &(0x7f00000003c0)="66156489145a5d861c85e1865a950fd03a4959f942c47e62cf15219f4a03365fd26d3ea92a91f7b46e7f5d7ec4009555b8748ca140381bb9de6363bb77a245da5d361a44508f2a01fb77ae487b45c38498f54028682bacabae2cb1bf0bdb563b3b76baf08162265d7c886e50c63d778be62c5294a062661db6b7dd7f9163e6d69a7378bf79ea456d60fdd0803d7a6e11340c79078d1b510f", 0x98) (async) write(0xffffffffffffffff, &(0x7f00000003c0)="66156489145a5d861c85e1865a950fd03a4959f942c47e62cf15219f4a03365fd26d3ea92a91f7b46e7f5d7ec4009555b8748ca140381bb9de6363bb77a245da5d361a44508f2a01fb77ae487b45c38498f54028682bacabae2cb1bf0bdb563b3b76baf08162265d7c886e50c63d778be62c5294a062661db6b7dd7f9163e6d69a7378bf79ea456d60fdd0803d7a6e11340c79078d1b510f", 0x98) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000cd9000/0x4000)=nil, 0x4000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000026f000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000026f000/0x400000)=nil) poll(&(0x7f0000000340)=[{r0, 0x19}], 0x1, 0xffffff01) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/4, 0x4, 0x100, &(0x7f0000000180)={0xa, 0x4e21, 0xffffffff, @private0, 0xffff8001}, 0x1c) 2m57.5963984s ago: executing program 0 (id=1331): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_io_uring_setup(0x1f97, &(0x7f0000000080)={0x0, 0xe244, 0x13580}, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') lseek(r2, 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x400000f1, 0x0, 0x6}]}) 2m57.490559704s ago: executing program 0 (id=1332): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x11, 0x4, 0x4, 0x5}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000040), 0x0}, 0x20) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004cc0)={0x1c, 0x21, 0x21, 0x0, 0xfffffffc, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) 2m57.487768396s ago: executing program 0 (id=1333): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x20010, 0xffffffffffffffff, 0x1bf34000) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r0, 0x0) 2m57.440535554s ago: executing program 0 (id=1334): mmap(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000040)={{0x89, 0x4}, 0x100, './file0\x00'}) r1 = socket(0x1e, 0x805, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) recvmmsg(r1, &(0x7f0000009500)=[{{&(0x7f0000000180)=@ax25={{}, [@rose, @remote, @default, @bcast, @bcast, @rose, @remote, @null]}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000300)=""/114, 0x72}, {&(0x7f0000000380)=""/228, 0xe4}, {&(0x7f0000000480)=""/71, 0x47}], 0x4, &(0x7f0000000540)=""/122, 0x7a}, 0x8}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)=""/98, 0x62}, {&(0x7f0000000740)=""/13, 0xd}, {&(0x7f0000000780)=""/77, 0x4d}, {&(0x7f0000000800)=""/189, 0xbd}, {&(0x7f00000008c0)=""/196, 0xc4}, {&(0x7f00000009c0)=""/238, 0xee}, {&(0x7f0000000ac0)=""/205, 0xcd}], 0x8}, 0xc}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000c40)=""/42, 0x2a}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/185, 0xb9}], 0x3, &(0x7f0000001d80)=""/154, 0x9a}}, {{&(0x7f0000001e40)=@un=@abs, 0x80, &(0x7f0000001ec0)=[{&(0x7f00000021c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001f00)=""/164, 0xa4}, 0x400}, {{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/220, 0xdc}, {&(0x7f0000001fc0)=""/106, 0x6a}], 0x2, &(0x7f0000003200)=""/214, 0xd6}, 0xfffff65c}, {{&(0x7f0000003300)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000005780)=[{&(0x7f0000003380)=""/134, 0x86}, {&(0x7f0000003440)=""/4096, 0x1000}, {&(0x7f0000004440)=""/224, 0xe0}, {&(0x7f0000004540)=""/67, 0x43}, {&(0x7f00000045c0)=""/232, 0xe8}, {&(0x7f00000046c0)=""/163, 0xa3}, {&(0x7f0000004780)=""/4096, 0x1000}], 0x7, &(0x7f0000005800)=""/239, 0xef}, 0xffff5b5f}, {{&(0x7f0000005900)=@phonet, 0x80, &(0x7f0000005a80)=[{&(0x7f0000005980)=""/200, 0xc8}], 0x1}, 0x3}, {{&(0x7f0000005ac0)=@nfc, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000005b40)=""/68, 0x44}], 0x1, &(0x7f0000005c00)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000006c00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000007f80)=[{&(0x7f0000006c80)=""/57, 0x39}, {&(0x7f0000006cc0)=""/171, 0xab}, {&(0x7f0000006d80)=""/122, 0x7a}, {&(0x7f0000006e00)=""/46, 0x2e}, {&(0x7f0000006e40)=""/61, 0x3d}, {&(0x7f0000006e80)=""/4096, 0x1000}, {&(0x7f0000007e80)=""/226, 0xe2}], 0x7, &(0x7f0000008000)=""/92, 0x5c}, 0x14}, {{&(0x7f0000008080)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f00000093c0)=[{&(0x7f0000008100)=""/138, 0x8a}, {&(0x7f00000081c0)=""/240, 0xf0}, {&(0x7f00000082c0)=""/4096, 0x1000}, {&(0x7f00000092c0)=""/157, 0x9d}, {&(0x7f0000009380)=""/13, 0xd}], 0x5, &(0x7f0000009440)=""/134, 0x86}, 0x3}], 0xa, 0x2020, &(0x7f0000009780)={0x77359400}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0\x00') 2m57.43970881s ago: executing program 0 (id=1335): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mq_timedsend(r0, &(0x7f0000000040)="0f990797b7fde4f1ef5296c6f9b1a8ae04dd28a16065375dabf024f63b85b7786a405d3ea1f5089a152f54f3", 0x2c, 0x10000, &(0x7f0000000080)={0x77359400}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f00000000c0)) (async) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8) mq_timedreceive(r0, &(0x7f0000000100)=""/110, 0x6e, 0xfffffffffffffff8, &(0x7f0000000180)={0x0, 0x3938700}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg/0:0:0:0\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) (async) ioctl$BLKGETNRZONES(r0, 0x80041285, &(0x7f0000000200)) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000000280)={0x1, r2, 'id0\x00'}) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x1b6) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000580)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x7, 0x7800, 0x7ff, 0xff, {{0x5c, 0x4, 0x3, 0x2a, 0x170, 0x66, 0x0, 0xf, 0x0, 0x0, @local, @multicast2, {[@cipso={0x86, 0x61, 0x3, [{0x5, 0x4, "2fea"}, {0x2, 0x6, "86eae92a"}, {0x2, 0xb, "66a265123c4dfca620"}, {0x6, 0xe, "7d3883bddd33bdcf9d26b521"}, {0x1, 0xc, "41b323ddd5c5b5c30be7"}, {0x5, 0xd, "7d97ddfb56bd376c72236b"}, {0x5, 0x2}, {0x2, 0xe, "ee6fc9ae1d08729bb9e5d640"}, {0x5, 0xf, "48571f518a08122dcd7d96bd56"}]}, @end, @timestamp_prespec={0x44, 0x2c, 0x24, 0x3, 0xd, [{@loopback, 0xffffad1b}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x5}, {@remote, 0x2000}, {@multicast1, 0x7}, {@empty, 0xdd90}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1b, 0xa2, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x2d}, @remote, @broadcast]}, @timestamp_prespec={0x44, 0x54, 0x27, 0x3, 0x7, [{@broadcast, 0x1}, {@local, 0x3}, {@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x24}}, {@broadcast, 0x9}, {@loopback, 0x6}, {@private=0xa010102, 0x6}, {@empty, 0x401}, {@multicast2, 0x6}, {@private=0xa010102, 0xd879}]}, @end, @generic={0x94, 0x8, "291384dbdf92"}, @generic={0x44, 0x5, "60a763"}, @cipso={0x86, 0x4b, 0x3, [{0x2, 0x7, "bd03e0f725"}, {0x1, 0x9, "68644d506afae1"}, {0x2, 0x11, "0048e2b42474b92c791b026ff26647"}, {0x5, 0x12, "b280aae459efd6d6f4b1fda2a4a5b62d"}, {0x7, 0x12, "cb23e0f74ff41439f05c3e7f7cd4b860"}]}]}}}}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6f11}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0xc810}, 0x0) (async) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f00000006c0)={0x1094, 0x0, 0x1000, 0x1}) (async) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r5, 0xc008551b, &(0x7f0000000740)={0x9, 0x14, [0xff, 0xfffffff8, 0x80000001, 0xff, 0x6]}) (async) getsockname$l2tp(r6, &(0x7f0000000780)={0x2, 0x0, @multicast2}, &(0x7f00000007c0)=0x10) (async) r7 = io_uring_setup(0x4ca9, &(0x7f0000000800)={0x0, 0x397d, 0x800, 0x1, 0x3cb, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000018, 0x4011, r7, 0x10000000) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000880)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, &(0x7f00000008c0)) (async) ioctl$BSG_SET_TIMEOUT(r8, 0x2201, &(0x7f0000000900)=0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0}, &(0x7f00000009c0)=0xc) (async) r10 = getegid() lchown(&(0x7f0000000940)='./file0\x00', r9, r10) (async) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000a40)={0x7, &(0x7f0000000a00)=[{0x360a, 0xc, 0x1}, {0x3, 0xff, 0xc0}, {0x1859, 0x3, 0x5, 0x5}, {0x3, 0x9c, 0x9, 0x1}, {0x0, 0x4e, 0x39, 0x1}, {0xe1a0, 0x2, 0x8, 0x5}, {0x400, 0x5, 0x3, 0xc9}]}) (async) socket$netlink(0x10, 0x3, 0x5) (async) r11 = syz_open_dev$MSR(&(0x7f0000000a80), 0x8, 0x0) ioctl$AUTOFS_IOC_READY(r11, 0x9360, 0x9) 2m57.307297331s ago: executing program 0 (id=1337): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x4008, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r6, 0x540b, 0x3e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x18) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000780)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000580)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000840)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, 0x0) 2m57.19331863s ago: executing program 35 (id=1337): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x4008, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r6, 0x540b, 0x3e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x18) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000780)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000580)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000840)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, 0x0) 1m34.839096273s ago: executing program 7 (id=2563): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x800000000000001) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x18}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x22, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1) 1m34.686626568s ago: executing program 7 (id=2566): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket(0x80000000000000a, 0x2, 0x0) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) removexattr(0x0, &(0x7f0000000340)=@random={'security.', '/dev/fuse\x00'}) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, 0x0) (async) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) r4 = dup2(r3, r1) (async) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) (async) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) ppoll(&(0x7f0000000100)=[{r4, 0x1400}], 0x1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, r2, {0x7, 0x2b, 0x3, 0x100000, 0x9, 0xd9b7, 0x2, 0x7f, 0x0, 0x0, 0x4, 0x8}}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f00000000c0)={0x0, 'batadv_slave_1\x00', {0x4}, 0xbfa}) 1m33.756724658s ago: executing program 7 (id=2584): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = gettid() getpgid(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, r3, 0x711, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x20044804) fcntl$notify(r0, 0x402, 0xd) mount$afs(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@dyn}, {@flock_write}, {}, {@dyn}], [{@seclabel}]}) open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000180)) 1m33.655173287s ago: executing program 7 (id=2585): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x70bd2a, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x1a}}}}]}, 0x38}}, 0x0) syz_open_dev$video4linux(&(0x7f00000000c0), 0x4, 0x82) (async) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4, &(0x7f00000001c0)={[{@verity_require}, {@nfs_export_off}, {@verity_off}], [{@subj_role={'subj_role', 0x3d, '/dev/v4l-subdev#\x00'}}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfshat}, {@dont_measure}, {@appraise_type}, {@subj_type={'subj_type', 0x3d, '/dev/v4l-subdev#\x00'}}]}) 1m33.654855016s ago: executing program 7 (id=2586): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0x4000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000100100000100000024000000000000009c000664fa6a95101b5fe80f4980536a2798bebb352e8bfa3c8e2358f8eb0f607bdea4ba64650fda24443ca4b454be1635e11b988a1e0111ed"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) socket$inet6(0xa, 0x80000, 0x800) r4 = socket(0x1e, 0x4, 0x0) getsockopt$sock_buf(r4, 0x1, 0x0, 0x0, &(0x7f0000000c40)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000780)={{0x5, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x3a1feb6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4]}) r5 = socket(0x23, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0xc8, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x54, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x9}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x8}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x13}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xba06}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x101}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xaced}]}}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xc, 0xc89f, 0xfff75ef7, 0x0, 0x8001, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x9, 0x1, 0x8, 0xfc000000, 0x0, 0x80000001, 0x4000, 0x2}}, {0x8, 0x2, [0x1, 0xba7]}}]}]}, 0xc8}}, 0x4048000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r6 = semget$private(0x0, 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='fusectl\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) semctl$GETALL(r6, 0x0, 0xd, &(0x7f0000000000)=""/124) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x7fffffff}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000aafe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000033000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001400636d61632861657329000000000400"/244], 0x13c}}, 0x0) 1m33.601650894s ago: executing program 7 (id=2589): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}}, 0x10) landlock_create_ruleset(&(0x7f0000000240)={0x1e16, 0x2, 0x1}, 0x18, 0x0) 1m17.52648332s ago: executing program 36 (id=2589): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}}, 0x10) landlock_create_ruleset(&(0x7f0000000240)={0x1e16, 0x2, 0x1}, 0x18, 0x0) 33.017717369s ago: executing program 8 (id=3430): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000080), 0x10) listen(r5, 0x0) accept4$llc(r5, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="91d6818d05abee9e00000000", @ANYRES16=r6, @ANYBLOB="01012abd7000000008002b00000008000300", @ANYRES32=r7, @ANYBLOB="040046000600340076770000080026006c09000024005180ff"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4804) close(r3) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r6, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x88000) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1}, @const={0x0, {0xfbff, 0x8, 0x4, 0x81}}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000f9ff020000da6e8287a4d62cf33f8500ba185526babd37b809abc5fd18d39673f786b545fd350ee56ae12fc2f09e64c9431c44b549128ca73a12a9c56057f651abd3fa9e22dc3fd3d622eee1dad4e0fb33216662553cdfae8a90258a673e94d60afe93d53a35e25631064c7cca4cfdd879611bae1880e2dd5a44647241e9947aa556f529f753b4a64d55", @ANYRES32=r10, @ANYBLOB="08009f000d0000000800260076090000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 32.139788963s ago: executing program 8 (id=3434): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x5522, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) 32.042954251s ago: executing program 8 (id=3435): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x80000000}, 0xc) (async, rerun: 64) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async, rerun: 32) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) (async) sendmsg$nl_route_sched(r3, 0x0, 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000000)=0x31) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 32) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 32) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r6, 0xc01c64ae, &(0x7f0000000240)={0x0, 0x9, 0x9c01, 0xd1c7, 0x8, 0x3, 0x5}) (async) r7 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x4) (async) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)="d149781ccbf60f4b3adb6dcab4535d1364260ee120d73501e7534f3aa134856584dd84d3af57f18bef43c534b366788180be4dd72b1fb4952cab45475540c22dcfc160b0c80e2cb94fb38b0292e2352b7b12dcb6df21f8d474faf34b77f79482b2622b66cf54018cfc9e85978cf81ef2d08c3b31f2e057816950a6b9e574dc17559d270e2fb69d3a68e65870743c6db74fdbb2f11b05ee910490fb8517f04c81274e7f737aa13bb42c859fc72ac6d2e0043f704b0b92b97c728b3c6fa37767c215b43ecf0f4630d4a18ca4be41", 0xcd}, {&(0x7f0000000d40)="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", 0x1000}], 0x2}, 0x1) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x2}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r9, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) ioctl$DRM_IOCTL_GET_UNIQUE(r5, 0xc0106401, &(0x7f00000000c0)={0x80, &(0x7f00000001c0)=""/128}) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) pipe2$watch_queue(&(0x7f0000000080), 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 32.039463958s ago: executing program 8 (id=3438): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x9}, 0x8) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="9964440a83e63f4e064812a258f76a73fa9b24bb", 0x14}], 0x1}}], 0x1, 0x4000000) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef51d"], 0xf8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mlock(&(0x7f00007f0000/0x4000)=nil, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x128) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = open(&(0x7f0000000180)='./file1\x00', 0x800, 0x70) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000a00)=0x27, 0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', 0x0) unlinkat(r1, &(0x7f0000000000)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x4a863c90, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r5, 0x0, 0x0) 28.752195775s ago: executing program 8 (id=3484): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @dev, @loopback}, &(0x7f0000000140)=0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x1184, 0x44004}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4810) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0xc, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0xb}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4811}, 0x2008c014) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x116c, r1, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10f8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd7}, @ETHTOOL_A_BITSET_MASK={0xe0, 0x5, "5b110ad1f8c4a7d7859fad35b9a23f9f077fbde9e208d2a1033a976a025b40b78af6c0bdfaeb979e3d31b95e35008a71f4f8a127ce26b6706bb2459fa40f11c9604b6515c9e2c47aef6e45e829824b57872b2b23913d59efecc7ac97cfdeca74a4c9d5b74b49df205965361ed874134e714e12369f6ddd8935ab47d0de99d81495da96c5a1571cab701a11163e866f928e38b39bdab3be71ad6eb9e7b368c7216038edfc57cdac914b7c386a0f35232a1498ba2690c73c6187e100914e7fcdd1e633cd9275010884bdefa7353bb1f81ae13e01ae834d619ccd5d5878"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}, @ETHTOOL_A_DEBUG_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x116c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r8 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcb, 0x1, 0x2, 0x3b6}, &(0x7f00000000c0)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}}) io_uring_enter(r8, 0x3b3d, 0x75d1, 0x40, 0x0, 0x0) io_uring_enter(r8, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) 27.618721205s ago: executing program 8 (id=3491): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xd, 0x1, 0x428}}}, 0x7) (rerun: 32) ustat(0x8, &(0x7f0000000040)) (async) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x4, 0xc8, 0xff}}}, 0x8) (async, rerun: 64) syz_emit_vhci(0x0, 0x0) (rerun: 64) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000001980)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x4, 0x8}, {0xfffa, 0x2, 0xfffd, 0x1}}}}, 0x15) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x1000008, &(0x7f0000000080)=ANY=[@ANYBLOB='tran', @ANYRES8=0x0]) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x9) 27.561899495s ago: executing program 37 (id=3491): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xd, 0x1, 0x428}}}, 0x7) (rerun: 32) ustat(0x8, &(0x7f0000000040)) (async) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x4, 0xc8, 0xff}}}, 0x8) (async, rerun: 64) syz_emit_vhci(0x0, 0x0) (rerun: 64) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000001980)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x4, 0x8}, {0xfffa, 0x2, 0xfffd, 0x1}}}}, 0x15) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x1000008, &(0x7f0000000080)=ANY=[@ANYBLOB='tran', @ANYRES8=0x0]) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x9) 4.804828909s ago: executing program 1 (id=3882): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYRES8=r2], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) tee(r0, r0, 0x3, 0x7) 1.575631897s ago: executing program 1 (id=3914): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000440)={0x6, @sdr={0x38415262, 0xe8b7}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="060000000000000002010040"]) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000380)="b805000000b90001c0fe0f01c13e0f79a8fb7f0000c46225a9fbc423656858883f66baf80cb8c6db7986ef66bafc0c66ed400f35b9800000c00f3235010000000f30f3470fc733c441fa532e66b8f7000f00d8", 0x53}], 0x1, 0x59, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="016f0800070008000700000001044500002800"/39, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5a0000fe90780013"], 0x36) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) readahead(r1, 0x100000001, 0x7fffffff) 1.329990219s ago: executing program 9 (id=3918): r0 = socket$inet6(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01144e", 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfda0000547fcedd20e4321cc5e083487b84840000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) (async, rerun: 32) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x8) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX=r3, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x10) (async) r9 = socket(0x10, 0x3, 0x9) connect$netlink(r9, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) (async) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="14000000100001000000000000"], 0x28}}, 0x0) (async, rerun: 64) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="027d0f24fc6b844a3dbb57d8c67ec1232d3fbda1521055075d86cb31862a04fe0084fbac677108717d3a87e3a4fd80226ff35c078074d61f32184823ee940dc6812bf95e46f0732877b482c90234c882e70185372be2d2d51aa08b966640c3d5aa54cf89f3180b4e959dfa7822972808a5cfeae41d60c40be125417d7663268da9ade47d3204a290183c4db251f70f5d79e153c7564ead15fd61c2961258fdc0ce6695af59e83b0b70897624532d8e15bfe58bba462bad6bac9c573065263419d69903a59fe96c1bb884defbd1fc807f4cb572ccb90a5de81437f7240b27026aec10535c3fd253", @ANYRES16=r6, @ANYRES16=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r10}, 0x10) (async) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1.328470562s ago: executing program 5 (id=3919): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000280), 0x101, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000000)={0x0, &(0x7f00000002c0)=[@rdmsr={0x32, 0x18, {0x561}}, @out_dx={0xaa, 0x28, {0x1bc5, 0x0, 0xb}}, @wrmsr={0x1e, 0x20, {0x979, 0x3}}, @in_dx={0x82, 0x20, {0xfb10, 0x1}}, @wrmsr={0x1e, 0x20, {0x864, 0x3d}}, @uexit={0x0, 0x18, 0xb54}, @wr_crn={0x46, 0x20, {0x8, 0x4}}, @wr_crn={0x46, 0x20, {0x4, 0x425}}, @code={0xa, 0x5b, {"66400ff7e064470f01f8c461fc5a14b1440f2281f30f517ec666b860000f00d8f3440f09f3470f0ddac744240063be0000c744240201000000c7442406000000000f011424f3640f01df"}}, @cpuid={0x14, 0x18, {0x3c, 0x69de}}, @wr_crn={0x46, 0x20, {0x2, 0xc8be}}, @wrmsr={0x1e, 0x20, {0x940, 0x4000000000000002}}, @cpuid={0x14, 0x18, {0x8, 0xcc}}, @in_dx={0x82, 0x20, {0x96b6}}, @in_dx={0x82, 0x20, {0x8542, 0x4}}, @code={0xa, 0x55, {"470f01cff3430faef6c42369447700fa650fc76b4a410f3566b82d010f00d8c744240006000000c744240200400000ff2c24660fc7b2df00000066ba200066ed0fe970c7"}}, @rdmsr={0x32, 0x18, {0x94cc6a57614ac68e}}, @code={0xa, 0x84, {"b9ee0b0000b802000000ba000000000f30c7442400be000000c74424024a340000ff2c24c461c972e308b9800000c00f3235000800000f3066ba210066ed2e64660f3881b000000000c40211aa9609a900000f3567652e470f01ca48b805000000000000000f23d00f21f835300000040f23f8"}}, @wr_crn={0x46, 0x20, {0x2, 0x83d}}, @rdmsr={0x32, 0x18, {0x3af}}, @in_dx={0x82, 0x20, {0x4857, 0x7}}, @rdmsr={0x32, 0x18, {0x40a}}, @cpuid={0x14, 0x18, {0xfffffff8, 0x3}}, @in_dx={0x82, 0x20, {0x5e56, 0x3}}, @in_dx={0x82, 0x20, {0x5d49, 0x5b0aaf9078c4555b}}], 0x3bc}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.326180193s ago: executing program 9 (id=3920): socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4000000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 1.159302699s ago: executing program 1 (id=3921): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, &(0x7f0000000100)=0x1c, 0x800) socket(0x18, 0xa, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r1, 0xc008aec1, &(0x7f0000000040)={0xa, 0x0, [{0xa, 0x1e80000, 0x1, 0x633, 0x83a, 0x8, 0x8001}, {0x1, 0x0, 0x5, 0x400, 0x8, 0xff, 0xf72a}, {0x80000001, 0x7, 0x6, 0x80000000, 0x2695, 0x43f, 0x5}, {0x4, 0x5, 0x1, 0x1, 0x1, 0x100, 0xd1}, {0x1, 0x4, 0x1, 0x100, 0x9, 0x9, 0x4}, {0x7, 0x3, 0x2, 0x0, 0x3, 0x9, 0x9}, {0x2, 0x5, 0x2, 0x5, 0xffffffff, 0xffffffff, 0x87}, {0x40000002, 0x2, 0x6, 0x8, 0x1, 0x81, 0xf}, {0x6, 0x73, 0x0, 0x7, 0x3, 0xa, 0x4}, {0xc0000001, 0x0, 0x2, 0x4, 0x5, 0x4}]}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180)={0x0, 0xfffffffd}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={r2, 0x8000ca}, &(0x7f0000000240)=0x8) r3 = socket$key(0xf, 0x3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0xffff, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r4}, 0x38) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x4, 0x0, 0x0, 0x70bd2c, 0x3502}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_lifetime={0x4, 0x4, 0x2f}]}, 0x90}}, 0x0) 1.084450159s ago: executing program 5 (id=3922): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x10000, 0x4, 0x8, 0xfffffbc5, 0x0, [{0x6d, 0x4, 0xb0, '\x00', 0xe}, {0x7, 0x8, 0x72, '\x00', 0x5}, {0x0, 0x41, 0x9, '\x00', 0x5}, {0x51, 0x3, 0x8, '\x00', 0x9}, {0x8, 0x50, 0x82, '\x00', 0x60}, {0x0, 0x0, 0x2, '\x00', 0x7}, {0x3, 0xf4, 0x1, '\x00', 0x8}, {0xa, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0xfe, '\x00', 0xff}, {0x6, 0x6, 0x0, '\x00', 0x6}, {0x40, 0x11, 0x2, '\x00', 0x1}, {0x8, 0x24, 0x0, '\x00', 0xff}, {0x3, 0x86, 0xc, '\x00', 0xe9}, {0x5, 0x4e, 0x2}, {0x4, 0x4, 0x2, '\x00', 0x7}, {0x0, 0x0, 0x7, '\x00', 0x7f}, {0x3, 0x7, 0xd1, '\x00', 0x4}, {0x4c, 0x3, 0x2, '\x00', 0x1}, {0x8, 0x1, 0xbe, '\x00', 0xff}, {0x2, 0x3, 0xb, '\x00', 0x48}, {0x7, 0x21, 0x2, '\x00', 0x4}, {0x5, 0x0, 0x0, '\x00', 0x4}, {0x93, 0x4, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0x8, '\x00', 0x57}]}}) (async) r2 = syz_open_dev$radio(&(0x7f0000000b00), 0x2, 0x2) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000b40)={0x0, "b992447f1252bbde728df2362be6d0f5c49cd29346b53475cf76c2e939a305f2", 0x5, 0x10, 0x4, 0x97, 0x10, 0x0, 0x1, 0x4}) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x25, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0xd3, 0x0, 0x3, 0x4, 0xbb, 0x6d, 0xc0, 0x6d, 0x7, 0x61, 0xb, 0x95, 0xd}}) 956.08435ms ago: executing program 5 (id=3923): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, 0x0, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}]}, 0x30}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00') (async) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00') creat(&(0x7f00000001c0)='./file0\x00', 0x8) mount$afs(&(0x7f0000000000)=ANY=[@ANYBLOB='#syz0:syz0.r'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1000000, 0x0) (async) mount$afs(&(0x7f0000000000)=ANY=[@ANYBLOB='#syz0:syz0.r'], &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1000000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x1) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') (async) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 890.34159ms ago: executing program 1 (id=3924): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)={0x20, 0x2, 0x2, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x20000810) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc400102}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@deltaction={0x64, 0x31, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x50, 0x1, [{0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000851}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc400102}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@deltaction={0x64, 0x31, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x50, 0x1, [{0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000851}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0xa) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0xa) syz_emit_ethernet(0xe, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @empty, @void, {@generic={0x88f7}}}, 0x0) 889.847415ms ago: executing program 5 (id=3925): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x400, {0x0, 0x7, 0x3, 0xd14}}}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="5c5c12f1462e"}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x2, 0x2, 0x0, {0x2, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x10001, 0x4e}}, @NL80211_ATTR_MAC_HINT={0xa}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4cdf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x18ea}]]}, 0x70}}, 0x10004000) (async) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f0000ffb000/0x4000)=nil) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"e46fab908a32bb644641ccebc8ab1ba2", 0x0, 0x0, {0x2, 0x4}, {0x0, 0xba}, 0x6f9, [0x5, 0xffffffff80000000, 0x5, 0x6, 0x9, 0x4, 0x1, 0x9, 0x40, 0x0, 0x401, 0x0, 0x7fff, 0x4, 0x96, 0x6]}) (async) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000280)={0x0, 0x0, 0x8, 0x1}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000680)={{r1}, r2, 0x0, @unused=[0x5, 0x39c, 0x0, 0x790], @devid=r3}) (async, rerun: 64) r4 = syz_open_dev$loop(&(0x7f0000001680), 0xfffffffffffff000, 0x800) (rerun: 64) ioctl$BLKROTATIONAL(r4, 0x127e, &(0x7f00000016c0)) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001700)={r3, 0xffff, 0x7fffffff}) (async) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001b00), 0x40000, 0x0) sendmsg$rds(r5, &(0x7f0000003300)={0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000001b40)=""/35, 0x23}, {&(0x7f0000001b80)=""/14, 0xe}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/156, 0x9c}, {&(0x7f0000002c80)=""/171, 0xab}], 0x5, &(0x7f0000003200)=[@mask_fadd={0x58, 0x114, 0x8, {{0xfff, 0xd}, &(0x7f0000002dc0)=0x2, &(0x7f0000002e00)=0x4, 0x7ff, 0x5899, 0x18, 0x6, 0x0, 0xa89b}}, @rdma_args={0x48, 0x114, 0x1, {{0x4, 0x6}, {&(0x7f0000002e40)=""/134, 0x86}, &(0x7f0000003100)=[{&(0x7f0000002f00)=""/6, 0x6}, {&(0x7f0000002f40)=""/162, 0xa2}, {&(0x7f0000003000)=""/120, 0x78}, {&(0x7f0000003080)}, {&(0x7f00000030c0)=""/32, 0x20}], 0x5, 0x2c, 0xe}}, @cswp={0x58, 0x114, 0x7, {{0x2, 0x1}, &(0x7f0000003180)=0x6, &(0x7f00000031c0)=0x1, 0xf, 0x81, 0x1, 0x7fff, 0x11, 0xfffffffffffffffc}}], 0xf8, 0x4061}, 0x20004000) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000003480)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003440)={&(0x7f00000033c0)={0x64, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x17}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f00000034c0)={0x0, 0x2, r5}) (async, rerun: 32) syz_clone(0x0, &(0x7f0000003500)="5c448e8ef382557592373d99cd377e6cdf65ebc8afbe9737a04a45e811992deda0a2e29a985ee1380f4c014a17d92e9f51d4173115dd4a278e11cd96b540271fcfba2fe12d05108e22376f6942f79101b19b21a155adbf756c5d1629fe", 0x5d, &(0x7f0000003580), &(0x7f00000035c0), &(0x7f0000003600)="955fe976a207a05503268e865ddaa2a1c34352b7a906366e4e94226955c50328b40adc1eea3a4e87cdd11788438490f67a3c3addf02ed236f6dc2166406c13e15f878a531b55cff644c65e01ed7915faf1df8d5e562e1b8d926b1032cba11395bb7b0b89e78aaef4f010583764d6da5cb40263116b8d2fa60295c24793c196a676be1ff8cf269c07fa61a0a1c9ae0571450c3280b5eba694a9a47042cc7f130f8f0822a6944137f630cb5b1de2a80a5658a401e2c548059d357ec4ce7189e2") (async, rerun: 32) syz_genetlink_get_family_id$tipc(&(0x7f00000036c0), r5) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000037c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x218010c0}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)={0x28, 0x0, 0x138, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x48040) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000003840)={'wpan4\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000003880)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r7, &(0x7f0000003980)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003940)={&(0x7f00000038c0)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000084) (async) ioctl$MON_IOCQ_RING_SIZE(r5, 0x9205) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000039c0)) (async) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000003a00)={r1, 0xfb, 0x3, 0x8000000000000001}) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000003a40)={0x0, 0xe43, 0x20}, &(0x7f0000003a80)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f0000003ac0)={r11, @in6={{0xa, 0x4e20, 0x400, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}}, &(0x7f0000003b80)=0x84) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003c00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r12, &(0x7f0000003d00)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003c40)={0x4c, r13, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x54001}, 0x0) 889.215761ms ago: executing program 1 (id=3926): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x0, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x8000, 0x7800, 0xfff, 0x7, {{0x9, 0x4, 0x1, 0x2d, 0x24, 0x67, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@ssrr={0x89, 0xf, 0x80, [@empty, @local, @rand_addr=0x64010100]}]}}}}}) (async) r3 = socket(0x10, 0x803, 0x0) (async) r4 = syz_io_uring_setup(0x24f7, &(0x7f0000000b80)={0x0, 0x7687, 0x10100, 0x3, 0x33a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000540)=0x14) (async, rerun: 64) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=':'], 0x38}, 0x1, 0x0, 0x0, 0xc1}, 0x1) (async, rerun: 64) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) (rerun: 32) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r9, 0x8992, &(0x7f00000003c0)={'veth1_to_batadv\x00', @ifru_settings={0x8, 0x8000000, @sync=&(0x7f0000000380)={0xa62, 0x3, 0x7}}}) (async) io_uring_enter(r4, 0x22d3e, 0x0, 0x20, 0x0, 0x58) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x400, 0x70ad2b, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0xffff, 0xa}, {0x0, 0x5}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r12 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x3f, 0x2, 0x6}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x78, 0xfa}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async, rerun: 32) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) bind$inet6(r13, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r13, 0xfffffffb) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60000000001806fffe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="64c24b60d2d21c3c2f76ff00"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000400), 0x80) (async) r14 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) close(r14) (async) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRES16=r8, @ANYRES16=r1, @ANYBLOB="000129bd700016dcdf959b9525090800000000000000", @ANYRES32=r2, @ANYBLOB="14000200767863616e3100000000000000000000140002006970766c616e30000000000000000000080003000100000008000100", @ANYRES32=r11, @ANYBLOB="040001801400018008000300000000000800030003000000"], 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x2) (async) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) 886.557312ms ago: executing program 5 (id=3927): pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r0, 0x1d) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x7) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="8000000008021100040000000000000008021100000000000000000000000000640001000006020202020202010882848b960c121824"], 0x36) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "0d86f1cdfd034a0377b80b6a4453033fbd4ab9590405eb691413b47ac7f30c3463799a6247ae16cbe4d2a0e9a3c1b18d3f2e987dd18fc3dcfd952d89947e50b1", 0x38}, 0x48, 0xfffffffffffffffa) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x3) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000300)=@attr_pmu_init) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) lseek(r7, 0x9, 0x2) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r8, 0x5420, &(0x7f0000000000)=0x81) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}]}}) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x106, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r9, 0x6, 0x21, 0x0, 0x0) ppoll(&(0x7f0000000280)=[{r3}, {r1, 0x10000}, {r9, 0x80c2}, {0xffffffffffffffff, 0x7ad}], 0x4, 0x0, 0x0, 0x0) r10 = syz_open_pts(r8, 0x440) r11 = dup3(r10, r8, 0x0) setrlimit(0x2, &(0x7f0000000200)={0x6, 0xff}) ioctl$TCSETSW2(r11, 0x5437, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r11, 0x2c) 826.264205ms ago: executing program 1 (id=3928): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) (rerun: 64) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r7) sendmsg$NLBL_MGMT_C_LISTALL(r7, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000a00)={&(0x7f0000000180)={0x14, r8, 0x20, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000012}, 0x40008c4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r9}, 0x10) (async, rerun: 64) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x2100, 0x823}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r1}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x12}}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1a}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) 634.935415ms ago: executing program 6 (id=3930): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000280), 0x101, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000000)={0x0, &(0x7f00000002c0)=[@rdmsr={0x32, 0x18, {0x561}}, @out_dx={0xaa, 0x28, {0x1bc5, 0x0, 0xb}}, @wrmsr={0x1e, 0x20, {0x979, 0x3}}, @in_dx={0x82, 0x20, {0xfb10, 0x1}}, @wrmsr={0x1e, 0x20, {0x864, 0x3d}}, @uexit={0x0, 0x18, 0xb54}, @wr_crn={0x46, 0x20, {0x8, 0x4}}, @wr_crn={0x46, 0x20, {0x4, 0x425}}, @code={0xa, 0x5b, {"66400ff7e064470f01f8c461fc5a14b1440f2281f30f517ec666b860000f00d8f3440f09f3470f0ddac744240063be0000c744240201000000c7442406000000000f011424f3640f01df"}}, @cpuid={0x14, 0x18, {0x3c, 0x69de}}, @wr_crn={0x46, 0x20, {0x2, 0xc8be}}, @wrmsr={0x1e, 0x20, {0x940, 0x4000000000000002}}, @cpuid={0x14, 0x18, {0x8, 0xcc}}, @in_dx={0x82, 0x20, {0x96b6}}, @in_dx={0x82, 0x20, {0x8542, 0x4}}, @code={0xa, 0x55, {"470f01cff3430faef6c42369447700fa650fc76b4a410f3566b82d010f00d8c744240006000000c744240200400000ff2c24660fc7b2df00000066ba200066ed0fe970c7"}}, @rdmsr={0x32, 0x18, {0x94cc6a57614ac68e}}, @code={0xa, 0x84, {"b9ee0b0000b802000000ba000000000f30c7442400be000000c74424024a340000ff2c24c461c972e308b9800000c00f3235000800000f3066ba210066ed2e64660f3881b000000000c40211aa9609a900000f3567652e470f01ca48b805000000000000000f23d00f21f835300000040f23f8"}}, @wr_crn={0x46, 0x20, {0x2, 0x83d}}, @rdmsr={0x32, 0x18, {0x3af}}, @in_dx={0x82, 0x20, {0x4857, 0x7}}, @rdmsr={0x32, 0x18, {0x40a}}, @cpuid={0x14, 0x18, {0xfffffff8, 0x3}}, @in_dx={0x82, 0x20, {0x5e56, 0x3}}], 0x39c}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 528.675511ms ago: executing program 6 (id=3931): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'pcl711\x00', [0x2f00, 0x5, 0xd09a, 0x3b, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0xc, 0x1, 0x4, 0x4, 0xffff, 0x100006, 0x5, 0xa, 0x830, 0x30000, 0x10000, 0x9, 0x800, 0xe2df, 0x3, 0x8001, 0x7, 0x2, 0x4, 0x5, 0x470f]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0xc000003, 0xf, &(0x7f0000000240)=[0x3, 0xfff, 0x4, 0xd182, 0x660, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0x2, 0x200, 0x4, 0x8001], 0x0, 0x4}) 453.339397ms ago: executing program 6 (id=3932): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) inotify_init1(0x80800) (async) inotify_init1(0x80800) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf252400000008000300", @ANYRES32=r1, @ANYBLOB="14002d80"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0xa04004, &(0x7f0000000200)={[{@none}]}) 353.36359ms ago: executing program 9 (id=3933): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x9008, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = fsmount(r1, 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1400000000000000000000000000000a2c000000180a01020000000000000000020000060c00054000000000000000010900010073797a300000000024000000000a01030000000000000000070000010900010073797a310000000004000600140000001100010000000000000000000000000a"], 0x78}, 0x1, 0x0, 0x0, 0x200080e0}, 0x4000) open_by_handle_at(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00010004"], 0x408100) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xa70004, 0x1, 0x6, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9b0970, 0x8001, '\x00', @string=&(0x7f0000000040)}}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc, 0x13, r0, 0x56dfa000) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) landlock_create_ruleset(&(0x7f0000000080)={0x9008, 0x0, 0x2}, 0x18, 0x0) (async) landlock_restrict_self(r2, 0x0) (async) fsmount(r1, 0x0, 0x0) (async) openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1400000000000000000000000000000a2c000000180a01020000000000000000020000060c00054000000000000000010900010073797a300000000024000000000a01030000000000000000070000010900010073797a310000000004000600140000001100010000000000000000000000000a"], 0x78}, 0x1, 0x0, 0x0, 0x200080e0}, 0x4000) (async) open_by_handle_at(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00010004"], 0x408100) (async) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xa70004, 0x1, 0x6, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9b0970, 0x8001, '\x00', @string=&(0x7f0000000040)}}) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc, 0x13, r0, 0x56dfa000) (async) 352.736525ms ago: executing program 6 (id=3934): socket$kcm(0x10, 0x400000002, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = accept4$unix(r1, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) bind$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xc8902, 0x0) write$binfmt_misc(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x28, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r8, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}, 0x45c) ioctl$UI_SET_SWBIT(r8, 0x4004556d, 0x0) r9 = dup(r8) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r9, 0x5501) write$uinput_user_dev(r9, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xfffff5ee, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x7, 0xfffffff9, 0xa, 0x2, 0x5, 0x0, 0x4, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x8, 0x7, 0x9, 0x7, 0x8000101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x9, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdaa, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x10, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8000008, 0x3, 0x2, 0x3a6, 0x27f8, 0xc0d, 0xfffffffd, 0x4, 0xc, 0xfffffffb], [0xa3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adeb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x10000, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x4, 0x0, 0x7, 0x4e6, 0x8, 0x6, 0x5ef, 0x8000, 0xc, 0x2, 0x401, 0x1, 0x5, 0x8, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x12000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x188c0}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x4c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000480)={'ip6_vti0\x00', r10, 0x2f, 0x18, 0xe3, 0x1, 0x45, @empty, @remote, 0x7d0, 0x7800, 0x51b, 0x2}}) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r11 = socket$pptp(0x18, 0x1, 0x2) close_range(r5, r11, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 291.524188ms ago: executing program 9 (id=3935): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) close(0xffffffffffffffff) close(r1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b0300000000006c1d0010047e0c8131a6080c000af32c6e020075f800250002000f00e5aa000017d34460bc24eab556a705251e6182949a36c2d13b48dfffa600000000ecb8f6ec63c9f4d4938037e786a6d1bdd700", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000240), 0x12) r6 = openat$cgroup_procs(r4, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) preadv(r6, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x4, 0x3) sendmsg$key(r3, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x2, 0xb, 0x1, 0x3, 0x2, 0x0, 0x70bd2d, 0x25dfdbff}, 0x10}, 0x1, 0x7}, 0x880) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x1, 0x7fff0007}]}) close_range(r7, 0xffffffffffffffff, 0x0) 289.481457ms ago: executing program 5 (id=3936): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x4, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0xc0800, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x5, 0x2, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x5, 0x2, r2}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x1, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x3, 0x9, 0x2800, 0x443, 0x565, 0xd, 0x0, {0x45, 0x80}, 0xcd, 0x3}}) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010427bd7000fedbdf25010000000c0002000000000000006182a4695d9f917909d307150000100007800c00018004000100", @ANYRES32, @ANYBLOB="480004000100000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24004040}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x109}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) eventfd2(0x4, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0xc0800, 0x0) (async) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x5, 0x2, r2}) (async) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x5, 0x2, r2}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x1, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x3, 0x9, 0x2800, 0x443, 0x565, 0xd, 0x0, {0x45, 0x80}, 0xcd, 0x3}}) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010427bd7000fedbdf25010000000c0002000000000000006182a4695d9f917909d307150000100007800c00018004000100", @ANYRES32, @ANYBLOB="480004000100000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24004040}, 0x10) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x109}) (async) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) (async) 158.089917ms ago: executing program 6 (id=3937): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) lsm_get_self_attr(0x65, &(0x7f0000000000)={0x0, 0x0, 0xd6, 0xb6, ""/182}, &(0x7f0000000680)=0xd6, 0x0) r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=0x10, 0x80000) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x6, 0x0) getsockopt$nfc_llcp(r2, 0x118, 0x0, &(0x7f00000000c0)=""/104, 0x68) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800800034000000002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 124.75864ms ago: executing program 9 (id=3938): r0 = socket$qrtr(0x2a, 0x2, 0x0) getpeername(r0, &(0x7f0000000080)=@pppol2tpin6, &(0x7f0000000100)=0x80) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@remote, @random="00006a9ce7f3", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x14, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x3}, @local, {[], {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x2, 0x0, 0x5}}}}}}}, 0x0) 4.271444ms ago: executing program 6 (id=3939): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000280), 0x101, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000000)={0x0, &(0x7f00000002c0)=[@rdmsr={0x32, 0x18, {0x561}}, @out_dx={0xaa, 0x28, {0x1bc5, 0x0, 0xb}}, @wrmsr={0x1e, 0x20, {0x979, 0x3}}, @in_dx={0x82, 0x20, {0xfb10, 0x1}}, @wrmsr={0x1e, 0x20, {0x864, 0x3d}}, @uexit={0x0, 0x18, 0xb54}, @wr_crn={0x46, 0x20, {0x8, 0x4}}, @wr_crn={0x46, 0x20, {0x4, 0x425}}, @code={0xa, 0x5b, {"66400ff7e064470f01f8c461fc5a14b1440f2281f30f517ec666b860000f00d8f3440f09f3470f0ddac744240063be0000c744240201000000c7442406000000000f011424f3640f01df"}}, @cpuid={0x14, 0x18, {0x3c, 0x69de}}, @wr_crn={0x46, 0x20, {0x2, 0xc8be}}, @wrmsr={0x1e, 0x20, {0x940, 0x4000000000000002}}, @cpuid={0x14, 0x18, {0x8, 0xcc}}, @in_dx={0x82, 0x20, {0x96b6}}, @in_dx={0x82, 0x20, {0x8542, 0x4}}, @code={0xa, 0x55, {"470f01cff3430faef6c42369447700fa650fc76b4a410f3566b82d010f00d8c744240006000000c744240200400000ff2c24660fc7b2df00000066ba200066ed0fe970c7"}}, @rdmsr={0x32, 0x18, {0x94cc6a57614ac68e}}, @code={0xa, 0x84, {"b9ee0b0000b802000000ba000000000f30c7442400be000000c74424024a340000ff2c24c461c972e308b9800000c00f3235000800000f3066ba210066ed2e64660f3881b000000000c40211aa9609a900000f3567652e470f01ca48b805000000000000000f23d00f21f835300000040f23f8"}}, @wr_crn={0x46, 0x20, {0x2, 0x83d}}, @rdmsr={0x32, 0x18, {0x3af}}, @in_dx={0x82, 0x20, {0x4857, 0x7}}, @rdmsr={0x32, 0x18, {0x40a}}, @cpuid={0x14, 0x18, {0xfffffff8, 0x3}}, @in_dx={0x82, 0x20, {0x5e56, 0x3}}], 0x39c}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 9 (id=3940): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000004000000000000000100000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0x28, 0xd, &(0x7f0000000000)="5fca2f4750610f9e0997ba73211c02190abe65b114ad65b91fb091d28676228bdf5ff64be6d49f8e", &(0x7f0000000100)=""/13, 0x6, 0x0, 0xbf, 0xa6, &(0x7f00000002c0)="2dec8a29ae1026bb46ac5a81764a85672b8fce9e35d88ff213d4c2b9a51f3b2a8c100c01d302e2fbee4d4d6f17ad8c8dbed83c12f5839c247e2d8ee7ad3d0abcfe2ba476e9afa701519e35c508f8322ea420ca401d41f460dea97d70ad0f988b93dfc63b43f0d7a1f4ce4de27a98f57707b1cb09fd8a71480a449c1d64581893bf6dc2e5c9e53f5578ba591404671878fa83bc770716115d4cb873fcb7c3955e57095dbe71988c6853d42a1247eb90ad81fe2cf75b95aa13b57723f4a54d1e", &(0x7f0000000380)="c128f18ab068681c1cf58c4eefe7e7a67c618e0a8aac1fbd2f88ea8c797e4d58cd9af7832fdedc9f72d0c92e66c6d66f457f8f465016941eb4833aaebcee0a26880a3a8f26d86b8b79376f7aa83a05a869bb7a9fdeb7e4f0a0da46edd4c1e5dd54bfb5ebdb606c87a64ab03880ab8eb205f28f971c32ad9b93f4bd15c446e76933ab37db33dae7fba4dc89a569bd690606933b9178d421ca5e943dfe28cbab72be8428b20c7b", 0x3, 0x0, 0x6}, 0x50) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000140), 0x8) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, r5, 0x25, 0x2, @val=@netkit={@void, @value=r2}}, 0x1c) kernel console output (not intermixed with test programs): ength: 249 > 9 [ 279.550693][ T5979] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 279.554688][ T5979] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 279.596841][T21870] lo speed is unknown, defaulting to 1000 [ 279.604391][T21870] lo speed is unknown, defaulting to 1000 [ 279.646522][ T7885] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.649122][ T7885] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.664409][ T7882] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.667039][ T7882] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.701751][ T7882] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.705217][ T7882] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.718804][ T7882] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.722023][ T7882] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.934712][T21870] chnl_net:caif_netlink_parms(): no params data found [ 279.960965][ T40] audit: type=1326 audit(1759370677.893:36268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21886 comm="syz.6.2970" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbeb138ec29 code=0x0 [ 280.072390][T21870] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.074811][T21870] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.077415][T21870] bridge_slave_0: entered allmulticast mode [ 280.080564][T21870] bridge_slave_0: entered promiscuous mode [ 280.083978][T21870] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.086313][T21870] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.088849][T21870] bridge_slave_1: entered allmulticast mode [ 280.093931][T21870] bridge_slave_1: entered promiscuous mode [ 280.143010][T21870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.150375][T21870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.207235][T21870] team0: Port device team_slave_0 added [ 280.213351][T21870] team0: Port device team_slave_1 added [ 280.256093][T21870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.258937][T21870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.268161][T21870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.275344][T21870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.277765][T21870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.288740][T21870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.352185][T21870] hsr_slave_0: entered promiscuous mode [ 280.355225][T21870] hsr_slave_1: entered promiscuous mode [ 280.357871][T21870] debugfs: 'hsr0' already exists in 'hsr' [ 280.360093][T21870] Cannot create hsr debugfs directory [ 280.548056][T21870] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 280.564216][T22930] __nla_validate_parse: 3 callbacks suppressed [ 280.564232][T22930] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2979'. [ 280.599681][T22930] 9pnet: Could not find request transport: xen [ 280.647230][T22925] misc userio: Invalid payload size [ 280.727857][T21870] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 280.870794][T22957] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2985'. [ 280.878956][T21870] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 280.961665][T21870] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 281.021925][ T29] IPVS: starting estimator thread 0... [ 281.057728][T22986] netlink: 'syz.6.2990': attribute type 4 has an invalid length. [ 281.061323][T22986] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2990'. [ 281.105657][T22994] netlink: 'syz.6.2991': attribute type 10 has an invalid length. [ 281.109951][T22994] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2991'. [ 281.118115][T22979] IPVS: using max 26 ests per chain, 62400 per kthread [ 281.139628][T21870] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 281.147667][T21870] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 281.154583][T21870] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 281.161464][T21870] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 281.256940][T21870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.274030][T21870] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.282029][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.285155][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.294510][ T7901] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.297889][ T7901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.471932][T21870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.676177][T21870] veth0_vlan: entered promiscuous mode [ 281.681597][T21870] veth1_vlan: entered promiscuous mode [ 281.707770][T21870] veth0_macvtap: entered promiscuous mode [ 281.719030][T21870] veth1_macvtap: entered promiscuous mode [ 281.737582][T21870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.745397][T21870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.757543][ T7901] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.762032][ T7901] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.766420][ T7901] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.769236][ T5985] Bluetooth: hci3: command tx timeout [ 281.774471][ T7901] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.830824][ T7885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.834685][ T7885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.860337][T23053] netlink: 'syz.8.2998': attribute type 1 has an invalid length. [ 281.864177][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.869128][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.006677][T23060] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2966'. [ 282.239858][T23069] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3001'. [ 283.963360][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880293e3000: rx timeout, send abort [ 283.966266][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880293e3400: rx timeout, send abort [ 283.969156][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff8880293e3000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 283.974114][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff8880293e3400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 283.982553][ T5985] Bluetooth: hci3: command tx timeout [ 284.486597][ T40] audit: type=1400 audit(1759370682.130:36269): avc: denied { bind } for pid=23089 comm="syz.5.3002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 284.498162][ T40] audit: type=1326 audit(1759370682.140:36270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23101 comm="syz.6.3005" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbeb138ec29 code=0x0 [ 284.644140][ T40] audit: type=1400 audit(1759370682.270:36271): avc: denied { read } for pid=23119 comm="syz.8.3011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 285.044987][T23144] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3016'. [ 285.086497][T23154] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3018'. [ 285.092847][T23154] program syz.5.3018 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.106440][T23154] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 285.109461][T23154] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 285.394351][T23189] 8021q: adding VLAN 0 to HW filter on device bond2 [ 285.474806][T23231] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3026'. [ 285.481696][T23232] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 285.538132][T23237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3027'. [ 285.679257][T23247] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 285.715628][T23243] md: md2 stopped. [ 285.742201][T23259] veth1_macvtap: entered allmulticast mode [ 285.845792][T23271] xt_l2tp: invalid flags combination: 8 [ 286.172933][T23292] tipc: Started in network mode [ 286.174805][T23292] tipc: Node identity ac14140f, cluster identity 4711 [ 286.177431][T23292] tipc: New replicast peer: 255.255.255.255 [ 286.179991][T23292] tipc: Enabled bearer , priority 10 [ 286.205813][ T5985] Bluetooth: hci3: command tx timeout [ 286.915916][T23376] netlink: 'syz.1.3061': attribute type 1 has an invalid length. [ 286.952444][T23376] bond3: (slave geneve2): making interface the new active one [ 286.957099][T23376] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 286.961004][ T7903] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 286.973609][ T7903] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 286.976954][ T7903] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 286.979659][ T7903] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 287.245217][ T841] tipc: Node number set to 2886997007 [ 287.575773][T23446] Malformed UNC in devname [ 287.575773][T23446] [ 287.578226][T23446] CIFS: VFS: Malformed UNC in devname [ 287.585040][T23446] netlink: 'syz.5.3067': attribute type 5 has an invalid length. [ 287.587792][T23453] xt_l2tp: invalid flags combination: 8 [ 287.599988][ T40] audit: type=1400 audit(1759370685.049:36272): avc: denied { bind } for pid=23445 comm="syz.5.3067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 287.650544][T23460] __nla_validate_parse: 1 callbacks suppressed [ 287.650561][T23460] netlink: 173848 bytes leftover after parsing attributes in process `syz.6.3066'. [ 287.662795][T23461] loop2: detected capacity change from 0 to 7 [ 287.666603][T23461] Dev loop2: unable to read RDB block 7 [ 287.669159][T23461] loop2: AHDI p1 p2 p3 [ 287.672695][T23461] loop2: partition table partially beyond EOD, truncated [ 287.675862][T23461] loop2: p1 start 1601398130 is beyond EOD, truncated [ 287.678710][T23461] loop2: p2 start 1702059890 is beyond EOD, truncated [ 287.771822][T23472] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3071'. [ 287.808861][T23479] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3072'. [ 287.822109][T23478] netfs: Couldn't get user pages (rc=-14) [ 288.098137][T23499] ntfs3(sr0): Primary boot signature is not NTFS. [ 288.101740][T23499] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 288.194116][ T34] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 288.377586][ T34] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 288.380291][ T34] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 288.383443][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 288.387683][ T34] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 288.390624][ T34] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 288.393435][ T34] usb 6-1: Product: syz [ 288.394864][ T34] usb 6-1: Manufacturer: syz [ 288.396467][ T34] usb 6-1: SerialNumber: syz [ 288.399334][ T34] usb 6-1: config 0 descriptor?? [ 288.402222][ T34] hub 6-1:0.0: bad descriptor, ignoring hub [ 288.404175][ T34] hub 6-1:0.0: probe with driver hub failed with error -5 [ 288.408164][ T34] usb 6-1: selecting invalid altsetting 0 [ 288.429318][ T5985] Bluetooth: hci3: command tx timeout [ 288.670917][T23548] /dev/nullb0: Can't open blockdev [ 288.708722][T23563] netlink: 'syz.5.3091': attribute type 21 has an invalid length. [ 288.712119][T23563] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3091'. [ 288.712435][ T7901] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 288.713144][T23569] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 288.789836][T23577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=129 sclass=netlink_route_socket pid=23577 comm=syz.8.3093 [ 288.818890][T23579] program syz.5.3094 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.825598][T23579] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3094'. [ 288.832323][T23582] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=23582 comm=syz.8.3095 [ 288.881978][T23588] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_1, syncid = 0, id = 0 [ 288.912944][T23487] usb 6-1: reset high-speed USB device number 39 using dummy_hcd [ 289.013145][ T40] audit: type=1400 audit(1759370686.368:36273): avc: denied { accept } for pid=23632 comm="syz.5.3100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 289.015499][T23633] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3100'. [ 289.039770][T23633] tipc: Enabling of bearer rejected, failed to enable media [ 289.049627][T23487] usb 6-1: device descriptor read/64, error -71 [ 289.135030][ T841] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 289.151625][T23642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23642 comm=syz.5.3101 [ 289.275395][ T841] usb 13-1: device descriptor read/64, error -71 [ 289.316788][T23487] usb 6-1: reset high-speed USB device number 39 using dummy_hcd [ 289.456573][T23487] usb 6-1: device descriptor read/64, error -71 [ 289.496136][T23662] netlink: 6 bytes leftover after parsing attributes in process `syz.5.3105'. [ 289.501492][ T40] audit: type=1400 audit(1759370686.826:36274): avc: denied { watch watch_reads } for pid=23661 comm="syz.5.3105" path="/" dev="ramfs" ino=80969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 289.530821][ T841] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 289.556433][T23668] overlayfs: conflicting options: nfs_export=on,index=off [ 289.604624][T23676] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3108'. [ 289.610774][T23675] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3108'. [ 289.611164][T23676] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 289.669407][ T841] usb 13-1: device descriptor read/64, error -71 [ 289.724807][T23487] usb 6-1: reset high-speed USB device number 39 using dummy_hcd [ 289.760868][T23487] usb 6-1: device descriptor read/8, error -71 [ 289.786108][T23690] veth0: entered promiscuous mode [ 289.787331][ T841] usb usb13-port1: attempt power cycle [ 289.791552][ T40] audit: type=1400 audit(1759370687.097:36275): avc: denied { ioctl } for pid=23689 comm="syz.5.3113" path="socket:[80293]" dev="sockfs" ino=80293 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 290.012130][T23487] usb 6-1: reset high-speed USB device number 39 using dummy_hcd [ 290.034998][T23487] usb 6-1: device descriptor read/8, error -71 [ 290.150772][ T841] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 290.154254][T17146] usb 6-1: USB disconnect, device number 39 [ 290.183792][ T841] usb 13-1: device descriptor read/8, error -71 [ 290.311776][T17146] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 290.439371][ T841] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 290.461113][T17146] usb 6-1: device descriptor read/64, error -71 [ 290.461354][ T841] usb 13-1: device descriptor read/8, error -71 [ 290.578692][ T841] usb usb13-port1: unable to enumerate USB device [ 290.676816][T23689] veth0: left promiscuous mode [ 290.717185][T17146] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 290.877529][T17146] usb 6-1: device descriptor read/64, error -71 [ 291.006386][T17146] usb usb6-port1: attempt power cycle [ 291.495557][T23744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=23744 comm=syz.1.3121 [ 291.616281][T23758] sg_write: data in/out 10438218/1 bytes for SCSI command 0x6b-- guessing data in; [ 291.616281][T23758] program syz.5.3123 not setting count and/or reply_len properly [ 291.678905][T23757] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3124'. [ 291.746726][T23768] ptrace attach of "/syz-executor exec"[23773] was attempted by "/syz-executor exec"[23768] [ 292.208342][T23809] netlink: 'syz.8.3133': attribute type 2 has an invalid length. [ 292.210838][T23809] nbd: must specify a device to reconfigure [ 292.372019][ T40] audit: type=1400 audit(1759370689.501:36276): avc: denied { map } for pid=23820 comm="syz.8.3138" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 292.570524][T23858] Dead loop on virtual device ip6_vti0, fix it urgently! [ 293.174005][T23933] __nla_validate_parse: 6 callbacks suppressed [ 293.174016][T23933] netlink: 830 bytes leftover after parsing attributes in process `syz.8.3166'. [ 293.185477][T23933] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3166'. [ 293.189398][T23933] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3166'. [ 293.275868][T23941] smc: removing ib device syz0 [ 293.526294][T23954] hpfs: hpfs_map_sector(): read error [ 293.642514][ T40] audit: type=1400 audit(1759370690.698:36277): avc: denied { connect } for pid=23959 comm="syz.1.3171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 293.879441][T23987] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3175'. [ 293.883728][T23987] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3175'. [ 293.886796][T23987] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3175'. [ 293.891992][ T40] audit: type=1400 audit(1759370690.923:36278): avc: denied { mount } for pid=23986 comm="syz.6.3175" name="/" dev="pstore" ino=4796 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 294.041995][ T840] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 294.202179][ T840] usb 6-1: Using ep0 maxpacket: 8 [ 294.205235][ T840] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 294.208410][ T840] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 294.211504][ T840] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 294.215143][ T840] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 294.217734][T24009] lo speed is unknown, defaulting to 1000 [ 294.218106][ T40] audit: type=1400 audit(1759370691.232:36279): avc: denied { read } for pid=24008 comm="syz.8.3180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 294.218384][ T840] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.218412][ T840] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 294.219275][T24011] sctp: [Deprecated]: syz.8.3180 (pid 24011) Use of int in max_burst socket option. [ 294.219275][T24011] Use struct sctp_assoc_value instead [ 294.243668][ T840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.389324][T24026] input: syz1 as /devices/virtual/input/input35 [ 294.465123][ T840] usb 6-1: GET_CAPABILITIES returned 0 [ 294.466877][T24035] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.3185'. [ 294.467470][ T840] usbtmc 6-1:16.0: can't read capabilities [ 294.681970][ T10] usb 6-1: USB disconnect, device number 43 [ 294.827863][T24074] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3191'. [ 294.870554][ T40] audit: type=1400 audit(1759370691.840:36280): avc: denied { connect } for pid=24080 comm="syz.8.3192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 294.911198][T24085] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 294.914106][T24088] 9pnet_virtio: no channels available for device syz [ 294.955931][T24083] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3193'. [ 294.968093][T24083] : entered promiscuous mode [ 295.076608][ T40] audit: type=1400 audit(1759370692.036:36281): avc: denied { relabelfrom } for pid=24109 comm="syz.8.3196" name="" dev="pipefs" ino=81332 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 295.098522][T24112] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 295.176298][T24119] SELinux: syz.5.3199 (24119) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 295.187420][T24122] gfs2: Unknown parameter 'ô' [ 295.376227][T24133] fuse: Unknown parameter '0x0000000000000000' [ 295.413712][T24122] ocfs2_dlmfs: Unknown parameter '@' [ 295.557905][T24140] /dev/sg0: Can't lookup blockdev [ 296.259408][T24181] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3213'. [ 296.522419][ T34] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 296.583729][T24196] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 296.714746][ T34] usb 13-1: Using ep0 maxpacket: 8 [ 296.723554][ T34] usb 13-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 296.728047][ T34] usb 13-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 296.736406][ T34] usb 13-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=f4.76 [ 296.740353][ T34] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.743746][ T34] usb 13-1: Product: syz [ 296.745554][ T34] usb 13-1: Manufacturer: syz [ 296.747930][ T34] usb 13-1: SerialNumber: syz [ 296.991258][ T34] usb 13-1: USB disconnect, device number 6 [ 297.218658][T24233] team0: Port device vlan0 removed [ 297.331036][T24258] loop6: detected capacity change from 0 to 2560 [ 297.334068][T24258] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.337760][T24258] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.340949][T24258] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.344040][T24258] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.347797][T24258] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.350565][T24258] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.353743][T24258] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.356611][T24258] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.360079][T24258] ldm_validate_partition_table(): Disk read failed. [ 297.362698][T24258] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.365635][T24258] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.369004][T24258] Dev loop6: unable to read RDB block 0 [ 297.371614][T24258] loop6: unable to read partition table [ 297.374017][T24258] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 297.558389][T24295] i2c i2c-1: Invalid block write size 34 [ 297.559518][T24292] »»»»»»×[SRëåW: renamed from lo (while UP) [ 297.586695][ T40] audit: type=1400 audit(1759370694.384:36282): avc: denied { map } for pid=24297 comm="syz.8.3228" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 297.734615][T24319] »»»»»»×[SRëåW speed is unknown, defaulting to 1000 [ 297.824506][T24336] netlink: 'syz.1.3236': attribute type 14 has an invalid length. [ 297.866517][T24373] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 297.903515][ T40] audit: type=1326 audit(1759370694.683:36283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24374 comm="syz.8.3239" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fabcbb8ec29 code=0x0 [ 298.289679][ T841] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 298.450935][ T841] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 298.455584][ T841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 298.460127][ T841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 298.464069][ T841] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 298.469451][ T841] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 298.473130][ T841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.478261][ T841] usb 6-1: config 0 descriptor?? [ 298.584702][T24429] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=24429 comm=syz.6.3253 [ 298.753888][T24437] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 298.827192][T24441] netlink: 'syz.6.3257': attribute type 21 has an invalid length. [ 298.830604][T24441] __nla_validate_parse: 6 callbacks suppressed [ 298.830619][T24441] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3257'. [ 298.837601][T24441] netlink: 'syz.6.3257': attribute type 21 has an invalid length. [ 298.840940][T24441] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3257'. [ 298.850285][ T40] audit: type=1400 audit(1759370695.562:36284): avc: denied { audit_write } for pid=24440 comm="syz.6.3257" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 299.141390][ T841] usbhid 6-1:0.0: can't add hid device: -71 [ 299.144060][ T841] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 299.149845][ T841] usb 6-1: USB disconnect, device number 44 [ 299.766718][T24474] netlink: 'syz.1.3263': attribute type 10 has an invalid length. [ 299.770049][T24474] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3263'. [ 299.776266][T24476] netlink: 'syz.1.3263': attribute type 10 has an invalid length. [ 299.779006][T24474] team0: entered promiscuous mode [ 299.779562][T24476] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3263'. [ 299.781457][T24474] bridge0: port 1(team0) entered blocking state [ 299.788077][T24474] bridge0: port 1(team0) entered disabled state [ 299.790966][T24474] team0: entered allmulticast mode [ 300.724758][T24509] overlayfs: missing 'lowerdir' [ 300.762467][T14952] syz_tun (unregistering): left allmulticast mode [ 300.771503][ T5979] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 300.779444][ T5979] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 300.785582][ T5979] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 300.791091][ T5979] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 300.794477][ T5979] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 300.816193][ T40] audit: type=1400 audit(1759370697.405:36285): avc: denied { write } for pid=24526 comm="syz.1.3275" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 300.826831][T24515] »»»»»»×[SRëåW speed is unknown, defaulting to 1000 [ 300.994561][ T40] audit: type=1400 audit(1759370697.574:36286): avc: denied { sys_admin } for pid=24585 comm="syz.5.3276" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 301.021273][T24515] chnl_net:caif_netlink_parms(): no params data found [ 301.161444][T24515] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.164189][T24515] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.167188][T24515] bridge_slave_0: entered allmulticast mode [ 301.170843][T24515] bridge_slave_0: entered promiscuous mode [ 301.180121][T24515] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.184547][T24515] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.187734][T24515] bridge_slave_1: entered allmulticast mode [ 301.191978][T24515] bridge_slave_1: entered promiscuous mode [ 301.269149][T24515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.276183][T24515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.367372][T24515] team0: Port device team_slave_0 added [ 301.370886][T24515] team0: Port device team_slave_1 added [ 301.438572][T24515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.446867][T24515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.456558][T24515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.461190][T24515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.463425][T24515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.473328][T24515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.553746][T24515] hsr_slave_0: entered promiscuous mode [ 301.557030][T24515] hsr_slave_1: entered promiscuous mode [ 301.561993][T24515] debugfs: 'hsr0' already exists in 'hsr' [ 301.564615][T24515] Cannot create hsr debugfs directory [ 301.847676][T24515] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.852174][T24515] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.954726][T24515] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.959162][T24515] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.063845][T24515] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.068030][T24515] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.084301][T25568] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3282'. [ 302.126373][T25575] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3283'. [ 302.153277][T25566] loop6: detected capacity change from 0 to 63 [ 302.161054][T25575] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25575 comm=syz.5.3283 [ 302.161379][ T40] audit: type=1400 audit(1759370698.668:36287): avc: denied { map } for pid=24478 comm="syz.8.3264" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 302.166538][T24515] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.179532][ T40] audit: type=1400 audit(1759370698.668:36288): avc: denied { execute } for pid=24478 comm="syz.8.3264" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 302.179750][T24515] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.353933][T24515] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 302.360422][T24515] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 302.365605][T24515] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 302.370276][T24515] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 302.416227][T25605] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 302.418341][T25605] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 302.421655][T25605] vhci_hcd vhci_hcd.0: Device attached [ 302.430464][T24515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.441499][T24515] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.447002][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.449442][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.458612][ T7890] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.460948][ T7890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.558222][T25620] overlayfs: overlapping lowerdir path [ 302.602882][T25624] netlink: 124 bytes leftover after parsing attributes in process `syz.8.3286'. [ 302.605355][ T6039] vhci_hcd: vhci_device speed not set [ 302.607264][T25624] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3286'. [ 302.616068][T24515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.680303][ T840] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 302.682846][ T6039] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 302.701748][ T34] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 302.781928][T24515] veth0_vlan: entered promiscuous mode [ 302.788286][T24515] veth1_vlan: entered promiscuous mode [ 302.803350][T24515] veth0_macvtap: entered promiscuous mode [ 302.807554][T24515] veth1_macvtap: entered promiscuous mode [ 302.816982][T24515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.818134][T25640] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 302.826782][T24515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.829787][ T840] usb 10-1: device descriptor read/64, error -71 [ 302.834534][ T55] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.837352][ T55] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.840719][ T55] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.844322][ T55] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.884472][ T34] usb 6-1: config 1 interface 0 has no altsetting 0 [ 302.888226][ T34] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 302.890280][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.891042][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.893546][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.899420][ T34] usb 6-1: Product: syz [ 302.900839][ T34] usb 6-1: Manufacturer: syz [ 302.902555][ T34] usb 6-1: SerialNumber: syz [ 302.920234][ T7901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.924091][ T7901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.979383][ T5985] Bluetooth: hci0: command tx timeout [ 303.096392][T25671] i2c i2c-1: Invalid block write size 34 [ 303.098430][ T840] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 303.116627][T25669] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3291'. [ 303.189314][T25681] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3294'. [ 303.246964][ T840] usb 10-1: device descriptor read/64, error -71 [ 303.339002][ T34] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 45 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 303.367030][ T840] usb usb10-port1: attempt power cycle [ 303.539921][T25717] lo speed is unknown, defaulting to 1000 [ 303.541930][T25717] lo speed is unknown, defaulting to 1000 [ 303.544133][T25717] lo speed is unknown, defaulting to 1000 [ 303.552057][T25717] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 303.563813][T25717] lo speed is unknown, defaulting to 1000 [ 303.566466][T25717] lo speed is unknown, defaulting to 1000 [ 303.570876][T25717] lo speed is unknown, defaulting to 1000 [ 303.573497][T25717] lo speed is unknown, defaulting to 1000 [ 303.576027][T25717] lo speed is unknown, defaulting to 1000 [ 303.578725][T25717] lo speed is unknown, defaulting to 1000 [ 303.607846][T25725] ntfs3(loop6): try to read out of volume at offset 0x0 [ 303.642085][ T34] libceph: connect (1)[c::]:6789 error -101 [ 303.644154][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 303.738834][ T840] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 303.761150][ T840] usb 10-1: device descriptor read/8, error -71 [ 303.920868][ T34] libceph: connect (1)[c::]:6789 error -101 [ 303.923137][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 304.026959][ T840] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 304.062287][ T840] usb 10-1: device descriptor read/8, error -71 [ 304.179082][ T840] usb usb10-port1: unable to enumerate USB device [ 304.197987][ T34] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 304.337421][ T34] usb 13-1: device descriptor read/64, error -71 [ 304.476126][ T72] libceph: connect (1)[c::]:6789 error -101 [ 304.478137][ T72] libceph: mon0 (1)[c::]:6789 connect error [ 304.527635][T25727] ceph: No mds server is up or the cluster is laggy [ 304.604403][ T34] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 304.743396][ T34] usb 13-1: device descriptor read/64, error -71 [ 304.782783][ T72] IPVS: starting estimator thread 0... [ 304.860993][ T34] usb usb13-port1: attempt power cycle [ 304.882363][T25765] IPVS: using max 45 ests per chain, 108000 per kthread [ 305.192689][ T5985] Bluetooth: hci0: command tx timeout [ 305.229819][T25779] __nla_validate_parse: 6 callbacks suppressed [ 305.229831][T25779] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3312'. [ 305.235012][ T34] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 305.268013][ T34] usb 13-1: device descriptor read/8, error -71 [ 305.327910][T25783] block nbd6: not configured, cannot reconfigure [ 305.365875][T25790] veth1_macvtap: left promiscuous mode [ 305.367752][T25790] macsec0: entered promiscuous mode [ 305.369445][T25790] macsec0: entered allmulticast mode [ 305.374533][T25790] veth1_macvtap: entered promiscuous mode [ 305.376450][T25790] veth1_macvtap: entered allmulticast mode [ 305.378545][T25790] macsec0: left promiscuous mode [ 305.380248][T25790] macsec0: left allmulticast mode [ 305.381944][T25790] veth1_macvtap: left allmulticast mode [ 305.431764][T25795] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.434296][T25795] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.437112][T25795] bridge0: entered promiscuous mode [ 305.457172][ T6958] libceph: connect (1)[c::]:6789 error -101 [ 305.459320][ T6958] libceph: mon0 (1)[c::]:6789 connect error [ 305.499698][T25797] ceph: No mds server is up or the cluster is laggy [ 305.506560][T25804] netlink: 'syz.5.3317': attribute type 1 has an invalid length. [ 305.516259][T25804] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3317'. [ 305.520261][T25797] Attempt to restore checkpoint with obsolete wellknown handles [ 305.534980][ T34] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 305.556112][ T34] usb 13-1: device descriptor read/8, error -71 [ 305.566431][T25809] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3318'. [ 305.572553][ T10] usb 6-1: USB disconnect, device number 45 [ 305.575794][ T10] usblp0: removed [ 305.581079][T25606] vhci_hcd: connection reset by peer [ 305.587994][ T7851] vhci_hcd: stop threads [ 305.592141][ T7851] vhci_hcd: release socket [ 305.594241][ T7851] vhci_hcd: disconnect device [ 305.612199][T25825] Bluetooth: MGMT ver 1.23 [ 305.622093][T25827] fuse: Bad value for 'user_id' [ 305.623805][T25827] fuse: Bad value for 'user_id' [ 305.694780][ T34] usb usb13-port1: unable to enumerate USB device [ 305.723615][T25849] netlink: 'syz.5.3326': attribute type 4 has an invalid length. [ 305.755887][T25858] netlink: 'syz.5.3328': attribute type 25 has an invalid length. [ 305.817386][T25865] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 305.820409][T25868] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 305.904713][T25878] delete_channel: no stack [ 305.939250][T25858] blktrace: Concurrent blktraces are not allowed on loop4 [ 305.954510][T25888] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3334'. [ 305.994263][ T6219] usb 11-1: new full-speed USB device number 23 using dummy_hcd [ 306.012389][T25892] netlink: 'syz.1.3335': attribute type 10 has an invalid length. [ 306.038656][T25892] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 306.167418][ T6219] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 306.170890][ T6219] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 306.174304][ T6219] usb 11-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 306.177161][ T6219] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.180805][ T6219] usb 11-1: config 0 descriptor?? [ 306.182923][T25851] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 306.207915][ T6223] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 306.241790][T25907] tipc: Enabling of bearer rejected, failed to enable media [ 306.378821][ T6223] usb 10-1: Using ep0 maxpacket: 8 [ 306.382784][ T6223] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 306.386819][ T6223] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 306.391442][ T6223] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 306.395844][ T6223] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 306.397246][T25916] netlink: 'syz.1.3339': attribute type 1 has an invalid length. [ 306.400055][ T6223] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 306.402381][T25851] pim6reg1: entered promiscuous mode [ 306.402395][T25851] pim6reg1: entered allmulticast mode [ 306.413598][ T6219] usbhid 11-1:0.0: can't add hid device: -71 [ 306.414653][ T6223] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 306.419117][ T6223] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.419168][ T6219] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 306.427102][ T6219] usb 11-1: USB disconnect, device number 23 [ 306.640741][ T6223] usb 10-1: GET_CAPABILITIES returned 0 [ 306.642650][ T6223] usbtmc 10-1:16.0: can't read capabilities [ 306.855472][T12983] usb 10-1: USB disconnect, device number 31 [ 307.257714][ T40] audit: type=1326 audit(1759370703.439:36289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25961 comm="syz.8.3344" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fabcbb8ec29 code=0x0 [ 307.415941][ T5979] Bluetooth: hci0: command tx timeout [ 307.455535][T25971] netlink: 'syz.6.3346': attribute type 1 has an invalid length. [ 307.476019][T25971] 8021q: adding VLAN 0 to HW filter on device bond1 [ 307.560056][T26020] bridge8: entered promiscuous mode [ 307.583876][T26023] kvm: apic: phys broadcast and lowest prio [ 307.598353][T26023] bond1: (slave erspan1): making interface the new active one [ 307.601932][T26023] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 307.724026][T26020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3350'. [ 307.742188][T26034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=26034 comm=syz.6.3352 [ 307.742690][T26035] netlink: 'syz.6.3352': attribute type 11 has an invalid length. [ 307.768949][ T10] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 307.950696][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 307.962979][ T10] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 307.966172][ T10] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 307.969684][ T10] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 307.977920][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 307.981883][ T10] usb 10-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 307.984932][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.987576][ T10] usb 10-1: Product: syz [ 307.989014][ T10] usb 10-1: Manufacturer: syz [ 307.990634][ T10] usb 10-1: SerialNumber: syz [ 307.995148][ T10] usb 10-1: config 0 descriptor?? [ 308.174935][ T6039] vhci_hcd: vhci_device speed not set [ 308.178672][T26067] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 308.185050][T26069] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3357'. [ 308.190626][T26069] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3357'. [ 308.234125][ T10] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input37 [ 308.240899][ T5366] synaptics_usb 10-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 308.242592][T26075] misc userio: The device must be registered before sending interrupts [ 308.253876][ T5366] synaptics_usb 10-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 308.267439][T26082] loop6: detected capacity change from 0 to 7 [ 308.280939][T26082] Dev loop6: unable to read RDB block 7 [ 308.283775][T26082] loop6: unable to read partition table [ 308.286167][T26082] loop6: partition table beyond EOD, truncated [ 308.288393][T26082] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 308.361638][T26097] binfmt_misc: register: failed to install interpreter file ./file0 [ 308.372272][T26075] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3359'. [ 308.393865][T26075] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3359'. [ 308.507114][T26013] synaptics_usb 10-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 308.519717][T26121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3369'. [ 308.551504][ T841] usb 10-1: USB disconnect, device number 32 [ 308.635977][T26150] fuse: Bad value for 'fd' [ 308.642091][T26150] binder: 26149:26150 ioctl 400c620e 200000000640 returned -22 [ 308.664927][T26157] sctp: [Deprecated]: syz.6.3379 (pid 26157) Use of int in max_burst socket option deprecated. [ 308.664927][T26157] Use struct sctp_assoc_value instead [ 308.760529][T26173] fuse: Bad value for 'fd' [ 308.769357][T26172] fuse: Bad value for 'fd' [ 308.769390][ T840] Process accounting resumed [ 308.912557][ T6958] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 309.083655][ T6958] usb 13-1: Using ep0 maxpacket: 16 [ 309.087549][ T6958] usb 13-1: config 0 has no interfaces? [ 309.091438][ T6958] usb 13-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 309.094614][ T6958] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.097461][ T6958] usb 13-1: Product: syz [ 309.099039][ T6958] usb 13-1: Manufacturer: syz [ 309.100993][ T6958] usb 13-1: SerialNumber: syz [ 309.105099][ T6958] usb 13-1: config 0 descriptor?? [ 309.331570][ T840] usb 13-1: USB disconnect, device number 11 [ 309.589869][T26167] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 309.592613][T26167] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 309.599191][T26167] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 309.602786][T26167] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 309.605377][T26167] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 309.613453][T26167] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 309.618795][T26167] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 309.621396][T26167] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 309.625804][T26167] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 309.717341][T26209] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 309.727575][T26209] input: syz0 as /devices/virtual/input/input38 [ 309.774219][T26215] 9pnet: Found fid 0 not clunked [ 309.843512][T26217] netlink: 'syz.5.3389': attribute type 13 has an invalid length. [ 309.859744][T26217] gretap0: refused to change device tx_queue_len [ 309.862392][T26217] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 309.918603][ T6039] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 309.928149][ T6958] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 310.063452][ T6039] usb 11-1: device descriptor read/64, error -71 [ 310.098493][ T6958] usb 6-1: unable to get BOS descriptor or descriptor too short [ 310.102632][ T6958] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 310.105862][ T6958] usb 6-1: can't read configurations, error -71 [ 310.324242][ T6039] usb 11-1: new high-speed USB device number 25 using dummy_hcd [ 310.446937][T26243] netlink: 'syz.8.3395': attribute type 10 has an invalid length. [ 310.465199][T26243] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 310.471101][T26242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.474456][ T6039] usb 11-1: device descriptor read/64, error -71 [ 310.591987][ T6039] usb usb11-port1: attempt power cycle [ 310.818403][ T40] audit: type=1400 audit(1759370706.769:36290): avc: denied { write } for pid=26251 comm="syz.1.3398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 310.864191][T26260] dns_resolver: Unsupported content type (234) [ 310.877023][T26260] bridge0: port 1(team0) entered disabled state [ 310.884018][T26260] team0: left allmulticast mode [ 310.886159][T26260] team0: left promiscuous mode [ 310.888419][T26260] bridge0: port 1(team0) entered disabled state [ 310.922497][ T5985] Bluetooth: hci1: command 0x0c1a tx timeout [ 310.933701][ T40] audit: type=1400 audit(1759370706.871:36291): avc: denied { lock } for pid=26261 comm="syz.1.3401" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 310.965193][ T6039] usb 11-1: new high-speed USB device number 26 using dummy_hcd [ 310.984277][ T40] audit: type=1400 audit(1759370706.918:36292): avc: denied { map_create } for pid=26263 comm="syz.1.3402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 310.987807][ T6039] usb 11-1: device descriptor read/8, error -71 [ 311.093668][ T841] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 311.131142][ T40] audit: type=1400 audit(1759370707.059:36293): avc: denied { remount } for pid=26276 comm="syz.1.3405" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 311.195131][T26282] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 311.199037][T26282] overlayfs: missing 'lowerdir' [ 311.254060][ T841] usb 10-1: Using ep0 maxpacket: 16 [ 311.254503][ T6039] usb 11-1: new high-speed USB device number 27 using dummy_hcd [ 311.259993][ T40] audit: type=1400 audit(1759370707.171:36294): avc: denied { prog_load } for pid=26290 comm="syz.1.3408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 311.261089][ T841] usb 10-1: config 0 has no interfaces? [ 311.274199][ T841] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 311.285835][ T841] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.289418][ T841] usb 10-1: Product: syz [ 311.289454][ T6039] usb 11-1: device descriptor read/8, error -71 [ 311.291439][ T841] usb 10-1: Manufacturer: syz [ 311.296551][ T841] usb 10-1: SerialNumber: syz [ 311.301461][ T841] usb 10-1: config 0 descriptor?? [ 311.346971][T26294] loop6: detected capacity change from 0 to 7 [ 311.349888][T26294] Dev loop6: unable to read RDB block 7 [ 311.352173][T26294] loop6: unable to read partition table [ 311.354292][T26294] loop6: partition table beyond EOD, truncated [ 311.356467][T26294] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 311.393955][T26301] __nla_validate_parse: 1 callbacks suppressed [ 311.393967][T26301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3410'. [ 311.404892][ T6039] usb usb11-port1: unable to enumerate USB device [ 311.529315][T26255] syzkaller1: entered promiscuous mode [ 311.531124][T26255] syzkaller1: entered allmulticast mode [ 311.605871][T26318] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 311.608148][ T840] usb 10-1: USB disconnect, device number 33 [ 311.608480][T26318] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 311.609882][T26318] vhci_hcd vhci_hcd.0: Device attached [ 311.616257][T26319] vhci_hcd: connection closed [ 311.618126][ T7890] vhci_hcd: stop threads [ 311.621155][ T7890] vhci_hcd: release socket [ 311.622541][ T7890] vhci_hcd: disconnect device [ 311.777624][ T5985] Bluetooth: hci0: command 0x0419 tx timeout [ 311.777677][ T5979] Bluetooth: hci3: command 0x0c1a tx timeout [ 312.201669][ T40] audit: type=1800 audit(1759370708.050:36295): pid=26336 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3415" name="/" dev="9p" ino=2 res=0 errno=0 [ 312.234667][ T40] audit: type=1400 audit(1759370708.087:36296): avc: denied { prog_run } for pid=26341 comm="syz.8.3417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 312.365432][T26361] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3421'. [ 312.509872][T26383] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 312.519254][T26383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=26383 comm=syz.8.3425 [ 312.525469][T26383] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3425'. [ 312.532529][T26383] netlink: 'syz.8.3425': attribute type 6 has an invalid length. [ 312.619274][T26392] ceph: Path missing in source [ 312.622760][T26392] virtiofs: Unknown parameter 'barrier' [ 312.675662][ T840] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 312.675819][ T6039] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 312.728221][ T5979] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 312.755157][T26404] "syz.8.3430" (26404) uses obsolete ecb(arc4) skcipher [ 312.760131][ T40] audit: type=1400 audit(1759370708.574:36297): avc: denied { listen } for pid=26403 comm="syz.8.3430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 312.768159][ T40] audit: type=1400 audit(1759370708.574:36298): avc: denied { accept } for pid=26403 comm="syz.8.3430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 312.828202][T26405] overlayfs: missing 'workdir' [ 312.835954][ T840] usb 10-1: Using ep0 maxpacket: 16 [ 312.838909][ T840] usb 10-1: config 0 has no interfaces? [ 312.841114][ T6039] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 312.843312][ T840] usb 10-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 312.844220][ T6039] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 312.847058][ T840] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.847072][ T840] usb 10-1: Product: syz [ 312.847080][ T840] usb 10-1: Manufacturer: syz [ 312.847088][ T840] usb 10-1: SerialNumber: syz [ 312.848289][ T840] usb 10-1: config 0 descriptor?? [ 312.851653][ T6039] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 312.866174][ T6039] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 312.870829][ T6039] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 312.875807][ T6039] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 312.879531][ T6039] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.885008][ T6039] usb 6-1: config 0 descriptor?? [ 312.887701][T26367] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 313.073119][T17146] usb 10-1: USB disconnect, device number 34 [ 313.146694][ T5979] Bluetooth: hci1: command 0x0c1a tx timeout [ 313.330501][ T6039] plantronics 0003:047F:FFFF.0012: reserved main item tag 0xd [ 313.337638][ T6039] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 313.637711][ T841] usb 6-1: USB disconnect, device number 48 [ 313.653206][ T40] audit: type=1400 audit(1759370709.416:36299): avc: denied { node_bind } for pid=26439 comm="syz.5.3432" saddr=fe80::aa src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 313.776953][ T5979] Bluetooth: hci1: Malformed LE Event: 0x1d [ 313.973906][T26487] tipc: Started in network mode [ 313.975898][T26487] tipc: Node identity b61417e26e77, cluster identity 4711 [ 313.978552][T26487] tipc: Enabled bearer , priority 0 [ 313.983252][T26487] syzkaller0: MTU too low for tipc bearer [ 313.985391][T26487] tipc: Disabling bearer [ 314.012070][ T5979] Bluetooth: hci3: command 0x0c1a tx timeout [ 314.012337][ T5985] Bluetooth: hci0: command 0x0419 tx timeout [ 314.081369][ T40] audit: type=1326 audit(1759370709.818:36300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26494 comm="syz.5.3443" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f472ef8ec29 code=0x0 [ 314.144603][T26498] fuse: blksize only supported for fuseblk [ 314.154957][ T40] audit: type=1400 audit(1759370709.883:36301): avc: denied { mounton } for pid=26497 comm="syz.6.3444" path="/43/file0/bus" dev="9p" ino=71827691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 314.155925][T26498] overlay: ./file1 is not a directory [ 314.291028][T26508] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 314.297674][T26509] nbd: must specify an index to disconnect [ 314.300249][T26508] nbd: must specify an index to disconnect [ 314.328735][ T40] audit: type=1400 audit(1759370710.042:36302): avc: denied { map_read map_write } for pid=26511 comm="syz.6.3447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 314.674764][ T6039] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 314.719461][T26544] syzkaller1: entered promiscuous mode [ 314.721462][T26544] syzkaller1: entered allmulticast mode [ 314.848724][ T6039] usb 6-1: config 0 has no interfaces? [ 314.850444][ T6039] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 314.853214][ T6039] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.858166][ T6039] usb 6-1: config 0 descriptor?? [ 315.056051][T26574] netlink: 360 bytes leftover after parsing attributes in process `syz.5.3459'. [ 315.076888][T26527] netlink: 'syz.1.3451': attribute type 27 has an invalid length. [ 315.158217][T26587] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 315.171754][T26527] dummy0: left promiscuous mode [ 315.246388][T26527] veth0_to_team: left promiscuous mode [ 315.295601][T26527] veth1_macvtap: left allmulticast mode [ 315.341729][T26527] ipip0: left promiscuous mode [ 315.352420][T26527] macsec1: left promiscuous mode [ 315.359434][T26527] vxlan0: left promiscuous mode [ 315.361390][T26527] vxlan0: left allmulticast mode [ 315.369866][ T5979] Bluetooth: hci1: command 0x0c1a tx timeout [ 315.371613][T26527] bridge8: left promiscuous mode [ 315.389068][T26584] bridge0: left promiscuous mode [ 315.394211][T26584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.397021][T26584] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.400825][T26584] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 315.407420][ T7890] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.412137][ T7890] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.415158][T12983] usb 6-1: USB disconnect, device number 49 [ 315.418059][ T7890] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 315.421950][ T7890] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.425850][ T7890] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.429562][ T7890] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 315.437372][ T7890] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.440064][ T7890] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.442773][ T7890] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 315.446335][ T7890] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.449528][ T7890] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.452727][ T7890] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 316.033400][T26646] SELinux: failed to load policy [ 316.060396][T26598] orangefs_mount: mount request failed with -4 [ 316.082950][T26646] netlink: 'syz.1.3477': attribute type 10 has an invalid length. [ 316.098084][T26646] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 316.224971][ T5979] Bluetooth: hci3: command 0x0c1a tx timeout [ 316.237964][ T5979] Bluetooth: hci0: command 0x0419 tx timeout [ 316.502510][T26684] nvme_fabrics: missing parameter 'transport=%s' [ 316.511663][T26684] nvme_fabrics: missing parameter 'nqn=%s' [ 316.835500][ T40] audit: type=1400 audit(1759370712.390:36303): avc: denied { egress } for pid=33 comm="ksoftirqd/3" saddr=fe80::1b daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 317.206124][T26696] CUSE: info not properly terminated [ 317.210858][T26696] cgroup: Unknown subsys name 'cpuset' [ 318.029844][T26709] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3487'. [ 318.090939][T26725] fuse: Bad value for 'user_id' [ 318.092548][T26725] fuse: Bad value for 'user_id' [ 318.192353][ T7901] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.300903][ T7901] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.383807][ T7901] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.437948][ T5985] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 318.443501][ T5985] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 318.449217][ T5985] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 318.453038][ T5985] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 318.457976][ T5985] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 318.495626][ T7901] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.510648][T26751] »»»»»»×[SRëåW speed is unknown, defaulting to 1000 [ 318.514426][T26751] lo speed is unknown, defaulting to 1000 [ 318.625914][T26751] chnl_net:caif_netlink_parms(): no params data found [ 318.677880][ T7901] bridge_slave_1: left allmulticast mode [ 318.680227][ T7901] bridge_slave_1: left promiscuous mode [ 318.682873][ T7901] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.689063][ T7901] bridge_slave_0: left allmulticast mode [ 318.690958][ T7901] bridge_slave_0: left promiscuous mode [ 318.692902][ T7901] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.740973][T26960] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3501'. [ 318.805065][ T40] audit: type=1400 audit(1759370714.233:36304): avc: denied { bind } for pid=26958 comm="syz.5.3501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 319.070925][T26968] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3503'. [ 319.229862][ T7901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.234288][ T7901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.239001][ T7901] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 319.244713][ T7901] bond0 (unregistering): Released all slaves [ 319.356422][T26751] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.372540][T26751] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.375740][T26751] bridge_slave_0: entered allmulticast mode [ 319.379040][T26751] bridge_slave_0: entered promiscuous mode [ 319.383434][T26751] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.386149][T26751] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.386867][ T7901] IPVS: stopping backup sync thread 23588 ... [ 319.388862][T26751] bridge_slave_1: entered allmulticast mode [ 319.397034][T26751] bridge_slave_1: entered promiscuous mode [ 319.434021][T27091] netlink: 'syz.6.3506': attribute type 10 has an invalid length. [ 319.468312][T26751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.480732][T27091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.493626][T27091] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 319.498862][T26751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.601910][T26751] team0: Port device team_slave_0 added [ 319.608227][T26751] team0: Port device team_slave_1 added [ 319.690650][ T7901] hsr_slave_0: left promiscuous mode [ 319.693054][ T7901] hsr_slave_1: left promiscuous mode [ 319.695103][ T7901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.697591][ T7901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.701309][ T7901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.702668][T27322] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 319.703841][ T7901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.705911][T27322] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 319.713901][T27502] tty tty1: ldisc open failed (-12), clearing slot 0 [ 319.719120][T27322] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 319.721971][T27322] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 319.726025][T27322] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 319.769175][ T7901] veth1_macvtap: left promiscuous mode [ 319.771611][ T7901] veth0_macvtap: left promiscuous mode [ 319.774424][ T7901] veth1_vlan: left promiscuous mode [ 319.776909][ T7901] veth0_vlan: left promiscuous mode [ 319.778864][T27508] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 320.846014][ T7901] team0 (unregistering): Port device team_slave_1 removed [ 320.946102][ T7901] team0 (unregistering): Port device team_slave_0 removed [ 321.736451][T26751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.739413][T26751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.749577][T26751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.777499][T26751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.779765][T26751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.788839][T26751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.870130][ T5979] Bluetooth: hci1: command 0x041b tx timeout [ 321.872845][T26751] hsr_slave_0: entered promiscuous mode [ 321.873743][ T5979] Bluetooth: hci0: command 0x0419 tx timeout [ 321.875743][T26751] hsr_slave_1: entered promiscuous mode [ 321.877940][ T5979] Bluetooth: hci3: command 0x0c1a tx timeout [ 322.108683][T26751] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 322.114484][T26751] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 322.121881][T26751] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 322.126576][T26751] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 322.174376][T27915] »»»»»»×[SRëåW speed is unknown, defaulting to 1000 [ 322.182555][T27915] lo speed is unknown, defaulting to 1000 [ 322.279576][T26751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.302199][T26751] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.309809][ T7864] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.312509][ T7864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.321671][ T7864] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.324211][ T7864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.516735][T26751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.609428][T27976] mkiss: ax0: crc mode is auto. [ 322.618963][ T5975] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 322.738398][T26751] veth0_vlan: entered promiscuous mode [ 322.746715][T26751] veth1_vlan: entered promiscuous mode [ 322.774970][T26751] veth0_macvtap: entered promiscuous mode [ 322.783952][T26751] veth1_macvtap: entered promiscuous mode [ 322.799431][T26751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.800067][ T5975] usb 10-1: Using ep0 maxpacket: 8 [ 322.807047][ T5975] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 322.811306][ T5975] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 322.812625][T26751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.815668][ T5975] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 322.826335][ T7864] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.826638][ T5975] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 322.830158][ T7864] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.835617][ T5975] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 322.841519][ T7864] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.843595][ T5975] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.851333][ T7864] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.923768][ T7898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.927288][ T7898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.952690][ T7890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.956142][ T7890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.063096][ T5975] usb 10-1: GET_CAPABILITIES returned 0 [ 323.065574][ T5975] usbtmc 10-1:16.0: can't read capabilities [ 323.285934][T27952] ufs: You didn't specify the type of your ufs filesystem [ 323.285934][T27952] [ 323.285934][T27952] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 323.285934][T27952] [ 323.285934][T27952] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 323.299070][T27952] ufs: failed to set blocksize [ 323.305000][ T34] usb 10-1: USB disconnect, device number 35 [ 323.312863][T23046] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 323.486105][T23046] usb 6-1: unable to get BOS descriptor or descriptor too short [ 323.489899][T23046] usb 6-1: not running at top speed; connect to a high speed hub [ 323.494510][T23046] usb 6-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 323.500046][T23046] usb 6-1: config 1 interface 0 has no altsetting 0 [ 323.509715][T23046] usb 6-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 323.513717][T23046] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.517313][T23046] usb 6-1: Product: syz [ 323.519206][T23046] usb 6-1: Manufacturer: syz [ 323.521209][T23046] usb 6-1: SerialNumber: syz [ 323.747243][T28018] block nbd1: Attempted send on invalid socket [ 323.749906][T28018] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.754482][T28018] block nbd1: Attempted send on invalid socket [ 323.757305][T28018] I/O error, dev nbd1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.761316][T28018] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 323.765771][T28018] block nbd1: Attempted send on invalid socket [ 323.768482][T28018] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.774319][T28018] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 323.779518][T28018] block nbd1: Attempted send on invalid socket [ 323.782297][T28018] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.786677][T28018] block nbd1: Attempted send on invalid socket [ 323.789367][T28018] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.793365][T28018] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 323.798578][T28018] block nbd1: Attempted send on invalid socket [ 323.801263][T28018] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.805427][T28018] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 323.812602][T28018] block nbd1: Attempted send on invalid socket [ 323.815454][T28018] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.821208][T28018] block nbd1: Attempted send on invalid socket [ 323.823961][T28018] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.828119][T28018] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 323.832222][T28018] block nbd1: Attempted send on invalid socket [ 323.834814][T28018] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.839089][T28018] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 323.843660][T28018] block nbd1: Attempted send on invalid socket [ 323.846091][T28018] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.850549][T28018] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 323.855138][T28018] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 323.859405][T28018] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 323.865257][ T40] audit: type=1400 audit(1759370718.966:36305): avc: denied { read write } for pid=28049 comm="syz.5.3540" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 323.876269][ T40] audit: type=1400 audit(1759370718.966:36306): avc: denied { open } for pid=28049 comm="syz.5.3540" path="/dev/input/mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 323.886480][ T40] audit: type=1400 audit(1759370718.966:36307): avc: denied { append } for pid=28049 comm="syz.5.3540" name="event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 323.932830][ T6223] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 324.093346][ T5979] Bluetooth: hci1: command 0x041b tx timeout [ 324.097948][ T6223] usb 14-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 324.101776][ T6223] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.105331][ T6223] usb 14-1: Product: syz [ 324.107228][ T6223] usb 14-1: Manufacturer: syz [ 324.109348][ T6223] usb 14-1: SerialNumber: syz [ 324.125289][ T6219] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 324.288028][ T6219] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 324.292671][ T6219] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 324.297439][ T6219] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 324.301153][ T6219] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.307139][T28050] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 324.313011][ T6219] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 324.407145][ T40] audit: type=1400 audit(1759370719.471:36308): avc: denied { bind } for pid=28041 comm="syz.9.3539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 324.407359][T28042] orangefs_devreq_write_iter: failed to copy head. [ 324.452871][ T6223] lan78xx 14-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 324.458737][ T6223] lan78xx 14-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 324.463408][ T6223] lan78xx 14-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 324.473935][ T6223] lan78xx 14-1:1.0: probe with driver lan78xx failed with error -71 [ 324.481287][ T6223] usb 14-1: USB disconnect, device number 2 [ 324.559161][ T40] audit: type=1400 audit(1759370719.612:36309): avc: denied { ioctl } for pid=28049 comm="syz.5.3540" path="/dev/input/mouse0" dev="devtmpfs" ino=946 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 325.043320][T28091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.061808][T28091] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3541'. [ 325.695747][T28118] netlink: 'syz.9.3546': attribute type 2 has an invalid length. [ 325.702944][T28123] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3547'. [ 325.747906][T28175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=28175 comm=syz.6.3549 [ 325.755064][T28123] tmpfs: Bad value for 'huge' [ 325.764219][T28185] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3549'. [ 325.818651][T28198] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3551'. [ 325.822703][T28198] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3551'. [ 325.828058][T28198] netlink: 'syz.6.3551': attribute type 14 has an invalid length. [ 325.841505][T28198] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3551'. [ 325.845677][T28198] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3551'. [ 325.850493][T28198] netlink: 'syz.6.3551': attribute type 14 has an invalid length. [ 325.956653][T28211] netlink: 'syz.9.3554': attribute type 5 has an invalid length. [ 325.960251][T28211] netlink: 'syz.9.3554': attribute type 7 has an invalid length. [ 325.971912][T28211] : entered promiscuous mode [ 326.020444][T28220] overlay: Bad value for 'index' [ 326.068300][ T40] audit: type=1400 audit(1759370721.024:36310): avc: denied { append } for pid=28223 comm="syz.9.3557" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 326.074159][T28224] program syz.9.3557 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 326.094871][T28224] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 326.136214][ T40] audit: type=1400 audit(1759370721.090:36311): avc: denied { map } for pid=28228 comm="syz.9.3559" path="socket:[92349]" dev="sockfs" ino=92349 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 326.285693][T23046] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 326.291488][T23046] usb 6-1: USB disconnect, device number 50 [ 326.317843][ T5979] Bluetooth: hci1: command 0x041b tx timeout [ 326.390660][T28290] bridge_slave_0: left allmulticast mode [ 326.393555][T28290] bridge_slave_0: left promiscuous mode [ 326.396654][T28290] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.406241][T28290] bridge_slave_1: left allmulticast mode [ 326.408951][T28290] bridge_slave_1: left promiscuous mode [ 326.411799][T28290] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.415457][T28313] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3568'. [ 326.421383][T28314] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3568'. [ 326.439865][T28290] bond0: (slave bond_slave_0): Releasing backup interface [ 326.448999][T28290] bond0: (slave bond_slave_1): Releasing backup interface [ 326.462961][T28319] netlink: 'syz.9.3570': attribute type 5 has an invalid length. [ 326.465052][T28290] team0: Port device team_slave_0 removed [ 326.476613][T28290] team0: Port device team_slave_1 removed [ 326.480816][T28290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.484925][T28290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.495790][T28290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.500229][T28290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.519877][T28326] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 326.520793][T28324] netlink: 207708 bytes leftover after parsing attributes in process `syz.6.3569'. [ 326.535227][T28328] fuse: Bad value for 'group_id' [ 326.536924][T28328] fuse: Bad value for 'group_id' [ 326.579903][T28335] program syz.5.3575 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 326.600421][T28331] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 326.604598][T28331] binder: 28329:28331 ioctl c0306201 0 returned -14 [ 326.618024][T28331] IPv6: NLM_F_CREATE should be specified when creating new route [ 326.625208][T28331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28331 comm=syz.9.3574 [ 326.661391][T28349] NILFS (nbd6): device size too small [ 326.750241][T28365] overlay: filesystem on ./bus is read-only [ 326.795964][T28377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1825 sclass=netlink_route_socket pid=28377 comm=syz.6.3588 [ 326.808811][T28380] dummy0: entered promiscuous mode [ 326.825775][T28369] syzkaller1: entered promiscuous mode [ 326.827667][T28369] syzkaller1: entered allmulticast mode [ 327.103182][ T5979] Bluetooth: hci3: Malformed LE Event: 0x0d [ 327.106706][ T5979] Bluetooth: hci3: adv larger than maximum supported [ 327.106728][ T5979] Bluetooth: hci3: Malformed LE Event: 0x0d [ 327.315839][T28445] FAT-fs (nullb0): bogus number of reserved sectors [ 327.319142][T28445] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 327.430837][T28458] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 327.814004][ T5979] Bluetooth: hci0: unexpected event for opcode 0x0c1c [ 327.940337][T28504] mkiss: ax0: crc mode is auto. [ 327.948826][ T40] audit: type=1800 audit(1759370722.783:36312): pid=28517 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.3621" name="bus" dev="9p" ino=71827691 res=0 errno=0 [ 327.958704][ T40] audit: type=1400 audit(1759370722.783:36313): avc: denied { execute } for pid=28516 comm="syz.1.3621" path="/371/file0/bus" dev="9p" ino=71827691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 327.969069][ T40] audit: type=1800 audit(1759370722.792:36314): pid=28517 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.3621" name="bus" dev="9p" ino=71827691 res=0 errno=0 [ 328.099110][ T40] audit: type=1400 audit(1759370722.923:36315): avc: denied { ioctl } for pid=28542 comm="syz.5.3623" path="socket:[91728]" dev="sockfs" ino=91728 ioctlcmd=0x6615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 328.124065][T28545] cgroup: name respecified [ 328.540538][ T5979] Bluetooth: hci1: command 0x041b tx timeout [ 328.560550][T28574] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28574 comm=syz.5.3630 [ 328.589564][T28593] gretap0: entered promiscuous mode [ 328.676199][T28605] openvswitch: netlink: Duplicate key (type 0). [ 328.781813][T28616] fuse: Unknown parameter '0x0000000000000003' [ 328.797775][T28620] fuse: Unknown parameter '0x0000000000000003' [ 329.057093][T28653] program syz.5.3644 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 329.350281][T28726] ufs: You didn't specify the type of your ufs filesystem [ 329.350281][T28726] [ 329.350281][T28726] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 329.350281][T28726] [ 329.350281][T28726] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 329.382038][T28726] ufs: ufstype=old is supported read-only [ 329.391150][T28726] ufs: ufs_fill_super(): bad magic number [ 329.517875][T28743] netlink: 'syz.6.3660': attribute type 10 has an invalid length. [ 329.518739][ T40] audit: type=1400 audit(1759370724.251:36316): avc: denied { write } for pid=28742 comm="syz.6.3660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 329.527574][T28743] batman_adv: batadv0: Adding interface: team0 [ 329.527587][T28743] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.527604][T28743] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 329.547317][T28759] Failed to initialize the IGMP autojoin socket (err -2) [ 329.556945][ T40] audit: type=1326 audit(1759370724.298:36317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28756 comm="syz.9.3664" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67dad8ec29 code=0x0 [ 329.601346][T28762] afs: Unknown parameter 'dynv/usbmon#' [ 329.607764][T28762] tmpfs: Bad value for 'nr_blocks' [ 329.737972][ T7875] wlan1: Trigger new scan to find an IBSS to join [ 329.748553][ T6039] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 329.840752][T28783] nbd_handle_cmd: 2 callbacks suppressed [ 329.840766][T28783] block nbd6: Attempted send on invalid socket [ 329.848041][T28783] blk_print_req_error: 2 callbacks suppressed [ 329.848054][T28783] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 329.853613][T28783] EXT4-fs (nbd6): unable to read superblock [ 329.910436][ T6039] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 329.914698][ T6039] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 329.917995][ T6039] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 329.921490][ T6039] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.926721][T28751] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 329.932670][ T6039] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 330.438663][ T6039] usb 6-1: USB disconnect, device number 51 [ 330.452564][T28823] __nla_validate_parse: 14 callbacks suppressed [ 330.452577][T28823] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3673'. [ 330.459935][T28823] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 330.463028][T28823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.484714][ T40] audit: type=1400 audit(1759370725.159:36318): avc: denied { unmount } for pid=26751 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 330.654275][T28846] tmpfs: Unknown parameter 'fd' [ 330.764301][ T5979] Bluetooth: hci1: command 0x041b tx timeout [ 330.973807][T28866] tmpfs: Unknown parameter 'grnode_hardlimit' [ 330.977988][ T40] audit: type=1400 audit(1759370725.617:36319): avc: denied { setattr } for pid=28868 comm="syz.5.3681" name="NETLINK" dev="sockfs" ino=94404 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 331.011105][T28880] netlink: 'syz.5.3685': attribute type 1 has an invalid length. [ 331.037318][T28880] 8021q: adding VLAN 0 to HW filter on device bond2 [ 331.052188][T28919] netlink: 'syz.1.3686': attribute type 2 has an invalid length. [ 331.055105][T28919] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3686'. [ 331.058017][T28919] nbd: must specify a device to reconfigure [ 331.112247][T28932] netlink: 'syz.9.3690': attribute type 5 has an invalid length. [ 331.114582][T28925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.114834][T28932] netlink: 'syz.9.3690': attribute type 7 has an invalid length. [ 331.121239][T28925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.287021][T28952] block nbd6: Attempted send on invalid socket [ 331.291139][T28952] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.291304][T28954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3696'. [ 331.294404][T28952] block nbd6: Attempted send on invalid socket [ 331.298196][T28954] netlink: 'syz.1.3696': attribute type 7 has an invalid length. [ 331.300939][T28952] I/O error, dev nbd6, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.301041][T28952] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 331.303746][T28954] netlink: 'syz.1.3696': attribute type 8 has an invalid length. [ 331.307628][T28952] block nbd6: Attempted send on invalid socket [ 331.313812][T28954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3696'. [ 331.315204][T28952] I/O error, dev nbd6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.318392][T28957] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3697'. [ 331.320998][T28952] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 331.335082][T28952] block nbd6: Attempted send on invalid socket [ 331.337510][T28952] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.341728][T28952] block nbd6: Attempted send on invalid socket [ 331.342308][T28957] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3697'. [ 331.344354][T28952] I/O error, dev nbd6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.344439][T28952] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 331.356210][T28952] block nbd6: Attempted send on invalid socket [ 331.359116][T28952] I/O error, dev nbd6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.363278][T28952] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 331.368206][T28952] block nbd6: Attempted send on invalid socket [ 331.370708][T28952] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.374317][T28952] block nbd6: Attempted send on invalid socket [ 331.376420][T28962] netlink: zone id is out of range [ 331.376852][T28952] I/O error, dev nbd6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.376907][T28952] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 331.378811][T28962] netlink: zone id is out of range [ 331.381585][T28952] block nbd6: Attempted send on invalid socket [ 331.388325][T28952] I/O error, dev nbd6, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.391471][T28952] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 331.392260][T28962] netlink: zone id is out of range [ 331.396823][T28962] netlink: zone id is out of range [ 331.398851][T28952] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 331.402077][T28952] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 331.405125][T28952] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 331.409155][T28962] netlink: set zone limit has 4 unknown bytes [ 331.498380][T28964] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3699'. [ 331.502094][T28964] netlink: 'syz.9.3699': attribute type 30 has an invalid length. [ 331.505705][T28964] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 331.509332][T28964] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 331.514610][ T5979] Bluetooth: hci1: unexpected event for opcode 0x203e [ 331.557536][T28976] 8021q: adding VLAN 0 to HW filter on device bond4 [ 331.671857][T29024] macvlan0: entered promiscuous mode [ 331.674016][T29024] macvlan0: entered allmulticast mode [ 331.718122][T29036] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3707'. [ 331.762453][T29043] syzkaller1: entered promiscuous mode [ 331.764677][T29043] syzkaller1: entered allmulticast mode [ 331.817517][T29054] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3714'. [ 331.821795][T29054] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3714'. [ 331.925617][T29073] netlink: 'syz.5.3719': attribute type 1 has an invalid length. [ 331.928329][T29073] netlink: 'syz.5.3719': attribute type 101 has an invalid length. [ 332.041874][T29088] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29088 comm=syz.5.3724 [ 332.049454][T29088] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=29088 comm=syz.5.3724 [ 332.050296][T29089] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 332.084689][T29102] dlm: Unknown command passed to DLM device : 255 [ 332.084689][T29102] [ 332.095549][ T40] audit: type=1326 audit(1759370726.665:36320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29106 comm="syz.5.3727" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f472ef8ec29 code=0x0 [ 332.205209][ T40] audit: type=1400 audit(1759370726.767:36321): avc: denied { accept } for pid=29109 comm="syz.6.3728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 332.209453][T29111] macvlan2: entered promiscuous mode [ 332.215286][T29111] macvlan2: entered allmulticast mode [ 332.217864][T29111] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 332.282716][ T6223] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 332.463987][ T6223] usb 6-1: Using ep0 maxpacket: 16 [ 332.470253][ T6223] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.475102][ T6223] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 332.480409][ T6223] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 332.484617][ T6223] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.485581][ T40] audit: type=1804 audit(1759370727.020:36322): pid=29146 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.3734" name="/newroot/52/file0" dev="tmpfs" ino=291 res=1 errno=0 [ 332.490207][ T6223] usb 6-1: config 0 descriptor?? [ 332.724391][T29162] SELinux: policydb version 341520179 does not match my version range 15-35 [ 332.727414][T29162] SELinux: failed to load policy [ 332.902631][ T7851] wlan1: Trigger new scan to find an IBSS to join [ 333.078496][T29168] block nbd6: NBD_DISCONNECT [ 333.162253][T29171] tipc: Enabling of bearer rejected, failed to enable media [ 333.320284][T29180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.323577][T29180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.378254][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.380392][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.382956][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.385008][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.385173][T29189] binder: 29187:29189 unknown command 0 [ 333.387750][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.389865][T29189] binder: 29187:29189 ioctl c0306201 200000000080 returned -22 [ 333.391765][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.396769][T29190] binder: BINDER_SET_CONTEXT_MGR already set [ 333.399448][T29190] binder: 29187:29190 ioctl 4018620d 200000000040 returned -16 [ 333.400036][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.403781][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.406399][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.408434][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.411142][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.413119][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.416715][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.420483][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.423852][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.426887][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.430849][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.433404][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.437009][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.439529][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.442888][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.445777][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.449271][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.451536][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.454857][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.457530][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.461050][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.463609][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.466895][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.469689][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.473030][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.475541][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.478690][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.481563][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.484846][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.487334][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.490826][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.493398][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.496665][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.499244][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.502866][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.505413][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.508778][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.511343][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.515436][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.517971][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.521283][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.523988][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.527317][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.529893][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.533203][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.535771][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.539116][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.541646][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.545120][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.547663][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.550891][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.553835][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.557569][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.560189][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.563505][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.566093][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.569353][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.571882][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.575177][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.577830][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.581413][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.584023][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.587924][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.590291][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.593571][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.596249][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.599860][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.602368][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.605611][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.608314][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.611565][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.614154][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.617542][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.620138][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.623442][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.626151][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.629511][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.632869][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.636176][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.638874][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.642320][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.644875][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.648092][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.650900][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.654189][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.656755][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.660118][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.663540][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.667289][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.669897][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.673311][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.675931][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.679214][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.681705][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.685103][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.687734][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.690951][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.693536][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.696796][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.699124][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.702469][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.705108][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.708311][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.710837][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.714228][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.717380][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.721611][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.724188][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.727526][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.730185][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.733506][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.736201][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.739546][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.742086][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.745419][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.747836][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.751075][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.753581][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.757071][T29188] binder: BINDER_SET_CONTEXT_MGR already set [ 333.759693][T29188] binder: 29187:29188 ioctl 4018620d 2000000000c0 returned -16 [ 333.804024][T29199] overlayfs: missing 'workdir' [ 333.905296][T29208] veth0: entered promiscuous mode [ 334.280976][T29253] program syz.6.3761 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 334.353243][T29253] program syz.6.3761 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 334.711967][T29283] 9pnet: Could not find request transport: vi [ 334.879574][T29292] (syz.5.3768,29292,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 334.885030][T29292] (syz.5.3768,29292,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 335.236689][ T6223] usbhid 6-1:0.0: can't add hid device: -71 [ 335.238673][ T6223] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 335.245518][ T6223] usb 6-1: USB disconnect, device number 52 [ 335.692646][T23046] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 335.847682][T29341] sp0: Synchronizing with TNC [ 335.859810][T23046] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 335.863524][T29340] [U] è [ 335.865900][T23046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.871862][T23046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.890788][T23046] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 335.900846][T23046] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 335.904671][T23046] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 335.908307][T23046] usb 6-1: Manufacturer: syz [ 335.913134][T23046] usb 6-1: config 0 descriptor?? [ 336.153809][T29371] __nla_validate_parse: 9 callbacks suppressed [ 336.153822][T29371] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3784'. [ 336.164063][ T7898] wlan1: Trigger new scan to find an IBSS to join [ 336.185858][T29380] overlayfs: failed to resolve './file1': -2 [ 336.210661][ T40] audit: type=1800 audit(1759370730.518:36323): pid=29383 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.3787" name="bus" dev="9p" ino=71827691 res=0 errno=0 [ 336.246342][T29388] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3788'. [ 336.333533][T29403] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3790'. [ 336.355649][T23046] hid_parser_main: 73 callbacks suppressed [ 336.355671][T23046] appleir 0003:05AC:8243.0013: unknown main item tag 0x0 [ 336.368281][T23046] appleir 0003:05AC:8243.0013: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 336.374469][T29410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.378097][T29410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.515892][ T6039] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 336.560134][T29410] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 336.563208][ T5979] Bluetooth: hci0: Opcode 0x1407 failed: -112 [ 336.565841][T29410] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 336.567857][T29410] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 336.654736][ T6223] usb 11-1: new high-speed USB device number 28 using dummy_hcd [ 336.699156][ T6039] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.702724][ T6039] usb 14-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 336.705802][ T6039] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.710333][ T6039] usb 14-1: config 0 descriptor?? [ 336.836375][ T6223] usb 11-1: Using ep0 maxpacket: 8 [ 336.839650][ T6223] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 336.842414][ T6223] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 336.845642][ T6223] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 336.848789][ T6223] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 336.851953][ T6223] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 336.856078][ T6223] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 336.859080][ T6223] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.930910][ T6039] usbhid 14-1:0.0: can't add hid device: -71 [ 336.933185][ T6039] usbhid 14-1:0.0: probe with driver usbhid failed with error -71 [ 336.937504][ T6039] usb 14-1: USB disconnect, device number 3 [ 337.078955][ T6223] usb 11-1: usb_control_msg returned -32 [ 337.080900][ T6223] usbtmc 11-1:16.0: can't read capabilities [ 337.169504][ T7877] wlan1: Creating new IBSS network, BSSID b6:da:90:08:a8:e2 [ 337.404797][ T6039] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 337.500856][T29479] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3799'. [ 337.517899][T29479] bond3: entered allmulticast mode [ 337.555241][T29516] netlink: 'syz.5.3800': attribute type 2 has an invalid length. [ 337.555268][T29517] netlink: 'syz.5.3800': attribute type 2 has an invalid length. [ 337.555296][T29516] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3800'. [ 337.558719][T29517] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3800'. [ 337.569836][T29517] tipc: Enabling of bearer rejected, failed to enable media [ 337.572644][T29477] binder: BINDER_SET_CONTEXT_MGR already set [ 337.574078][T29516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=29516 comm=syz.5.3800 [ 337.574081][ T6039] usb 14-1: Using ep0 maxpacket: 32 [ 337.575540][ T6039] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.575564][ T6039] usb 14-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 337.575576][ T6039] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.576244][T29477] binder: 29413:29477 ioctl 4018620d 200000000040 returned -16 [ 337.580944][ T6039] usb 14-1: config 0 descriptor?? [ 337.583382][ T6039] ldusb 14-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 337.601521][ T6039] ldusb 14-1:0.0: LD USB Device #2 now attached to major 180 minor 2 [ 337.719780][T29532] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3803'. [ 337.800134][T29396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.804137][T29396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.813697][ T6039] usb 14-1: USB disconnect, device number 4 [ 337.818918][ T6039] ldusb 14-1:0.0: LD USB Device #2 now disconnected [ 337.882551][T29552] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3805'. [ 337.885722][T29552] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3805'. [ 338.129114][T29560] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3807'. [ 338.539427][ T10] usb 6-1: USB disconnect, device number 53 [ 338.594221][T29619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.598126][T29619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.632777][ T5979] Bluetooth: hci3: command 0x0c1a tx timeout [ 338.640002][T29623] netlink: 'syz.9.3821': attribute type 2 has an invalid length. [ 338.642675][T29623] nbd: must specify a device to reconfigure [ 338.647787][T29623] netlink: 'syz.9.3821': attribute type 5 has an invalid length. [ 338.718934][ T5979] Bluetooth: hci1: command 0x041b tx timeout [ 338.719232][ T63] Bluetooth: hci0: command 0x0419 tx timeout [ 338.782297][ T40] audit: type=1400 audit(1759370732.922:36324): avc: denied { read } for pid=29630 comm="syz.9.3824" name="file0" dev="tmpfs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 338.791551][ T40] audit: type=1400 audit(1759370732.922:36325): avc: denied { open } for pid=29630 comm="syz.9.3824" path="/81/file0" dev="tmpfs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 339.128168][T29663] vlan2: entered promiscuous mode [ 339.130516][T29663] vlan2: entered allmulticast mode [ 339.132674][T29663] hsr_slave_1: entered allmulticast mode [ 339.465101][T29706] could not open pipe file descriptor [ 339.621545][ T10] usb 11-1: USB disconnect, device number 28 [ 339.633031][ T40] audit: type=1400 audit(1759370733.717:36326): avc: denied { map } for pid=29714 comm="syz.9.3844" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 339.715145][T29727] bridge0: port 1(macvlan3) entered blocking state [ 339.718120][T29727] bridge0: port 1(macvlan3) entered disabled state [ 339.720881][T29727] macvlan3: entered allmulticast mode [ 339.723937][T29727] bridge0: entered allmulticast mode [ 339.728003][T29727] macvlan3: left allmulticast mode [ 339.730147][T29727] bridge0: left allmulticast mode [ 339.762856][T29733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=29733 comm=syz.6.3846 [ 339.920102][T29748] xfrm1: entered allmulticast mode [ 339.923219][T29749] fuse: Unknown parameter 'fsname' [ 339.923225][T29748] fuse: Unknown parameter 'fsname' [ 340.074733][T29770] erspan0: entered promiscuous mode [ 340.082300][T29770] overlayfs: missing 'workdir' [ 340.272229][T29803] trusted_key: encrypted_key: master key parameter '' is invalid [ 340.287843][T29805] netlink: 'syz.9.3865': attribute type 1 has an invalid length. [ 340.291992][T29805] NCSI netlink: No device for ifindex 196628 [ 340.391743][T29819] Failed to initialize the IGMP autojoin socket (err -2) [ 340.560853][ T7895] syzkaller0: tun_net_xmit 76 [ 340.563242][ T7895] syzkaller0: tun_net_xmit 48 [ 340.589347][ T6039] syzkaller0: tun_net_xmit 76 [ 340.952925][ T6026] syzkaller0: tun_net_xmit 76 [ 341.262719][ T6026] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 341.322153][T29887] comedi comedi4: bad chanlist[0]=0x00100000 chan=0 range length=2 [ 341.366322][T29889] can0: slcan on ttyS3. [ 341.369670][ T34] syzkaller0: tun_net_xmit 76 [ 341.412483][ T6026] usb 6-1: device descriptor read/64, error -71 [ 341.693513][ T6026] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 341.853592][ T6026] usb 6-1: device descriptor read/64, error -71 [ 341.865094][ T40] audit: type=1400 audit(1759370735.803:36327): avc: denied { watch } for pid=29911 comm="syz.6.3891" path="anon_inode:[fanotify]" dev="anon_inodefs" ino=2088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:anon_inodefs_t tclass=filesystem permissive=1 [ 341.969164][ T6026] usb usb6-port1: attempt power cycle [ 342.347567][ T6026] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 342.369768][ T6026] usb 6-1: device descriptor read/8, error -71 [ 342.623379][ T6026] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 342.646479][ T6026] usb 6-1: device descriptor read/8, error -71 [ 342.748363][ T5979] Bluetooth: hci1: command 0x041b tx timeout [ 342.764172][ T6026] usb usb6-port1: unable to enumerate USB device [ 343.305201][T29889] can0 (unregistered): slcan off ttyS3. [ 343.387630][T29954] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 343.394639][T23046] lo speed is unknown, defaulting to 1000 [ 343.596612][T29979] __nla_validate_parse: 70 callbacks suppressed [ 343.596625][T29979] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3904'. [ 343.699087][T29987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29987 comm=syz.5.3905 [ 343.816184][T29983] netlink: 22 bytes leftover after parsing attributes in process `syz.6.3903'. [ 344.095473][ T10] usb 11-1: new full-speed USB device number 29 using dummy_hcd [ 344.262312][ T10] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 344.267230][ T10] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 344.271879][ T10] usb 11-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 344.275764][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.283200][ T10] usb 11-1: config 0 descriptor?? [ 344.285962][T29983] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 344.298215][T30038] syzkaller1: entered allmulticast mode [ 344.302874][T30038] nbd_handle_cmd: 3 callbacks suppressed [ 344.302887][T30038] block nbd1: Attempted send on invalid socket [ 344.306749][T30038] blk_print_req_error: 3 callbacks suppressed [ 344.306759][T30038] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.312416][T30038] block nbd1: Attempted send on invalid socket [ 344.314449][T30038] I/O error, dev nbd1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.317361][T30038] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 344.320565][T30038] block nbd1: Attempted send on invalid socket [ 344.322568][T30038] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.325562][T30038] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 344.325946][T30041] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3917'. [ 344.329409][T30038] block nbd1: Attempted send on invalid socket [ 344.334227][T30038] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.337373][T30038] block nbd1: Attempted send on invalid socket [ 344.339521][T30038] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.344891][T30038] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 344.348236][T30038] block nbd1: Attempted send on invalid socket [ 344.350162][T30038] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.353508][T30038] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 344.356848][T30038] block nbd1: Attempted send on invalid socket [ 344.358800][T30038] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.361783][T30038] block nbd1: Attempted send on invalid socket [ 344.363834][T30038] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.366810][T30038] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 344.369815][T30038] block nbd1: Attempted send on invalid socket [ 344.371798][T30038] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.374815][T30038] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 344.378020][T30038] block nbd1: Attempted send on invalid socket [ 344.379971][T30038] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.382954][T30038] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 344.386299][T30038] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 344.389262][T30038] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 344.475249][T30050] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=30050 comm=syz.9.3918 [ 344.506043][ T10] usbhid 11-1:0.0: can't add hid device: -71 [ 344.508780][ T10] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 344.514307][ T10] usb 11-1: USB disconnect, device number 29 [ 344.722441][T30079] kvm: apic: phys broadcast and lowest prio [ 344.840217][T30083] netlink: 27 bytes leftover after parsing attributes in process `syz.5.3923'. [ 344.893271][T30088] can0: slcan on ttyS3. [ 344.955869][T30105] 9pnet_fd: Insufficient options for proto=fd [ 345.281268][T30127] comedi: No check for data length of config insn id 3 is implemented [ 345.285028][T30127] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 345.289137][T30127] comedi: Assuming n=15 is correct [ 345.397806][T30130] cgroup: Need name or subsystem set [ 345.456569][ T40] audit: type=1400 audit(1759370739.161:36328): avc: denied { execute } for pid=30135 comm="syz.9.3933" path="/dev/radio0" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 345.466318][T30138] input: syz1 as /devices/virtual/input/input45 [ 345.599784][T30154] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3936'. [ 345.603090][T30154] nbd: must specify at least one socket [ 345.621804][ T40] audit: type=1326 audit(1759370739.311:36329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30155 comm="syz.6.3937" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5d4fb85be7 code=0x7ffc0000 [ 345.634798][ T40] audit: type=1326 audit(1759370739.311:36330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30155 comm="syz.6.3937" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5d4fb2ae09 code=0x7ffc0000 [ 345.643513][ T40] audit: type=1326 audit(1759370739.311:36331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30155 comm="syz.6.3937" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5d4fb85be7 code=0x7ffc0000 [ 345.653517][ T40] audit: type=1326 audit(1759370739.311:36332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30155 comm="syz.6.3937" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5d4fb2ae09 code=0x7ffc0000 [ 345.662531][ T40] audit: type=1326 audit(1759370739.311:36333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30155 comm="syz.6.3937" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5d4fb85be7 code=0x7ffc0000 [ 345.675683][ T40] audit: type=1326 audit(1759370739.311:36334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30155 comm="syz.6.3937" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5d4fb2ae09 code=0x7ffc0000 [ 345.685921][ T40] audit: type=1326 audit(1759370739.311:36335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30155 comm="syz.6.3937" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5d4fb85be7 code=0x7ffc0000 [ 345.697985][ T40] audit: type=1326 audit(1759370739.311:36336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30155 comm="syz.6.3937" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5d4fb2ae09 code=0x7ffc0000 [ 345.709605][T30158] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3937'. [ 345.713481][T30158] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3937'. [ 345.810019][ T5979] non-paged memory [ 345.812260][ T5979] list_del corruption, ffff888055d7e180->next is LIST_POISON1 (dead000000000100) [ 345.820315][ T5979] ------------[ cut here ]------------ [ 345.823263][ T5979] kernel BUG at lib/list_debug.c:56! [ 345.826320][ T5979] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 345.830141][ T5979] CPU: 1 UID: 0 PID: 5979 Comm: kworker/u33:3 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 345.835080][ T5979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 345.839679][ T5979] Workqueue: hci1 hci_conn_timeout [ 345.841852][ T5979] RIP: 0010:__list_del_entry_valid_or_report+0x121/0x200 [ 345.844878][ T5979] Code: 48 c7 c7 c0 36 16 8c e8 cd 03 af fc 90 0f 0b 4c 89 e7 e8 72 42 13 fd 4c 89 e2 48 89 de 48 c7 c7 20 37 16 8c e8 b0 03 af fc 90 <0f> 0b 48 89 ef e8 55 42 13 fd 48 89 ea 48 89 de 48 c7 c7 80 37 16 [ 345.853239][ T5979] RSP: 0018:ffffc90002937b78 EFLAGS: 00010282 [ 345.855834][ T5979] RAX: 000000000000004e RBX: ffff888055d7e180 RCX: ffffffff819a5e09 [ 345.859076][ T5979] RDX: 0000000000000000 RSI: ffffffff819adca6 RDI: 0000000000000005 [ 345.862492][ T5979] RBP: dead000000000122 R08: 0000000000000005 R09: 0000000000000000 [ 345.865813][ T5979] R10: 0000000080000000 R11: 0000000000000000 R12: dead000000000100 [ 345.869087][ T5979] R13: dffffc0000000000 R14: ffff8880365a4658 R15: ffff888055d7e180 [ 345.872187][ T5979] FS: 0000000000000000(0000) GS:ffff8880d67b2000(0000) knlGS:0000000000000000 [ 345.875698][ T5979] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 345.878259][ T5979] CR2: 00007f67dbbccd58 CR3: 00000000548be000 CR4: 0000000000352ef0 [ 345.881306][ T5979] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 345.884223][ T5979] DR3: 000000007ffffff6 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 345.887190][ T5979] Call Trace: [ 345.888411][ T5979] [ 345.889520][ T5979] _hci_cmd_sync_cancel_entry.constprop.0+0x80/0x1d0 [ 345.892048][ T5979] hci_cancel_connect_sync+0xfa/0x2b0 [ 345.894132][ T5979] hci_abort_conn+0x15a/0x340 [ 345.895968][ T5979] hci_conn_timeout+0x1a2/0x210 [ 345.897887][ T5979] process_one_work+0x9cc/0x1b70 [ 345.899899][ T5979] ? __pfx_process_one_work+0x10/0x10 [ 345.902007][ T5979] ? assign_work+0x1a0/0x250 [ 345.903818][ T5979] worker_thread+0x6c8/0xf10 [ 345.905613][ T5979] ? __pfx_worker_thread+0x10/0x10 [ 345.907600][ T5979] kthread+0x3c2/0x780 [ 345.909194][ T5979] ? __pfx_kthread+0x10/0x10 [ 345.911015][ T5979] ? rcu_is_watching+0x12/0xc0 [ 345.912877][ T5979] ? __pfx_kthread+0x10/0x10 [ 345.914699][ T5979] ret_from_fork+0x56a/0x730 [ 345.916547][ T5979] ? __pfx_kthread+0x10/0x10 [ 345.918374][ T5979] ret_from_fork_asm+0x1a/0x30 [ 345.920253][ T5979] [ 345.921460][ T5979] Modules linked in: [ 345.923636][ T5979] ---[ end trace 0000000000000000 ]--- [ 345.934064][ T5979] RIP: 0010:__list_del_entry_valid_or_report+0x121/0x200 [ 345.937164][ T5979] Code: 48 c7 c7 c0 36 16 8c e8 cd 03 af fc 90 0f 0b 4c 89 e7 e8 72 42 13 fd 4c 89 e2 48 89 de 48 c7 c7 20 37 16 8c e8 b0 03 af fc 90 <0f> 0b 48 89 ef e8 55 42 13 fd 48 89 ea 48 89 de 48 c7 c7 80 37 16 [ 345.945641][ T5979] RSP: 0018:ffffc90002937b78 EFLAGS: 00010282 [ 345.948313][ T5979] RAX: 000000000000004e RBX: ffff888055d7e180 RCX: ffffffff819a5e09 [ 345.951620][ T5979] RDX: 0000000000000000 RSI: ffffffff819adca6 RDI: 0000000000000005 [ 345.954934][ T5979] RBP: dead000000000122 R08: 0000000000000005 R09: 0000000000000000 [ 345.958515][ T5979] R10: 0000000080000000 R11: 0000000000000000 R12: dead000000000100 [ 345.961908][ T5979] R13: dffffc0000000000 R14: ffff8880365a4658 R15: ffff888055d7e180 [ 345.965262][ T5979] FS: 0000000000000000(0000) GS:ffff8880d67b2000(0000) knlGS:0000000000000000 [ 345.969183][ T5979] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 345.972168][ T5979] CR2: 000055f5016aeb00 CR3: 000000000e380000 CR4: 0000000000352ef0 [ 345.975494][ T5979] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 345.979358][ T5979] DR3: 000000007ffffff6 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 345.982916][ T5979] Kernel panic - not syncing: Fatal exception [ 345.986229][ T5979] Kernel Offset: disabled [ 345.987651][ T5979] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:49:30 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88806a53fe80 RCX=ffffffff81af9d91 RDX=ffff88804c232440 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90004457880 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=ffffed100d4a7fd1 R14=0000000000000001 R15=0000000000000001 RIP=ffffffff81bb9d80 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055556a92d808 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000000d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8564c115 RDI=ffffffff9b118160 RBP=ffffffff9b118120 RSP=ffffc90002937510 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6e69203a73706f4f R12=0000000000000000 R13=000000000000000d R14=ffffffff9b118120 R15=ffffffff8564c0b0 RIP=ffffffff8564c13f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f67dbbccd58 CR3=00000000548be000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000007ffffff6 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000e0000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff1922c7e0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff1922c966 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff1922c966 00007fff1922c96c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f472f012e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f472f012e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f472f012e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f472f012e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f472f012f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f472f012fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffea0000a88440 RCX=ffffffff820e16f4 RDX=ffff88802aaa8000 RSI=0000000000000002 RDI=0000000000000005 RBP=ffffea0000a88440 RSP=ffffc9003109f578 R8 =0000000000000005 R9 =0000000000000002 R10=0000000000000000 R11=1ffffffff1cb9891 R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81bb9d80 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f67dbbecf98 CR3=00000000265bd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 007570637265705f 636f6c6c615f7570 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffb8bfce86 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffb8bfce86 00007fffb8bfce8c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f119c812e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f119c812e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f119c812e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f119c812e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f119c812f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f119c812fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9500000008000000 a700000075000000 85ec11c34b000000 0000000021000001 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f119d50d100 00007f119c9a7460 00007f119c9a7478 0004000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f119c9a74b8 00007f119c9a74b0 00007f119c9a74a8 00007f119c9a74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=1ffff1100d4e828a RBX=dffffc0000000000 RCX=ffffffff8df61e98 RDX=1ffff110200150d6 RSI=1ffffffff1bec3d3 RDI=ffffffff8df61e98 RBP=0000000000000003 RSP=ffffc90003407738 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffffffff93d8f440 R13=0000000000000003 R14=ffff88806a741440 R15=ffff88806a741450 RIP=ffffffff822a5fe3 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f527d507d60 CR3=0000000028d5d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f527c9a76c3 00007f527c9a76c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd08fe6560 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555a6e31e1 000055555a6df340 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555a6dab89 000055555a6daa30 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 100002a803010000 04080602a0030408 000298034a080002 90030000000a0806 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0138100002800438 1000060102880010 0002a80301000004 080602a003040800 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0298034a08000290 030000000a080602 8803010000040806 0280030801a00a05 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01800404a4e60800 0100000808060601 3be8006567646972 625f6f745f316874 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657601ffffffffff ffffffdf08018003 048c080002100014 1000060870ec1010 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000