last executing test programs: 3m24.781681509s ago: executing program 32 (id=193): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000400000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791", 0x6b}, {&(0x7f0000002a00)="cee05e8788753e17958fdee7f1d5d4faa3cc35d952f80d608a05555286d236185f49d62f1dfa7b996904100c7a91d13c47af61b9588dd8387b86fc4e1d4b75374ad68a91248f7f983391bd22b5a4c9d913f64dc2abaa5f694d8c396e1e118fb2b00961632cb84e625dc9767a34", 0x6d}], 0x2, 0x0, 0x0, 0x7400}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4040, 0x80) r4 = openat(r3, &(0x7f0000000080)='./file0\x00', 0x258903, 0x29) (async) syz_emit_ethernet(0x12, &(0x7f0000000080)={@random="659b3dfadf01", @link_local, @void, {@llc={0x4, {@llc={0x0, 0x0, "e3", "dd"}}}}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000a538ae46463245004500081c0000000000029078ac1e0001e00000010000000000000000cc6e0b1f8b1be38bf25666efc8da05e61afa90b954746c94d4b1d822c74f36550b72eba29cd45433e2cee77791e0bb8b2e908ac4eed1463cba9a181ee52d04000000740fa6335b3d7e3ecc340179c166235f281ee42af0049ed7c7c9b6"], 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010000000000000000000a8000000000000800000000140001"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) openat$cgroup_int(r4, &(0x7f00000000c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 3m18.56700235s ago: executing program 0 (id=373): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RXATTRWALK(r1, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0x4}, 0xca80) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x2000) 3m18.56431866s ago: executing program 0 (id=374): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002640), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000002680)={0xffffff7f, 0x2, 'client1\x00', 0x0, "2245941080736c1d", "db7895b88a8cfee74a15e0c3d0a55a5cb7f822ac34a3a29d6da58b5d00001000"}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB='\t\b'], 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x4004000) 3m18.500142025s ago: executing program 0 (id=376): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x8, 0x200008, 0x6, 0x37}, 0x10}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 32) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) (async, rerun: 32) r4 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_START_P2P_DEVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44101}, 0x8800) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) vmsplice(r3, &(0x7f00000001c0)=[{&(0x7f00000006c0)='=E', 0x2}], 0x1, 0x4) (async) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) r11 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x40240, 0x0) ioctl$TCSBRKP(r11, 0x5425, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x400, 0x0, 0x65dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0xffff}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 3m18.423178313s ago: executing program 0 (id=379): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RXATTRWALK(r1, &(0x7f0000000000)={0xf, 0x1f, 0x402, 0x5}, 0xf) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x77359400}}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE) io_uring_enter(r2, 0x4866, 0x0, 0xb, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e000100000002000000000007000000", @ANYRES32, @ANYBLOB="000006000a0002"], 0x28}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 3m18.336075141s ago: executing program 0 (id=381): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000001c0)=0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(0xffffffffffffffff, 0x8010aebc, &(0x7f00000003c0)={0x0, 0x1000}) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000200)) r9 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r9], 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r8, 0x700, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vxcan1\x00'}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xd}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9c}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7ff}]}, 0x54}, 0x1, 0x0, 0x0, 0x40004}, 0xc00c0) 3m18.096129336s ago: executing program 0 (id=383): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="834f51d073a9df23990a0bc35ba03d2d383fce35b484f9e9ea28d13342e0260cda1a7af0d4e3c8fdbc5d7201a04a53e2603ad34e8c025a614f145fdf6add9be89f2b8a4f303c1b006c6dc7be041315dcd4692dede7682f6e7b056cf39318ad37bd33d3ba1cc09a7d80a7701cddd08e080b429a31969d59", 0x77}], 0x1}}], 0x1, 0x4004000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000040)={r4, 0x24}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={r4, 0xfffffeff, 0x81, 0xb}, &(0x7f0000000040)=0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c"], 0x34c}}, 0x0) 3m11.37592689s ago: executing program 2 (id=461): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x75, 0x0, 0x63, 0x6}]}}, 0x0, 0x2a}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008001a8004002d"], 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x75, 0x0, 0x63, 0x6}]}}, 0x0, 0x2a}, 0x28) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008001a8004002d"], 0x30}}, 0x0) (async) 3m11.375356221s ago: executing program 2 (id=462): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1a", 0x1, 0xffffffffffffffff) keyctl$update(0x2, r0, &(0x7f0000001080)="83", 0x1) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r1, &(0x7f0000000240)={0x78, 0x0, r2, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0xd4, 0xfffffffffffffffa, 0x0, 0xa, 0x5, 0x0, 0x200, 0xa000, 0x0, r3}}}, 0x78) write$FUSE_NOTIFY_RESEND(r1, &(0x7f0000000040)={0x14}, 0x14) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000040)=0xffffffa2, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) 3m10.476405729s ago: executing program 2 (id=466): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r0, &(0x7f0000000500)=""/201, 0xc9) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000300)=@ethtool_drvinfo={0x3, "c0adf9730c497f2f7b0a755258cb90e5f42576cc0386f975710600ef795aaa53", "39161cfd481d4fc5b8e54eca21107ba28fa5ddad802edfc40d887da4200f32df", "b99d94bc132ed02bcfb97ff25677c672d0292a76ea9ae71082d5b12ae9e66036", "d98364d0de265a7dd90ad758220a2a74039fbea229a67a57b0f83a37a9f94a12", "2d2a6f06f54fea82a6845dbadd71ee9beedd10bbd1f4c21592674a056eed5839", "8d5739ad9197de8e51c057bb", 0x0, 0x7ff, 0x5, 0x9, 0x2}}) 3m10.476226579s ago: executing program 2 (id=467): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) chdir(&(0x7f0000000080)='./file1/file0\x00') (async) chdir(&(0x7f0000000080)='./file1/file0\x00') chdir(0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) chroot(&(0x7f0000000480)='./file0/../file0\x00') ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000080)) 3m10.206699628s ago: executing program 2 (id=468): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd1, &(0x7f0000000080)=0xd, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3f) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) socket(0x840000000002, 0x3, 0xff) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x387, 0xff}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000000)) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000180)={0x23, 0x1, 0x13, 0x1, 0x0, 0x2, 0x0}) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @private=0xa010101}}, 0x24) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000280), 0x6059c4416738893a, 0x0) ioctl$CDROM_CLEAR_OPTIONS(r7, 0x5321, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0x10, 0x43, 0x0, 0xcf, 0xd, 0x0, 0xb3, 0x465a, 0x177, 0x4000000000000008, 0x20010000000000, 0x81, 0x3, 0x8, 0xe6, 0x812], 0x3000, 0x3877c2}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m10.085923718s ago: executing program 2 (id=471): open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) (async) mount$9p_rdma(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000240)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x7fffffff}}]}}) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1502, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x70, 0x10, 0xffffff1f, 0x100, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0xffffffffffffffa5, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r10}, @IFLA_GRE_REMOTE={0x0, 0x7, @empty}, @IFLA_GRE_TTL={0x5, 0x8, 0x8}, @IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x1}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3m10.043723575s ago: executing program 33 (id=471): open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) (async) mount$9p_rdma(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000240)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x7fffffff}}]}}) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1502, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x70, 0x10, 0xffffff1f, 0x100, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0xffffffffffffffa5, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r10}, @IFLA_GRE_REMOTE={0x0, 0x7, @empty}, @IFLA_GRE_TTL={0x5, 0x8, 0x8}, @IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x1}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3m3.011659435s ago: executing program 34 (id=383): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="834f51d073a9df23990a0bc35ba03d2d383fce35b484f9e9ea28d13342e0260cda1a7af0d4e3c8fdbc5d7201a04a53e2603ad34e8c025a614f145fdf6add9be89f2b8a4f303c1b006c6dc7be041315dcd4692dede7682f6e7b056cf39318ad37bd33d3ba1cc09a7d80a7701cddd08e080b429a31969d59", 0x77}], 0x1}}], 0x1, 0x4004000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000040)={r4, 0x24}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={r4, 0xfffffeff, 0x81, 0xb}, &(0x7f0000000040)=0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c"], 0x34c}}, 0x0) 2m40.194284934s ago: executing program 3 (id=933): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000080)={[0x786, 0x22, 0x8, 0x9, 0x7, 0x7fffffffffffffff, 0x8000, 0x3, 0x0, 0x2, 0xc, 0x9, 0x2, 0x572d7860, 0x6, 0x400], 0xeeef0000, 0xc0}) (async) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x60}], 0x2, 0x0, 0x0, 0x0) (async) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) (async) setitimer(0x2, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000500)="6bf4", 0x2}], 0x1, 0x1) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000540)={0x4}) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m40.015349292s ago: executing program 3 (id=937): rt_sigprocmask(0x0, &(0x7f0000000080)={[0xffffffff]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f0000000480)={0x0, 0x0, 0x2}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0xffffffffffffffff]}, 0x8, 0x0) signalfd(r2, &(0x7f0000000000)={[0x1]}, 0x8) read$FUSE(r2, &(0x7f0000001a00)={0x2020}, 0x2020) rt_sigprocmask(0x0, &(0x7f0000000080)={[0xffffffff]}, 0x0, 0x8) (async) getpid() (async) gettid() (async) rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f0000000480)={0x0, 0x0, 0x2}) (async) signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0xffffffffffffffff]}, 0x8, 0x0) (async) signalfd(r2, &(0x7f0000000000)={[0x1]}, 0x8) (async) read$FUSE(r2, &(0x7f0000001a00)={0x2020}, 0x2020) (async) 2m39.959038749s ago: executing program 3 (id=940): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x14, 0x2e, 0x1}, 0x14}}, 0x0) (async) r1 = socket$kcm(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x90}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4885}, 0x8000000) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xe4010000, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f941a3c92b", 0x14}], 0x1}, 0x0) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x80000001, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x12, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000f0000000000000000000000181100003d739bda595d13fb88e6126d4381df4c43488c7a1633d7d79b298b15fe3f28b6979b4e4e962c0c78ff98ce98bd2a2c65e0175774e0f1621dfe924d662aef610d85e1a4dd9efad564f55f4cb73d44bab2ec8d41629373", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000070514000080000004518020008000000bf91000000000000b7020000010000008500000001000000b7000000000000009500000000000000"], &(0x7f0000001a40)='GPL\x00', 0x7}, 0x94) 2m39.890926433s ago: executing program 3 (id=942): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000004100090000000000000000000300000008000200"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20040044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) 2m39.836350693s ago: executing program 3 (id=944): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000280)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730480538d129103721cb6c6e44cb44679576a3d6b0", 0x60}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000000c0)=""/101, 0x65}, {&(0x7f0000000180)=""/239, 0xef}], 0x2}, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000003c0)={0x2, 0x0, [{0x0, 0xd3, &(0x7f0000000600)=""/211}, {0x10000, 0xe7, &(0x7f0000000700)=""/231}]}) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r2) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x20, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r9, 0x10000) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="280000001300f5d10300"/20, @ANYRES32=r11, @ANYBLOB="000000000000000008000d0006000000611ea9ecc8c1f5ab6a3000a72816b3e30e3be949e8a878d6609aecae639fda4ec64ab8912bc67a096a5ba9d0658b55da3a15a53e9a1394fedfc912d7b74d9a0e03b0a091e94c2383eb5e68fe4b35f4563f850d186bfda2f4a2"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000005400010026bdf0010000000007000000", @ANYRES32=r12, @ANYBLOB="20000100", @ANYRES32=r12, @ANYBLOB="0000020005"], 0x38}}, 0x0) 2m38.975619023s ago: executing program 3 (id=953): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x10, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xb}, [@RTA_OIF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 2m23.921912271s ago: executing program 35 (id=953): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x10, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xb}, [@RTA_OIF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 2m23.123853998s ago: executing program 5 (id=1156): syz_emit_ethernet(0x22, &(0x7f00000006c0)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @dev, @local}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mount(0x0, 0x0, 0x0, 0x2000802, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@deltfilter={0xca4, 0x2d, 0x800, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x2}, {0xffff, 0xfff1}, {0x7, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc78, 0x2, [@TCA_BPF_POLICE={0xc64, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x5, 0x6, 0xfffffffd, 0x100, {0x81, 0x1, 0x0, 0x81, 0x7, 0x1}, {0x5, 0x2, 0x6, 0x6ab, 0x5, 0x1}, 0x3, 0x8, 0xfffffffd}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x6, 0x200, 0x4, 0x4, 0x8, 0x1d37, 0x8, 0x200, 0x6, 0x1, 0x4, 0x7, 0x769547d, 0xe, 0x60000, 0x3, 0xe, 0xbea, 0x10000, 0xf, 0x1051, 0x3, 0xc, 0x8, 0xf8b, 0x0, 0x1e65, 0x6, 0x0, 0x4, 0xaecb, 0xd, 0xb, 0x101, 0xba5, 0x6e5aad55, 0x8, 0x0, 0x5, 0xb6b, 0x3f800, 0xc12, 0x4, 0x1, 0x2, 0x8, 0x6, 0x8, 0x23, 0x5, 0x2, 0x10, 0x7fffffff, 0xe7b, 0x23, 0x401822d, 0x6, 0x1000, 0x4, 0x3ff0000, 0x8, 0x6, 0x28a7, 0xc, 0x4, 0x0, 0x2, 0x0, 0x0, 0x7, 0x7fff, 0xfffffff8, 0x4, 0x5, 0x1, 0x7, 0x3, 0x9, 0x3, 0x0, 0x1, 0x2, 0x2, 0x800, 0x1, 0x6, 0xc, 0x0, 0x3, 0xfffff389, 0x100, 0x6, 0x0, 0x81, 0x5, 0x950a, 0x9b4, 0x0, 0x0, 0x4, 0xfffffff7, 0x10000, 0xfffffff9, 0xfff, 0x7, 0x6, 0x33f1f629, 0x4, 0x6, 0x8, 0x10, 0x81, 0x70, 0x40, 0x0, 0xfffffffc, 0x8, 0x1, 0x4, 0x4, 0xf6e4, 0x2, 0x0, 0x5, 0x2, 0x2, 0x2, 0xa9, 0x3, 0x3, 0x5251, 0x9, 0x993, 0x9, 0x6d98, 0x1, 0x2, 0x8, 0x83, 0x3, 0x4, 0xfff, 0x10000, 0x4, 0xffff, 0xb9e, 0x8, 0x0, 0x80, 0xffff, 0x8, 0x7, 0x8, 0x5, 0x0, 0xa, 0x8, 0x87, 0x9406, 0x1, 0x9, 0x0, 0xafd, 0xfffff66a, 0x3, 0x101, 0x4, 0x2, 0x1000, 0x4, 0x3, 0x9, 0x7, 0x8, 0x9, 0x8000, 0x6d, 0xf, 0x6, 0x2, 0x2, 0x3, 0x13a1, 0x2, 0x5, 0x40, 0x7, 0x26e, 0x7, 0x8, 0x8, 0x9, 0xa56f, 0x2, 0x90d, 0x7, 0x6, 0x2, 0x1, 0x81, 0x2aea, 0x401, 0x109, 0xf, 0x3, 0xcc90, 0x9, 0x9, 0x5, 0x5, 0x3, 0xebf, 0x5, 0x8, 0x3, 0xfffffff7, 0x0, 0x200, 0x5, 0xe5, 0x200, 0x7, 0x9, 0xa, 0x81, 0x4, 0xb395, 0x2, 0x401, 0xc9, 0x73cb, 0xf0, 0x1000, 0x1, 0xb, 0x1513, 0x9, 0x6, 0x768, 0x400, 0x80000000, 0x5, 0xa9d, 0x364, 0x9, 0xffffffff, 0xa6a1, 0x3, 0x8, 0xe5d7195, 0x7, 0x4, 0x6947, 0x81, 0x7fff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10001}, @TCA_POLICE_RATE={0x404, 0x2, [0x200, 0x9ea7, 0x6, 0x6, 0x5, 0x5, 0x1, 0xb, 0x200, 0x7, 0x1, 0x7, 0x4, 0x3, 0x77f0, 0x7, 0x0, 0x9d, 0x69, 0x4, 0x6, 0xffff, 0x7, 0x6, 0x1, 0x7, 0x8, 0x5, 0xe, 0x8, 0x4, 0x3, 0x8, 0x5, 0x800, 0x1000, 0x3, 0x5, 0xe233, 0xa, 0x6, 0x8, 0x7, 0x6, 0x6, 0x39d, 0x3, 0xffffff3e, 0x9, 0x5, 0x5, 0x1c, 0x10, 0x1, 0xc, 0x5, 0x3, 0x1ff, 0x200, 0x4, 0x4, 0x10000, 0x8, 0xfffff76f, 0x8, 0x7ff, 0xffffb083, 0x448, 0x90ef, 0x9, 0x3, 0x42, 0x9, 0x0, 0x8, 0x1, 0x6, 0x8, 0x8, 0x8, 0x51e1, 0x3, 0x1, 0x6, 0x4, 0x8, 0x0, 0xb, 0x3af, 0x9, 0xc969, 0x6, 0x3, 0x3, 0xe2, 0x0, 0x4, 0x2, 0xb, 0x401, 0xd, 0x19, 0x7, 0x0, 0x7, 0x8, 0x151, 0x66, 0x7, 0x44, 0xfffff7c4, 0x10001, 0x2, 0x1, 0x1, 0x3, 0x9, 0x1d4, 0x1000, 0x7f, 0x937, 0x6, 0xa8c, 0x6, 0x6, 0xff37, 0x2, 0x3, 0xffff19a5, 0x409, 0x2, 0x0, 0x4083, 0x6, 0xdea, 0xf, 0xde5, 0xb, 0x7f, 0x5, 0x1, 0xa9, 0x6, 0x5, 0x0, 0x8, 0x0, 0x800, 0x9, 0xc, 0x400, 0x8, 0xa00e, 0x7, 0x4, 0x9, 0x804, 0x4, 0x101, 0x0, 0x6, 0x2, 0x9, 0x8f92, 0x2, 0x5, 0x2, 0x4, 0x7, 0x8, 0x0, 0x6, 0x7, 0x8, 0x8, 0x0, 0x7ff, 0x6, 0x80000001, 0x7ff, 0xc0000, 0x50000000, 0x7, 0xf68, 0x80, 0xa4a, 0x2, 0x80, 0x9, 0x46, 0x401, 0x10, 0xfffffc8d, 0x101, 0x6, 0x5, 0x0, 0x2, 0x5, 0x3, 0x2, 0x17, 0x6, 0x4, 0x55, 0x5b, 0x4, 0x40, 0x0, 0x1, 0x3f, 0x4, 0x1, 0x17, 0xd, 0x3800, 0x7, 0x2fd6, 0x0, 0xffffff01, 0xca0, 0x3, 0xffffffff, 0x3, 0x1, 0x3, 0x93dfb65, 0xffff, 0x6, 0xfb, 0xff, 0x7, 0x7, 0x0, 0x7, 0x9, 0x6, 0x1010, 0x6, 0x8, 0x9, 0x9, 0x4, 0x6, 0xfffffff8, 0x5, 0x0, 0x7, 0xd6, 0xb4, 0x8, 0xf, 0x0, 0x3909, 0xcbb2, 0x3ff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xc, 0xe, 0x200, 0x5, 0x8, 0x101, 0x0, 0x4, 0xfce, 0x4, 0x1, 0x1, 0x7d, 0x9, 0x24000000, 0x0, 0x5, 0x4, 0x2, 0x7, 0x5, 0x9, 0x100, 0x8, 0x80, 0x71e2, 0x1, 0x96, 0x4, 0x1, 0x80000001, 0xcb, 0x3, 0x3ff, 0xffff, 0x9, 0x2, 0xf2a, 0x6, 0x8, 0x83, 0x5, 0x6, 0xc808, 0x6, 0x0, 0x0, 0x2, 0x3, 0x7b, 0x1, 0x80000000, 0x6, 0x1, 0x5, 0x4, 0xc3e, 0x1, 0x0, 0x5, 0x2, 0x7, 0x4, 0xfffff8c1, 0x2, 0x1, 0xff, 0x4, 0x10, 0x1ff, 0x1000, 0x0, 0x8, 0x5, 0xc0000000, 0x8, 0x4, 0x2, 0x4, 0xfffffff7, 0x0, 0x80, 0x400, 0x128832a, 0x9, 0x4, 0x1, 0x101, 0x7ff, 0x100, 0x6, 0xb58, 0xfffffffa, 0x1, 0x9, 0x1, 0x8, 0x0, 0x7, 0x10000, 0x3, 0x8, 0xfffffffa, 0x80000000, 0x3, 0xc, 0x8, 0xc0a0, 0x5, 0x4, 0x8, 0x4, 0x8, 0x4, 0x1db, 0x0, 0x7b2b, 0xfffffffe, 0x7, 0x1, 0xa, 0xcef2, 0x3, 0x9ae5, 0x0, 0x2161af8f, 0x5c52, 0x9, 0x4, 0x2, 0x5, 0xfffffff9, 0x8, 0x800, 0x5, 0x9, 0xd, 0xffff, 0x4, 0x2, 0x400, 0x5, 0x4, 0x40, 0x3, 0x8000, 0x10, 0x7f, 0x0, 0x100, 0x800, 0x0, 0x3, 0x0, 0x5, 0x1, 0xba9f, 0xc3, 0xcd6c, 0x8, 0x7, 0x36b, 0xfffff52f, 0x0, 0x6, 0x4, 0x1, 0x7fffffff, 0x1, 0x2, 0x2, 0x43a7b574, 0xfffffffa, 0x101, 0xe, 0x3, 0x5, 0x4, 0xffff0001, 0x0, 0x9, 0x2, 0x9, 0x100, 0x6, 0x6, 0x9, 0x100, 0x2, 0x1, 0xf, 0x4c28f409, 0x4, 0x10000, 0x7ff, 0x2, 0xfffffff8, 0xffffffc8, 0x1, 0x9, 0x1, 0xe, 0x5b7d6b02, 0x5, 0x9, 0x4, 0x80000000, 0x8, 0x4, 0x3dfd, 0x155, 0x7, 0x8, 0x4, 0x3, 0x7ff, 0x0, 0x4, 0x6, 0xffff, 0x0, 0x7, 0xf, 0x7, 0x7, 0x7, 0xaa1, 0x198, 0x80000001, 0x7, 0x8, 0x6, 0x80000001, 0x6a, 0x4, 0x9, 0x172, 0x8, 0x5, 0x7, 0x4f2f, 0x8, 0x9, 0xfffffffd, 0x6, 0x3, 0x7c14, 0x401, 0x4, 0x2, 0xa4, 0xc347, 0x5, 0xff, 0xc]}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0xd, 0xfff1}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0x6}}]}}]}, 0xca4}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r3, 0x400455c8, 0x2) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0xfc) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r5, 0x25, 0x2, @void}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 2m22.76535516s ago: executing program 5 (id=1158): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000003297c06010200000000000000000700000405000100070000000900020073797a3200000000"], 0x28}, 0x1, 0x0, 0x0, 0x4885}, 0x20000000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4$alg(r2, 0x0, 0x0, 0x80800) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x603f) io_setup(0xff, &(0x7f0000000380)=0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0xd3) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x7b8278d11ab1b4e) mkdir(&(0x7f00000001c0)='./bus\x00', 0x40) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f00000004c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r7 = open(&(0x7f0000000040)='./file0\x00', 0x200542, 0x42) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) mknodat$loop(r7, &(0x7f00000002c0)='./file0\x00', 0x1, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000700)='./file0\x00') sendmsg$alg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24048081}, 0x4000000) io_submit(r6, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r3, &(0x7f0000000340), 0x2d}]) fchdir(r0) r8 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, &(0x7f0000000040), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000000)={&(0x7f0000002000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x1}, 0x1) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000280)=0x272) 2m22.625725019s ago: executing program 5 (id=1161): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe4d8baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21564190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ef877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c946c3e05a458744077430c5ee031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x90, 0x0, 0x0, {0xf7ffffffffffffff, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3ebd, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x0, r2, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x14c0348, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r3, 0x80480911, 0x7) close(0x3) 2m22.621698949s ago: executing program 5 (id=1162): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000002000010027bd7000000000000a002040000000070000000014000200fe88000000000000000000000000010108000d"], 0x40}, 0x1, 0x0, 0x0, 0x24048844}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100"], 0x50) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x195) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100009040000000000000246b061f37ebd2dfd3a9b0280452e54000000000000d980c46e6b8022263a665c3f", @ANYRES32=r5, @ANYRES64=r6], 0x44}, 0x1, 0x0, 0x0, 0x4801}, 0x80) 2m22.06391148s ago: executing program 5 (id=1165): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x6, @empty}], 0x1c) (async) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) (async) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0x1, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000950000000000000018400008ffffffff000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x4}, 0x90) (async) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x40, &(0x7f0000000500)={[{@mode}], [{@fowner_eq}]}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 2m21.00621912s ago: executing program 5 (id=1176): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x5a}, 0x20) r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000280)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x98f909, 0x3, '\x00', @p_u16=&(0x7f0000000040)=0xb}}) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000aff0000", @ANYRES32=r3, @ANYBLOB="140002"], 0x2c}}, 0x0) 2m20.876394248s ago: executing program 36 (id=1176): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x5a}, 0x20) r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000280)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x98f909, 0x3, '\x00', @p_u16=&(0x7f0000000040)=0xb}}) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000aff0000", @ANYRES32=r3, @ANYBLOB="140002"], 0x2c}}, 0x0) 1m11.235111701s ago: executing program 7 (id=1551): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) setsockopt$packet_buf(r1, 0x107, 0x1e, &(0x7f0000000080)="2ca96499d8f268bbcf04e3a8815fc7fa944eb02aab3fbf1a27c5d990f21f327d9c1bb75a691a81c557516852c213b73ea04aebdbaaa354012a", 0x39) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtaction={0x60, 0x30, 0x3, 0x0, 0x2000000, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x4, 0xffffffffffffffff, 0x12, 0xe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000460000001800128008000100677470000c000280080001"], 0x38}, 0x1, 0xba01}, 0x0) 1m11.145153856s ago: executing program 7 (id=1552): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], 0x44}}, 0x884) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x4000074, 0x24008094) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000190a01020000000000000000000000000900010073797a30"], 0x20}}, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) 1m11.143158601s ago: executing program 7 (id=1553): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000200)={0x100, r2}, 0x0) close(r1) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) close(0x3) 1m11.055250548s ago: executing program 7 (id=1554): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd}', @ANYRESHEX]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = fanotify_init(0x20, 0x0) fanotify_mark(r2, 0x1, 0x2, r1, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0xfffffe4d, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x10000) syz_io_uring_setup(0x117b, &(0x7f00000000c0)={0x0, 0x29d8, 0x2, 0x3, 0x60}, &(0x7f0000000280), &(0x7f00000006c0)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x408000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r7, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x5}) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x8040ae9f, &(0x7f0000000440)=@arm64) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000011ac0)={'wlan0\x00'}) 1m10.9523195s ago: executing program 7 (id=1555): ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0xa00000, 0x7, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990a73, 0xb85, '\x00', @ptr=0x8}}) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 32) listen(r1, 0xfffffffc) (async, rerun: 32) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933205}, 0x10) (async) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9203803afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af180200010000000500000000260004001818fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c027a479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba488a248b9197c0b82c16a3a372399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000180b17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b50000000000000003000000000000000000000200000000000000000000000000008879e66485201a0015ca8374000000000000000000000000000000000000145e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c0305d5170000dce9774a36da018dff16e70b8b14c4b7a94fe18e88605a"], 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x5d031, 0xffffffffffffffff, 0x0) (async, rerun: 64) r7 = userfaultfd(0x80001) (rerun: 64) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) (async, rerun: 32) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r5, 0x8002f515, &(0x7f0000000080)) (rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) (async) r10 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r10, 0x110, 0x3) (async) socket$xdp(0x2c, 0x3, 0x0) (async) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x4) syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000bff000/0x400000)=nil) (async) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) (async) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) 1m10.811945603s ago: executing program 7 (id=1556): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000004c0)='binder\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f0000000080)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x19) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="8f0978d21b640fc79ca50000c0fe470f06430f01c2440f20c0ac0a0000e39d9d0f22c066460f38809bf77f00000f214a0fc73d0d0000003e653666400fc7775f400f01c4", 0x44}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m10.765488206s ago: executing program 37 (id=1556): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000004c0)='binder\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f0000000080)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x19) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="8f0978d21b640fc79ca50000c0fe470f06430f01c2440f20c0ac0a0000e39d9d0f22c066460f38809bf77f00000f214a0fc73d0d0000003e653666400fc7775f400f01c4", 0x44}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 59.675126568s ago: executing program 6 (id=1709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x60}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, 0x2, 0x9, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_TUPLE={0x5c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x48084}, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x81}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xec, r3, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_DATA={0x8f, 0x1f, "ea83fba0b7415a2eb2ec797a3d4bcd612d823dac0351897c2439372da23bbd7599345a297d98ba9ef7e3ed27fdbfda0e8416288a111dddaa13007e7965914b768dce2765d714c8f89181a85215ac54050506b585f2e68551474880148847e9493ba58fe10eb2cea943e735fe8cb656d0296d85e3929c033a043dac91847b626272dd285fb9991cbc88e6c5"}, @NFC_ATTR_VENDOR_DATA={0x4}, @NFC_ATTR_VENDOR_DATA={0x41, 0x1f, "05d0513b6ddfc061cbc36a5cf66dda8b7711e4f3fc9b888ea19e8d7f512892efc52ea53cdacb6c454d6fe7e8ff8d1638e8224943de12a9b92ea7ca1cf8"}]}, 0xec}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r4, 0x208, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40088c1}, 0x1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f0000000640)=@hopopts={0x73, 0x7, '\x00', [@ra={0x5, 0x2, 0x5}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x4}, @ra={0x5, 0x2, 0x8}, @hao={0xc9, 0x10, @private2}, @enc_lim={0x4, 0x1, 0x50}, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r8, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x24}}, 0x41) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x80, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "cb4c8b0d09c8ea60e7f53d0ae9d43e8d406ec12a6b6a55106d19c274e14ad8ef"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xf2}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e4bc5eed354e225b044dcf8b75950fed"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "2d4fd09160d1e74eb6e6f7ebf964176f"}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x40040) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, r9, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x884}, 0x1011) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000ac0), r1) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)={0xe4, r10, 0xd01558014ff9790c, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0xc8, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe592}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa017}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a4140a4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc0ec}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xeeaba4d}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48d48315}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe168}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7c69}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x633ef324}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15da66f2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xadfe}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x934}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62ceff69}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x294cf26b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38db6bf8}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19c1e51d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc559}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c7366f5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24a367d1}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ce78b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x170}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x405c}]}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x48081}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x50, r9, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000844}, 0x8000) socketpair(0xa, 0x80000, 0x7, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x20, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008801}, 0x40000) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f80), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x74, r13, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x50, r4, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000041) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r12) sendmsg$NL80211_CMD_NEW_KEY(r12, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x3c, r14, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e108225a8b"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8080) 59.535161173s ago: executing program 6 (id=1711): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xc, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x8000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000180), &(0x7f0000000100)=r4}, 0x20) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r7, 0x2000) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f00000000c0)={0x2, r2, 0x80000}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1159b, 0x200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x200}]}}}]}, 0x44}}, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc004000202080003000300000307002100eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 57.709215376s ago: executing program 6 (id=1715): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 57.701412487s ago: executing program 6 (id=1717): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42031, 0xffffffffffffffff, 0x0) mbind(&(0x7f000088b000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x1) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000140)={0x0, "5622d02e54e0090aa90108e267cd87ab932cf729f85c7bd8fa1cea70f891568c", 0x0, 0x1}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x2, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @private=0xa010102}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}, 0x1, 0x7}, 0x0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000003c0)={0x87, @local, 0x4e23, 0x1, 'lc\x00', 0x10, 0x6, 0x1c}, 0x2c) syz_open_dev$sg(&(0x7f0000000380), 0x2, 0x8042) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000280)={0x4, @win={{0x3, 0x2, 0x3, 0x9}, 0x3, 0x2, &(0x7f0000000180)={{0x8b, 0x6, 0x1, 0x6}, &(0x7f00000000c0)={{0x7ff, 0x6, 0x1, 0x2790}, &(0x7f0000000080)={{0xffff0ee4, 0x6, 0xa, 0x6}}}}, 0x3330, &(0x7f00000001c0)="1c3180180e2c054d8823f82579cddd5e41fe90353111759d7fe49ad0251d84c96e6600169926f5600cb39f3236b57d5709fc93a82255ecae59729cb7f23f9b13642a3fd89b3c4f3ca1b541823567820032ab2c3370f3925740c179e5500c680f9fa002d8f6374d9383a782aad2cf0013bf1164f64dc69cebbd34e2b3a2b84770b0fbc6e0a630a80a", 0x3}}) getsockopt$MRT(r0, 0x0, 0xcf, 0x0, &(0x7f0000000100)) 57.504897682s ago: executing program 6 (id=1721): mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r4, 0x4188aec6, &(0x7f0000003900)={0x1, [{0x1, 0x20, 0x0, &(0x7f0000000040)="4a1e5893"}, {0x3, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x2, 0x0, 0x5b2, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x5, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x100, 0x0}, {0x2, 0x0, 0x80000000, 0x0}, {0x1, 0x0, 0xa9c, 0x0}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000128000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000600)="c744240089000000c744240204000000ff1c24c744240004000000c744240297000000c7442406000000000f011c24c744240000000000c744240200800000c7442406000000000f011c24450f30b9940a0000b819000000ba000000000f30660fe48cb07b00000066f30faeb32600000066b858008ee8410fc7754b66ba210066b8008066ef", 0x86}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_emit_ethernet(0x6f, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450800610000400000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="841000009092a5d8920a000000005000000000007e485ad1ec0ac1637cf429da384b82ad75a6c2eccc668d89b1b8a74c56a6d64611780a2fef180431d15ec3cad41c"], 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000180)=0x1) ioctl$TCSETS(0xffffffffffffffff, 0x8926, &(0x7f0000000100)={0x6, 0x0, 0x0, 0x801, 0x0, "94ee000000594000000000aa0a00"}) 57.224995958s ago: executing program 6 (id=1724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd00fbffffff000008000340000100000500010001"], 0x24}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x4080) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="8981f23689eb65be16f4264404ead3486d8a823382092e64c0800d8de6d01309d6a7e6c1c52167", 0x27) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x1) (async) preadv(r3, &(0x7f00000000c0)=[{&(0x7f00000010c0)=""/4097, 0x1001}], 0x1, 0x0, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000240)=0x2) (async) r4 = socket(0x1, 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x0, 0x4148010, r3, 0x0) getsockopt$inet6_tcp_buf(r5, 0x6, 0x1f, 0x0, 0x0) (async) setsockopt$sock_int(r5, 0x1, 0x1, &(0x7f0000000300)=0x101, 0x4) (async) bind$unix(r4, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000100", @ANYRES32, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r6, &(0x7f0000000080)=""/237, 0xed, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="0000d63f9a8eecdeb60ddb0700000000", 0x10) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000001040108000000000000000500010001000000d3f46c2c5f540dfd220cbff5080637c97f7ce406b698a1c2ce528df41fbeefaf9eb5ba8731940e0d791c03cf1ea98a6df1689900b3deb3508ee8ab6636d26e62738c6f1142945b11b5d8b64eddea"], 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x20000090) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8=r0], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100}, 0x94) 42.126351606s ago: executing program 38 (id=1724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd00fbffffff000008000340000100000500010001"], 0x24}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x4080) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="8981f23689eb65be16f4264404ead3486d8a823382092e64c0800d8de6d01309d6a7e6c1c52167", 0x27) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x1) (async) preadv(r3, &(0x7f00000000c0)=[{&(0x7f00000010c0)=""/4097, 0x1001}], 0x1, 0x0, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000240)=0x2) (async) r4 = socket(0x1, 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x0, 0x4148010, r3, 0x0) getsockopt$inet6_tcp_buf(r5, 0x6, 0x1f, 0x0, 0x0) (async) setsockopt$sock_int(r5, 0x1, 0x1, &(0x7f0000000300)=0x101, 0x4) (async) bind$unix(r4, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000100", @ANYRES32, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r6, &(0x7f0000000080)=""/237, 0xed, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="0000d63f9a8eecdeb60ddb0700000000", 0x10) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000001040108000000000000000500010001000000d3f46c2c5f540dfd220cbff5080637c97f7ce406b698a1c2ce528df41fbeefaf9eb5ba8731940e0d791c03cf1ea98a6df1689900b3deb3508ee8ab6636d26e62738c6f1142945b11b5d8b64eddea"], 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x20000090) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8=r0], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100}, 0x94) 3.087602929s ago: executing program 1 (id=2414): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) read$char_usb(r1, &(0x7f00000000c0)=""/114, 0x72) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYRES64=r0], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="05"], 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x4, 0x0, 0x0, 0x7fff7ff8}, {0x2, 0x3, 0x4}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000680), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x14, 0x13, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0) 2.828083514s ago: executing program 1 (id=2418): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000010140)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r1}, 0x10) (async) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r3, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000007c0)={0x0, ""/256, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000240)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000600)={"7340ecd8e71bef670b40c74f58044b4b", r6, r7, {0x8, 0x88}, {0x4983, 0x2}, 0xfff, [0xe4, 0x0, 0x4, 0xf, 0x6, 0x3, 0x1, 0xffffffffffff5968, 0x9, 0x5, 0x1, 0x5, 0x7400000000000000, 0x6, 0x2, 0xffffffffffffffff]}) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001000000018000180140002006e657464657673696d3000000000000005000b00000000000800110009000066"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.585402826s ago: executing program 1 (id=2419): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80000, 0x87) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000700)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x0, 0x73, 0x0, @dev, @local}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)={0x20, 0x17, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x884) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x81}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.43374091s ago: executing program 1 (id=2424): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), &(0x7f00000001c0)={'L-', 0xfff}, 0x16, 0x1) mount$9p_virtio(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x4, &(0x7f0000000200)={'trans=virtio,', {[{@cache_loose}]}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x3, 0x0, 0x0, 0x0, 0x0, 0x100, {0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0xc, {0x5, 0xfffffffffffffffc, 0x1, 0x81, 0x0, 0x0, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x2000000000000000, 0x3, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000000, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) chdir(&(0x7f0000000280)='./file0\x00') 2.363379601s ago: executing program 9 (id=2425): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r1 = syz_pidfd_open(r0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="b49bbcc1612574cbc61de05fd7b70fb1372870c5e1da35d8b32b88d0a1a09690d64e7c760d0ae79f379140df55c6594717d7b0edb50b590321c0b7cf76b37e20bab5748b3d77da84bf71e373b42ec8003b14ea937ff92666a14e", 0x5a, 0x10, &(0x7f00000000c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000c, 0x50, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_setup(0xcae, &(0x7f0000000100)={0x0, 0x4dc2, 0x4, 0x0, 0x31c}, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x7, 0x0, 0x0, 0x1, &(0x7f0000000200)={0x0, 0x989680}, 0x1, 0x20, 0x1}) set_mempolicy_home_node(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x2f, 0x5, 0x3, 0x7, 0x8, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x106, 0x1, 0x191b, 0x9}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, r5, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffd}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040096}, 0x24008880) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f00000004c0)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000500)={0x3, 0x3}) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000540), 0xc0000, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000580)={0x2c, r7, 0xe, {0x9, 0x9}, 0xdf}, 0x1) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000005c0)={0x0, "07bce4c5c49c8e0e121402e733426b6f"}) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f00000015c0)={{r3}, {@val={r8}, @actul_num={@void, 0x1, 0x50}}}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000002700)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001600)=""/4096, 0x1000, 0x328bfbec99b8d9ab, &(0x7f0000002600)=""/206, 0xce}, &(0x7f0000002740)=0x40) ioctl$TIOCOUTQ(r7, 0x5411, &(0x7f0000002780)) r9 = syz_open_dev$sg(&(0x7f00000027c0), 0x2, 0x111100) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000002800)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000002a80)={{r9}, r10, 0x4, @inherit={0x58, &(0x7f0000002a00)={0x0, 0x2, 0x7, 0x537, {0x8, 0x9, 0x8000000000000001, 0x7, 0x9}, [0x8, 0x7]}}, @devid=r8}) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000003a80)=0x200) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x10010, r9, 0xc34be000) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x2bdc) ioctl$BTRFS_IOC_SPACE_INFO(r7, 0xc0109414, &(0x7f0000003ac0)={0x7c9, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r11 = openat$vimc0(0xffffffffffffff9c, &(0x7f000000f5c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f000000f600)={{0x1, 0x1, 0x18, r11, {0x7ff}}, './file0\x00'}) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x12) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r7, &(0x7f000000f700)={&(0x7f000000f640), 0xc, &(0x7f000000f6c0)={&(0x7f000000f680)={0x3c, r5, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000054}, 0x4040804) ioctl$VT_DISALLOCATE(r12, 0x5608) 2.299330547s ago: executing program 9 (id=2428): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz0\x00', 0x1ff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000140)=@raw=[@ringbuf_query, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], &(0x7f0000000180)='syzkaller\x00', 0x4cc0, 0x9e, &(0x7f00000001c0)=""/158, 0x41000, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x2000002, 0x1, 0xbee}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000340)=[{0x4, 0x5, 0x4}, {0x0, 0x1, 0x4, 0x8}, {0x3, 0x4, 0x1, 0xb}, {0x5, 0x2, 0x2, 0x8}, {0x4, 0x4, 0xa, 0xa}, {0x2, 0x5, 0xc, 0x3}, {0x3, 0x3, 0x10, 0x9}, {0x1, 0x2, 0x10, 0x5}], 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1}, &(0x7f00000000c0), &(0x7f0000000480)=r0}, 0x20) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4603248095027a00000000000003003e0001010000940200000000000040000000000000004d02000000000000f6ffffff00003800010001007f000700030000000400000001000000ffffffff0a000000000000000101000000000000060000000000000007000000000000007fffffffffffffff"], 0x78) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, 0x1a, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) r6 = socket$inet(0x2, 0x3, 0x2) getsockopt$inet_int(r6, 0x0, 0xf, 0x0, &(0x7f0000000240)) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010300000000000000190d9823000c0099000200000029000000"], 0x20}}, 0x40) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000580)='\b5', 0x2}, {&(0x7f00000005c0)="edceccd2be82af08059e23afd3b7ef320caaae8ac44e57ecf70c5a7e6a5ce89e2f54268d7b7843eab3f75d4ca4e2f8b8074afc6a86ce1729f0e1e90b2c404bb35aa49a427f2b663402105304bd556444686d97ae9a1424e46cbc4528e601c225724d49e0d23490af36a1c09867045a32f003c62c0049c98540e9ee438fc4e6eaf0b92f34d1f0be0fb0a9414097710f80b39c990070b4a771388df9a8a1431e577cb91b505046e7cf70637c5c5a06b7b310afdfd93ad6c3b5a34b2db997bf403ef707140886305c588b15c4d128291cfdce42bed0c4b67af7d5a7a4ce10ad5f209dbe2f9c781f59b80ad4", 0xea}], 0x2) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x10) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x1000) 2.29752799s ago: executing program 9 (id=2429): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r3, &(0x7f0000001b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x205c) (async) ptrace$setopts(0x4206, 0xffffffffffffffff, 0x891, 0x100004) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async, rerun: 32) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) (async, rerun: 32) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r9 = socket$unix(0x1, 0x1, 0x0) r10 = gettid() rt_sigqueueinfo(r10, 0x36, &(0x7f00000007c0)={0x20, 0x2, 0x8}) (async, rerun: 64) tgkill(r10, r5, 0x2a) (async, rerun: 64) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000380)=0x141) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1003}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=@expire={0x3b8, 0x18, 0x200, 0x70bd2b, 0x25dfdbfe, {{{@in=@multicast1, @in6=@private1, 0x4e21, 0x80, 0x4e24, 0x7, 0xa, 0x0, 0x80, 0x21, r8, r4}, {@in=@private=0xa010100, 0x4d5, 0x33}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x49, 0x86a, 0x3, 0x6, 0x7f, 0x9, 0xbcc2, 0x6}, {0x7, 0x8, 0x8, 0xfffffffffffffff2}, {0xfffffff9, 0x3, 0x8}, 0x70bd2c, 0x3503, 0x2, 0x1, 0x81}, 0xd5}, [@srcaddr={0x14, 0xd, @in=@private=0xa010101}, @policy={0xac, 0x7, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@broadcast, 0x4e24, 0x9, 0x4e24, 0x7, 0x2, 0x0, 0x80, 0xa6, r12, r13}, {0x5, 0xae9b, 0x4, 0x1, 0x10000, 0x5, 0x60, 0x8}, {0x9, 0x80, 0xfffffffffffffc5b, 0x9}, 0x7, 0x0, 0x2, 0x0, 0x0, 0x1}}, @srcaddr={0x14, 0xd, @in=@empty}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e24, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}, @tmpl={0x184, 0x5, [{{@in=@local, 0x4d2, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x1, 0x3, 0xfd, 0x3, 0x856, 0x5}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d2, 0x32}, 0x2, @in=@rand_addr=0x64010100, 0x3502, 0x0, 0x3, 0x2, 0xffff, 0x5, 0x5}, {{@in=@loopback, 0x4d2, 0x33}, 0xa, @in=@rand_addr=0x64010101, 0x3506, 0x0, 0x1, 0x5, 0xfffffffa, 0x6, 0x810e}, {{@in6=@mcast1, 0x4d2, 0x33}, 0xa, @in=@broadcast, 0x34ff, 0x0, 0x3, 0xf7, 0xd, 0xfffffbff, 0x6}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x17}, 0x3503, 0x4, 0x1, 0xff, 0x80000001, 0x3, 0x7}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d5, 0x6c}, 0x2, @in6=@mcast2, 0x3503, 0x1, 0x0, 0x76, 0x4, 0x5, 0x2}]}, @algo_aead={0x4c, 0x12, {{'gcm-aes-ce\x00'}, 0x0, 0xa0}}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x4014084}, 0x4009) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r14 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r14, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r14, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x8100, r15}, 0x14) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) 2.203333221s ago: executing program 9 (id=2430): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="c5aad96e85e31aee08000600"], 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000040), 0x4) r2 = syz_open_dev$cec(&(0x7f0000000180), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000040)={0xf0, 0x40000}) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) mount$afs(&(0x7f0000000140)=@cell={0x25, '', 'syz1', '.backup'}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x41, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}, {@verity_require}], [], 0x2f}) close(r2) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="07fdffff22ea11836b99b4e1000000000500000a40000000060a010400000000000000000a00fffe0900010073797a310000000014000480100001800b00010074617267657400020900020073a74d3c83cebbcec7a1a1c0be797a32000000001436000011000100"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) close(r0) 2.085754183s ago: executing program 9 (id=2432): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb460}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r3, 0x25, 0x0, @void}, 0x10) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) r6 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I?^\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW', 0x6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x14, r8, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) fcntl$addseals(r6, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x800}) syz_emit_ethernet(0x36, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000440)={'vlan0\x00', &(0x7f0000000340)=@ethtool_dump={0x40, 0xd, 0x6, 0x7e, "cdfbaf4667607bcc9c83feccdf7baae7d1209e9140b0d9687f1b2ce2396e313e3d0c4c8c0d6ebf4f5a4d6174614c219c778c2ea6c308d768d0492fa18e41cf9d3b37b885d3add907145dcb2a345efc0d0abdfb44b3f5f1831c6aa5b901a0c53efd76d2335ea984325181be79bd374fa36ef012a5a3e8eded3a9ca304af5f"}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x20000000}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) 1.998470954s ago: executing program 9 (id=2433): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40, 0x1c8) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x3d, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0xff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x28) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x40, 0x0, 0xf, "012720dcfe14c639a500ba17162716"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x3, 0x1, 0x2}}) syz_usb_control_io$uac1(r2, &(0x7f0000000400)={0x14, &(0x7f0000000280)={0x0, 0x4, 0xbf, {0xbf, 0xf, "8bcdcbe978bfb5004a861b21588e2f0fd5bd1f4215db2cbd150e14b2be19e16bee75d9c4cbc65a8260278cb4eb18bdeeb2aabb0bcf97e2bb35a9a6b2ac0542c91bcb81bfa086361db29d0b8acf87b4a34d07bf29cdb67da2a3d4d227c32fcca800d492ac6be6c6936bdac8667557778824c7d8b34d4e8c3e11dc2eac13d7570e8bd6f4191e9ad9c1cb2d7e3f659ed9793fb3bf38cd50fc6a519fd5e6e88675c80df204403f8a965bf725ea093c2d863b3b888253ad9c99d53c003c0f98"}}, &(0x7f0000000380)={0x0, 0x3, 0x75, @string={0x75, 0x3, "63b62a9c100d3d286e8f8ec1d2f23439190b018d284bdba35d8b394c4cb5de7ff56991f2980ce5bdebef5b1d1cc868294b199a89e913aa77a5d293a13fcc27f3d6b28201a974b0b7ab24d38d6032101f9c980abebaadfa8b01752b4df83695d5b566acf09560be1ec328339414d48274637c35"}}}, &(0x7f0000000680)={0x44, &(0x7f0000000440)={0x0, 0x15, 0x52, "a03d9e6d3104e5d83958959815224b91d491b2229c27e87b8ff1b73ad6424ecc2012e619b1a52bb5445857e1784cc7420ced619419dbf90873bfe9e61e1ef2faf9c3483957e27917ac83b605f2f5bae554c9"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000540)={0x20, 0x81, 0x2, "1daf"}, &(0x7f0000000580)={0x20, 0x82, 0x2, "04b2"}, &(0x7f00000005c0)={0x20, 0x83, 0x3, "35c5ca"}, &(0x7f0000000600)={0x20, 0x84, 0x1, '='}, &(0x7f0000000640)={0x20, 0x85, 0x3, "8ac52e"}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r3 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000240)=0xe9, 0x4) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mount$nfs(&(0x7f0000000000)='@\a', &(0x7f0000000180)='./file1\x00', 0x0, 0x1000028, 0x0) 1.471928127s ago: executing program 1 (id=2441): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000000000008804000000060000ffff"]) (rerun: 64) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/time\x00') (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000300)={0x0, 0xeaff, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10000) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)=@allocspi={0x45, 0x16, 0x401, 0x0, 0x0, {{{@in=@local, @in6=@mcast1, 0x0, 0xfd1, 0x4, 0x2, 0x2, 0x0, 0x0, 0xc}, {@in6=@private2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x80000001}, {0x101, 0x0, 0x0, 0x800}, {0x4, 0x6, 0x400}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x94}, 0x0, 0x4ad}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0xb2}}]}, 0x104}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r5, 0xae80, 0x0) (rerun: 32) 1.089556112s ago: executing program 1 (id=2447): prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x23) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10000000000204, 0x2) mmap(&(0x7f00003e6000/0x4000)=nil, 0x4000, 0x1000004, 0x11, r0, 0x67819000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002180)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4020040}, 0x80) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000000)=""/188, 0xbc) syz_usb_disconnect(0xffffffffffffffff) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011003020000402505a1a440000102030109023b0001017ff7105685000c0202060004052406000005240008000d240f0107000000ffff050008090582020802000103090503022000060406"], 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 811.9616ms ago: executing program 8 (id=2451): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000740)={0x53, 0x0, 0xa, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="a1f872478e76a81b13ce", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000040)) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000700)='/dev/comedi0\x00', 0x800, 0x0) (async) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000700)='/dev/comedi0\x00', 0x800, 0x0) poll(&(0x7f0000000780)=[{r3, 0x1400}], 0x1, 0x0) (async) poll(&(0x7f0000000780)=[{r3, 0x1400}], 0x1, 0x0) read$FUSE(r2, &(0x7f0000004180)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f0000004180)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) 657.717421ms ago: executing program 4 (id=2452): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f00000005c0)={0x9, {"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", 0x1000}}, 0x1006) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f015, 0x19}) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000680)=0x9) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x7f) (async) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r3, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f0000000100)={0x20, 0xe, 0x1e, {0x1e, 0x7, "3e67966fe9a1c7dc515fa85546ac4b33954bf7e80db30b796e8ac84e"}}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xd7, 0x1, {0x22, 0xc6d}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x40, 0xe, 0x1c, "448f007c9cdb5e640e75ea56ce285ab2ed039873a7dabddc0c3d93f1"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, 0x0, &(0x7f0000000340)={0x20, 0x1, 0xa6, "87e19a8b28b40717b5f72f3697b7e32a7b7362e36fdad8d1adb22f0fdc9ec8151273151232f3728edfe76bd967b1abaff047ae470aa8de1f9f087561ef1b7d0c86d988ac8d29f27a8f0ad799733123ca748326a3f284b96c4a448372da11a0b82f07cf5d50f645afb82ba43ab9821c135d2463addc5805126caeed91ca5402546abc1f7ea211acf5ec0e5543ef5df1584354be20a0432ecc23a8a15abb0fe1790bb8b068324c"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x80}}) r4 = open(0x0, 0x2000, 0x0) write$UHID_INPUT(r4, &(0x7f0000001600)={0x8, {"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", 0x1000}}, 0x1006) (async) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_cmd={0x4e, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) (async) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r8) (async) r9 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r10) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) r11 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r11, &(0x7f0000000040)={0xa, 0x6, 0x0, @mcast2, 0x4}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r11, 0x29, 0x32, &(0x7f0000000080)={@loopback, r12}, 0x14) (async) fspick(0xffffffffffffff9c, 0x0, 0xf) 657.257667ms ago: executing program 8 (id=2453): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000200000000000000"], 0x14}}, 0x0) 524.152796ms ago: executing program 4 (id=2454): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f00000020c0)=0x496, 0x4) (async) r2 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async, rerun: 32) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) (rerun: 32) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) (async, rerun: 64) pipe(&(0x7f0000000140)={0xffffffffffffffff}) (async, rerun: 64) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r6, 0x80085610, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x80, 0x100}}) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') pread64(r7, &(0x7f0000000040)=""/4096, 0x1000, 0x7ffffffffffff8) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) (async) write$tun(r5, &(0x7f00000000c0)={@void, @void, @mpls={[{0x6, 0x0, 0x1}, {0x1}, {0xb, 0x0, 0x1}, {0xffffc}, {0x3250, 0x0, 0x1}, {0xe}], @generic="e2780dee912ed588ba6c3a"}}, 0x23) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="40002c9000000304000000000000b222246512d1", @ANYRES32=0x0, @ANYBLOB="00000000420000002000128008000100677470001400028008000200", @ANYRES32=r2], 0x40}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) 428.371816ms ago: executing program 4 (id=2455): r0 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r2 = syz_open_dev$swradio(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000540)={0x4, 0x100003, 0x2, {0xb, @vbi={0x50c, 0x1, 0x370, 0x32525942, [0xb4ac, 0x5], [0x5abc, 0x4000003], 0x2}}, 0x9}) read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r6, 0x540a, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0x9, &(0x7f00000010c0)=0x1, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0xff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5dffffff", @ANYRES16=r3, @ANYBLOB="010028bd7040f9dbdf25080000000c003d0e280188158ff2e74d4f05018008000100", @ANYRES32=r5, @ANYBLOB="3c000280340003802800018008000200232b2600040003000c000200657468746f6f6c00040003000500020000000000040001800400018004000400"], 0x5c}}, 0x8080) 321.597608ms ago: executing program 8 (id=2456): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x30, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0x3, 0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000740)=[{&(0x7f0000000440)=""/113, 0x71}], 0x1, 0x401, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f00000000c0)={0x8, r0, 0x20, {0x6, 0xffff}, 0x6}, 0x1) 257.2163ms ago: executing program 4 (id=2457): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000007000000030000000100000f042000000f00000000000000000000000000000400000000005f00612e30"], &(0x7f0000001fc0)=""/4124, 0x3f, 0x101c, 0x1}, 0x28) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r3, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r7, 0x1, 0x80, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="af", 0x0, 0x3}, 0x50) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) 256.63549ms ago: executing program 8 (id=2458): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x2, 0x9}) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x40) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_PRIORITY(r2, 0x40045644, 0x3) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000180)={&(0x7f0000000140)=[r3], 0x1}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x20010, r1, 0xe8948000) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x80010, 0xffffffffffffffff, 0x8000000) r5 = syz_io_uring_setup(0x18af, &(0x7f00000001c0)={0x0, 0xb8b2, 0x4, 0x3, 0x1a4}, &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x20, 0x0, 0x5, 0x2, &(0x7f00000002c0)="bdac52355b4e8de5fd84aff5d0", 0x5, 0x0, 0x1, {0x3}}) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000340)) io_uring_enter(r5, 0x427b, 0x8a77, 0x20, &(0x7f0000000380)={[0x6]}, 0x8) r7 = openat$incfs(0xffffffffffffffff, &(0x7f00000003c0)='.pending_reads\x00', 0x0, 0x110) ioctl$SG_SET_FORCE_PACK_ID(r7, 0x227b, &(0x7f0000000400)=0x1) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000440)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r8, 0x1, &(0x7f0000000480)) process_vm_writev(r8, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/131, 0x83}, {&(0x7f0000000580)=""/21, 0x15}, {&(0x7f00000005c0)=""/163, 0xa3}, {&(0x7f0000000680)=""/109, 0x6d}], 0x4, &(0x7f00000008c0)=[{&(0x7f0000000740)=""/190, 0xbe}, {&(0x7f0000000800)=""/183, 0xb7}], 0x2, 0x0) fcntl$setown(r1, 0x8, r8) write$P9_RMKNOD(r7, &(0x7f0000000900)={0x14, 0x13, 0x1, {0x2, 0x2, 0x2}}, 0x14) rt_sigprocmask(0x0, &(0x7f0000000940)={[0x7f4]}, &(0x7f0000000980), 0x8) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f00000009c0), 0x4) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000a00), &(0x7f0000000a40), 0x2, 0x1) r9 = accept4$unix(r7, &(0x7f0000000a80)=@abs, &(0x7f0000000b00)=0x6e, 0x80800) recvmmsg$unix(r9, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000b40)=""/168, 0xa8}, {&(0x7f0000000c00)=""/118, 0x76}, {&(0x7f0000000c80)=""/87, 0x57}], 0x3, &(0x7f0000000d40)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000d80)=""/164, 0xa4}, {&(0x7f0000000e40)=""/136, 0x88}, {&(0x7f0000000f00)=""/57, 0x39}, {&(0x7f0000000f40)=""/138, 0x8a}, {&(0x7f0000001000)=""/112, 0x70}, {&(0x7f0000001080)=""/42, 0x2a}, {&(0x7f00000010c0)=""/127, 0x7f}], 0x7, &(0x7f00000011c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001200)=""/112, 0x70}, {&(0x7f0000001280)=""/140, 0x8c}], 0x2, &(0x7f0000001380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{&(0x7f00000014c0)=@abs, 0x6e, &(0x7f00000038c0)=[{&(0x7f0000001540)}, {&(0x7f0000001580)=""/38, 0x26}, {&(0x7f00000015c0)=""/171, 0xab}, {&(0x7f0000001680)=""/134, 0x86}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/63, 0x3f}, {&(0x7f0000002780)}, {&(0x7f00000027c0)=""/231, 0xe7}, {&(0x7f00000028c0)=""/4096, 0x1000}], 0x9, &(0x7f0000003980)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000003a00)=@abs, 0x6e, &(0x7f0000003b80)=[{&(0x7f0000003a80)=""/213, 0xd5}], 0x1, &(0x7f0000003bc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000003c00)=@abs, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003c80)=""/141, 0x8d}, {&(0x7f0000003d40)=""/124, 0x7c}, {&(0x7f0000003dc0)=""/23, 0x17}], 0x3, &(0x7f0000003e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148}}, {{&(0x7f0000003fc0), 0x6e, &(0x7f0000005400)=[{&(0x7f0000004040)=""/39, 0x27}, {&(0x7f0000004080)=""/110, 0x6e}, {&(0x7f0000004100)=""/200, 0xc8}, {&(0x7f0000004200)=""/4096, 0x1000}, {&(0x7f0000005200)=""/103, 0x67}, {&(0x7f0000005280)=""/102, 0x66}, {&(0x7f0000005300)=""/221, 0xdd}], 0x7, &(0x7f0000005480)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{0xfffffffffffffffe, 0x0, &(0x7f00000067c0)=[{&(0x7f0000005500)}, {&(0x7f0000005540)=""/226, 0xe2}, {&(0x7f0000005640)=""/4096, 0x1000}, {&(0x7f0000006640)=""/31, 0x1f}, {&(0x7f0000006680)=""/92, 0x5c}, {&(0x7f0000006700)=""/146, 0x92}], 0x6, &(0x7f0000006840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}], 0x8, 0x120, &(0x7f0000006a80)={0x0, 0x3938700}) r12 = ioctl$USERFAULTFD_IOC_NEW(r11, 0xaa00) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r12, 0x8002f515, &(0x7f0000006ac0)) syz_io_uring_setup(0x1a42, &(0x7f0000006b00)={0x0, 0xd323, 0x800, 0x1, 0x24c}, &(0x7f0000006b80), &(0x7f0000006bc0)) r13 = openat(r10, &(0x7f0000006c00)='./file0\x00', 0x44080, 0x101) epoll_wait(r13, &(0x7f0000006c40)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffff7) 181.820988ms ago: executing program 8 (id=2459): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000380)=0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x20040009}, 0xff356b18e80a18e) mq_open(0x0, 0x42, 0x93, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x7fffffffffffffff) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x3f9, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x1}, [""]}, 0x18}}, 0x4000804) listen(r1, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) sync_file_range(r4, 0x0, 0x0, 0x3) r5 = accept4(r1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000080)='./file0\x00', 0x424) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r8, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x2, 0xffffffffffffffff, &(0x7f0000000140)='i', 0x1, 0xfffffffc}]) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYRES32=r5, @ANYRES32=0x0, @ANYRESDEC], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x10, 0xffffffffffffffff, 0x40000000) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) syz_clone(0x10080400, &(0x7f00000003c0)="984bc4d85074d79c3c7e8c250d7770cc6e2882a6edbc7a5e393df21f1b1095d840b7f92671f832733671d476ca5b9ccbf84cd4fb7661ddc40f777a804fcd16ac1c473caac40f3dfee402e5bc5b5ee401b34ab1d9144e13638453918109b7299b00d4afced506b393613b9517db353ea177026fc2e32ee0ae32a4942388b48de658bc493a6d73477cc4775dd7a1e340ab53acc0", 0x93, &(0x7f00000001c0), &(0x7f0000000300), &(0x7f0000000500)="da71acd0a3da286f59de62ce6839ecc1d1dc46bb17a7e27af8e2b8d10de82baa89202daf8ca5ce6c095b8c656414bbadc641b0c4746f74f8e30723003bf9fcd4b32b96007574db9540f94a733e380b5a071f6645d64609c95d7ee1bbc59f8f8c1eaf3a33ceb8bd86ab3f51e97056dbed7777a77f9e616a63c0f876d36411c126e0110fd1e9b81caa628371ee43d14a134614f8e7364c9f8d7152891c40a1962c75156c4c90d851f7ad567648b8b834b9") ioctl$UFFDIO_UNREGISTER(r9, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x10000)=nil, 0x10000}) socket$nl_route(0x10, 0x3, 0x0) 129.095641ms ago: executing program 8 (id=2460): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000a00)={0xf, {"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", 0xfffffffffffffd6a}}, 0x1006) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000b3000040"]) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={@local, 0x0, 0x0, 0x90, 0x0, [{@initdev}, {@empty}, {}, {@remote}, {@multicast1}, {@empty}, {@broadcast}, {@initdev}, {}]}}) 128.223199ms ago: executing program 4 (id=2461): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) acct(&(0x7f00000001c0)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x80000000, 0x1, 0x4, {0x0, @sliced={0x2, [0x10, 0xed, 0x5, 0x9, 0xc3, 0x6, 0xff, 0x34e0, 0x709, 0x6, 0x4, 0x4, 0x8, 0x8, 0x2, 0xfff, 0xa, 0x0, 0x1ff, 0x6, 0x2, 0x8, 0x5, 0x8, 0x100, 0x9c, 0xa5, 0x57, 0x9, 0xffff, 0x3, 0xd1, 0xc9, 0x7, 0xa, 0xfff, 0x3, 0x2030, 0x1, 0x4, 0x81, 0x7440, 0x8, 0x9, 0x5, 0x7, 0x0, 0x3], 0x6}}, 0x9}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@overlay={0xfcfa, 0x2, 0x4, 0x1, 0x4, {}, {0x0, 0xc, 0x30, 0x1, 0x3, 0x96, "857064e7"}, 0x0, 0x3, {}, 0x5a7}) 0s ago: executing program 4 (id=2462): syz_io_uring_setup(0x7b, &(0x7f0000000380)={0x0, 0x43bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) (async) r0 = syz_io_uring_setup(0x7b, &(0x7f0000000380)={0x0, 0x43bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$negate(0xd, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e079c0814"], 0xa) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e079c0814"], 0xa) sendmmsg(r3, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="d8", 0x1}], 0x1}}], 0x1, 0x20000010) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)={0x0, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) (async) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r5, r5, 0x0, 0x7) io_uring_enter(r0, 0x800046f3, 0x4, 0x40, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_GET_TSC_KHZ_cpu(r8, 0xaea3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x78}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x90) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_TIOCINQ(r9, 0x541b, &(0x7f0000000340)) kernel console output (not intermixed with test programs): cted cc 0x0c03 length: 249 > 1 [ 216.176015][ T5309] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.178774][T11547] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1558'. [ 216.180562][ T5309] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.191261][ T5309] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.196991][ T5309] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.203598][T11547] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1558'. [ 216.280557][T11555] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1560'. [ 216.287554][T11555] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.291515][T11555] IPv6: NLM_F_CREATE should be set when creating new route [ 216.346605][ T40] audit: type=1400 audit(1759660062.201:795): avc: denied { listen } for pid=11563 comm="syz.4.1562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 216.420159][T11549] chnl_net:caif_netlink_parms(): no params data found [ 216.551636][T11549] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.556945][T11549] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.560259][T11549] bridge_slave_0: entered allmulticast mode [ 216.565150][T11549] bridge_slave_0: entered promiscuous mode [ 216.570028][T11549] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.573937][T11549] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.577010][T11549] bridge_slave_1: entered allmulticast mode [ 216.579907][T11549] bridge_slave_1: entered promiscuous mode [ 216.640444][ T40] audit: type=1400 audit(1759660062.491:796): avc: denied { kexec_image_load } for pid=11581 comm="syz.4.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 216.643616][T11549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.653464][T11549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.698637][T11549] team0: Port device team_slave_0 added [ 216.701961][T11549] team0: Port device team_slave_1 added [ 216.739190][T11549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.741620][T11549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.749741][T11549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.755100][T11549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.757271][T11549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.770712][T11549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.844859][T11549] hsr_slave_0: entered promiscuous mode [ 216.848311][T11549] hsr_slave_1: entered promiscuous mode [ 216.851464][T11549] debugfs: 'hsr0' already exists in 'hsr' [ 216.855726][T11549] Cannot create hsr debugfs directory [ 217.049825][T11549] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 217.060296][T11549] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 217.066901][T11549] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 217.069581][ T40] audit: type=1400 audit(1759660062.921:797): avc: denied { shutdown } for pid=11616 comm="syz.4.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 217.083849][T11549] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 217.103721][T11549] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.106086][T11549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.109054][T11549] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.112246][T11549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.145298][T11549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.155622][ T1261] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.162743][ T1261] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.184493][T11549] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.198830][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.201713][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.205415][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.208278][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.378450][T11549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.614337][T11549] veth0_vlan: entered promiscuous mode [ 217.628109][T11549] veth1_vlan: entered promiscuous mode [ 217.654672][T11549] veth0_macvtap: entered promiscuous mode [ 217.660950][T11549] veth1_macvtap: entered promiscuous mode [ 217.678319][T11549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.691727][T11549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.701784][ T6732] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.709347][ T6732] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.712899][ T6732] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.718370][ T6732] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.798031][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.801731][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.853056][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.855554][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.870786][ T5309] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 217.896675][T11661] netlink: 'syz.4.1583': attribute type 1 has an invalid length. [ 217.961544][T11669] (syz.8.1586,11669,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 217.969799][T11669] (syz.8.1586,11669,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 217.971126][ T40] audit: type=1400 audit(1759660063.811:798): avc: denied { create } for pid=11665 comm="syz.8.1586" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 217.973234][T11669] (syz.8.1586,11669,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 217.973370][T11669] (syz.8.1586,11669,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 217.973535][T11669] (syz.8.1586,11669,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 217.999901][T11669] (syz.8.1586,11669,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 218.005517][T11669] (syz.8.1586,11669,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 218.009319][T11669] (syz.8.1586,11669,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 218.013373][T11669] (syz.8.1586,11669,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 218.016479][T11669] (syz.8.1586,11669,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 218.019481][T11669] (syz.8.1586,11669,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 218.022473][T11669] (syz.8.1586,11669,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 218.026914][T11669] (syz.8.1586,11669,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 218.031457][T11669] (syz.8.1586,11669,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 218.035492][T11669] (syz.8.1586,11669,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 218.039688][T11669] (syz.8.1586,11669,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 218.044678][T11669] (syz.8.1586,11669,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 218.048876][T11669] (syz.8.1586,11669,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 218.053103][T11669] (syz.8.1586,11669,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 218.060457][T11669] (syz.8.1586,11669,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 218.064761][T11669] (syz.8.1586,11669,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 218.069237][T11669] (syz.8.1586,11669,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 218.074302][T11669] (syz.8.1586,11669,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 218.079478][T11669] (syz.8.1586,11669,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 218.085327][T11669] (syz.8.1586,11669,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 218.090034][T11669] (syz.8.1586,11669,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 218.094671][T11669] (syz.8.1586,11669,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 218.098552][T11669] (syz.8.1586,11669,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 218.102580][T11669] (syz.8.1586,11669,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 218.107581][T11669] (syz.8.1586,11669,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 218.112091][T11669] (syz.8.1586,11669,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 218.116552][T11669] (syz.8.1586,11669,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 218.120368][T11669] (syz.8.1586,11669,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 218.237435][T10105] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 218.255789][T11689] binder: BINDER_SET_CONTEXT_MGR already set [ 218.257851][T11689] binder: 11688:11689 ioctl 4018620d 200000004a80 returned -16 [ 218.292942][ T5309] Bluetooth: hci0: command tx timeout [ 218.395653][T10105] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 218.401691][T10105] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.405376][T10105] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.407082][T11710] omfs: Invalid superblock (0) [ 218.409634][T10105] usb 9-1: config 0 interface 0 has no altsetting 0 [ 218.418471][T10105] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.422182][T10105] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.426830][T10105] usb 9-1: config 0 interface 0 has no altsetting 0 [ 218.431372][T10105] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.436818][T10105] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.440836][T10105] usb 9-1: config 0 interface 0 has no altsetting 0 [ 218.447911][T10105] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.451513][T10105] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.458114][T10105] usb 9-1: config 0 interface 0 has no altsetting 0 [ 218.463156][T10105] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.466578][T10105] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.470832][T10105] usb 9-1: config 0 interface 0 has no altsetting 0 [ 218.476640][T10105] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.481483][T10105] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.486228][T10105] usb 9-1: config 0 interface 0 has no altsetting 0 [ 218.489980][T10105] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.494377][T10105] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.498377][T10105] usb 9-1: config 0 interface 0 has no altsetting 0 [ 218.502431][T10105] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.507661][T10105] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.509433][ T40] audit: type=1800 audit(1759660064.361:799): pid=11713 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.1598" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 218.511986][T10105] usb 9-1: config 0 interface 0 has no altsetting 0 [ 218.529069][T10105] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 218.532549][T10105] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 218.537180][T10105] usb 9-1: Product: syz [ 218.538841][T10105] usb 9-1: Manufacturer: syz [ 218.540790][T10105] usb 9-1: SerialNumber: syz [ 218.549463][T10105] usb 9-1: config 0 descriptor?? [ 218.561516][T10105] yurex 9-1:0.0: USB YUREX device now attached to Yurex #1 [ 218.765826][T11676] __nla_validate_parse: 4 callbacks suppressed [ 218.765848][T11676] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1587'. [ 218.796807][T11734] netlink: 696 bytes leftover after parsing attributes in process `syz.9.1604'. [ 218.920726][ T6018] usb 9-1: USB disconnect, device number 18 [ 218.927829][ T6018] yurex 9-1:0.0: USB YUREX #1 now disconnected [ 219.155756][T11762] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1613'. [ 219.167206][T11762] bridge1: entered promiscuous mode [ 219.169385][T11762] bridge1: entered allmulticast mode [ 219.198426][T11765] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1614'. [ 219.229113][ T6732] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.235521][ T1261] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.239601][ T1261] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.247351][T11769] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 219.253847][ T1261] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.276120][ T40] audit: type=1400 audit(1759660065.131:800): avc: denied { rename } for pid=11758 comm="syz.8.1611" name="bus" dev="tmpfs" ino=569 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 219.277670][T11771] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1615'. [ 219.283637][T11759] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1611'. [ 219.308636][T11771] bond0: (slave dummy0): Releasing backup interface [ 219.485445][T11779] tipc: New replicast peer: 255.255.255.255 [ 219.487747][T11779] tipc: Enabled bearer , priority 10 [ 219.489267][T11775] overlayfs: conflicting options: userxattr,metacopy=on [ 219.508488][T11775] netlink: 'syz.8.1617': attribute type 1 has an invalid length. [ 219.562721][ T6018] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 219.731978][ T6018] usb 14-1: config index 0 descriptor too short (expected 45, got 36) [ 219.738881][ T6018] usb 14-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 219.744029][ T6018] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 219.748555][ T6018] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 219.754749][ T6018] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 219.760220][ T6018] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 219.767586][ T6018] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.772387][T11796] usb usb8: usbfs: process 11796 (syz.4.1621) did not claim interface 0 before use [ 219.779210][ T6018] usb 14-1: config 0 descriptor?? [ 219.784135][T11773] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 219.791329][T11796] fuse: root generation should be zero [ 219.812749][T11795] fanotify_encode_fh: 1 callbacks suppressed [ 219.812767][T11795] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 219.816395][T11797] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 219.825824][T11795] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 219.853261][ T40] audit: type=1400 audit(1759660065.711:801): avc: denied { listen } for pid=11799 comm="syz.4.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 219.866187][ T40] audit: type=1400 audit(1759660065.711:802): avc: denied { accept } for pid=11799 comm="syz.4.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 219.985634][T11807] input: syz0 as /devices/virtual/input/input23 [ 220.040206][T11809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1027 sclass=netlink_route_socket pid=11809 comm=syz.8.1628 [ 220.161708][T11817] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1631'. [ 220.168758][T11817] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1631'. [ 220.185654][T11819] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1632'. [ 220.207982][ T6018] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 220.220997][ T6018] plantronics 0003:047F:FFFF.0007: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 220.272196][ T9] hid_parser_main: 221 callbacks suppressed [ 220.272215][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 220.272239][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 220.272260][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 220.272279][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 220.272300][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 220.272320][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 220.272337][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 220.272423][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 220.272444][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 220.272464][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 220.280107][ T9] hid-generic 0000:0000:0000.0008: hidraw2: HID v0.00 Device [] Q~{oaR¼ݫYlCLԮ(] on pAmtsvf'_p'1 [ 220.362822][ T5309] Bluetooth: hci0: command tx timeout [ 220.535133][T11773] netlink: 5 bytes leftover after parsing attributes in process `syz.9.1616'. [ 220.558337][ T5824] usb 14-1: USB disconnect, device number 2 [ 220.594837][T11838] gre0: Master is either lo or non-ether device [ 220.678573][T11845] overlay: Unknown parameter 'subj_type' [ 220.726857][T11847] bridge1: entered promiscuous mode [ 221.146823][T11860] program syz.8.1645 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 221.396893][ T40] audit: type=1800 audit(1759660067.251:803): pid=11897 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.1656" name="bus" dev="overlay" ino=676 res=0 errno=0 [ 221.404456][T11899] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 221.407612][ T40] audit: type=1400 audit(1759660067.251:804): avc: denied { append } for pid=11895 comm="syz.8.1656" name="uinput" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 221.421243][T11899] block device autoloading is deprecated and will be removed. [ 221.425523][ T40] audit: type=1400 audit(1759660067.261:805): avc: denied { execute } for pid=11896 comm="syz.4.1657" path="/dev/audio1" dev="devtmpfs" ino=1322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 221.521983][ T40] audit: type=1400 audit(1759660067.371:806): avc: denied { associate } for pid=11907 comm="syz.6.1659" name="cgroup.procs" dev="cgroup" ino=526 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 221.937595][T10391] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 221.989201][T11935] netlink: 'syz.6.1668': attribute type 11 has an invalid length. [ 221.993969][T11935] netlink: 'syz.6.1668': attribute type 4 has an invalid length. [ 222.022766][ T5824] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 222.087741][T11939] macvlan2: entered promiscuous mode [ 222.089592][T11939] macvlan2: entered allmulticast mode [ 222.091820][T11939] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 222.105673][T10391] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 222.108945][T10391] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 222.113031][T10391] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 222.117848][T10391] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 222.121553][T10391] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 222.127855][T10391] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 222.130798][T10391] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.134894][T10391] usb 9-1: config 0 descriptor?? [ 222.137914][T11919] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 222.173080][ T5824] usb 13-1: device descriptor read/64, error -71 [ 222.432795][ T5824] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 222.448538][ T5309] Bluetooth: hci0: command tx timeout [ 222.549829][T10391] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd [ 222.558366][T10391] plantronics 0003:047F:FFFF.0009: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 222.572783][ T5824] usb 13-1: device descriptor read/64, error -71 [ 222.658211][T11960] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 222.658211][T11960] program syz.6.1675 not setting count and/or reply_len properly [ 222.670006][ T40] audit: type=1400 audit(1759660068.521:807): avc: denied { accept } for pid=11959 comm="syz.6.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 222.683985][ T5824] usb usb13-port1: attempt power cycle [ 222.724805][T11966] syzkaller1: entered promiscuous mode [ 222.726753][T11966] syzkaller1: entered allmulticast mode [ 222.820730][T11964] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.826900][T11964] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.859750][T11970] netlink: 'syz.9.1679': attribute type 22 has an invalid length. [ 222.866895][T11970] netlink: 'syz.9.1679': attribute type 22 has an invalid length. [ 222.866978][ T1261] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.873406][ T1261] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.878047][ T1261] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.882191][ T1261] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.931311][T11964] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.934941][T11964] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.968899][T11973] syzkaller0: entered promiscuous mode [ 222.970886][T11973] syzkaller0: entered allmulticast mode [ 223.042752][ T5824] usb 13-1: new high-speed USB device number 12 using dummy_hcd [ 223.078429][ T5824] usb 13-1: device descriptor read/8, error -71 [ 223.342826][ T5824] usb 13-1: new high-speed USB device number 13 using dummy_hcd [ 223.363251][ T5824] usb 13-1: device descriptor read/8, error -71 [ 223.483167][ T5824] usb usb13-port1: unable to enumerate USB device [ 224.537268][ T5309] Bluetooth: hci0: command tx timeout [ 224.583744][ T5824] usb 9-1: USB disconnect, device number 19 [ 224.801039][ T40] audit: type=1400 audit(1759660070.661:808): avc: denied { bind } for pid=11975 comm="syz.4.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 224.839948][T11964] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.844076][T11964] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.855651][T11981] netlink: 'syz.4.1681': attribute type 10 has an invalid length. [ 225.036732][T12005] qrtr: Invalid version 0 [ 225.040178][ T40] audit: type=1400 audit(1759660070.891:809): avc: denied { create } for pid=11978 comm="syz.8.1682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 225.143169][T11976] __nla_validate_parse: 6 callbacks suppressed [ 225.143184][T11976] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1681'. [ 225.153259][T11981] syz_tun: entered promiscuous mode [ 225.159228][T11981] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 225.183952][T11964] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.187895][T11964] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.242922][ T1261] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.348437][ T1261] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.367774][T11995] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.371617][T11995] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.386402][T11995] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.392163][T11995] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.392482][ T40] audit: type=1400 audit(1759660071.241:810): avc: denied { set_context_mgr } for pid=12035 comm="syz.4.1686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 225.404973][T12019] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.408495][T12019] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.427433][ T1261] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.445194][ T8650] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.448949][ T8650] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.464451][T12036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.500941][ T1261] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.703968][T12048] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1689'. [ 225.707719][T12049] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1689'. [ 225.719636][T12049] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 225.737836][ T1261] bridge_slave_1: left allmulticast mode [ 225.740961][ T1261] bridge_slave_1: left promiscuous mode [ 225.744310][ T1261] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.750795][ T1261] bridge_slave_0: left allmulticast mode [ 225.752956][ T1261] bridge_slave_0: left promiscuous mode [ 225.757012][ T1261] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.783792][T12049] vivid-002: ================= START STATUS ================= [ 225.786891][T12049] vivid-002: Radio HW Seek Mode: Bounded [ 225.789112][T12049] vivid-002: Radio Programmable HW Seek: false [ 225.796305][T12049] vivid-002: RDS Rx I/O Mode: Block I/O [ 225.800142][T12049] vivid-002: Generate RBDS Instead of RDS: false [ 225.802443][T12049] vivid-002: RDS Reception: true [ 225.805042][T12049] vivid-002: RDS Program Type: 0 inactive [ 225.807989][T12049] vivid-002: RDS PS Name: inactive [ 225.809694][T12049] vivid-002: RDS Radio Text: inactive [ 225.811458][T12049] vivid-002: RDS Traffic Announcement: false inactive [ 225.815070][T12049] vivid-002: RDS Traffic Program: false inactive [ 225.817277][T12049] vivid-002: RDS Music: false inactive [ 225.825239][T12049] vivid-002: ================== END STATUS ================== [ 226.145382][T12079] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1694'. [ 226.146448][T12081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=12081 comm=syz.6.1696 [ 226.157610][T12081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=12081 comm=syz.6.1696 [ 226.223039][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 226.263872][T12085] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 226.344776][ T1261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.386161][T12085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=12085 comm=syz.6.1697 [ 226.432143][ T1261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.436982][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 226.464449][ T1261] bond0 (unregistering): Released all slaves [ 226.556531][ T40] audit: type=1326 audit(1759660072.411:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12096 comm="syz.9.1698" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1029d8eec9 code=0x0 [ 226.668572][T12107] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 226.727926][ T40] audit: type=1400 audit(1759660072.591:812): avc: denied { getattr } for pid=12096 comm="syz.9.1698" name="/" dev="9p" ino=72351837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 226.728735][T12114] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 226.791900][ T5309] Bluetooth: hci2: unexpected subevent 0x06 length: 82 > 10 [ 226.795519][ T5309] Bluetooth: min 0 < 6 [ 226.812914][T12123] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 226.878728][T12131] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1705'. [ 226.931011][T12133] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1706'. [ 226.932307][T12131] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1705'. [ 226.935752][T12133] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1706'. [ 227.046382][ T1261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.049249][ T1261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.052404][ T1261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.057196][ T1261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.107546][ T1261] veth1_macvtap: left promiscuous mode [ 227.109317][ T1261] veth0_macvtap: left promiscuous mode [ 227.111404][ T1261] veth1_vlan: left promiscuous mode [ 227.114187][ T1261] veth0_vlan: left promiscuous mode [ 227.697138][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1712'. [ 227.700592][T12165] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1712'. [ 228.161272][ T1261] team0 (unregistering): Port device team_slave_1 removed [ 228.307712][ T1261] team0 (unregistering): Port device team_slave_0 removed [ 228.848850][ T5309] Bluetooth: hci2: command 0x0405 tx timeout [ 228.993735][T12161] netlink: 'syz.6.1711': attribute type 33 has an invalid length. [ 229.073071][T12180] FAT-fs (nullb0): bogus number of reserved sectors [ 229.075397][T12180] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 229.120003][T12187] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 229.134350][T12187] program syz.8.1719 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.135638][T12184] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20003 [ 229.138520][T12187] ata1.00: invalid service action 31 [ 229.183231][ T40] audit: type=1400 audit(1759660075.031:813): avc: denied { remove_name } for pid=12186 comm="syz.8.1719" name="file0" dev="9p" ino=72351935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 229.194732][ T40] audit: type=1400 audit(1759660075.041:814): avc: denied { unlink } for pid=12186 comm="syz.8.1719" name="file0" dev="9p" ino=72351935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 229.258467][ T40] audit: type=1400 audit(1759660075.111:815): avc: denied { mounton } for pid=12196 comm="syz.6.1721" path="/330/file1/file0" dev="autofs" ino=51526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 229.275074][T12199] can0: slcan on ttyprintk. [ 229.458181][ T1261] IPVS: stop unused estimator thread 0... [ 229.578504][T12214] syz_tun: entered promiscuous mode [ 229.580952][T12214] batadv_slave_0: entered promiscuous mode [ 229.584507][T12198] can0 (unregistered): slcan off ttyprintk. [ 229.589093][T12214] batadv_slave_0: left promiscuous mode [ 229.597484][T12214] syz_tun: left promiscuous mode [ 229.943299][ T54] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 229.965089][T12236] usb usb3: usbfs: process 12236 (syz.8.1731) did not claim interface 2 before use [ 230.082792][ T54] usb 14-1: device descriptor read/64, error -71 [ 230.108449][ T40] audit: type=1400 audit(1759660075.961:816): avc: denied { mounton } for pid=12248 comm="syz.4.1736" path="/355/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 230.255093][T12264] netlink: 'syz.4.1739': attribute type 10 has an invalid length. [ 230.264799][T12264] team0: Port device dummy0 added [ 230.268328][T12264] netlink: 'syz.4.1739': attribute type 10 has an invalid length. [ 230.272970][T12264] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 230.284110][T12264] team0: Failed to send options change via netlink (err -105) [ 230.287557][T12264] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 230.292600][T12264] team0: Port device dummy0 removed [ 230.299067][T12264] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 230.343102][ T54] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 230.472766][ T54] usb 14-1: device descriptor read/64, error -71 [ 230.594178][ T54] usb usb14-port1: attempt power cycle [ 230.933131][ T54] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 230.953623][ T54] usb 14-1: device descriptor read/8, error -71 [ 231.069403][T12274] __nla_validate_parse: 8 callbacks suppressed [ 231.069425][T12274] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1743'. [ 231.077586][T12274] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1743'. [ 231.125130][ T40] audit: type=1400 audit(1759660076.981:817): avc: denied { setattr } for pid=12276 comm="syz.4.1744" path="socket:[48993]" dev="sockfs" ino=48993 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 231.192823][ T54] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 231.223397][ T54] usb 14-1: device descriptor read/8, error -71 [ 231.321876][T12283] block device autoloading is deprecated and will be removed. [ 231.342987][ T54] usb usb14-port1: unable to enumerate USB device [ 231.660894][ T40] audit: type=1326 audit(1759660077.511:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12296 comm="syz.8.1749" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07bdb8eec9 code=0x0 [ 232.101583][T12318] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 232.103801][T12318] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 232.106024][T12318] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 232.145362][T11987] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 232.153971][ T40] audit: type=1400 audit(1759660078.011:819): avc: denied { map } for pid=12319 comm="syz.8.1755" path="/147/file0/blkio.bfq.io_service_time_recursive" dev="9p" ino=72351935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 232.251192][T12313] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 232.279416][T12320] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 232.294236][ T40] audit: type=1400 audit(1759660078.141:820): avc: denied { write } for pid=12319 comm="syz.8.1755" path="socket:[50579]" dev="sockfs" ino=50579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 232.321380][ T40] audit: type=1400 audit(1759660078.171:821): avc: denied { mounton } for pid=12319 comm="syz.8.1755" path="/147/file0/bus" dev="9p" ino=72352087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 232.322955][T12320] overlay: ./file1 is not a directory [ 232.340518][ T40] audit: type=1400 audit(1759660078.191:822): avc: denied { create } for pid=12319 comm="syz.8.1755" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 232.395277][T12331] Bluetooth: MGMT ver 1.23 [ 233.623298][T12349] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1761'. [ 233.657285][T12355] netlink: 'syz.8.1763': attribute type 10 has an invalid length. [ 233.660860][T12355] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 233.666858][T12355] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.555771][T12360] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1765'. [ 234.560674][T12360] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1765'. [ 234.647357][T12372] netlink: 'syz.4.1769': attribute type 1 has an invalid length. [ 234.693138][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 234.693154][ T40] audit: type=1400 audit(1759660080.551:828): avc: denied { name_bind } for pid=12375 comm="syz.4.1771" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 235.043121][T10366] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 235.092085][T12397] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1777'. [ 235.096605][T12397] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1777'. [ 235.193835][T10366] usb 14-1: Using ep0 maxpacket: 8 [ 235.198641][T10366] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 235.202342][T10366] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 235.206791][T10366] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 235.210216][T10366] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 235.213977][T10366] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.218864][T10366] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 235.223453][T10366] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.431413][T10366] usb 14-1: usb_control_msg returned -32 [ 235.433618][T10366] usbtmc 14-1:16.0: can't read capabilities [ 235.802741][ T29] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 235.942835][ T29] usb 9-1: device descriptor read/64, error -71 [ 236.192272][ T29] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 236.241669][T12419] binder: 12418:12419 ioctl c0306201 200000000640 returned -22 [ 236.241742][T12420] binder: 12418:12420 ioctl c0306201 200000000640 returned -22 [ 236.322799][ T29] usb 9-1: device descriptor read/64, error -71 [ 236.433410][ T29] usb usb9-port1: attempt power cycle [ 236.782836][ T29] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 236.804172][ T29] usb 9-1: device descriptor read/8, error -71 [ 237.052954][ T29] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 237.073703][ T29] usb 9-1: device descriptor read/8, error -71 [ 237.184897][ T29] usb usb9-port1: unable to enumerate USB device [ 237.285960][T12432] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1786'. [ 237.290527][T12432] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1786'. [ 237.683882][T12446] netlink: 'syz.8.1791': attribute type 126 has an invalid length. [ 237.864291][T12454] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=12454 comm=syz.8.1793 [ 238.115868][T12456] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=12456 comm=syz.8.1794 [ 238.125474][ T40] audit: type=1400 audit(1759660083.981:829): avc: denied { setopt } for pid=12455 comm="syz.8.1794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 238.222008][T12461] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1795'. [ 238.226910][T12461] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1795'. [ 238.265622][T12463] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 238.269719][ T40] audit: type=1400 audit(1759660084.121:830): avc: denied { write } for pid=12462 comm="syz.8.1796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 238.627078][T12471] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1800'. [ 238.672833][ T29] usb 13-1: new high-speed USB device number 14 using dummy_hcd [ 238.780201][ T40] audit: type=1400 audit(1759660084.631:831): avc: denied { watch } for pid=12479 comm="syz.4.1803" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 238.825412][ T29] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.830219][ T29] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.835543][ T29] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 238.841412][ T29] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 238.845400][ T29] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.856746][ T29] usb 13-1: config 0 descriptor?? [ 239.149138][T12500] binder: 12499:12500 unknown command 0 [ 239.151627][T12500] binder: 12499:12500 ioctl c0306201 200000000080 returned -22 [ 239.206745][T12502] binder: BINDER_SET_CONTEXT_MGR already set [ 239.208987][T12502] binder: 12501:12502 ioctl 4018620d 200000000100 returned -16 [ 239.274369][ T29] plantronics 0003:047F:FFFF.000A: ignoring exceeding usage max [ 239.288949][ T29] plantronics 0003:047F:FFFF.000A: hiddev2,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 239.376772][ T40] audit: type=1400 audit(1759660085.231:832): avc: denied { bind } for pid=12512 comm="syz.4.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 239.398472][ T40] audit: type=1400 audit(1759660085.251:833): avc: denied { read append } for pid=12512 comm="syz.4.1813" name="rtc0" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 239.408495][ T40] audit: type=1400 audit(1759660085.251:834): avc: denied { open } for pid=12512 comm="syz.4.1813" path="/dev/rtc0" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 239.417737][ T40] audit: type=1400 audit(1759660085.251:835): avc: denied { ioctl } for pid=12512 comm="syz.4.1813" path="/dev/rtc0" dev="devtmpfs" ino=943 ioctlcmd=0x700e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 239.427179][ T40] audit: type=1400 audit(1759660085.251:836): avc: denied { setattr } for pid=12512 comm="syz.4.1813" name="rtc0" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 239.538641][T10105] usb 13-1: USB disconnect, device number 14 [ 239.566662][T12518] overlay: ./file1 is not a directory [ 239.573642][ T40] audit: type=1400 audit(1759660085.431:837): avc: denied { lock } for pid=12517 comm="syz.4.1815" path="socket:[52371]" dev="sockfs" ino=52371 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 239.805083][T12521] fuse: Bad value for 'user_id' [ 239.807556][T12521] fuse: Bad value for 'user_id' [ 239.853526][T12523] cgroup: Name too long [ 239.860338][T12523] erspan1: entered allmulticast mode [ 240.007585][ T40] audit: type=1400 audit(1759660085.861:838): avc: denied { module_load } for pid=12531 comm="syz.4.1820" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=53417 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 240.028028][T12532] Invalid ELF header magic: != ELF [ 240.550661][T12563] overlayfs: missing 'lowerdir' [ 240.584687][T12567] netlink: 'syz.4.1829': attribute type 10 has an invalid length. [ 240.621992][ T40] audit: type=1400 audit(1759660086.471:839): avc: denied { bind } for pid=12570 comm="syz.4.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 240.681704][T12575] bridge_slave_0: invalid flags given to default FDB implementation [ 240.844350][T12410] usbtmc 11-1:16.0: usb_control_msg returned -110 [ 240.850259][T12582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1833'. [ 241.066537][T10366] usb 14-1: USB disconnect, device number 7 [ 241.124980][T12595] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 241.132183][ T40] audit: type=1400 audit(1759660086.981:840): avc: denied { mounton } for pid=12594 comm="syz.8.1838" path="/187/file0" dev="tmpfs" ino=1049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 241.414212][ T40] audit: type=1400 audit(1759660087.271:841): avc: denied { execute } for pid=12609 comm="syz.4.1841" path="/dev/snd/pcmC5D9p" dev="devtmpfs" ino=3292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 241.505322][T12614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1842'. [ 241.554014][T10366] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 241.580520][T12632] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1844'. [ 241.723068][T10366] usb 14-1: Using ep0 maxpacket: 8 [ 241.729918][T10366] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 241.734365][T10366] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 241.739493][T10366] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 241.744773][T10366] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 241.750962][T10366] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 241.756234][T10366] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.936715][T12644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1848'. [ 241.946869][T12644] Bluetooth: hci1: too big key_count value 18182 [ 241.959487][T12644] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 241.964790][T12644] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=12644 comm=syz.4.1848 [ 241.965927][T10366] usb 14-1: GET_CAPABILITIES returned 0 [ 241.974237][T10366] usbtmc 14-1:16.0: can't read capabilities [ 242.166753][ T40] audit: type=1400 audit(1759660088.021:842): avc: denied { write } for pid=12598 comm="syz.9.1839" name="usbtmc0" dev="devtmpfs" ino=3234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 242.167465][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.181267][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.185087][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.189091][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.193378][ C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.198787][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.202831][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.206658][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.210389][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.214748][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.218376][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.224183][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.227774][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.231457][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.235099][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.238232][ C2] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.243562][T10366] usb 14-1: USB disconnect, device number 8 [ 242.595387][T12666] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 242.607594][T12666] kvm: pic: non byte read [ 242.611548][T12666] kvm: pic: level sensitive irq not supported [ 242.611989][T12666] kvm: pic: non byte read [ 242.746557][T12676] overlay: filesystem on ./bus not supported as upperdir [ 242.751168][T12676] overlay: filesystem on ./bus not supported as upperdir [ 242.755223][T12676] overlay: filesystem on ./bus not supported as upperdir [ 242.758206][T12676] overlay: filesystem on ./bus not supported as upperdir [ 242.762185][T12676] overlay: filesystem on ./bus not supported as upperdir [ 242.766058][T12676] overlay: filesystem on ./bus not supported as upperdir [ 242.769574][T12676] overlay: filesystem on ./bus not supported as upperdir [ 242.773675][T12676] overlay: filesystem on ./bus not supported as upperdir [ 242.777589][T12676] overlay: filesystem on ./bus not supported as upperdir [ 242.781421][T12676] overlay: filesystem on ./bus not supported as upperdir [ 242.785265][T12676] overlay: filesystem on ./bus not supported as upperdir [ 242.788885][T12676] overlay: filesystem on ./bus not supported as upperdir [ 242.966779][T12682] netlink: 'syz.9.1856': attribute type 10 has an invalid length. [ 242.983521][T12682] veth0_vlan: left promiscuous mode [ 242.986930][T12682] veth0_vlan: entered promiscuous mode [ 242.991712][T12682] team0: Device veth0_vlan failed to register rx_handler [ 243.085615][T12688] No source specified [ 243.130012][ T40] audit: type=1400 audit(1759660088.981:843): avc: denied { mount } for pid=12689 comm="syz.4.1861" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 243.130317][T12690] netlink: 'syz.4.1861': attribute type 2 has an invalid length. [ 243.239318][ T40] audit: type=1400 audit(1759660089.091:844): avc: denied { map } for pid=12693 comm="syz.9.1860" path="socket:[52064]" dev="sockfs" ino=52064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 243.666834][T12709] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 244.284991][T12714] IPv6: NLM_F_CREATE should be specified when creating new route [ 244.359610][ T40] audit: type=1400 audit(1759660090.211:845): avc: denied { connect } for pid=12718 comm="syz.8.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 244.451489][T12721] netlink: 14 bytes leftover after parsing attributes in process `syz.8.1870'. [ 244.608850][T12721] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.639664][T12721] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.664523][ T6037] usb 11-1: USB disconnect, device number 12 [ 244.694134][T12721] bond0 (unregistering): Released all slaves [ 244.896422][ T5961] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 244.901825][ T5961] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 244.908195][ T5961] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 244.918114][ T5961] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 244.924493][ T5961] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 244.984791][T12741] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 245.147705][ T40] audit: type=1400 audit(1759660091.001:846): avc: denied { name_bind } for pid=12746 comm="syz.9.1877" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 245.159705][ T40] audit: type=1400 audit(1759660091.011:847): avc: denied { read } for pid=12746 comm="syz.9.1877" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 245.172834][ T40] audit: type=1400 audit(1759660091.011:848): avc: denied { open } for pid=12746 comm="syz.9.1877" path="/50/file0" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 245.180421][ T40] audit: type=1400 audit(1759660091.011:849): avc: denied { read } for pid=12746 comm="syz.9.1877" name="fb0" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 245.189963][ T40] audit: type=1400 audit(1759660091.011:850): avc: denied { open } for pid=12746 comm="syz.9.1877" path="/dev/fb0" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 245.197691][ T40] audit: type=1400 audit(1759660091.011:851): avc: denied { ioctl } for pid=12746 comm="syz.9.1877" path="/dev/fb0" dev="devtmpfs" ino=636 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 245.228856][T12757] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 245.231747][T12757] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 245.243022][ T5968] Bluetooth: hci3: command 0x1003 tx timeout [ 245.244230][ T5309] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 245.263819][T12757] netlink: 'syz.8.1878': attribute type 10 has an invalid length. [ 245.285764][T12732] chnl_net:caif_netlink_parms(): no params data found [ 245.322948][T12762] netlink: 504 bytes leftover after parsing attributes in process `syz.4.1879'. [ 245.338196][T12762] netem: incorrect gi model size [ 245.340477][T12762] netem: change failed [ 245.398646][T12770] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1881'. [ 245.545370][T12789] netlink: 348 bytes leftover after parsing attributes in process `syz.9.1887'. [ 245.551069][T12732] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.555401][T12732] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.558385][T12732] bridge_slave_0: entered allmulticast mode [ 245.562511][T12732] bridge_slave_0: entered promiscuous mode [ 245.594080][T12732] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.596500][T12732] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.599562][T12732] bridge_slave_1: entered allmulticast mode [ 245.603037][T12732] bridge_slave_1: entered promiscuous mode [ 245.707982][T12732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.713270][T12732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.754238][T12732] team0: Port device team_slave_0 added [ 245.757783][T12732] team0: Port device team_slave_1 added [ 245.835284][T12732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.838505][T12732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.853848][T12732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.874035][T12732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.876557][T12732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.885064][T12732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.919944][T12807] tipc: Enabling of bearer rejected, failed to enable media [ 245.928629][T12801] input: syz0 as /devices/virtual/input/input30 [ 245.984496][T12732] hsr_slave_0: entered promiscuous mode [ 245.988053][T12732] hsr_slave_1: entered promiscuous mode [ 245.991142][T12732] debugfs: 'hsr0' already exists in 'hsr' [ 245.994791][T12732] Cannot create hsr debugfs directory [ 246.025047][T12813] binder: 12812:12813 ioctl c0306201 200000000180 returned -14 [ 246.026043][ T40] audit: type=1400 audit(1759660091.881:852): avc: denied { call } for pid=12812 comm="syz.8.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 246.029530][T12813] netlink: 'syz.8.1895': attribute type 15 has an invalid length. [ 246.042188][T12813] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1895'. [ 246.169586][T12822] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1898'. [ 246.175590][T12822] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1898'. [ 246.182815][ T5993] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 246.361008][T12815] infiniband syz0: set active [ 246.365282][T12815] infiniband syz0: added bridge0 [ 246.367564][ T5993] usb 9-1: config 12 has an invalid interface number: 10 but max is 3 [ 246.370459][ T5993] usb 9-1: config 12 has an invalid interface number: 75 but max is 3 [ 246.371454][T12815] syz0: rxe_create_cq: returned err = -12 [ 246.375656][ T5993] usb 9-1: config 12 has an invalid descriptor of length 108, skipping remainder of the config [ 246.375693][ T5993] usb 9-1: config 12 has 2 interfaces, different from the descriptor's value: 4 [ 246.379636][T12815] infiniband syz0: Couldn't create ib_mad CQ [ 246.381653][ T5993] usb 9-1: config 12 has no interface number 0 [ 246.387037][T12815] infiniband syz0: Couldn't open port 1 [ 246.387508][ T5993] usb 9-1: config 12 has no interface number 1 [ 246.394062][ T5993] usb 9-1: config 12 interface 10 altsetting 39 bulk endpoint 0x8 has invalid maxpacket 16 [ 246.397327][ T5993] usb 9-1: config 12 interface 10 altsetting 39 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 246.401345][ T5993] usb 9-1: config 12 interface 75 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 246.406957][ T5993] usb 9-1: config 12 interface 10 has no altsetting 0 [ 246.410180][ T5993] usb 9-1: config 12 interface 75 has no altsetting 0 [ 246.417991][T12815] RDS/IB: syz0: added [ 246.420015][ T5993] usb 9-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=52.b8 [ 246.435025][ T5993] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.437746][ T5993] usb 9-1: Product: 㚈先狉좭扟괄멣夥⻦᭿舋ᤑ둺뚵䃺됣魪㧯穥絮铴茑 [ 246.441579][ T5993] usb 9-1: Manufacturer: ш [ 246.443508][ T5993] usb 9-1: SerialNumber: ᐌ [ 246.448416][T12806] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 246.659280][ T5993] usb 9-1: Expected 3 endpoints, found: 5 [ 246.814949][T12732] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 246.823750][T12732] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 246.831096][T12732] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 246.838565][T12732] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 246.861746][T12806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.869589][T12806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.884478][ T5993] sierra 9-1:12.75: Sierra USB modem converter detected [ 246.899572][ T5993] usb 9-1: Sierra USB modem converter now attached to ttyUSB0 [ 246.909783][ T5993] usb 9-1: USB disconnect, device number 24 [ 246.928666][ T5993] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 246.935001][ T5993] sierra 9-1:12.75: device disconnected [ 246.952389][T12732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.968679][T12732] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.976705][T12018] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.979263][T12018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.991642][T11995] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.994796][T11995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.002982][ T5309] Bluetooth: hci5: command tx timeout [ 247.161334][T12732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.195185][T12732] veth0_vlan: entered promiscuous mode [ 247.201428][T12732] veth1_vlan: entered promiscuous mode [ 247.221529][T12732] veth0_macvtap: entered promiscuous mode [ 247.227359][T12732] veth1_macvtap: entered promiscuous mode [ 247.242999][T12732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.250912][T12732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.261078][ T8650] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.265098][ T8650] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.269761][ T8650] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.274215][ T8650] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.354971][T12019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.358633][T12019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.381517][T12019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.385179][T12019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.685164][T12900] CUSE: unknown device info "<5\z0z,~XY+A}sF'%:Ij!@QmߑRGQq 6*5p)x?," [ 247.703996][T12900] CUSE: unknown device info "&b%ZW)3\my " [ 247.706167][T12900] CUSE: unknown device info "ҭSmMi_0˱ݯ;q]{i79{0Եt~>VZ\.9OCU&qmsfkc"" [ 247.712211][T12900] CUSE: DEVNAME unspecified [ 247.798542][T12911] IPv6: sit1: Disabled Multicast RS [ 247.801596][T12911] sit1: entered allmulticast mode [ 247.811352][T12912] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 247.811352][T12912] The task syz.4.1909 (12912) triggered the difference, watch for misbehavior. [ 247.903083][T12916] binder: 12914:12916 ioctl 5417 200000000100 returned -22 [ 247.907310][ T40] audit: type=1400 audit(1759660093.761:853): avc: denied { map } for pid=12914 comm="syz.1.1912" path="/dev/tty23" dev="devtmpfs" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 248.044685][T12927] netlink: 'syz.1.1915': attribute type 1 has an invalid length. [ 248.116221][ T40] audit: type=1400 audit(1759660093.961:854): avc: denied { setattr } for pid=12926 comm="syz.1.1915" name="loop6" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 248.126223][T12932] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=12932 comm=syz.1.1915 [ 248.191376][T12927] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1915'. [ 248.206230][T12927] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1915'. [ 248.592904][T12961] netlink: 'syz.8.1922': attribute type 29 has an invalid length. [ 248.616249][T12961] netlink: 'syz.8.1922': attribute type 29 has an invalid length. [ 248.652393][T12965] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1923'. [ 248.709409][ T40] audit: type=1400 audit(1759660094.561:855): avc: denied { name_connect } for pid=12967 comm="syz.8.1924" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 248.731957][T12968] tmpfs: Group quota inode hardlimit too large. [ 248.828132][T12978] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 248.858007][T12981] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 249.096073][ T5968] Bluetooth: hci5: command tx timeout [ 249.336611][T13011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.339902][T13011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.582842][ T29] usb 13-1: new high-speed USB device number 15 using dummy_hcd [ 249.694607][T13019] netlink: 'syz.4.1939': attribute type 1 has an invalid length. [ 249.733197][ T29] usb 13-1: device descriptor read/64, error -71 [ 249.733956][T13025] __nla_validate_parse: 2 callbacks suppressed [ 249.733971][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1941'. [ 249.741208][T13025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1941'. [ 249.745223][T13025] netlink: 'syz.4.1941': attribute type 7 has an invalid length. [ 249.803753][T13034] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1944'. [ 249.809051][T13034] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1944'. [ 249.886903][T13038] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1946'. [ 249.993092][ T29] usb 13-1: new high-speed USB device number 16 using dummy_hcd [ 250.132940][ T29] usb 13-1: device descriptor read/64, error -71 [ 250.169070][T13049] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1950'. [ 250.206452][T13051] xfrm1: entered allmulticast mode [ 250.243962][ T29] usb usb13-port1: attempt power cycle [ 250.256193][T13054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1953'. [ 250.420798][T13061] overlayfs: failed lookup in lower (newroot/14, name='file1', err=-40): overlapping layers [ 250.509758][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 250.509777][ T40] audit: type=1400 audit(1759660096.361:859): avc: denied { read } for pid=13068 comm="syz.1.1959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 250.564909][T13076] /dev/sg0: Can't lookup blockdev [ 250.604816][T13072] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1961'. [ 250.609492][T13072] netlink: 62 bytes leftover after parsing attributes in process `syz.4.1961'. [ 250.614096][ T29] usb 13-1: new high-speed USB device number 17 using dummy_hcd [ 250.614438][T13072] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1961'. [ 250.634856][ T29] usb 13-1: device descriptor read/8, error -71 [ 250.795360][ T5824] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 250.872837][ T29] usb 13-1: new high-speed USB device number 18 using dummy_hcd [ 250.903417][ T29] usb 13-1: device descriptor read/8, error -71 [ 250.917724][ T40] audit: type=1400 audit(1759660096.771:860): avc: denied { append } for pid=13087 comm="syz.4.1965" name="file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 250.956853][ T5824] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 250.960680][ T5824] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 250.965524][ T5824] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 250.969449][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.013299][ T29] usb usb13-port1: unable to enumerate USB device [ 251.172928][ T5968] Bluetooth: hci5: command 0x040f tx timeout [ 251.179830][ T5824] usb 6-1: GET_CAPABILITIES returned 0 [ 251.182254][ T5824] usbtmc 6-1:16.0: can't read capabilities [ 251.383065][ T5824] usb 6-1: USB disconnect, device number 2 [ 252.142874][T10278] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 252.305139][T10278] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 252.309017][T10278] usb 14-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 252.313831][T10278] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 252.318810][T10278] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 252.324881][T10278] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 252.335218][T10278] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 252.339110][T10278] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 252.346879][T10278] usb 14-1: Product: syz [ 252.348365][T10278] usb 14-1: Manufacturer: syz [ 252.364800][T10278] cdc_wdm 14-1:1.0: skipping garbage [ 252.367295][T10278] cdc_wdm 14-1:1.0: skipping garbage [ 252.370001][T10278] cdc_wdm 14-1:1.0: probe with driver cdc_wdm failed with error -22 [ 252.475478][T13148] netlink: 'syz.1.1976': attribute type 4 has an invalid length. [ 252.592223][T13145] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.597704][T13145] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.692249][T13145] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.697497][T13145] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.779681][T13145] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.785329][T13145] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.875739][T13145] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.879482][T13145] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.934833][T13161] "syz.1.1979" (13161) uses obsolete ecb(arc4) skcipher [ 252.995038][T13172] support for cryptoloop has been removed. Use dm-crypt instead. [ 252.998313][T13171] support for cryptoloop has been removed. Use dm-crypt instead. [ 253.243368][ T5961] Bluetooth: hci5: command 0x040f tx timeout [ 253.302239][ T1261] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.305531][ T1261] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.319028][ T1261] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.327240][ T1261] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.336145][ T1261] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.339138][ T1261] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.356981][ T1261] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.362230][ T1261] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.546005][T13196] /dev/sr0: Can't open blockdev [ 253.612525][T13214] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 253.620184][T13214] netlink: 'syz.4.1987': attribute type 1 has an invalid length. [ 253.631586][T13217] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 254.233587][ C1] vcan0: j1939_tp_rxtimer: 0xffff888036584800: rx timeout, send abort [ 254.241023][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880559b5c00: rx timeout, send abort [ 254.245018][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888036584800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 254.251817][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880559b5c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 254.324996][T13199] delete_channel: no stack [ 254.623126][T13266] batadv_slave_0: entered promiscuous mode [ 254.626200][T13266] batadv_slave_0: entered allmulticast mode [ 254.753477][T13275] __nla_validate_parse: 2 callbacks suppressed [ 254.753496][T13275] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2004'. [ 254.812219][T10391] usb 14-1: USB disconnect, device number 9 [ 254.855658][T13280] binder: 13279:13280 ioctl c018620c 200000000240 returned -22 [ 254.926141][T13275] /dev/sr0: Can't open blockdev [ 254.992503][T13289] netlink: 'syz.9.2009': attribute type 2 has an invalid length. [ 255.006365][ T40] audit: type=1400 audit(1759660100.861:861): avc: denied { map } for pid=13291 comm="syz.8.2010" path="socket:[58429]" dev="sockfs" ino=58429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 255.016450][ T40] audit: type=1400 audit(1759660100.861:862): avc: denied { accept } for pid=13291 comm="syz.8.2010" path="socket:[58429]" dev="sockfs" ino=58429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 255.022556][T13289] bond1: (slave bond_slave_1): Device is not our slave [ 255.032330][T13289] bond1: option active_slave: invalid value (bond_slave_1) [ 255.040467][T13289] bond1 (unregistering): Released all slaves [ 255.204881][T13312] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2016'. [ 255.208094][T13312] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2016'. [ 255.210984][T13312] netlink: 'syz.9.2016': attribute type 14 has an invalid length. [ 255.233960][T13314] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2017'. [ 255.281839][T13321] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2018'. [ 255.288574][T13321] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2018'. [ 255.333171][ T5961] Bluetooth: hci5: command 0x040f tx timeout [ 255.347951][T13325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2019'. [ 255.360141][T13325] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2019'. [ 255.430959][T13334] veth1_macvtap: left promiscuous mode [ 255.433859][T13334] macsec0: entered promiscuous mode [ 255.435513][T13334] macsec0: entered allmulticast mode [ 255.448916][T13336] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2022'. [ 255.460692][T13334] batadv_slave_1: entered promiscuous mode [ 255.472103][T13334] veth1_macvtap: entered promiscuous mode [ 255.475566][T13334] veth1_macvtap: entered allmulticast mode [ 255.477979][T13334] macsec0: left promiscuous mode [ 255.479667][T13334] macsec0: left allmulticast mode [ 255.481316][T13334] veth1_macvtap: left allmulticast mode [ 255.485734][T13333] batadv_slave_1: left promiscuous mode [ 255.561570][ T40] audit: type=1400 audit(1759660101.411:863): avc: denied { connect } for pid=13345 comm="syz.1.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 255.565332][T13348] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2027'. [ 255.573404][T13346] syz.1.2026(13346): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 255.732086][T13355] binder: Bad value for 'max' [ 255.779741][ T40] audit: type=1400 audit(1759660101.631:864): avc: denied { write } for pid=13356 comm="syz.1.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 256.224752][T13388] fuse: Bad value for 'group_id' [ 256.226756][T13388] fuse: Bad value for 'group_id' [ 256.542963][ T53] usb 13-1: new high-speed USB device number 19 using dummy_hcd [ 256.614763][T13404] FAT-fs (loop4): unable to read boot sector [ 256.696523][ T40] audit: type=1400 audit(1759660102.551:865): avc: denied { write } for pid=13407 comm="syz.4.2048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 256.712761][ T53] usb 13-1: Using ep0 maxpacket: 32 [ 256.753933][ T53] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.757903][ T53] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.761424][ T53] usb 13-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 256.773754][ T53] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.807673][ T53] usb 13-1: config 0 descriptor?? [ 257.113845][T13430] bond0: (slave syz_tun): Releasing backup interface [ 257.148879][T13430] bond0: (slave team0): Releasing backup interface [ 257.207743][T13430] bond0: (slave dummy0): Releasing backup interface [ 257.222079][ T53] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0 [ 257.244842][T13430] bridge_slave_0: left allmulticast mode [ 257.248346][T13430] bridge_slave_0: left promiscuous mode [ 257.250733][T13430] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.256363][T13430] bridge_slave_1: left allmulticast mode [ 257.258495][T13430] bridge_slave_1: left promiscuous mode [ 257.261116][T13430] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.269226][T13430] bond0: (slave bond_slave_0): Releasing backup interface [ 257.315657][T13430] bond0: (slave bond_slave_1): Releasing backup interface [ 257.345078][T13430] team0: Port device team_slave_0 removed [ 257.349355][T13430] team0: Port device team_slave_1 removed [ 257.353402][T13430] bond0: (slave batadv_slave_0): Releasing backup interface [ 257.394214][T13430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.397764][T13430] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 257.404846][ T5309] Bluetooth: hci5: command 0x040f tx timeout [ 257.414613][T13433] team0: Mode changed to "loadbalance" [ 257.533102][ T6024] usb 13-1: USB disconnect, device number 19 [ 258.005941][T13461] IPVS: ip_vs_add_dest(): server weight less than zero [ 258.081462][T13467] random: crng reseeded on system resumption [ 258.102950][ T56] usb 14-1: new low-speed USB device number 10 using dummy_hcd [ 258.233229][ T56] usb 14-1: device descriptor read/64, error -71 [ 258.363024][ T24] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 258.470889][T13491] netlink: 'syz.8.2072': attribute type 4 has an invalid length. [ 258.478850][T13492] netlink: 'syz.8.2072': attribute type 4 has an invalid length. [ 258.492772][ T56] usb 14-1: new low-speed USB device number 11 using dummy_hcd [ 258.522868][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 258.527643][T13495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=13495 comm=syz.8.2073 [ 258.528058][ T24] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 258.532510][T13495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=13495 comm=syz.8.2073 [ 258.532536][T13495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=13495 comm=syz.8.2073 [ 258.549990][ T24] usb 9-1: config 0 has no interface number 0 [ 258.553313][ T24] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 258.558114][ T24] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 258.562279][ T24] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 258.566806][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.573816][ T24] usb 9-1: config 0 descriptor?? [ 258.584800][ T24] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 258.603937][T13500] tipc: Cannot configure node identity twice [ 258.623896][ T56] usb 14-1: device descriptor read/64, error -71 [ 258.743125][ T56] usb usb14-port1: attempt power cycle [ 258.779850][T13470] iowarrior 9-1:0.1: Error -90 while submitting URB [ 258.787902][T13470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.791722][T13470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.810964][ T1026] usb 9-1: USB disconnect, device number 25 [ 259.082803][ T56] usb 14-1: new low-speed USB device number 12 using dummy_hcd [ 259.114703][ T56] usb 14-1: device descriptor read/8, error -71 [ 259.348612][T13520] 9pnet_virtio: no channels available for device syz [ 259.383324][ T56] usb 14-1: new low-speed USB device number 13 using dummy_hcd [ 259.413481][ T56] usb 14-1: device descriptor read/8, error -71 [ 259.435982][T13527] bridge0: Device is already in use. [ 259.481160][T13529] program syz.8.2084 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.483312][ T5961] Bluetooth: hci5: command 0x040f tx timeout [ 259.533160][ T56] usb usb14-port1: unable to enumerate USB device [ 259.561175][ T40] audit: type=1400 audit(1759660105.411:866): avc: denied { map } for pid=13530 comm="syz.8.2085" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 259.610174][ T40] audit: type=1400 audit(1759660105.461:867): avc: denied { lock } for pid=13538 comm="syz.4.2087" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 259.754947][T13546] nfs: Bad value for 'source' [ 259.801267][T13550] btrfs: Unknown parameter 'acls/kernel/debug/sync/sw_sync' [ 259.856546][T13553] __nla_validate_parse: 5 callbacks suppressed [ 259.856562][T13553] netlink: 6 bytes leftover after parsing attributes in process `syz.8.2093'. [ 259.929734][ T40] audit: type=1400 audit(1759660105.781:868): avc: denied { connect } for pid=13559 comm="syz.8.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 259.981901][ T40] audit: type=1400 audit(1759660105.831:869): avc: denied { listen } for pid=13559 comm="syz.8.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 259.988998][ T40] audit: type=1400 audit(1759660105.841:870): avc: denied { accept } for pid=13559 comm="syz.8.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 260.246962][T13570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2099'. [ 260.278155][ T40] audit: type=1400 audit(1759660106.131:871): avc: denied { map } for pid=13571 comm="syz.8.2100" path="socket:[60608]" dev="sockfs" ino=60608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 260.290335][ T40] audit: type=1400 audit(1759660106.131:872): avc: denied { read accept } for pid=13571 comm="syz.8.2100" path="socket:[60608]" dev="sockfs" ino=60608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 260.397409][T13574] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2101'. [ 260.853329][ T6018] usb 13-1: new high-speed USB device number 20 using dummy_hcd [ 260.925708][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.928976][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.992758][ T6018] usb 13-1: device descriptor read/64, error -71 [ 261.232958][ T6018] usb 13-1: new high-speed USB device number 21 using dummy_hcd [ 261.369082][ T6018] usb 13-1: device descriptor read/64, error -71 [ 261.473380][ T6018] usb usb13-port1: attempt power cycle [ 261.583218][T13629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13629 comm=syz.4.2115 [ 261.778970][T13638] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2117'. [ 261.789978][T13638] batadv1: entered allmulticast mode [ 261.800200][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 261.800219][ T40] audit: type=1400 audit(1759660107.651:874): avc: denied { setattr } for pid=13636 comm="syz.1.2118" name="#4e" dev="tmpfs" ino=316 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 261.822736][ T6018] usb 13-1: new high-speed USB device number 22 using dummy_hcd [ 261.847247][ T6018] usb 13-1: device descriptor read/8, error -71 [ 261.857580][ T5961] Bluetooth: hci0: Invalid connection link type handle 0x00c8 [ 261.858527][T13645] overlayfs: failed to resolve './file1': -2 [ 261.883143][ T5961] Bluetooth: hci2: command 0x0405 tx timeout [ 261.943835][T13654] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 262.019884][T13662] cgroup: No subsys list or none specified [ 262.082804][ T6018] usb 13-1: new high-speed USB device number 23 using dummy_hcd [ 262.117703][ T6018] usb 13-1: device descriptor read/8, error -71 [ 262.176244][T13669] SELinux: policydb magic number 0xff does not match expected magic number 0xf97cff8c [ 262.192842][T13669] SELinux: failed to load policy [ 262.215454][T13672] EXT4-fs (nbd9): unable to read superblock [ 262.233432][ T6018] usb usb13-port1: unable to enumerate USB device [ 262.294804][T13678] netlink: 'syz.9.2130': attribute type 1 has an invalid length. [ 262.401756][ T40] audit: type=1400 audit(1759660108.251:875): avc: denied { setattr } for pid=13684 comm="syz.4.2131" name="" dev="pipefs" ino=60824 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 262.742827][ T6018] usb 14-1: new high-speed USB device number 14 using dummy_hcd [ 262.756495][T13707] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2139'. [ 262.762000][T13707] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2139'. [ 262.893263][ T6018] usb 14-1: Using ep0 maxpacket: 16 [ 262.903249][ T6018] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.907251][ T6018] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.910442][ T6018] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 262.916549][ T6018] usb 14-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 262.920665][ T6018] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.925088][ T6018] usb 14-1: config 0 descriptor?? [ 263.017097][T13729] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 263.021269][T13729] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 263.143515][ T5961] Bluetooth: hci2: unexpected subevent 0x06 length: 82 > 10 [ 263.146793][ T5961] Bluetooth: min 0 < 6 [ 263.148592][T13737] netlink: 22 bytes leftover after parsing attributes in process `syz.4.2149'. [ 263.396993][T13751] : renamed from wg2 (while UP) [ 263.397311][ T6018] hid_parser_main: 90 callbacks suppressed [ 263.397329][ T6018] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 263.404814][ T6018] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 263.407739][ T6018] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 263.410520][ T6018] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 263.415396][ T6018] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 263.422785][ T6018] input: HID 0955:7214 Haptics as /devices/virtual/input/input32 [ 263.438744][ T6018] shield 0003:0955:7214.000C: Registered Thunderstrike controller [ 263.441397][ T6018] shield 0003:0955:7214.000C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.9-1/input0 [ 263.788569][T13766] i2c i2c-1: Invalid block write size 34 [ 263.795479][T13768] Option ''MO' to dns_resolver key: bad/missing value [ 263.799333][T13768] sg_write: process 193 (syz.1.2157) changed security contexts after opening file descriptor, this is not allowed. [ 263.844131][T13770] IPv6: addrconf: prefix option has invalid lifetime [ 263.846888][T13771] netlink: 112 bytes leftover after parsing attributes in process `syz.8.2156'. [ 263.916029][T13776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2159'. [ 263.970464][ T1026] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 263.970748][ T6024] usb 14-1: USB disconnect, device number 14 [ 263.981070][ T1026] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 263.987269][ T1026] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 263.992057][ T1026] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 264.028458][ T40] audit: type=1400 audit(1759660109.881:876): avc: denied { override_creds } for pid=13782 comm="syz.1.2161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 264.149266][T13793] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2163'. [ 264.281207][T13806] block nbd4: NBD_DISCONNECT [ 264.350242][T13805] block nbd4: Disconnected due to user request. [ 264.353389][T13805] block nbd4: shutting down sockets [ 264.524658][T13815] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=13815 comm=syz.1.2169 [ 265.032136][ T40] audit: type=1400 audit(1759660110.881:877): avc: denied { map } for pid=13836 comm="syz.8.2175" path="/dev/hpet" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 265.042469][ T40] audit: type=1400 audit(1759660110.881:878): avc: denied { execute } for pid=13836 comm="syz.8.2175" path="/dev/hpet" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 265.173385][ T5961] Bluetooth: hci2: command 0x0405 tx timeout [ 265.289620][ T40] audit: type=1400 audit(1759660111.141:879): avc: denied { create } for pid=13844 comm="syz.4.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 265.296930][ T40] audit: type=1400 audit(1759660111.141:880): avc: denied { setopt } for pid=13844 comm="syz.4.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 265.305065][ T40] audit: type=1400 audit(1759660111.141:881): avc: denied { write } for pid=13844 comm="syz.4.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 265.329446][ T5961] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 265.332147][ T5961] Bluetooth: hci2: SCO packet for unknown connection handle 1626 [ 265.361172][ T40] audit: type=1400 audit(1759660111.211:882): avc: denied { shutdown } for pid=13857 comm="syz.1.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 265.505686][ T40] audit: type=1400 audit(1759660111.361:883): avc: denied { setopt } for pid=13868 comm="syz.8.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 265.524161][T13866] binder: BINDER_SET_CONTEXT_MGR already set [ 265.526487][T13866] binder: 13864:13866 ioctl 4018620d 200000000280 returned -16 [ 265.534267][T13871] comedi comedi3: comedi_config --init_data is deprecated [ 265.541917][T13871] netlink: 'syz.9.2186': attribute type 10 has an invalid length. [ 265.546229][T13871] netlink: 2 bytes leftover after parsing attributes in process `syz.9.2186'. [ 265.550083][T13871] team0: entered promiscuous mode [ 265.552334][T13871] team_slave_0: entered promiscuous mode [ 265.556741][T13871] team_slave_1: entered promiscuous mode [ 265.560572][T13871] bridge0: port 3(team0) entered blocking state [ 265.563565][T13871] bridge0: port 3(team0) entered disabled state [ 265.566366][T13871] team0: entered allmulticast mode [ 265.568508][T13871] team_slave_0: entered allmulticast mode [ 265.570919][T13871] team_slave_1: entered allmulticast mode [ 265.575936][T13871] bridge0: port 3(team0) entered blocking state [ 265.579372][T13871] bridge0: port 3(team0) entered forwarding state [ 265.612799][ T1026] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 265.785249][ T1026] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 265.788894][ T1026] usb 6-1: config 1 has no interface number 0 [ 265.792092][ T1026] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 8 [ 265.796222][ T1026] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 265.803586][ T1026] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 265.807498][ T1026] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.811791][ T1026] usb 6-1: Product: syz [ 265.814457][ T1026] usb 6-1: Manufacturer: syz [ 265.816353][ T1026] usb 6-1: SerialNumber: syz [ 265.820913][T13858] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 265.824459][T13858] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 265.833758][ T1026] usb 6-1: Error in usbnet_get_endpoints (-22) [ 265.858717][T13908] gfs2: gfs2 mount does not exist [ 265.864656][T13908] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2198'. [ 265.876788][T13908] MTD: Couldn't look up '/dev/sg0': -15 [ 265.909596][T13915] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2200'. [ 266.073278][ T5993] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 266.253757][ T5993] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 266.257290][ T5993] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 266.261943][ T5993] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 266.268193][ T5993] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 266.274746][ T5993] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 266.281771][ T5993] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 266.286173][ T5993] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 266.289676][ T5993] usb 9-1: Product: syz [ 266.291578][ T5993] usb 9-1: Manufacturer: syz [ 266.311722][ T5993] cdc_wdm 9-1:1.0: skipping garbage [ 266.314955][ T5993] cdc_wdm 9-1:1.0: skipping garbage [ 266.319212][ T5993] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 266.323756][ T5993] cdc_wdm 9-1:1.0: Unknown control protocol [ 266.326621][T13939] netlink: 'syz.8.2207': attribute type 1 has an invalid length. [ 266.352413][T13939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.358567][T13939] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2207'. [ 266.362844][T13939] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2207'. [ 266.385108][T13941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.388768][T13941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.485992][T13947] bond0: (slave wlan0): Enslaving as an active interface with a down link [ 266.492502][T13939] vlan2: entered allmulticast mode [ 266.495137][T13939] veth1: entered allmulticast mode [ 266.499517][T13939] veth1: entered promiscuous mode [ 266.505451][T13939] veth1: left promiscuous mode [ 266.510444][T13939] bond0: (slave vlan2): making interface the new active one [ 266.514190][T13939] bond0: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 266.522431][T13939] veth1: entered promiscuous mode [ 266.527055][T13939] vlan2: entered promiscuous mode [ 266.529855][T13939] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 266.555231][ T5993] usb 9-1: USB disconnect, device number 26 [ 266.860352][T13967] IPVS: Unknown mcast interface: b@idge_sl [ 267.239964][T13983] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 267.305802][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 267.305817][ T40] audit: type=1400 audit(1759660113.161:890): avc: denied { bind } for pid=13984 comm="syz.9.2220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 267.365288][ T40] audit: type=1400 audit(1759660113.221:891): avc: denied { getopt } for pid=13986 comm="syz.4.2221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 267.861564][ T40] audit: type=1400 audit(1759660113.711:892): avc: denied { remount } for pid=14013 comm="syz.8.2227" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 267.880252][ T40] audit: type=1400 audit(1759660113.731:893): avc: denied { unmount } for pid=10097 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 267.982242][ T40] audit: type=1326 audit(1759660113.831:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14022 comm="syz.8.2230" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07bdb8eec9 code=0x0 [ 268.228285][ T40] audit: type=1400 audit(1759660114.081:895): avc: denied { rename } for pid=14044 comm="syz.4.2235" name="file0" dev="9p" ino=72352089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 268.256282][ T40] audit: type=1400 audit(1759660114.111:896): avc: denied { prog_load } for pid=14049 comm="syz.8.2238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 268.263987][ T40] audit: type=1400 audit(1759660114.111:897): avc: denied { prog_run } for pid=14049 comm="syz.8.2238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 268.270319][ T40] audit: type=1400 audit(1759660114.121:898): avc: denied { append } for pid=14049 comm="syz.8.2238" name="usbmon6" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 268.311199][T14052] IPv6: NLM_F_CREATE should be specified when creating new route [ 268.383179][ T6018] usb 6-1: USB disconnect, device number 3 [ 268.395647][T14054] kvm: Disabled LAPIC found during irq injection [ 268.400679][T14054] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2240'. [ 268.515560][ T5961] Bluetooth: hci5: failed to read key size for handle 201 [ 268.516241][T14056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2241'. [ 268.520301][ T5961] Bluetooth: hci5: unexpected event for opcode 0x1408 [ 268.527828][T14056] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 268.533815][T14056] netlink: 'syz.1.2241': attribute type 10 has an invalid length. [ 268.545545][T14056] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 268.614699][ T40] audit: type=1400 audit(1759660114.471:899): avc: denied { connect } for pid=14064 comm="syz.8.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 268.778756][T14078] binder: 14077:14078 unknown command 0 [ 268.781277][T14078] binder: 14077:14078 ioctl c0306201 200000000080 returned -22 [ 268.894951][T14087] overlayfs: failed to decode file handle (len=6, type=65535, flags=0, err=-22) [ 269.006076][T14086] "syz.1.2250" (14086) uses obsolete ecb(arc4) skcipher [ 269.011224][T14086] 9pnet_virtio: no channels available for device syz [ 269.202235][T14103] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2256'. [ 269.232060][T14108] 9pnet_virtio: no channels available for device syz [ 269.266595][T14112] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.391527][T14120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2262'. [ 269.411942][T14120] MINIX-fs: unable to read superblock [ 269.428685][T14123] binder: 14122:14123 ioctl c0306201 200000000080 returned -14 [ 269.433422][T14124] binder: BINDER_SET_CONTEXT_MGR already set [ 269.436100][T14124] binder: 14122:14124 ioctl 4018620d 200000004a80 returned -16 [ 269.530867][T14137] gfs2: error -5 reading superblock [ 270.221470][ T1026] Process accounting resumed [ 270.328554][T14185] netlink: 'syz.8.2278': attribute type 1 has an invalid length. [ 270.846917][ T1026] usb 13-1: new high-speed USB device number 24 using dummy_hcd [ 270.994832][ T1026] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.999130][ T1026] usb 13-1: config 0 has no interfaces? [ 271.004977][ T1026] usb 13-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 271.008963][ T1026] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.013141][ T1026] usb 13-1: Product: syz [ 271.015296][ T1026] usb 13-1: Manufacturer: syz [ 271.017546][ T1026] usb 13-1: SerialNumber: syz [ 271.022129][ T1026] usb 13-1: config 0 descriptor?? [ 271.089033][T14229] binder: 14228:14229 unknown command 0 [ 271.092768][T14229] binder: 14228:14229 ioctl c0306201 200000000080 returned -22 [ 271.098924][T14229] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2290'. [ 271.124507][T14229] binder: 14228:14229 ioctl c0306201 2000000003c0 returned -14 [ 271.127665][T14229] binder: 14228:14229 ioctl c0306201 200000000180 returned -14 [ 271.246859][T14202] sctp: Trying to GSO but underlying device doesn't support it. [ 271.249334][T14202] 9p: Unknown access argument 18446744073709551615: -34 [ 271.358076][T14249] autofs4:pid:14249:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(40960.1), cmd(0xc0189374) [ 271.358098][T14249] autofs4:pid:14249:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 271.358860][T14250] autofs4:pid:14250:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(40960.1), cmd(0xc0189374) [ 271.358878][T14250] autofs4:pid:14250:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 271.423256][ T5993] usb 14-1: new low-speed USB device number 15 using dummy_hcd [ 271.484773][ T53] usb 13-1: USB disconnect, device number 24 [ 271.602811][ T5993] usb 14-1: Invalid ep0 maxpacket: 64 [ 271.733066][ T5993] usb 14-1: new low-speed USB device number 16 using dummy_hcd [ 271.882921][ T5993] usb 14-1: Invalid ep0 maxpacket: 64 [ 271.885609][ T5993] usb usb14-port1: attempt power cycle [ 272.152310][T14259] binder: 14257:14259 ioctl c0306201 200000000080 returned -22 [ 272.222883][ T5993] usb 14-1: new low-speed USB device number 17 using dummy_hcd [ 272.244584][ T5993] usb 14-1: Invalid ep0 maxpacket: 64 [ 272.372843][ T5993] usb 14-1: new low-speed USB device number 18 using dummy_hcd [ 272.403597][ T5993] usb 14-1: Invalid ep0 maxpacket: 64 [ 272.406146][ T5993] usb usb14-port1: unable to enumerate USB device [ 272.434692][T14265] (syz.4.2300,14265,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 272.439065][T14265] (syz.4.2300,14265,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 272.555892][T14268] usb usb8: usbfs: process 14268 (syz.4.2301) did not claim interface 0 before use [ 272.557889][T14270] netlink: 'syz.4.2301': attribute type 1 has an invalid length. [ 272.564839][T14270] NCSI netlink: No device for ifindex 0 [ 273.252921][ T5968] Bluetooth: hci1: command 0x0406 tx timeout [ 273.315658][T14301] bond2: peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 273.322444][T14301] 8021q: adding VLAN 0 to HW filter on device bond2 [ 273.406470][T14306] SELinux: syz.4.2311 (14306) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 273.413500][ T5961] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 273.414762][ T5309] Bluetooth: hci3: command 0x1003 tx timeout [ 273.439101][ T1026] usb 13-1: new high-speed USB device number 25 using dummy_hcd [ 273.528470][T14309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2312'. [ 273.535069][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 273.535080][ T40] audit: type=1326 audit(1759660119.391:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14307 comm="syz.1.2312" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3cd38eec9 code=0x0 [ 273.594663][ T1026] usb 13-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 273.599744][ T1026] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 36, changing to 9 [ 273.604499][ T1026] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 1216, setting to 1024 [ 273.609545][ T1026] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 273.616077][ T1026] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 273.620089][ T1026] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.625846][ T1026] usb 13-1: config 0 descriptor?? [ 273.628763][T14290] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 273.933353][T14311] netlink: 'syz.1.2313': attribute type 1 has an invalid length. [ 273.973538][T14311] 8021q: adding VLAN 0 to HW filter on device bond2 [ 273.980639][T14311] bond1: (slave bond2): making interface the new active one [ 273.983918][T14311] bond1: (slave bond2): Enslaving as an active interface with an up link [ 273.995015][T14311] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 274.038355][ T1026] plantronics 0003:047F:FFFF.000D: ignoring exceeding usage max [ 274.051355][ T1026] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 274.137654][T14318] sctp: [Deprecated]: syz.1.2315 (pid 14318) Use of struct sctp_assoc_value in delayed_ack socket option. [ 274.137654][T14318] Use struct sctp_sack_info instead [ 274.145170][T14318] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 274.160286][T14318] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 274.303463][T10391] usb 13-1: USB disconnect, device number 25 [ 274.409006][T14336] 9pnet_fd: Insufficient options for proto=fd [ 274.484467][ T40] audit: type=1400 audit(1759660120.331:910): avc: denied { unlink } for pid=14345 comm="syz.9.2323" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 274.528312][T14350] overlay: Unknown parameter 'dont_hash' [ 274.719127][T14360] netlink: 276 bytes leftover after parsing attributes in process `syz.9.2326'. [ 275.013277][T10391] usb 14-1: new high-speed USB device number 19 using dummy_hcd [ 275.038392][ T40] audit: type=1400 audit(1759660120.891:911): avc: denied { mounton } for pid=14370 comm="syz.8.2330" path="/304/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 275.198192][T10391] usb 14-1: config index 0 descriptor too short (expected 39, got 27) [ 275.201840][T10391] usb 14-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 275.206436][T10391] usb 14-1: config 0 interface 0 has no altsetting 0 [ 275.218154][T10391] usb 14-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 275.221340][T10391] usb 14-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 275.236536][T10391] usb 14-1: Product: syz [ 275.238392][T10391] usb 14-1: Manufacturer: syz [ 275.240360][T10391] usb 14-1: SerialNumber: syz [ 275.244393][T10391] usb 14-1: config 0 descriptor?? [ 275.248019][T10391] hub 14-1:0.0: bad descriptor, ignoring hub [ 275.250612][T10391] hub 14-1:0.0: probe with driver hub failed with error -5 [ 275.254950][T10391] usb 14-1: selecting invalid altsetting 0 [ 275.538742][T14410] overlayfs: missing 'workdir' [ 275.553264][ T24] usb 14-1: USB disconnect, device number 19 [ 275.562571][T14412] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2342'. [ 275.573101][T14413] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2342'. [ 275.635555][T14418] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2344'. [ 275.639442][T14418] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2344'. [ 275.654077][ T5961] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 275.687074][ T40] audit: type=1400 audit(1759660121.541:912): avc: denied { read } for pid=14361 comm="syz.9.2327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 275.709390][ T40] audit: type=1800 audit(1759660121.561:913): pid=14362 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.2327" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 275.811784][T14428] netlink: 252 bytes leftover after parsing attributes in process `syz.8.2344'. [ 275.849259][T14430] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2347'. [ 275.956503][ T5961] Bluetooth: to_multiplier 54284 > 3200 [ 275.960874][T14437] pimreg3: entered allmulticast mode [ 276.276621][ T40] audit: type=1400 audit(1759660122.131:914): avc: denied { map } for pid=14450 comm="syz.9.2353" path="socket:[63868]" dev="sockfs" ino=63868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 276.286657][ T40] audit: type=1400 audit(1759660122.131:915): avc: denied { map } for pid=14450 comm="syz.9.2353" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 276.329614][T14456] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 276.335949][T14456] netlink: 'syz.1.2355': attribute type 11 has an invalid length. [ 276.344182][ T40] audit: type=1400 audit(1759660122.191:916): avc: denied { search } for pid=14452 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.354952][T14458] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2356'. [ 276.355605][ T40] audit: type=1400 audit(1759660122.211:917): avc: denied { read } for pid=14452 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 276.358671][T14458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.388013][ T40] audit: type=1400 audit(1759660122.251:918): avc: denied { read write } for pid=14459 comm="syz.1.2357" name="card0" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 276.456974][T14458] batman_adv: batadv0: Removing interface: batadv_slave_1 syzkaller syzkaller login: [ 276.622594][T14472] overlayfs: missing 'lowerdir' [ 276.843751][T14484] usb usb4: usbfs: process 14484 (syz.9.2363) did not claim interface 0 before use [ 276.888524][T14489] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 277.025083][T14500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14500 comm=syz.1.2366 [ 277.088740][T14506] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2370'. [ 277.134498][T14512] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2371'. [ 277.139467][T14512] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2371'. [ 277.382805][ T24] usb 13-1: new high-speed USB device number 26 using dummy_hcd [ 277.532689][ T24] usb 13-1: Using ep0 maxpacket: 32 [ 277.536591][ T24] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.540633][ T24] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 277.544206][ T24] usb 13-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 277.549885][ T24] usb 13-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 277.552835][ T24] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.555390][ T24] usb 13-1: Product: И [ 277.556702][ T24] usb 13-1: Manufacturer: 貤੔෨枀▬ّѾ살쌾끢ੜ⍛覝䬙ꓢ䣩ᾎ苧ៈﰐᴒⱕ흥 [ 277.560272][ T24] usb 13-1: SerialNumber: 鉖쳆鬺蘽硹쟆罅ﶄ湌偝䵯䠫ឞ억Ⱬ벢龋ᅱ佞裺欸拕垏辄៊䋘ꢘḖ䆽 [ 277.643482][T12018] vlan2: left promiscuous mode [ 277.778436][ T24] usb 13-1: 0:2 : does not exist [ 277.789502][ T24] usb 13-1: USB disconnect, device number 26 [ 277.804027][T12992] udevd[12992]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb13/13-1/13-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 277.918161][T14519] syzkaller1: entered promiscuous mode [ 277.920121][T14519] syzkaller1: entered allmulticast mode [ 277.972818][ T5961] Bluetooth: hci5: command 0x040f tx timeout [ 278.186527][T14530] netlink: 'syz.1.2377': attribute type 4 has an invalid length. [ 278.300523][T14539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2379'. [ 278.477341][T14548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2382'. [ 278.524916][T14554] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2383'. [ 278.542381][T14554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.545105][T14554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.551732][T14554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.556102][T14554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.609120][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 278.609136][ T40] audit: type=1400 audit(1759660124.461:937): avc: denied { read write } for pid=14565 comm="syz.1.2388" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 278.625663][ T40] audit: type=1400 audit(1759660124.461:938): avc: denied { open } for pid=14565 comm="syz.1.2388" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 278.639095][T14563] syzkaller0: entered promiscuous mode [ 278.641365][T14563] syzkaller0: entered allmulticast mode [ 278.779017][T14574] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2390'. [ 278.805569][T14578] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5138 sclass=netlink_route_socket pid=14578 comm=syz.8.2391 [ 278.817464][T14574] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 279.149214][ T40] audit: type=1400 audit(1759660124.969:939): avc: denied { getopt } for pid=14600 comm="syz.1.2399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 279.171913][T14601] efs: device does not support 512 byte blocks [ 279.175209][T14601] device does not support 512 byte blocks [ 279.175209][T14601] [ 279.281671][T14605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2400'. [ 281.310648][T14605] batman_adv: batadv0: Adding interface: ipvlan2 [ 281.312770][T14605] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.322340][T14605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.325961][T14605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.329182][T14605] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 281.367959][ T40] audit: type=1400 audit(1759660127.046:940): avc: denied { read write } for pid=14606 comm="syz.4.2401" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 281.377976][ T40] audit: type=1400 audit(1759660127.046:941): avc: denied { open } for pid=14606 comm="syz.4.2401" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 281.388198][ T40] audit: type=1400 audit(1759660127.055:942): avc: denied { mounton } for pid=14606 comm="syz.4.2401" path="/560/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=fifo_file permissive=1 [ 281.770224][T14620] netlink: 'syz.8.2405': attribute type 13 has an invalid length. [ 283.285474][T14610] IPVS: Unknown mcast interface: netpci0 [ 283.536035][T14643] Unknown options in mask 22 [ 283.624258][ T40] audit: type=1400 audit(1759660129.151:943): avc: denied { write } for pid=14642 comm="syz.8.2412" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 283.633160][ T40] audit: type=1400 audit(1759660129.151:944): avc: denied { open } for pid=14642 comm="syz.8.2412" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 283.649612][T14655] program syz.8.2412 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 283.696603][ T40] audit: type=1400 audit(1759660129.225:945): avc: denied { bind } for pid=14653 comm="syz.1.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 283.714619][ T40] audit: type=1400 audit(1759660129.235:946): avc: denied { listen } for pid=14653 comm="syz.1.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 283.755558][T14663] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2416'. [ 283.766598][T14663] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.871951][T14663] bridge_slave_1 (unregistering): left allmulticast mode [ 283.874725][T14663] bridge_slave_1 (unregistering): left promiscuous mode [ 283.877708][T14663] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.201587][ T40] audit: type=1400 audit(1759660129.684:947): avc: denied { read write } for pid=14681 comm="syz.8.2420" name="uinput" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 284.202519][T14683] input: syz0 as /devices/virtual/input/input35 [ 284.211947][ T40] audit: type=1400 audit(1759660129.684:948): avc: denied { open } for pid=14681 comm="syz.8.2420" path="/dev/uinput" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 284.233214][ T40] audit: type=1400 audit(1759660129.693:949): avc: denied { ioctl } for pid=14681 comm="syz.8.2420" path="/dev/uinput" dev="devtmpfs" ino=942 ioctlcmd=0x7008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 284.313339][T14694] netlink: 928 bytes leftover after parsing attributes in process `syz.9.2423'. [ 284.401969][T14707] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2427'. [ 284.528489][T14722] kAFS: No cell specified [ 284.531098][T14722] overlayfs: failed to resolve 'verity=require': -2 [ 284.800973][T14739] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2436'. [ 284.806256][T14739] netlink: 'syz.4.2436': attribute type 1 has an invalid length. [ 284.836146][T14739] bond3: entered promiscuous mode [ 284.839376][T14739] bond3: entered allmulticast mode [ 284.865956][ T40] audit: type=1400 audit(1759660130.320:950): avc: denied { ioctl } for pid=14738 comm="syz.4.2436" path="socket:[67091]" dev="sockfs" ino=67091 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 285.046649][ T6018] usb 14-1: new high-speed USB device number 20 using dummy_hcd [ 285.238526][ T6018] usb 14-1: Using ep0 maxpacket: 8 [ 285.242333][ T6018] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 285.245945][ T6018] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 285.250443][ T6018] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 285.254103][ T6018] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 285.257825][ T6018] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 285.263407][ T6018] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 285.266352][ T6018] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.285395][T14763] netlink: 'syz.4.2443': attribute type 10 has an invalid length. [ 285.291778][T14765] netlink: 'syz.4.2443': attribute type 10 has an invalid length. [ 285.650348][T14780] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2446'. [ 285.663894][ T40] audit: type=1400 audit(1759660131.068:951): avc: denied { execute } for pid=14782 comm="syz.1.2447" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 285.944052][ T6018] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 285.953564][ T40] audit: type=1400 audit(1759660131.330:952): avc: denied { read } for pid=14788 comm="syz.8.2451" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 285.954318][T14789] ata1.00: invalid multi_count 128 ignored [ 285.964588][ T40] audit: type=1400 audit(1759660131.330:953): avc: denied { ioctl } for pid=14788 comm="syz.8.2451" path="/dev/sg0" dev="devtmpfs" ino=720 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 286.079960][T14800] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2453'. [ 286.116727][ T6018] usb 6-1: Using ep0 maxpacket: 32 [ 286.125943][ T6018] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 286.127764][ T6018] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 286.142468][ T6018] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 286.142500][ T6018] usb 6-1: Product: syz [ 286.142517][ T6018] usb 6-1: Manufacturer: syz [ 286.142537][ T6018] usb 6-1: SerialNumber: syz [ 286.145448][ T6018] usb 6-1: config 0 descriptor?? [ 286.164739][T14783] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 286.170501][ T6018] hub 6-1:0.0: bad descriptor, ignoring hub [ 286.173723][ T6018] hub 6-1:0.0: probe with driver hub failed with error -5 [ 286.269441][T14800] team0 (unregistering): Port device team_slave_0 removed [ 286.276941][T14800] team0 (unregistering): Port device team_slave_1 removed [ 286.414154][T14815] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2456'. [ 286.454481][T14815] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14815 comm=syz.8.2456 [ 286.500845][ T40] audit: type=1400 audit(1759660131.854:954): avc: denied { setattr } for pid=14819 comm="syz.8.2458" name="video0" dev="devtmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 286.545013][ T40] audit: type=1400 audit(1759660131.891:955): avc: denied { nlmsg_tty_audit } for pid=14822 comm="syz.8.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 286.602958][T14783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.611431][T14783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.739592][ T6018] usb 6-1: USB disconnect, device number 4 [ 286.778281][ T5961] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 286.781234][ T5961] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 286.784678][ T5961] ------------[ cut here ]------------ [ 286.787482][ T5961] WARNING: CPU: 0 PID: 5961 at net/bluetooth/hci_conn.c:567 hci_conn_timeout+0x11a/0x210 [ 286.791753][ T5961] Modules linked in: [ 286.794716][ T5961] CPU: 0 UID: 0 PID: 5961 Comm: kworker/u33:3 Not tainted syzkaller #0 PREEMPT(full) [ 286.801909][ T5961] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 286.806380][ T5961] Workqueue: hci2 hci_conn_timeout [ 286.808549][ T5961] RIP: 0010:hci_conn_timeout+0x11a/0x210 [ 286.811662][ T5961] Code: 00 e8 1a b5 68 f7 4c 89 f1 4c 89 e2 48 c7 c6 40 96 b7 8c 48 c7 c7 c0 5b 5b 90 e8 c1 0b 82 fa e9 4d ff ff ff e8 f7 b4 68 f7 90 <0f> 0b 90 e8 ee b4 68 f7 48 8d bb f5 f6 ff ff 48 b8 00 00 00 00 00 [ 286.820427][ T5961] RSP: 0018:ffffc9000337fc30 EFLAGS: 00010293 [ 286.823196][ T5961] RAX: 0000000000000000 RBX: ffff888025010948 RCX: ffffffff8a525d8f [ 286.826980][ T5961] RDX: ffff888027462480 RSI: ffffffff8a525e39 RDI: 0000000000000005 [ 286.830676][ T5961] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 286.834342][ T5961] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff888025010000 [ 286.837597][ T5961] R13: 0000000000000000 R14: ffffffff905febf4 R15: ffffc9000337fd10 [ 286.840876][ T5961] FS: 0000000000000000(0000) GS:ffff8880d6e67000(0000) knlGS:0000000000000000 [ 286.844085][ T5961] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.846197][ T5961] CR2: 000000110c347dc3 CR3: 000000005aa16000 CR4: 0000000000352ef0 [ 286.848758][ T5961] Call Trace: [ 286.849964][ T5961] [ 286.851029][ T5961] process_one_work+0x9cc/0x1b70 [ 286.853106][ T5961] ? __pfx_hci_rx_work+0x10/0x10 [ 286.855239][ T5961] ? __pfx_process_one_work+0x10/0x10 [ 286.857287][ T5961] ? assign_work+0x1a0/0x250 [ 286.858912][ T5961] worker_thread+0x6c8/0xf10 [ 286.860427][ T5961] ? __pfx_worker_thread+0x10/0x10 [ 286.862246][ T5961] kthread+0x3c5/0x780 [ 286.863632][ T5961] ? __pfx_kthread+0x10/0x10 [ 286.865110][ T5961] ? rcu_is_watching+0x12/0xc0 [ 286.866780][ T5961] ? __pfx_kthread+0x10/0x10 [ 286.868296][ T5961] ret_from_fork+0x56d/0x730 [ 286.870157][ T5961] ? __pfx_kthread+0x10/0x10 [ 286.872024][ T5961] ret_from_fork_asm+0x1a/0x30 [ 286.874997][ T5961] [ 286.876361][ T5961] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 286.879247][ T5961] CPU: 0 UID: 0 PID: 5961 Comm: kworker/u33:3 Not tainted syzkaller #0 PREEMPT(full) [ 286.883089][ T5961] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 286.887746][ T5961] Workqueue: hci2 hci_conn_timeout [ 286.890179][ T5961] Call Trace: [ 286.891790][ T5961] [ 286.893226][ T5961] dump_stack_lvl+0x3d/0x1f0 [ 286.895288][ T5961] vpanic+0x640/0x6f0 [ 286.897052][ T5961] ? hci_conn_timeout+0x11a/0x210 [ 286.899191][ T5961] panic+0xca/0xd0 [ 286.900965][ T5961] ? __pfx_panic+0x10/0x10 [ 286.902889][ T5961] ? check_panic_on_warn+0x1f/0xb0 [ 286.905185][ T5961] check_panic_on_warn+0xab/0xb0 [ 286.907502][ T5961] __warn+0xf6/0x3c0 [ 286.909306][ T5961] ? hci_conn_timeout+0x11a/0x210 [ 286.911604][ T5961] report_bug+0x3c3/0x580 [ 286.913558][ T5961] ? hci_conn_timeout+0x11a/0x210 [ 286.915630][ T5961] handle_bug+0x184/0x210 [ 286.917427][ T5961] exc_invalid_op+0x17/0x50 [ 286.919322][ T5961] asm_exc_invalid_op+0x1a/0x20 [ 286.921412][ T5961] RIP: 0010:hci_conn_timeout+0x11a/0x210 [ 286.923924][ T5961] Code: 00 e8 1a b5 68 f7 4c 89 f1 4c 89 e2 48 c7 c6 40 96 b7 8c 48 c7 c7 c0 5b 5b 90 e8 c1 0b 82 fa e9 4d ff ff ff e8 f7 b4 68 f7 90 <0f> 0b 90 e8 ee b4 68 f7 48 8d bb f5 f6 ff ff 48 b8 00 00 00 00 00 [ 286.932533][ T5961] RSP: 0018:ffffc9000337fc30 EFLAGS: 00010293 [ 286.935083][ T5961] RAX: 0000000000000000 RBX: ffff888025010948 RCX: ffffffff8a525d8f [ 286.938313][ T5961] RDX: ffff888027462480 RSI: ffffffff8a525e39 RDI: 0000000000000005 [ 286.940879][ T5961] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 286.943918][ T5961] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff888025010000 [ 286.946850][ T5961] R13: 0000000000000000 R14: ffffffff905febf4 R15: ffffc9000337fd10 [ 286.949686][ T5961] ? hci_conn_timeout+0x6f/0x210 [ 286.951762][ T5961] ? hci_conn_timeout+0x119/0x210 [ 286.953816][ T5961] process_one_work+0x9cc/0x1b70 [ 286.955411][ T5961] ? __pfx_hci_rx_work+0x10/0x10 [ 286.957051][ T5961] ? __pfx_process_one_work+0x10/0x10 [ 286.959161][ T5961] ? assign_work+0x1a0/0x250 [ 286.961201][ T5961] worker_thread+0x6c8/0xf10 [ 286.963241][ T5961] ? __pfx_worker_thread+0x10/0x10 [ 286.965612][ T5961] kthread+0x3c5/0x780 [ 286.966995][ T5961] ? __pfx_kthread+0x10/0x10 [ 286.968541][ T5961] ? rcu_is_watching+0x12/0xc0 [ 286.970106][ T5961] ? __pfx_kthread+0x10/0x10 [ 286.971591][ T5961] ret_from_fork+0x56d/0x730 [ 286.973508][ T5961] ? __pfx_kthread+0x10/0x10 [ 286.975712][ T5961] ret_from_fork_asm+0x1a/0x30 [ 286.978080][ T5961] [ 286.980466][ T5961] Kernel Offset: disabled [ 286.982708][ T5961] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:20:20 Registers: info registers vcpu 0 CPU#0 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85234285 RDI=ffffffff9ab75a40 RBP=ffffffff9ab75a00 RSP=ffffc9000337f5a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000005d R14=ffffffff9ab75a00 R15=ffffffff85234220 RIP=ffffffff852342af RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6e67000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c347dc3 CR3=000000005aa16000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000030746973 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffddde5c0b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffddde5c0b6 00007ffddde5c0bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07bdc12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07bdc12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07bdc12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07bdc12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07bdc1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07bdc1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07bddb74a8 00007f07bddb74a0 00007f07bddb7498 00007f07bddb7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07be91d100 00007f07bddb7460 00007f07bddb0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07bddb74b8 00007f07bddb74b0 00007f07bddb74a8 00007f07bddb74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000274011 RBX=0000000000000001 RCX=ffffffff8b513a89 RDX=0000000000000000 RSI=ffffffff8d8276c6 RDI=ffffffff8bd04140 RBP=ffffed1003ad9490 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801d6ca480 R14=ffffffff905fbb90 R15=0000000000000000 RIP=ffffffff8b5125af RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6f67000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb4c3dd4f98 CR3=00000000485fc000 CR4=00352ef0 DR0=0000000000000000 DR1=000000000000000e DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000001e0241 RBX=0000000000000002 RCX=ffffffff8b513a89 RDX=0000000000000000 RSI=ffffffff8d8276c6 RDI=ffffffff8bd04140 RBP=ffffed1003ad9920 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d506655 R10=ffff88806a8332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801d6cc900 R14=ffffffff905fbb90 R15=0000000000000000 RIP=ffffffff8b5125af RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d7067000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000001300 CR3=000000004b55e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcec5cb000 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcec5cb186 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcec5cb186 00007ffcec5cb18c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1029e12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1029e12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1029e12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1029e12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1029e1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1029e1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000aef0e443b0 RBX=ffff88806a923a00 RCX=00000000000006e0 RDX=00000000000000ae RSI=ffff88806a923a00 RDI=0000000000180ce2 RBP=0000000000180ce2 RSP=ffffc900006f8ec8 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000019 R15=ffff88806a927c80 RIP=ffffffff81679e55 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d7167000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001300 CR3=0000000048eae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000e0000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec51a6130 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec51a62b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec51a62b6 00007ffec51a62bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3cd412fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3cd412fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3cd412fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3cd412fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3cd41305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3cd41313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000