last executing test programs: 20.961654379s ago: executing program 1 (id=701): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x10201, 0x2, 0xffff1000, 0x1000, &(0x7f0000003000/0x1000)=nil}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80202, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20.77600994s ago: executing program 1 (id=704): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800100d, r0, 0x0) (async) fanotify_mark(r1, 0x1, 0x4800100d, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r1, 0x71, 0x40000009, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) 20.775653843s ago: executing program 1 (id=705): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x4) (async) mkdir(&(0x7f0000000840)='./file0\x00', 0x188) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000002c0)='.\x00', 0x8) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) (async) sendfile(r6, r5, 0x0, 0x20000023893) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000580)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) sendmsg$SOCK_DESTROY(r7, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x42c}, 0x1, 0x0, 0x0, 0x1}, 0x4800) (async) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f0000000940)={'erspan0\x00', &(0x7f0000000880)={'tunl0\x00', r2, 0x10, 0x700, 0x600, 0x0, {{0x22, 0x4, 0x0, 0x20, 0x88, 0x65, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @broadcast, {[@timestamp={0x44, 0x18, 0xd1, 0x0, 0x5, [0x80000000, 0x2, 0x2, 0x0, 0x9]}, @lsrr={0x83, 0x13, 0xd0, [@local, @empty, @multicast1, @local]}, @timestamp={0x44, 0xc, 0x30, 0x0, 0x1, [0x4, 0x10001]}, @rr={0x7, 0xf, 0xec, [@local, @broadcast, @multicast2]}, @timestamp={0x44, 0xc, 0x40, 0x0, 0x8, [0xfffffffb, 0x8]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0xec, 0x1, 0x9, [{@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x6}, {@multicast1, 0x7}]}]}}}}}) bind$packet(r7, &(0x7f0000000980)={0x11, 0x10, r10, 0x1, 0x6}, 0x14) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0xa7, 0x9, 0xfd, 0x1, 0x4, 0x80, 0x0, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (async) recvfrom$inet_nvme(r7, &(0x7f00000009c0)=""/233, 0xe9, 0x40002000, &(0x7f0000000ac0)=@phonet={0x23, 0x6, 0x3, 0x7}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r12, @ANYBLOB="011f0800020007000000"], 0x20}, 0x1, 0x0, 0x0, 0xc044}, 0x4) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0x1}}}, 0x24}}, 0x10) 20.715269732s ago: executing program 1 (id=706): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1b, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff9}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0x7, 0x1, 0x0, 0x1}]}, &(0x7f0000000200)='GPL\x00', 0x8, 0x93, &(0x7f0000000240)=""/147, 0x41100, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x1, 0x7, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000380)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x0, 0x2, 0xd, 0x1}, {0x1, 0x2, 0x10, 0x1}, {0x3, 0x2, 0xa, 0x6}, {0x2, 0x4, 0x2, 0xc}], 0x10, 0x46e4}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) keyctl$clear(0x5, 0xfffffffffffffffd) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000000)='xprt_reserve\x00', r0, 0x0, 0x3}, 0x18) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x74]}}]}) 20.713490879s ago: executing program 1 (id=707): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x10000, 0x1a) mknod(&(0x7f00000000c0)='./file0/file0\x00', 0x800, 0x2) syz_fuse_handle_req(r0, &(0x7f0000002100)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfcd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c97cba5ca94ef1c555d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5b38f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f9", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x9, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0x40d, 0xffffffffffffffff, 0x102, 0x100, 0x2, 0x4005, 0xc000, 0xfffff7fc, r2, 0x0, 0x7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x8, 0x7383ca4a, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x8842) 20.455182958s ago: executing program 1 (id=708): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x20044005) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) 20.416191561s ago: executing program 32 (id=708): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x20044005) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) 10.465126573s ago: executing program 2 (id=815): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/198, 0xc6}], 0x1) (async, rerun: 32) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) (async, rerun: 32) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000280)={'sit0\x00', &(0x7f00000000c0)={'syztnl1\x00', r4, 0x20, 0x8, 0xae7, 0x6, {{0x61, 0x4, 0x1, 0x13, 0x184, 0x64, 0x0, 0x80, 0xd3e42451d53748df, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@generic={0x86, 0x11, "e8634087e7cb6e6dcbc0d5c7f7972d"}, @cipso={0x86, 0x34, 0x3, [{0x6, 0x2}, {0x5, 0x8, "2f2e7c339d48"}, {0x2, 0xc, "90d1ed139cfd4ab5b6de"}, {0x6, 0x11, "199441c573a15bc183916020aed287"}, {0x0, 0x7, "aa4aafef25"}]}, @timestamp_prespec={0x44, 0x54, 0x13, 0x3, 0xa, [{@local}, {@loopback}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@rand_addr=0x64010101, 0x6}, {@local}, {@broadcast, 0x8}, {@empty, 0x6}, {@empty}, {@empty}, {@multicast1, 0xfdc9}]}, @timestamp_prespec={0x44, 0xc, 0xa8, 0x3, 0xd, [{@multicast1, 0x5}]}, @timestamp_prespec={0x44, 0x54, 0xb2, 0x3, 0xb, [{@multicast2, 0x6}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffa}, {@empty, 0x2}, {@empty, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0xa}, {@empty, 0x1}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x9}, {@local, 0x8}]}, @lsrr={0x83, 0x27, 0xb, [@private=0xa010100, @rand_addr=0x64010102, @remote, @multicast1, @loopback, @empty, @multicast1, @rand_addr=0x64010101, @remote]}, @cipso={0x86, 0x12, 0x0, [{0x0, 0xc, "9c5c7acd213a2f7ce832"}]}, @timestamp_prespec={0x44, 0x3c, 0xb5, 0x3, 0x1, [{@loopback, 0x7fff}, {@rand_addr=0x64010101, 0xe1d}, {@loopback}, {@broadcast, 0xc}, {@multicast1, 0x6}, {@loopback, 0x1}, {@local, 0x1036}]}]}}}}}) write$evdev(r2, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x71) (async) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000300)=""/50) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) (async) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) 10.365814816s ago: executing program 2 (id=817): syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x0, 0x1, 0x808f000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) timer_create(0x2, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.234430817s ago: executing program 2 (id=830): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x10000, 0x1a) mknod(&(0x7f00000000c0)='./file0/file0\x00', 0x800, 0x2) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x9, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0x40d, 0xffffffffffffffff, 0x102, 0x100, 0x2, 0x4005, 0xc000, 0xfffff7fc, r2, 0x0, 0x7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x8, 0x7383ca4a, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x8842) 9.23407963s ago: executing program 2 (id=831): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x84) mkdir(&(0x7f0000000300)='./bus\x00', 0xc15f0c76038c45c1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[]) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0x12800100, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x39) listxattr(&(0x7f0000000180)='./file1\x00', &(0x7f0000000240)=""/123, 0x7b) link(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file1\x00') 9.154756364s ago: executing program 2 (id=832): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x5}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x1, 0x2, 0xffffff81, 0x1, 0x3, 0xffffffe2}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.935797912s ago: executing program 2 (id=834): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r4 = semget$private(0x0, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@bridge_setlink={0x34, 0x13, 0xa2f, 0x70bd2b, 0x25cfdbfd, {0x7, 0x0, 0x68, r6, 0x12318, 0x22264}, [@IFLA_LINKINFO={0x14, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x4, 0x4}}}]}, 0x34}}, 0x8004) semtimedop(r4, 0x0, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x21081c22) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={r3, 0x8001}, &(0x7f00000000c0)=0x8) socket$nl_route(0x10, 0x3, 0x0) 8.87509564s ago: executing program 33 (id=834): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r4 = semget$private(0x0, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@bridge_setlink={0x34, 0x13, 0xa2f, 0x70bd2b, 0x25cfdbfd, {0x7, 0x0, 0x68, r6, 0x12318, 0x22264}, [@IFLA_LINKINFO={0x14, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x4, 0x4}}}]}, 0x34}}, 0x8004) semtimedop(r4, 0x0, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x21081c22) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={r3, 0x8001}, &(0x7f00000000c0)=0x8) socket$nl_route(0x10, 0x3, 0x0) 4.805019702s ago: executing program 0 (id=884): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x10000, 0x1a) mknod(&(0x7f00000000c0)='./file0/file0\x00', 0x800, 0x2) syz_fuse_handle_req(r0, &(0x7f0000002100)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfcd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c97cba5ca94ef1c555d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5b38f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f9", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x9, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0x40d, 0xffffffffffffffff, 0x102, 0x100, 0x2, 0x4005, 0xc000, 0xfffff7fc, r2, 0x0, 0x7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x8, 0x7383ca4a, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x8842) 4.725040493s ago: executing program 0 (id=885): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket(0x2, 0x2, 0x0) (async) r1 = socket(0x2, 0x2, 0x0) getsockopt$inet_opts(r1, 0x0, 0x5, 0x0, &(0x7f0000000140)) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x105, 0x2) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) io_uring_setup(0x719b, &(0x7f0000000080)={0x0, 0x70e6, 0x2, 0x2, 0x109}) (async) r6 = io_uring_setup(0x719b, &(0x7f0000000080)={0x0, 0x70e6, 0x2, 0x2, 0x109}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r6, 0x11, &(0x7f0000000000)="f74d", 0x2) setsockopt$inet6_group_source_req(r1, 0x29, 0x2d, &(0x7f0000000500)={0xc, {{0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x41}, 0xffffd6d7}}, {{0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5b8c}}}, 0x108) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000480)={0x48, 0x6, r5, 0x334, 0x1, 0x0, 0x7, 0x38615, 0x2c1c78, 0xffffffffffffff7b}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000480)={0x48, 0x6, r5, 0x334, 0x1, 0x0, 0x7, 0x38615, 0x2c1c78, 0xffffffffffffff7b}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000054e000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000054e000/0x400000)=nil) userfaultfd(0x80001) (async) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x2}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x2d}, 0x94) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, r10, 0x25, 0x3}, 0x14) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, r10, 0x25, 0x3}, 0x14) r11 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0400007110556c002b0800000000000000040ec2c8572cb0234314cc337a8fe8e10000000000000000000000002408000000000000c292c76b00000000b4eb759ce3149b527ff2a9d50b0e4b482f4ee7f127071582b5e45022ebdcf6c0fc4be087a9e02d07007d0000000000000000000000000000000027bd35484c3e13d0ac9f2b"]) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x0, "d2ea61bf62041dae026e9e8203614554307c83d774dfc0fb62602f9a84c3bbe4", 0x4745504a}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x0, "d2ea61bf62041dae026e9e8203614554307c83d774dfc0fb62602f9a84c3bbe4", 0x4745504a}) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r12, 0xfffffffc) (async) listen(r12, 0xfffffffc) socket$netlink(0x10, 0x3, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7ff00000}, {0x0, 0x2, 0x2, 0x9}]}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x0) gettid() (async) r13 = gettid() ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000140)={r13}) 4.655772687s ago: executing program 0 (id=887): mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x118810, 0xffffffffffffffff, 0x2d74000) socket(0x22, 0x5, 0x6) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x40000000000029d, 0x832b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x1, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000280)=""/239, 0xef) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="b6", 0x1}], 0x1) syz_usb_disconnect(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000380)={'wlan0\x00', 0x0}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f000009de40), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f000009de80)={0x1, 0x2, 0x0, 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_clone(0x200000, &(0x7f00000005c0)="898daad2c55b060bf2cd986fdd55e72d5fad44af4029b1e71cb02fd0bc334ae5c57a6038858c5dc9f4efc9ee3307489eb941e2addee5d317799db34cad57579dd18bd2eba822854cba43318e6902bd7e9cfa363f6d7a1e1d0b07003115781cdc8e8d3fb7055118c2d9b74adefd857b87f30908c94e14674f489bdea047c4363a8051", 0x82, &(0x7f0000000040), 0x0, &(0x7f0000000140)="289f9b4014ed3e3fc5") madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x10) 2.035806199s ago: executing program 4 (id=938): flock(0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) flock(r0, 0x4) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x3, {0x41, 0x7fffffff, "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", 0xa, 0x1, 0x3, 0x5, 0x1, 0xd2, 0x0, 0x1}, r2}}, 0x128) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000280)={0x200, 0x7fffffff, 0x3, 0x101, 0x3, [0x9, 0x3c, 0x7fff, 0x1]}) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000002c0)) r3 = fsmount(0xffffffffffffffff, 0x0, 0x76) ioctl$VIDIOC_SUBDEV_G_CROP(r3, 0xc038563b, &(0x7f0000000300)={0x1, 0x0, {0x8, 0x3, 0x6, 0x9}}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f00000003c0)={&(0x7f0000000340)=""/69, 0x45, 0x6, 0x5}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4c080}, 0x80) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RMKNOD(r6, &(0x7f00000005c0)={0x14, 0x13, 0x2, {0x4, 0x4, 0x1}}, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x50, 0x1409, 0x300, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x24008805) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000780), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000007c0)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r7, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r8, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_PROTOCOLS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x890}, 0x1) openat(r3, &(0x7f00000008c0)='./file0\x00', 0x0, 0x22) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000900), 0x2100, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r10, 0x4068aea3, &(0x7f0000000940)={0xd5, 0x0, 0x1}) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r11, 0x8038550a, &(0x7f0000000b40)=@urb_type_control={0x2, {0x5}, 0x0, 0x80, &(0x7f0000000a00)={0x80, 0x16, 0xea, 0x7ff}, 0x8, 0xfffffff7, 0x7, 0x0, 0x0, 0x400, &(0x7f0000000a40)="5226de57ff8038d154b30eef382235e29c8784b0b02ee3b4ff1172209f673e61b2c4ac968ad8ce065606e1409a10294cab9f3e1e3ed5f7286763f46d18b7017a41a7213935c866bc67becd6334c38ebc65222cb8b0753828345031d442c25799c0161d39acbea2445f6aaece9b3b71e4585c79e3b895189b4635e6c1a12b6ddd8a037520bacb28011182a78dd049dbb87e07fbc4fcffa6b6756aabba0611427e9355fd7b929b430a8320e522b14e2b36c1a9ccf9f3655a0fb1e4413eb9cee35ce0d9fa7c3d6e26b99d2a67b70551ad5cad1a662ad2b6490bea6004288775b317e8b2"}) timer_create(0x4, &(0x7f0000000d40)={0x0, 0x36, 0x0, @thr={&(0x7f0000000b80)="00821ea1102c328785654868dd261d964ff7c0f99ab0f65cdc4f60f45e9fff19b3fdb6319161fadfc83c0f9c1b87040ad677ddddb575ed2fddb65e722234d1d3b00066daa4ae1362632dad0dc34c41f8b07f378abd13958121f063298ad45e5c647cd623e6b9b76f588139411ab52a4f29f8b61f159ab76cd4862ad1912f38176a9e39c1b3304e", &(0x7f0000000c40)="b1c1892c0b95cc3b8e9339244f358da5cbb403c12027efdd1ae696e9cf56c3447de2ccff094d4d1ea8f5209c317e10ee420eca2ee242e0fba0c3c86785635e9b18778c43cb5d4d1bbe269a7d835ec5b8401af1cee379f71121de44ef3506b7352c804d6ccd37e84f7c45c8f3bb7b0c9fb8bf30bd5876f968aeeeb26dd172ee70e0809a33366b8ddd7c13fc7c1243875c3d6037b59b1dc3e19e2903d3d59812babeeebd0818063205e4d006d89ddb48a2368f9b0a92aeff4060b62995110ec89fb9f238cc1b2ba034eaeae1a062e69c3c3f553a08e011641c0f2e2992f6e8a8004762aac3a6b310726c0f461c9b53f7dd32e96ffe6a29609c19558653fb69"}}, &(0x7f0000000d80)) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x0, 0x4) write$RDMA_USER_CM_CMD_DISCONNECT(r10, &(0x7f0000000dc0)={0xa, 0x4}, 0xc) 2.034337195s ago: executing program 4 (id=939): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x10000, 0x1a) mknod(&(0x7f00000000c0)='./file0/file0\x00', 0x800, 0x2) syz_fuse_handle_req(r0, &(0x7f0000002100)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfcd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c97cba5ca94ef1c555d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5b38f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f9", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x9, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0x40d, 0xffffffffffffffff, 0x102, 0x100, 0x2, 0x4005, 0xc000, 0xfffff7fc, r2, 0x0, 0x7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x8, 0x7383ca4a, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x8842) 1.965699943s ago: executing program 4 (id=940): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x6, 0xff}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587", @ANYRES16], 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000040)=""/4092, 0xffc) prctl$PR_SCHED_CORE(0x3e, 0x2, r1, 0x1, 0x0) close(r3) ioctl$BLKRRPART(r0, 0x125f, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000180)={0x2020}, 0x2020) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004240), 0x2, 0x0) write$FUSE_DIRENT(r6, &(0x7f0000004280)={0x50, 0xffffffffffffffda, r5, [{0x6, 0x5, 0x4, 0x79, '[.&*'}, {0x5, 0x2, 0x1, 0xc, '\x00'}]}, 0x50) r7 = signalfd4(r0, &(0x7f0000000080)={[0x9]}, 0x8, 0x800) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000004200)) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) close(0x3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f00000000c0)={0x6, 0x2, 0x6, 0xf, 0x5, 0xa, 0x7ff}, 0xc) 1.624606751s ago: executing program 0 (id=947): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000004c0)="0f064b0fc71ac441e012e9c4427d257c6402c423f978f50066baf80cb81c07da87ef66bafc0cecf342a60f00d6c7442400f5ff0000c744240203000000c7442406000000000f011424c4415f5c9297e5ffff", 0x52}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f000000a100)={{0x0, 0x0, 0xfffffffffffffcfd}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x5, &(0x7f0000000000)=@framed={{}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7bd}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$RNDADDTOENTCNT(r0, 0x5207, 0x0) preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000340)=""/217, 0xd9}, {&(0x7f0000000440)=""/139, 0x8b}, {&(0x7f0000000080)=""/33, 0x21}, {&(0x7f0000000180)=""/65, 0x41}, {&(0x7f0000000500)=""/33, 0x21}], 0x6, 0x0, 0x0) 1.275574122s ago: executing program 5 (id=951): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @mcast2}, 0x1c) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) socket(0x40000000015, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x10000) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000280)=""/70) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @broadcast}, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000000000000000000000000000000000000000000015000000e3de3d7b4cd07ec3daf605e1f3fbffffffffffffff00ddff7f80"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 1.273152471s ago: executing program 0 (id=952): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x5}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x1, 0x2, 0xffffff81, 0x1, 0x3, 0xffffffe2}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.225879872s ago: executing program 5 (id=953): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/address_bits', 0x0, 0x0) (async) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="050000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) setitimer(0x1, &(0x7f0000000580)={{}, {0x0, 0x2710}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.175458417s ago: executing program 5 (id=954): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = timerfd_create(0x8, 0x0) (async) clock_gettime(0x4, &(0x7f00000000c0)={0x0}) timerfd_settime(r1, 0x0, &(0x7f0000000180)={{}, {r2}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 1.175143797s ago: executing program 5 (id=955): r0 = socket$nl_rdma(0x10, 0x3, 0x14) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000380)='./file0\x00', &(0x7f0000000340), 0xa00049, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r1, &(0x7f0000000780)=""/185, 0xb9, 0x3c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000031449600000000000000041007278650014003300767863616e31000000000000f1ffffff000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) 1.11544876s ago: executing program 0 (id=956): mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x118810, 0xffffffffffffffff, 0x2d74000) socket(0x22, 0x5, 0x6) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x40000000000029d, 0x832b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x1, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000280)=""/239, 0xef) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="b6", 0x1}], 0x1) syz_usb_disconnect(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000380)={'wlan0\x00', 0x0}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f000009de40), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f000009de80)={0x1, 0x2, 0x0, 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) syz_clone(0x200000, &(0x7f00000005c0)="898daad2c55b060bf2cd986fdd55e72d5fad44af4029b1e71cb02fd0bc334ae5c57a6038858c5dc9f4efc9ee3307489eb941e2addee5d317799db34cad57579dd18bd2eba822854cba43318e6902bd7e9cfa363f6d7a1e1d0b07003115781cdc8e8d3fb7055118c2d9b74adefd857b87f30908c94e14674f489bdea047c4363a8051", 0x82, &(0x7f0000000040), 0x0, &(0x7f0000000140)="289f9b4014ed3e3fc5") madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x10) 1.11485233s ago: executing program 5 (id=957): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="0000001803010300ffffc400100045", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d1800007907800091e59063bcc55e2fb4b662a463b24b28a4fafb428a89d60f9547d33690c48bf9581455479f14cea31faf5212327c508ed14d3cc9f1b20adaecc3b4c664e61295f92adc7b03928e6f24a8ee8e299effe97537d57096d808d21b4fe04f98900000013d3b3875dfd9a3f6328f33f09ceec09986b30406704e2560f04592cb4869c77658fcb3eca004c77b183c5840dbb0fd30bcd067737d3f07dff1755aac0e628d921d141b089"], 0xe6) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x5, 0x4}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x8}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x0, 0x0, 0x3, 0x11, 0x0, @empty=0x4c0, @remote}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 614.692779ms ago: executing program 4 (id=961): read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x2020) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000002040)={0x2, 0x8, 0xfd, 0x7, 0x12, "ba5e65dba93d79e69c56193a6cedba162572ee"}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000002080)={0x5, {{0xa, 0x4e24, 0xb17c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x986}}}, 0x88) write(r1, &(0x7f0000002140)="c8b9b85fc693e2065392914a705da71f9eaecfab5081655e34f8379872b33119e4973467afc74ce6b38c9762e8b120ef52f041c10e57b1bdba6fc12ce243b9c06396dab19501173e17816993c9feae83fe338c598cad0443b55240abbf7d8110c0d30f70f84b476d1fd1a40b7193bb2869235039626ec9c39b2805883a89d6bd150048fec30042ee9ea3d1922fa012d63c0528339af951ccbbe95cc3fad9aa630e9099099a8ebd7b5f3a55c79c79fde58514df3b818847fca36ceb37a8fc6052d718c925b5434f21315d8195e28e93dc815196fcd11e6dd3aab6418c12717414f43feac7aa3bdce9f61f89d48699e99dc45d1feb", 0xf4) r2 = memfd_secret(0x0) epoll_wait(r2, &(0x7f0000002240)=[{}, {}, {}, {}, {}, {}], 0x6, 0xfff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000022c0), 0x10200, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000002300)={r3}, 0x8) r5 = ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) sendmsg$nl_route(r5, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)=@getnetconf={0x14, 0x52, 0x800, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000051}, 0x50) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000002440)=0x9, 0x4) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000004600)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004740)={{r4, 0xffffffffffffffff}, &(0x7f00000046c0), &(0x7f0000004700)=r4}, 0x20) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000004780)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x10, '\x00', 0x0, r4, 0x4, 0x1, 0x4}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000004800)={0x1b, 0x0, 0x0, 0x24, 0x0, r4, 0x6, '\x00', 0x0, r2, 0x4, 0x1, 0x2}, 0x50) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000048c0)=@generic={&(0x7f0000004880)='./file0\x00'}, 0x18) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000004980)={0x1b, 0x2, &(0x7f00000044c0)=@raw=[@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f0000004500)='GPL\x00', 0x7, 0x95, &(0x7f0000004540)=""/149, 0x40f00, 0x3, '\x00', 0x0, @fallback=0xf, r6, 0x8, &(0x7f0000004640)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000004680)={0x5, 0xe, 0x2, 0x10000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000004900)=[r2, r7, r8, r5, r9, r10], &(0x7f0000004940)}, 0x94) r12 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000004a40), 0x101d00, 0x0) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f0000004a80)={{r12}, 0x2, 0xf8, 0xa3e}) connect$inet6(r5, &(0x7f0000004ac0)={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00', 0x7}, 0x1c) read$FUSE(r2, &(0x7f0000004b00)={0x2020}, 0x2020) ioctl$F2FS_IOC_RESIZE_FS(r11, 0x4008f510, &(0x7f0000006b40)=0x1) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006bc0), r4) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000006c80)={&(0x7f0000006b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000006c40)={&(0x7f0000006c00)={0x40, r13, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xa, 0x17}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x3}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_PBSS={0x4}]}, 0x40}}, 0x20040881) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000006d00), r2) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000006dc0)={&(0x7f0000006cc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000006d80)={&(0x7f0000006d40)={0x14, r14, 0x8, 0x70bd27, 0xa}, 0x14}, 0x1, 0x0, 0x0, 0x40881}, 0x20000000) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000006f00)={&(0x7f0000006e00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000006ec0)={&(0x7f0000006e80)={0x1c, r13, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804) 614.473499ms ago: executing program 4 (id=962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xe, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffb}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000740)=""/4096, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x0, 0xa, 0x8, 0xf}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x3, 0x1, 0x10, 0x3}], 0x10, 0xc2b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000100)='file_check_and_advance_wb_err\x00', r1, 0x0, 0x9}, 0x18) 532.78317ms ago: executing program 4 (id=963): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@gettaction={0x48, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000001c0)={0x3, 'vlan1\x00', {0x6}, 0x5}) writev(r0, 0x0, 0x16) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x1}], 0xa, 0x0, 0x0}) r2 = dup3(0xffffffffffffffff, r0, 0x0) tkill(0x0, 0x13) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x4d, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$pptp(0x18, 0x1, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r4, 0x7, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r5) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYRES8=r2, @ANYRES64, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x104}, 0x20000000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000040)={0x3, 0x980900, 0x1}) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x2, @local}}, 0x1e) connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000040)=0x1) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r7, 0x4018f50b, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 531.990433ms ago: executing program 3 (id=964): socket$netlink(0x10, 0x3, 0xc) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x181281, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000040)="66b95502000066b80600000066ba000000000f300fc72c66b8020000000f23c00f21f86635010006000f23f8f26d660f3a229f00015e660fc62f0b66b9950900000f3266b8000000800f23d80f21f86635c00000300f23f866b8d70200000f23d00f21f866352000000e0f23f8660f73d340", 0x72}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@x86={0x2, 0x8, 0x40, 0x0, 0x1ff, 0x9, 0xbf, 0x1f, 0x0, 0x3, 0x0, 0x1, 0x0, 0x9b, 0x0, 0x5, 0x8, 0x8, 0x9, '\x00', 0x4, 0x5}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000001f00)) socket$alg(0x26, 0x5, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f00000003c0)=0x71db50c0, 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d1", 0x5e}, {0x0}, {&(0x7f0000000300)='l3', 0x2}], 0x3}], 0x1, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x15, @local, 'bond0\x00'}}, 0x1e) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000040)=0x2) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0xce, 0x0, 0xffffffffffffffff}]}) ioctl$PPPIOCBRIDGECHAN(r8, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r5, &(0x7f00000008c0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 295.128039ms ago: executing program 3 (id=965): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000002580)={0xa, 0x4e24, 0x9, @empty, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r1, &(0x7f00000002c0)='\x00', 0x1, 0x200000c1, &(0x7f00000000c0)={0xa, 0x0, 0x27b6a97, @private1, 0x8080}, 0x1c) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000280)={0x0, 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000300)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000100)={{r4, 0x8, 0x2, 0x7, 0x7, 0x1, 0xfffffffffffffff9, 0x8, 0x8, 0x5, 0x8, 0x7, 0x5, 0x100000001, 0x7}, 0x8, [0x0]}) write(r3, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 235.172777ms ago: executing program 3 (id=966): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x226340) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f0000000240)={0x5, r0, 'id1\x00'}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x80000000}}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f0000000500)=""/4096, 0x34, 0x1000}, 0x28) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) r6 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r6, 0xffff) (async) fcntl$addseals(r6, 0x409, 0x7) (async) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000100)={r6, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000080)=0x2) (async) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000140)=0x6) (async) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x89e4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) preadv(r4, &(0x7f00000017c0)=[{&(0x7f0000000080)=""/114, 0x72}, {&(0x7f0000001600)=""/240, 0xf0}, {&(0x7f0000001500)=""/152, 0x98}, {&(0x7f0000001700)=""/167, 0xa7}], 0x4, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x21, 0x9, 0x1d2, 0xd, 0x4e65c, r2, 0x1, '\x00', 0x0, r3, 0x4, 0x5, 0x5, 0x0, @value=r4}, 0x50) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000400)={0x9, "d1f6fe0f34af36c4aa88e08c4ab2f55a5c183742336653dbf14cf00b119aeebd", 0x1, 0x1}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$FOU_CMD_DEL(r8, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r9, 0x800, 0x8000, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IFINDEX={0x8, 0xb, r10}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x808}, 0x2) 160.041548ms ago: executing program 3 (id=967): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xa]}, 0x8, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000240)={0x0, 0x80000000, 0x7ff}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000640)={{r1}, r2, 0xa, @unused=[0x13, 0x0, 0x1, 0x5], @devid=r3}) r4 = syz_open_dev$vivid(&(0x7f0000001640), 0x2, 0x2) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000001680)={0x8, @capture={0x1000, 0x0, {0x5, 0x5}, 0x1}}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000001780)={0x1, 'bridge_slave_1\x00', {}, 0x2}) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f00000017c0), &(0x7f0000001800)=0x4) ioctl$KVM_RUN(r1, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001840), 0x400800, 0x0) clock_gettime(0x0, &(0x7f0000001880)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000018c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000001900)=[{{0x0, 0xea60}, 0x5, 0x2, 0x5}, {{r5, r6/1000+10000}, 0x5, 0x4, 0x726}, {{0x77359400}, 0x5, 0xfff9, 0x6}, {{0x77359400}, 0x1f, 0xffff, 0x4}, {{0x0, 0xea60}, 0x5, 0xff56}, {{0x0, 0xea60}, 0x17, 0x7, 0x8}, {{r7, r8/1000+10000}, 0x4, 0x61e, 0x1}, {{}, 0x16, 0x800, 0xf}, {{0x0, 0x2710}, 0x12, 0x9, 0x5}], 0xd8) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a40), r1) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, r9, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x57}}}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT={0x4}], @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_FILS_KEK={0x2b, 0xf2, "705bcaed830f61163d57f60c8c9cc07f5631669af2d663f3d8998b364262228e8d2a1181c8407d"}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000001b80)=0x1ff, 0x4) fgetxattr(0xffffffffffffffff, &(0x7f0000001bc0)=@known='trusted.overlay.opaque\x00', &(0x7f0000001c00)=""/217, 0xd9) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000001d00), 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000001d40)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) setsockopt$MRT6_ADD_MIF(r10, 0x29, 0xca, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x8}, 0xc) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x5e167296) ioctl$RTC_ALM_READ(r10, 0x80247008, &(0x7f0000001dc0)) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x24, r9, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1e6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x20000, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f80), r11) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000002580)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002540)={&(0x7f0000001fc0)={0x54c, r12, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x38}}}}, [@NL80211_ATTR_FRAME={0x196, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6}, @device_b, @device_a, @initial, {0x0, 0x2}}, 0x0, 0x2, 0x21, @val={0x10, 0x1, 0xde}, [{0xdd, 0x94, "140c6f6cab2db95661f58be05a8204a458cf5362732c27901f7f9200f2bd782696e6ea5e5a7e2ee8a29323c2efe2c408f85b0db5ef98db1061cdbb366f7977cd8fbb2c6290db059de32e216217c4f9858396fbdc30f1bd3bb31f59d9418e5675ae0da7789b78648e4e3348f4d1b91a588a35bd3490300ef8505a4484c302af1bf2a72a4c83fa52e5db2b181ae4c6259348e36241"}, {0xdd, 0xd9, "ed8c075e33f8b1dc1eb3a9fcc90c87e4cf45c6e55a231b3334f0c4fa25e0087782829f20c9381cdd1f72ddc7f3190ec2fe1e743a09b227daab17a8e69ef790409250b108959d55ff64135738bcb895c4068713fae91e6c24384540b87d9ac9d1322e3d9c85cb488291d052a5361f23255762a32d0630f578ce7ee21a2ee8a876099001824fc30711fdd3df04339c1554485134b7f1fb55c9a8ab3766ff722d680240b968c248ac75afa90b4c7e01d22c595f3044515896d757ec4e1b7b3365a5c4585da7f975042f6be3e287f0b3302fd2e33316ed1876d2f7"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x345}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xe84}, @NL80211_ATTR_FRAME={0x34f, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x8}, @device_b, @device_b, @initial, {0x8, 0x7c}, @value=@ver_80211n={0x0, 0x0, 0x3, 0x3, 0x0, 0x3, 0x1, 0x0, 0x1}}, 0x16, 0x2, @broadcast, {0x0, 0x11, @random="5b38e928750597f696440957e100078977"}, @void, @void, [{0xdd, 0xb3, "fc4ac051037b00b967425188e6ff9f11993189d14f6072c6772e617fe6746d1e64df84bbdd05dd2eaea657c16525f8f67c4c340e984bbb17c52441be65a2f59021d5359b143a5e8b90ec645bbbc6a8ecbc06b9e43e027c7aa9883a3745fa1cdbc04e52763308aa919c68deafc040cb31ac51fb71ddc41bbe91a0518806921507eba5a38b33136b1147ca9ff8317a67976a0579e44589a0a192497d0a2dc0f20c27e0af9c8d1509a9aaacb290daefaa4b64532e"}, {0xdd, 0x2b, "b9e9ff64573a624070288bfba86cea433eb613383ff0fc83a45c8dd00da3b67c47fda651067fc310a05c3a"}, {0xdd, 0x43, "557fdcc1b0abd19366f3b5e6c22bd356b55c055caaf55bf0bc2512ce6382a7aa40df702091d44c7a1ac7bcc7311abefb5bb5a3db657feb3827de8fdfa3eae29167ecb5"}, {0xdd, 0xc3, "86993c9f0a3225ecf27fa4fc720266f3e60f3fffefc929ab89d19463933ea99677e6f484c61ae7847963a14430d7590ece7f89a46e1ff64c083c33010a8e777d673e6ae20f7124118209672f5d743a48a045af326e3433ec0b63342571906d3bac9e06076541614bd6e7dc8baa42693319ba7464e00d5bc36321debb8ed00c752c04fae1f021de0b13c589a58bdba06f0e98dcddb45ab3b26f04a451aa62df7ab6fab68e1bb3fe5cf74c5e84bd7a9ae007297d8e51c6a751b3807f5e880ce4b5a29680"}, {0xdd, 0xab, "eb7cd2ed88a8b4db66990d25c64ec9bbe1e58f23568503df7d27230b30d5b8bc1b8ce827e648d7b5b757844c25246fb0a9bcb7577c33c9acff81011601382a21f1520c6abc4c7ead98c2286dc73e92f03f95482a69cd7177995c8a2a1896e0efd1b2233025d7d5f5ad5cbd2594fab7c265a8d57cdfa2fe9719ab97b57e29b508507f1e579ca6c881bcd8fc4eb3d8007451a8cc600f455d0c1a910a056ba829ea8068fba3aef03d36b5aff9"}, {0xdd, 0x77, "97871797e6ea223b173b2ecd8ed5811d519c1315a7a1235b36375846ac71fe17bcb06f318247cd343728447f1fced9a80f60acae244cc9bf0f3b023002bc8dcc960759a1e82b60c996044539d839a4e525bccc2036f9091fff1b5661bfcf56731f24ad9a185f0291515f871829e715719a2d0f1051e744"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2da}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}]]}, 0x54c}, 0x1, 0x0, 0x0, 0x8000}, 0x90) r13 = accept$packet(r10, 0x0, &(0x7f00000025c0)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r13, 0x8983, &(0x7f0000002600)={0x8, 'pimreg1\x00', {'xfrm0\x00'}, 0x8}) 154.920801ms ago: executing program 3 (id=968): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x0, 0x0}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x0, 0x0, 0x3, 0x11, 0x0, @empty=0x4c0, @remote}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 1.51664ms ago: executing program 5 (id=969): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x1) mount(0x0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f000015bffc)='nfs\x00', 0x1, &(0x7f0000000000)) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f00000001c0)='./file0\x00') setuid(0xee01) syz_open_dev$video4linux(&(0x7f0000000000), 0x79, 0x80) 0s ago: executing program 3 (id=970): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x6, 0x0, 0x2, 0x3, 0x1, 0x6, 0x7fffffff}) (async) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x6, 0x0, 0x2, 0x3, 0x1, 0x6, 0x7fffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x6, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) (async) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) sendfile(r3, r2, &(0x7f0000000140)=0x4, 0xfffffffffffffffa) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r4, 0x8949, &(0x7f0000000000)) (async) ioctl$sock_netdev_private(r4, 0x8949, &(0x7f0000000000)) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="ad43000000000100000006"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e1209004000f8ff0700a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4) (async) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e1209004000f8ff0700a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000200)={0xc, 0x31324d59, 0x2, @discrete={0x3, 0xd6}}) r7 = socket$alg(0x26, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0131010000000000200012800b00010070616e0000100002800400124a4be306d4f5eb000800150060bb0200"], 0x40}}, 0x0) accept$alg(r7, 0x0, 0x0) (async) accept$alg(r7, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) (async) r9 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r9, 0x80046402, 0x0) close(r9) 0s ago: executing program 4 (id=972): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x2f, 0xfc, 0x8, 0xfffffe01, 0x65, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00', 0x700, 0x7800, 0x7, 0x4}}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000001800090010000000030000001c140000fe000001000000000c00090009000003", @ANYRES32=r2, @ANYBLOB="f8447682896909673b87c95aab8ee1afc388b6057bab0f2321d3f9fa2f84bd6b2bde21e928803b12ea751d74e3eb0b039548f8c51c51047d5d68328caea776fc4275c2a1f1cff3642e48ff6cb0b3b1da8922a6ac71d73cdea4b8972d303b8959f01cabaa1b02f71503b3b76a6588f7bf36dbede51d2338b6f923be6527c4b7509068a1ed695f453ec4873f5b4e3c5f14b435e693e983749f2e3b727e6c8e7861d703fa0992daf009cbce569114f5944eb6d21297"], 0x28}, 0x1, 0x0, 0x0, 0xc804}, 0x50) getsockopt$inet_opts(r0, 0x0, 0xb, 0x0, &(0x7f0000000040)) r3 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) setsockopt(r1, 0x3, 0x46b4, &(0x7f0000000740)="ed159ceabce3390c074142e02f89f37bc539f3b58711f6466e016c39343f61580d64ecf8841e2fdc20e82a1c5f83f5dbe2f01b140272a52ee76a9b35bfb410b3164eab9ce6903c3108d8ca0269a9beecbbf43c35ee2f13967d40a1bfa96792a86cc54048c158c75cc45ec0c366391429feac8a39d877d775112863b5e91cd57480235371d4dd3c11c1e62d77994e11627580bcd06d598544bf1d6c96cd620fb5972cb23e83e0cf00c1e5966b2127501457b06bf6ab2ff7c1d4e20805fee38c9e442fe4b2e7308b22b06c41bd33b759b294206bfcf63b15", 0xd7) (async) setsockopt(r1, 0x3, 0x46b4, &(0x7f0000000740)="ed159ceabce3390c074142e02f89f37bc539f3b58711f6466e016c39343f61580d64ecf8841e2fdc20e82a1c5f83f5dbe2f01b140272a52ee76a9b35bfb410b3164eab9ce6903c3108d8ca0269a9beecbbf43c35ee2f13967d40a1bfa96792a86cc54048c158c75cc45ec0c366391429feac8a39d877d775112863b5e91cd57480235371d4dd3c11c1e62d77994e11627580bcd06d598544bf1d6c96cd620fb5972cb23e83e0cf00c1e5966b2127501457b06bf6ab2ff7c1d4e20805fee38c9e442fe4b2e7308b22b06c41bd33b759b294206bfcf63b15", 0xd7) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2}) (async) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x4, 0x0, 0x1, [@typed={0x2c, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611214000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_pidfd_open(r3, 0x0) (async) r6 = syz_pidfd_open(r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='nfsd\x00', 0xd, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='nfsd\x00', 0xd, 0x0) (async) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='nfsd\x00', 0xd, 0x0) socket(0x10, 0x803, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000100)={0xa}) (async) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000100)={0xa}) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000370401000000ffdbdf2500000000", @ANYRES32=r8, @ANYBLOB="890c0400000000000500000005000000240012800b0001006772657461700000140002800800040003000000060003008000"], 0x4c}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r9 = socket$inet(0x2, 0x2, 0x0) r10 = syz_open_dev$vim2m(&(0x7f0000000540), 0x0, 0x2) r11 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0xc2141) sendmsg$AUDIT_USER_TTY(r7, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20080400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x44080}, 0x408c1) (async) sendmsg$AUDIT_USER_TTY(r7, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20080400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x44080}, 0x408c1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r11, 0xc0385720, &(0x7f0000000000)={0x1}) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000e40)={0x9909cb}) sendmmsg$inet(r9, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880) ioctl$F2FS_IOC_GET_FEATURES(r6, 0xff06, 0x0) (async) ioctl$F2FS_IOC_GET_FEATURES(r6, 0xff06, 0x0) kernel console output (not intermixed with test programs): root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.754241][ T7254] FAULT_INJECTION: forcing a failure. [ 82.754241][ T7254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.763822][ T7254] CPU: 1 UID: 0 PID: 7254 Comm: syz.1.400 Not tainted syzkaller #0 PREEMPT(full) [ 82.763846][ T7254] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.763857][ T7254] Call Trace: [ 82.763863][ T7254] [ 82.763871][ T7254] dump_stack_lvl+0x16c/0x1f0 [ 82.763917][ T7254] should_fail_ex+0x512/0x640 [ 82.763946][ T7254] _copy_to_user+0x32/0xd0 [ 82.763971][ T7254] simple_read_from_buffer+0xcb/0x170 [ 82.763993][ T7254] proc_fail_nth_read+0x197/0x240 [ 82.764015][ T7254] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.764037][ T7254] ? rw_verify_area+0xcf/0x6c0 [ 82.764063][ T7254] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.764083][ T7254] vfs_read+0x1e1/0xcf0 [ 82.764104][ T7254] ? __pfx___mutex_lock+0x10/0x10 [ 82.764131][ T7254] ? __pfx_vfs_read+0x10/0x10 [ 82.764156][ T7254] ? __fget_files+0x20e/0x3c0 [ 82.764183][ T7254] ksys_read+0x12a/0x250 [ 82.764200][ T7254] ? __pfx_ksys_read+0x10/0x10 [ 82.764225][ T7254] do_syscall_64+0xcd/0x4c0 [ 82.764247][ T7254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.764264][ T7254] RIP: 0033:0x7febc178d5fc [ 82.764278][ T7254] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 82.764295][ T7254] RSP: 002b:00007febc25e2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 82.764311][ T7254] RAX: ffffffffffffffda RBX: 00007febc19c5fa0 RCX: 00007febc178d5fc [ 82.764322][ T7254] RDX: 000000000000000f RSI: 00007febc25e20a0 RDI: 0000000000000004 [ 82.764332][ T7254] RBP: 00007febc25e2090 R08: 0000000000000000 R09: 0000000000000000 [ 82.764342][ T7254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.764352][ T7254] R13: 00007febc19c6038 R14: 00007febc19c5fa0 R15: 00007ffe23e9aef8 [ 82.764376][ T7254] [ 82.789479][ T841] usb 5-1: usb_control_msg returned -32 [ 82.800610][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.403'. [ 82.801863][ T841] usbtmc 5-1:16.0: can't read capabilities [ 82.803686][ T7258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.403'. [ 82.809971][ T841] usb 5-1: USB disconnect, device number 6 [ 82.815570][ T7258] netlink: 'syz.2.403': attribute type 20 has an invalid length. [ 82.862689][ T60] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.863001][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.403'. [ 82.865868][ T60] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.870494][ T7258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.403'. [ 82.873474][ T60] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.873503][ T60] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.882598][ T7261] tmpfs: Unknown parameter 'Øð{‚Ô“;ýÚØЗ' [ 82.884678][ T7258] netlink: 'syz.2.403': attribute type 20 has an invalid length. [ 82.977772][ T7267] tipc: Started in network mode [ 82.979427][ T7267] tipc: Node identity e692337a84fd, cluster identity 4711 [ 82.981694][ T7267] tipc: Enabled bearer , priority 0 [ 82.984242][ T7267] syzkaller0: entered promiscuous mode [ 82.986367][ T7267] syzkaller0: entered allmulticast mode [ 82.990163][ T7267] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 82.994805][ T7267] tipc: Resetting bearer [ 82.997896][ T7266] tipc: Resetting bearer [ 83.005597][ T7266] tipc: Disabling bearer [ 83.015649][ T7269] tipc: Enabled bearer , priority 0 [ 83.018624][ T7269] syzkaller0: entered promiscuous mode [ 83.020336][ T7269] syzkaller0: entered allmulticast mode [ 83.033117][ T7269] tipc: Resetting bearer [ 83.037312][ T7268] tipc: Resetting bearer [ 83.045179][ T7268] tipc: Disabling bearer [ 83.126272][ T5972] Bluetooth: hci2: unexpected cc 0x204b length: 9 > 3 [ 83.169795][ T7276] input: syz1 as /devices/virtual/input/input15 [ 83.176536][ T7276] FAULT_INJECTION: forcing a failure. [ 83.176536][ T7276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.180228][ T7276] CPU: 0 UID: 0 PID: 7276 Comm: syz.2.411 Not tainted syzkaller #0 PREEMPT(full) [ 83.180243][ T7276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.180259][ T7276] Call Trace: [ 83.180265][ T7276] [ 83.180269][ T7276] dump_stack_lvl+0x16c/0x1f0 [ 83.180289][ T7276] should_fail_ex+0x512/0x640 [ 83.180303][ T7276] _copy_from_user+0x2e/0xd0 [ 83.180317][ T7276] input_event_from_user+0x133/0x3b0 [ 83.180334][ T7276] ? __pfx_input_event_from_user+0x10/0x10 [ 83.180349][ T7276] ? __pfx___might_resched+0x10/0x10 [ 83.180364][ T7276] ? input_event+0x5b/0xd0 [ 83.180378][ T7276] uinput_write+0xbb4/0x12b0 [ 83.180392][ T7276] ? __pfx_uinput_write+0x10/0x10 [ 83.180404][ T7276] ? bpf_lsm_file_permission+0x9/0x10 [ 83.180417][ T7276] ? security_file_permission+0x71/0x210 [ 83.180434][ T7276] ? rw_verify_area+0xcf/0x6c0 [ 83.180452][ T7276] ? __pfx_uinput_write+0x10/0x10 [ 83.180462][ T7276] vfs_write+0x2a0/0x11d0 [ 83.180475][ T7276] ? __pfx_vfs_write+0x10/0x10 [ 83.180484][ T7276] ? find_held_lock+0x2b/0x80 [ 83.180498][ T7276] ? __fget_files+0x204/0x3c0 [ 83.180511][ T7276] ? __fget_files+0x20e/0x3c0 [ 83.180526][ T7276] ksys_write+0x1f8/0x250 [ 83.180536][ T7276] ? __pfx_ksys_write+0x10/0x10 [ 83.180551][ T7276] do_syscall_64+0xcd/0x4c0 [ 83.180564][ T7276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.180575][ T7276] RIP: 0033:0x7f775ad8ebe9 [ 83.180584][ T7276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.180594][ T7276] RSP: 002b:00007f775bc35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 83.180604][ T7276] RAX: ffffffffffffffda RBX: 00007f775afc5fa0 RCX: 00007f775ad8ebe9 [ 83.180610][ T7276] RDX: 000000000000045c RSI: 00002000000000c0 RDI: 0000000000000004 [ 83.180616][ T7276] RBP: 00007f775bc35090 R08: 0000000000000000 R09: 0000000000000000 [ 83.180622][ T7276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.180628][ T7276] R13: 00007f775afc6038 R14: 00007f775afc5fa0 R15: 00007ffcd60224f8 [ 83.180642][ T7276] [ 83.546083][ T7286] nfs: Unknown parameter './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 84.051347][ T5972] Bluetooth: hci0: unexpected cc 0x204b length: 9 > 3 [ 84.151503][ T7304] input: syz1 as /devices/virtual/input/input16 [ 84.167544][ T7304] FAULT_INJECTION: forcing a failure. [ 84.167544][ T7304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.172923][ T7304] CPU: 3 UID: 0 PID: 7304 Comm: syz.2.420 Not tainted syzkaller #0 PREEMPT(full) [ 84.172946][ T7304] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.172957][ T7304] Call Trace: [ 84.172964][ T7304] [ 84.172971][ T7304] dump_stack_lvl+0x16c/0x1f0 [ 84.172997][ T7304] should_fail_ex+0x512/0x640 [ 84.173021][ T7304] _copy_from_user+0x2e/0xd0 [ 84.173046][ T7304] input_event_from_user+0x133/0x3b0 [ 84.173073][ T7304] ? __pfx_input_event_from_user+0x10/0x10 [ 84.173098][ T7304] ? __pfx___might_resched+0x10/0x10 [ 84.173122][ T7304] ? input_event+0x5b/0xd0 [ 84.173147][ T7304] uinput_write+0xbb4/0x12b0 [ 84.173172][ T7304] ? __pfx_uinput_write+0x10/0x10 [ 84.173192][ T7304] ? bpf_lsm_file_permission+0x9/0x10 [ 84.173214][ T7304] ? security_file_permission+0x71/0x210 [ 84.173242][ T7304] ? rw_verify_area+0xcf/0x6c0 [ 84.173270][ T7304] ? __pfx_uinput_write+0x10/0x10 [ 84.173286][ T7304] vfs_write+0x2a0/0x11d0 [ 84.173310][ T7304] ? __pfx_vfs_write+0x10/0x10 [ 84.173326][ T7304] ? find_held_lock+0x2b/0x80 [ 84.173348][ T7304] ? __fget_files+0x204/0x3c0 [ 84.173371][ T7304] ? __fget_files+0x20e/0x3c0 [ 84.173398][ T7304] ksys_write+0x1f8/0x250 [ 84.173416][ T7304] ? __pfx_ksys_write+0x10/0x10 [ 84.173441][ T7304] do_syscall_64+0xcd/0x4c0 [ 84.173464][ T7304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.173482][ T7304] RIP: 0033:0x7f775ad8ebe9 [ 84.173497][ T7304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.173514][ T7304] RSP: 002b:00007f775bc35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.173531][ T7304] RAX: ffffffffffffffda RBX: 00007f775afc5fa0 RCX: 00007f775ad8ebe9 [ 84.173548][ T7304] RDX: 000000000000045c RSI: 00002000000000c0 RDI: 0000000000000004 [ 84.173559][ T7304] RBP: 00007f775bc35090 R08: 0000000000000000 R09: 0000000000000000 [ 84.173569][ T7304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.173579][ T7304] R13: 00007f775afc6038 R14: 00007f775afc5fa0 R15: 00007ffcd60224f8 [ 84.173604][ T7304] [ 84.556452][ T841] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 84.736363][ T841] usb 7-1: Using ep0 maxpacket: 8 [ 84.740594][ T7314] tipc: Enabled bearer , priority 0 [ 84.743993][ T7314] syzkaller0: entered promiscuous mode [ 84.747259][ T7314] syzkaller0: entered allmulticast mode [ 84.750945][ T841] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 84.752885][ T7314] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 84.754580][ T841] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 84.760350][ T841] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 84.763538][ T841] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 84.768130][ T841] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.768373][ T7313] tipc: Resetting bearer [ 84.772478][ T841] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 84.777609][ T841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.784010][ T7313] tipc: Disabling bearer [ 85.014845][ T841] usb 7-1: usb_control_msg returned -32 [ 85.016828][ T841] usbtmc 7-1:16.0: can't read capabilities [ 85.021865][ T841] usb 7-1: USB disconnect, device number 6 [ 85.053560][ T7323] netlink: 'syz.3.426': attribute type 15 has an invalid length. [ 85.056091][ T7323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.426'. [ 85.064104][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 85.064212][ T7323] netlink: 'syz.3.426': attribute type 15 has an invalid length. [ 85.067375][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 85.070245][ T7323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.426'. [ 85.073424][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 85.081131][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 85.262623][ T7331] input: syz1 as /devices/virtual/input/input17 [ 85.399220][ T7338] tipc: Enabled bearer , priority 0 [ 85.401896][ T7338] syzkaller0: entered promiscuous mode [ 85.403691][ T7338] syzkaller0: entered allmulticast mode [ 85.413084][ T7337] tipc: Resetting bearer [ 85.421982][ T7337] tipc: Disabling bearer [ 85.446701][ T6039] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 85.590737][ T7344] tipc: Enabled bearer , priority 0 [ 85.595497][ T7344] syzkaller0: entered promiscuous mode [ 85.597999][ T7344] syzkaller0: entered allmulticast mode [ 85.603638][ T7344] tipc: Resetting bearer [ 85.606261][ T6039] usb 8-1: Using ep0 maxpacket: 8 [ 85.608415][ T7343] tipc: Resetting bearer [ 85.614087][ T6039] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 85.618239][ T6039] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 85.619883][ T7343] tipc: Disabling bearer [ 85.621606][ T6039] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 85.628527][ T6039] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.632931][ T6039] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 85.635750][ T6039] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.860241][ T5972] Bluetooth: hci2: unexpected cc 0x204b length: 9 > 3 [ 85.860853][ T6039] usb 8-1: usb_control_msg returned -71 [ 85.864118][ T6039] usbtmc 8-1:16.0: can't read capabilities [ 85.877381][ T6039] usb 8-1: USB disconnect, device number 5 [ 85.987855][ T1027] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 86.166226][ T1027] usb 7-1: Using ep0 maxpacket: 16 [ 86.170760][ T7350] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 86.183612][ T1027] usb 7-1: unable to get BOS descriptor or descriptor too short [ 86.190145][ T1027] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 86.192565][ T1027] usb 7-1: can't read configurations, error -71 [ 86.224576][ T7375] tipc: Enabled bearer , priority 0 [ 86.227754][ T7375] syzkaller0: entered promiscuous mode [ 86.229680][ T7375] syzkaller0: entered allmulticast mode [ 86.234310][ T7377] geneve1: entered allmulticast mode [ 86.249792][ T7375] tipc: Resetting bearer [ 86.257857][ T7374] tipc: Resetting bearer [ 86.265417][ T7374] tipc: Disabling bearer [ 86.267260][ T7379] input: syz1 as /devices/virtual/input/input19 [ 86.270574][ T7380] input: syz1 as /devices/virtual/input/input18 [ 86.340015][ T7384] tipc: Enabled bearer , priority 0 [ 86.342513][ T7384] syzkaller0: entered promiscuous mode [ 86.344308][ T7384] syzkaller0: entered allmulticast mode [ 86.350122][ T7384] tipc: Resetting bearer [ 86.354221][ T7383] tipc: Resetting bearer [ 86.366221][ T7383] tipc: Disabling bearer [ 86.462381][ T7393] FAULT_INJECTION: forcing a failure. [ 86.462381][ T7393] name failslab, interval 1, probability 0, space 0, times 0 [ 86.467366][ T7393] CPU: 2 UID: 0 PID: 7393 Comm: syz.2.448 Not tainted syzkaller #0 PREEMPT(full) [ 86.467386][ T7393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.467396][ T7393] Call Trace: [ 86.467403][ T7393] [ 86.467410][ T7393] dump_stack_lvl+0x16c/0x1f0 [ 86.467434][ T7393] should_fail_ex+0x512/0x640 [ 86.467452][ T7393] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 86.467473][ T7393] should_failslab+0xc2/0x120 [ 86.467491][ T7393] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 86.467509][ T7393] ? __alloc_skb+0x2b2/0x380 [ 86.467530][ T7393] __alloc_skb+0x2b2/0x380 [ 86.467546][ T7393] ? __pfx___alloc_skb+0x10/0x10 [ 86.467565][ T7393] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 86.467588][ T7393] netlink_alloc_large_skb+0x69/0x130 [ 86.467614][ T7393] netlink_sendmsg+0x6a1/0xdd0 [ 86.467637][ T7393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.467665][ T7393] ____sys_sendmsg+0xa95/0xc70 [ 86.467689][ T7393] ? copy_msghdr_from_user+0x10a/0x160 [ 86.467706][ T7393] ? __pfx_____sys_sendmsg+0x10/0x10 [ 86.467731][ T7393] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 86.467749][ T7393] ? lockdep_hardirqs_on+0x7c/0x110 [ 86.467765][ T7393] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 86.467786][ T7393] ___sys_sendmsg+0x134/0x1d0 [ 86.467804][ T7393] ? __pfx____sys_sendmsg+0x10/0x10 [ 86.467851][ T7393] __sys_sendmsg+0x16d/0x220 [ 86.467869][ T7393] ? __pfx___sys_sendmsg+0x10/0x10 [ 86.467902][ T7393] do_syscall_64+0xcd/0x4c0 [ 86.467922][ T7393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.467939][ T7393] RIP: 0033:0x7f775ad8ebe9 [ 86.467952][ T7393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.467967][ T7393] RSP: 002b:00007f775bc35038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.467984][ T7393] RAX: ffffffffffffffda RBX: 00007f775afc5fa0 RCX: 00007f775ad8ebe9 [ 86.467994][ T7393] RDX: 0000000000020000 RSI: 0000200000001100 RDI: 0000000000000004 [ 86.468005][ T7393] RBP: 00007f775bc35090 R08: 0000000000000000 R09: 0000000000000000 [ 86.468014][ T7393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.468022][ T7393] R13: 00007f775afc6038 R14: 00007f775afc5fa0 R15: 00007ffcd60224f8 [ 86.468045][ T7393] [ 86.576074][ T7390] sp0: Synchronizing with TNC [ 86.796282][ T7406] input: syz1 as /devices/virtual/input/input21 [ 87.260107][ T5972] Bluetooth: hci2: unexpected cc 0x204b length: 9 > 3 [ 87.275756][ T7429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.458'. [ 87.295316][ T46] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.295329][ T7429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.458'. [ 87.298366][ T7431] Bluetooth: hci0: invalid len left 7, exp >= 258 [ 87.298432][ T46] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.298453][ T46] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.298470][ T46] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.317655][ T7429] tmpfs: Unknown parameter 'mrleâYnù±É\¼±²¸»avm' [ 87.331913][ T7433] IPv6: NLM_F_CREATE should be specified when creating new route [ 87.335952][ T7433] netlink: 'syz.1.461': attribute type 5 has an invalid length. [ 87.339178][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 87.339207][ T40] audit: type=1400 audit(2000000019.070:396): avc: denied { lock } for pid=7432 comm="syz.1.461" path="socket:[14983]" dev="sockfs" ino=14983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 87.372485][ T7437] ./cgroup: Can't lookup blockdev [ 87.477199][ T6019] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 87.519125][ T7445] tipc: Enabled bearer , priority 0 [ 87.525166][ T7445] syzkaller0: entered promiscuous mode [ 87.528453][ T7445] syzkaller0: entered allmulticast mode [ 87.538501][ T7445] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 87.551377][ T7445] tipc: Resetting bearer [ 87.557839][ T7444] tipc: Resetting bearer [ 87.569978][ T7444] tipc: Disabling bearer [ 87.647981][ T7448] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 87.748007][ T40] audit: type=1400 audit(2000000019.480:397): avc: denied { associate } for pid=7449 comm="syz.1.468" name="rdma.current" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 87.839387][ T7455] netlink: 88 bytes leftover after parsing attributes in process `syz.1.469'. [ 88.500543][ T7468] fuse: Bad value for 'fd' [ 88.508281][ T7468] netlink: 'syz.1.472': attribute type 1 has an invalid length. [ 88.511357][ T7468] netlink: 24 bytes leftover after parsing attributes in process `syz.1.472'. [ 88.610403][ T40] audit: type=1400 audit(2000000020.340:398): avc: denied { getopt } for pid=7473 comm="syz.2.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 88.622493][ T40] audit: type=1400 audit(2000000020.360:399): avc: denied { setopt } for pid=7473 comm="syz.2.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 88.630438][ T40] audit: type=1400 audit(2000000020.360:400): avc: denied { listen } for pid=7473 comm="syz.2.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 88.767250][ T1027] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 88.843133][ T5972] Bluetooth: hci1: unexpected cc 0x204b length: 9 > 3 [ 88.899838][ T7490] tipc: Enabled bearer , priority 0 [ 88.908141][ T7490] syzkaller0: entered promiscuous mode [ 88.910380][ T7490] syzkaller0: entered allmulticast mode [ 88.920560][ T1027] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x2 has an invalid bInterval 172, changing to 11 [ 88.925665][ T1027] usb 5-1: config 1 interface 0 has no altsetting 0 [ 88.931028][ T1027] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.40 [ 88.931603][ T7490] tipc: Resetting bearer [ 88.934725][ T1027] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.934743][ T1027] usb 5-1: Product: syz [ 88.934755][ T1027] usb 5-1: Manufacturer: 騈鉶亂耿엪ࠋᪿ儙鼓満 [ 88.945160][ T7489] tipc: Resetting bearer [ 88.945212][ T1027] usb 5-1: SerialNumber: syz [ 88.953905][ T7489] tipc: Disabling bearer [ 89.079182][ T7494] netlink: 'syz.1.483': attribute type 1 has an invalid length. [ 89.081830][ T7494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.175856][ T1027] usbhid 5-1:1.0: can't add hid device: -71 [ 89.177899][ T1027] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 89.186227][ T1027] usb 5-1: USB disconnect, device number 7 [ 89.283420][ T40] audit: type=1400 audit(2000000021.010:401): avc: denied { read write } for pid=7501 comm="syz.1.484" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 89.292115][ T40] audit: type=1400 audit(2000000021.010:402): avc: denied { open } for pid=7501 comm="syz.1.484" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 89.324605][ T40] audit: type=1400 audit(2000000021.050:403): avc: denied { write } for pid=7499 comm="syz.0.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.409957][ T7507] tipc: Enabled bearer , priority 0 [ 89.412321][ T7507] syzkaller0: entered promiscuous mode [ 89.413920][ T7507] syzkaller0: entered allmulticast mode [ 89.419248][ T7507] tipc: Resetting bearer [ 89.422089][ T7506] tipc: Resetting bearer [ 89.431033][ T7506] tipc: Disabling bearer [ 89.531163][ T40] audit: type=1400 audit(2000000021.260:404): avc: denied { ioctl } for pid=7510 comm="syz.2.488" path="socket:[15029]" dev="sockfs" ino=15029 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.548957][ T40] audit: type=1400 audit(2000000021.280:405): avc: denied { watch_sb watch_reads } for pid=7510 comm="syz.2.488" path="/99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 89.560321][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.488'. [ 89.569151][ T7511] vxcan1: tx drop: invalid da for name 0x0000000000000016 [ 90.059221][ T7525] netlink: 'syz.3.492': attribute type 64 has an invalid length. [ 90.061821][ T7525] netlink: 'syz.3.492': attribute type 4 has an invalid length. [ 90.064186][ T7525] netlink: 152 bytes leftover after parsing attributes in process `syz.3.492'. [ 90.196231][ T1027] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 90.327030][ T1027] usb 7-1: device descriptor read/64, error -71 [ 90.348615][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.495'. [ 90.481350][ T7538] tipc: Enabled bearer , priority 0 [ 90.483539][ T7537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.498'. [ 90.484313][ T7538] syzkaller0: entered promiscuous mode [ 90.489203][ T7538] syzkaller0: entered allmulticast mode [ 90.503937][ T7538] tipc: Resetting bearer [ 90.506005][ T7537] netlink: 76 bytes leftover after parsing attributes in process `syz.0.498'. [ 90.510643][ T7536] tipc: Resetting bearer [ 90.519004][ T7536] tipc: Disabling bearer [ 90.576227][ T1027] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 90.716190][ T1027] usb 7-1: device descriptor read/64, error -71 [ 90.837120][ T1027] usb usb7-port1: attempt power cycle [ 90.857318][ T7546] sctp: Trying to GSO but underlying device doesn't support it. [ 90.881831][ T7546] tmpfs: Bad value for 'mpol' [ 91.154192][ T5972] Bluetooth: hci2: unexpected cc 0x204b length: 9 > 3 [ 91.186294][ T1027] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 91.216717][ T1027] usb 7-1: device descriptor read/8, error -71 [ 91.319050][ T7557] input: syz1 as /devices/virtual/input/input22 [ 91.466262][ T1027] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 91.486905][ T1027] usb 7-1: device descriptor read/8, error -71 [ 91.589879][ T7565] netlink: 'syz.0.507': attribute type 2 has an invalid length. [ 91.593660][ T7565] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.507'. [ 91.597782][ T7565] nbd: must specify a device to reconfigure [ 91.606579][ T1027] usb usb7-port1: unable to enumerate USB device [ 91.783261][ T7574] block nbd3: Attempted send on invalid socket [ 91.785334][ T7574] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.790510][ T7574] block nbd3: Attempted send on invalid socket [ 91.792514][ T7574] I/O error, dev nbd3, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.795510][ T7574] Mount JFS Failure: -5 [ 91.798666][ T7574] jfs_mount failed w/return code = -5 [ 91.929439][ T7576] input: syz1 as /devices/virtual/input/input23 [ 91.934650][ T7576] tipc: Enabled bearer , priority 0 [ 91.945088][ T7576] syzkaller0: entered promiscuous mode [ 91.947351][ T7576] syzkaller0: entered allmulticast mode [ 91.956956][ T7576] tipc: Resetting bearer [ 91.968535][ T7575] tipc: Resetting bearer [ 91.978024][ T7575] tipc: Disabling bearer [ 92.359359][ T7590] tipc: Enabling of bearer rejected, failed to enable media [ 92.496423][ T6019] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 92.555370][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 92.555381][ T40] audit: type=1400 audit(2000000024.280:413): avc: denied { append } for pid=7604 comm="syz.1.518" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 92.646213][ T6019] usb 8-1: Using ep0 maxpacket: 8 [ 92.650839][ T6019] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 92.653890][ T6019] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 92.658695][ T6019] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 92.663663][ T6019] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 92.667468][ T6019] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 92.672974][ T6019] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 92.676296][ T6019] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 92.680837][ T6019] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 92.681858][ T40] audit: type=1400 audit(2000000024.410:414): avc: denied { write } for pid=7608 comm="syz.1.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 92.685549][ T6019] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 92.696031][ T6019] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 92.701602][ T6019] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 92.704513][ T6019] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 92.709431][ T6019] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 92.714185][ T6019] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 92.719516][ T6019] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 92.728087][ T6019] usb 8-1: string descriptor 0 read error: -22 [ 92.730787][ T6019] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 92.733736][ T6019] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.740834][ T6019] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 92.918323][ T40] audit: type=1400 audit(2000000024.650:415): avc: denied { map } for pid=7615 comm="syz.0.523" path="socket:[15065]" dev="sockfs" ino=15065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 92.955248][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.524'. [ 92.959350][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.524'. [ 92.996720][ T61] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 93.028467][ T40] audit: type=1400 audit(2000000024.760:416): avc: denied { connect } for pid=7629 comm="syz.0.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.039726][ T40] audit: type=1400 audit(2000000024.770:417): avc: denied { open } for pid=7633 comm="syz.2.528" path="/dev/ttyq9" dev="devtmpfs" ino=392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 93.050355][ T6039] usb 8-1: USB disconnect, device number 6 [ 93.050623][ T7627] usb 8-1: Couldn't submit interrupt_out_urb -19 [ 93.166266][ T61] usb 6-1: Using ep0 maxpacket: 8 [ 93.169638][ T61] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 93.173156][ T61] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 93.176760][ T61] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.179826][ T61] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.183878][ T61] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 93.186788][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.392757][ T61] usb 6-1: usb_control_msg returned -71 [ 93.392918][ T5972] Bluetooth: hci0: unexpected cc 0x204b length: 9 > 3 [ 93.394493][ T61] usbtmc 6-1:16.0: can't read capabilities [ 93.400818][ T61] usb 6-1: USB disconnect, device number 13 [ 93.649387][ T7662] input: syz1 as /devices/virtual/input/input25 [ 93.913242][ T7669] tipc: Enabled bearer , priority 0 [ 93.915659][ T7669] syzkaller0: entered promiscuous mode [ 93.916190][ T40] audit: type=1400 audit(2000000025.640:418): avc: denied { create } for pid=7670 comm="syz.1.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 93.917080][ T7671] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 93.917509][ T7669] syzkaller0: entered allmulticast mode [ 93.923698][ T40] audit: type=1400 audit(2000000025.650:419): avc: denied { watch } for pid=7670 comm="syz.1.539" path="/142" dev="tmpfs" ino=781 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 93.936888][ T7669] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 93.945218][ T40] audit: type=1400 audit(2000000025.670:420): avc: denied { create } for pid=7668 comm="syz.2.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 93.946650][ T7669] tipc: Resetting bearer [ 93.951372][ T40] audit: type=1400 audit(2000000025.670:421): avc: denied { ioctl } for pid=7668 comm="syz.2.538" path="socket:[18655]" dev="sockfs" ino=18655 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 93.960742][ T7668] tipc: Resetting bearer [ 93.968382][ T7668] tipc: Disabling bearer [ 93.987775][ T40] audit: type=1400 audit(2000000025.720:422): avc: denied { wake_alarm } for pid=7675 comm="syz.1.541" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 94.042335][ T7680] input: syz1 as /devices/virtual/input/input26 [ 94.073056][ T7684] input: syz1 as /devices/virtual/input/input27 [ 94.102704][ T7682] syz.1.543 (7682) used greatest stack depth: 19576 bytes left [ 94.806194][ T6019] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 94.976261][ T6019] usb 5-1: Using ep0 maxpacket: 8 [ 94.981279][ T6019] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 94.984690][ T6019] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 94.988943][ T6019] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.992036][ T6019] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.995977][ T6019] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 95.001409][ T6019] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.076372][ T7704] tipc: Enabled bearer , priority 0 [ 95.080435][ T7704] syzkaller0: entered promiscuous mode [ 95.082676][ T7704] syzkaller0: entered allmulticast mode [ 95.088155][ T7704] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 95.100891][ T7704] tipc: Resetting bearer [ 95.104162][ T7703] tipc: Resetting bearer [ 95.112431][ T7703] tipc: Disabling bearer [ 95.213306][ T5972] Bluetooth: hci3: unexpected cc 0x204b length: 9 > 3 [ 95.215962][ T6019] usb 5-1: usb_control_msg returned -71 [ 95.222014][ T6019] usbtmc 5-1:16.0: can't read capabilities [ 95.245885][ T7708] input: syz1 as /devices/virtual/input/input28 [ 95.262340][ T6019] usb 5-1: USB disconnect, device number 8 [ 95.362986][ T7711] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.366487][ T7711] MINIX-fs: unable to read superblock [ 95.423048][ T7715] geneve2: entered promiscuous mode [ 95.424830][ T7715] geneve2: entered allmulticast mode [ 95.653376][ T7728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.558'. [ 95.958190][ T7749] netlink: 'syz.2.567': attribute type 1 has an invalid length. [ 95.975272][ T7749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.980590][ T7749] tipc: Enabled bearer , priority 0 [ 95.986764][ T7749] syzkaller0: entered promiscuous mode [ 95.988897][ T7749] syzkaller0: entered allmulticast mode [ 96.001822][ T7741] tipc: Resetting bearer [ 96.011770][ T7741] tipc: Disabling bearer [ 96.283773][ T7758] tipc: Enabled bearer , priority 0 [ 96.288492][ T7758] tipc: Resetting bearer [ 96.293048][ T7757] tipc: Disabling bearer [ 96.550141][ T7767] tipc: Enabled bearer , priority 0 [ 96.552702][ T7767] syzkaller0: entered promiscuous mode [ 96.554343][ T7767] syzkaller0: entered allmulticast mode [ 96.565539][ T7767] syzkaller0: mtu greater than device maximum [ 96.569400][ T7766] tipc: Resetting bearer [ 96.575845][ T7766] tipc: Disabling bearer [ 96.770703][ T7788] evm: overlay not supported [ 96.829806][ T7796] tipc: Enabled bearer , priority 0 [ 96.832286][ T7796] syzkaller0: entered promiscuous mode [ 96.834023][ T7796] syzkaller0: entered allmulticast mode [ 96.865388][ T7796] tipc: Resetting bearer [ 96.866446][ T7801] fuse: Bad value for 'fd' [ 96.871088][ T7795] tipc: Resetting bearer [ 96.881331][ T7795] tipc: Disabling bearer [ 96.928270][ T7811] sp0: Synchronizing with TNC [ 96.932333][ T7806] loop2: detected capacity change from 0 to 7 [ 96.939714][ T7806] Dev loop2: unable to read RDB block 7 [ 96.941955][ T7806] loop2: AHDI p1 p2 p3 [ 96.943313][ T7806] loop2: partition table partially beyond EOD, truncated [ 96.946817][ T7806] loop2: p1 start 1601398130 is beyond EOD, truncated [ 96.949990][ T7806] loop2: p2 start 1702059890 is beyond EOD, truncated [ 96.978450][ T7807] block nbd2: Attempted send on invalid socket [ 96.980732][ T7807] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 96.984071][ T7807] XFS (nbd2): SB validate failed with error -5. [ 96.986083][ T7819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.592'. [ 96.993889][ T7821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.593'. [ 97.032243][ T7825] af_packet: tpacket_rcv: packet too big, clamped from 3698 to 1904. macoff=96 [ 97.075374][ T7837] fuse: Bad value for 'fd' [ 97.121275][ T7841] netlink: 'syz.1.599': attribute type 1 has an invalid length. [ 97.124279][ T7841] netlink: 192 bytes leftover after parsing attributes in process `syz.1.599'. [ 97.129583][ T7841] NCSI netlink: No device for ifindex 196628 [ 97.135857][ T7840] tipc: Enabled bearer , priority 0 [ 97.139801][ T7840] syzkaller0: entered promiscuous mode [ 97.142093][ T7840] syzkaller0: entered allmulticast mode [ 97.149645][ T7840] tipc: Resetting bearer [ 97.153343][ T7838] tipc: Resetting bearer [ 97.162839][ T7838] tipc: Disabling bearer [ 97.177812][ T7845] input: syz1 as /devices/virtual/input/input30 [ 97.202715][ T5382] Dev loop2: unable to read RDB block 7 [ 97.205027][ T5382] loop2: AHDI p1 p2 p3 [ 97.206818][ T5382] loop2: partition table partially beyond EOD, truncated [ 97.209695][ T5382] loop2: p1 start 1601398130 is beyond EOD, truncated [ 97.212479][ T5382] loop2: p2 start 1702059890 is beyond EOD, truncated [ 97.221958][ T7848] sp0: Synchronizing with TNC [ 97.331965][ T5382] Dev loop2: unable to read RDB block 7 [ 97.333837][ T5382] loop2: AHDI p1 p2 p3 [ 97.335243][ T5382] loop2: partition table partially beyond EOD, truncated [ 97.340060][ T5382] loop2: p1 start 1601398130 is beyond EOD, truncated [ 97.342831][ T5382] loop2: p2 start 1702059890 is beyond EOD, truncated [ 97.344798][ T7855] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 97.393558][ T5382] Dev loop2: unable to read RDB block 7 [ 97.395441][ T5382] loop2: AHDI p1 p2 p3 [ 97.397468][ T5382] loop2: partition table partially beyond EOD, truncated [ 97.400414][ T5382] loop2: p1 start 1601398130 is beyond EOD, truncated [ 97.402601][ T5382] loop2: p2 start 1702059890 is beyond EOD, truncated [ 97.426379][ T6039] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 97.442506][ T7870] fuse: Bad value for 'fd' [ 97.458880][ T5382] Dev loop2: unable to read RDB block 7 [ 97.461179][ T5382] loop2: AHDI p1 p2 p3 [ 97.462863][ T5382] loop2: partition table partially beyond EOD, truncated [ 97.465489][ T5382] loop2: p1 start 1601398130 is beyond EOD, truncated [ 97.468080][ T5382] loop2: p2 start 1702059890 is beyond EOD, truncated [ 97.469189][ T7872] tmpfs: Unknown parameter 'usrquota_*šÖÃùèÄãÿnõõTõblock«DBÊ{EáAÑ R°ùL;iåªÑÄYLÏi' [ 97.509752][ T5382] Dev loop2: unable to read RDB block 7 [ 97.511571][ T5382] loop2: AHDI p1 p2 p3 [ 97.512937][ T5382] loop2: partition table partially beyond EOD, truncated [ 97.515342][ T5382] loop2: p1 start 1601398130 is beyond EOD, truncated [ 97.517771][ T5382] loop2: p2 start 1702059890 is beyond EOD, truncated [ 97.518515][ T7876] capability: warning: `syz.2.611' uses deprecated v2 capabilities in a way that may be insecure [ 97.563293][ T5382] Dev loop2: unable to read RDB block 7 [ 97.565129][ T5382] loop2: AHDI p1 p2 p3 [ 97.567130][ T5382] loop2: partition table partially beyond EOD, truncated [ 97.569506][ T5382] loop2: p1 start 1601398130 is beyond EOD, truncated [ 97.571584][ T5382] loop2: p2 start 1702059890 is beyond EOD, truncated [ 97.575527][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 97.575535][ T40] audit: type=1400 audit(2000000029.300:438): avc: denied { read write } for pid=7881 comm="syz.2.613" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 97.576001][ T7882] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 97.578593][ T40] audit: type=1400 audit(2000000029.300:439): avc: denied { open } for pid=7881 comm="syz.2.613" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 97.598443][ T6039] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 97.601019][ T6039] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 97.605246][ T6039] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 97.609593][ T6039] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 97.613486][ T6039] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 97.617677][ T6039] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 97.621434][ T6039] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 97.625910][ T6039] usb 6-1: config 168 interface 0 has no altsetting 0 [ 97.629226][ T6039] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 97.631910][ T6039] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 97.635964][ T6039] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 97.639854][ T6039] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 97.643633][ T6039] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 97.648057][ T6039] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 97.651466][ T6039] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 97.655576][ T6039] usb 6-1: config 168 interface 0 has no altsetting 0 [ 97.659512][ T6039] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 97.661832][ T6039] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 97.665287][ T6039] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 97.668845][ T6039] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 97.672470][ T6039] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 97.676005][ T6039] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 97.679708][ T6039] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 97.683759][ T6039] usb 6-1: config 168 interface 0 has no altsetting 0 [ 97.708747][ T6039] usb 6-1: string descriptor 0 read error: -22 [ 97.711226][ T6039] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 97.714105][ T6039] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.720237][ T6039] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 98.041582][ T7893] ubi31: attaching mtd0 [ 98.044409][ T7893] ubi31: scanning is finished [ 98.045999][ T7893] ubi31: empty MTD device detected [ 98.100341][ T7896] netlink: 60 bytes leftover after parsing attributes in process `syz.0.615'. [ 98.142282][ T7893] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 98.144783][ T7893] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 98.147200][ T7893] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 98.149274][ T7893] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 98.151491][ T7893] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 98.153603][ T7893] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 98.156330][ T7893] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 955445268 [ 98.160692][ T7893] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 98.165565][ T7897] ubi31: background thread "ubi_bgt31d" started, PID 7897 [ 98.533595][ T5382] Dev loop2: unable to read RDB block 7 [ 98.535443][ T5382] loop2: AHDI p1 p2 p3 [ 98.536814][ T5382] loop2: partition table partially beyond EOD, truncated [ 98.539039][ T5382] loop2: p1 start 1601398130 is beyond EOD, truncated [ 98.541076][ T5382] loop2: p2 start 1702059890 is beyond EOD, truncated [ 98.555897][ T6019] IPVS: starting estimator thread 0... [ 98.586715][ T5382] Dev loop2: unable to read RDB block 7 [ 98.588568][ T5382] loop2: AHDI p1 p2 p3 [ 98.589941][ T5382] loop2: partition table partially beyond EOD, truncated [ 98.592282][ T5382] loop2: p1 start 1601398130 is beyond EOD, truncated [ 98.594446][ T5382] loop2: p2 start 1702059890 is beyond EOD, truncated [ 98.594902][ T7905] input: syz1 as /devices/virtual/input/input31 [ 98.629672][ T40] audit: type=1400 audit(2000000030.360:440): avc: denied { accept } for pid=7906 comm="syz.2.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 98.653935][ T5382] Dev loop2: unable to read RDB block 7 [ 98.655796][ T5382] loop2: AHDI p1 p2 p3 [ 98.657440][ T5382] loop2: partition table partially beyond EOD, truncated [ 98.659776][ T5382] loop2: p1 start 1601398130 is beyond EOD, truncated [ 98.661933][ T5382] loop2: p2 start 1702059890 is beyond EOD, truncated [ 98.666561][ T7903] IPVS: using max 25 ests per chain, 60000 per kthread [ 98.671350][ T40] audit: type=1400 audit(2000000030.400:441): avc: denied { override_creds } for pid=7908 comm="syz.2.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 98.711439][ T40] audit: type=1400 audit(2000000030.440:442): avc: denied { setattr } for pid=7908 comm="syz.2.620" name="[io_uring]" dev="anon_inodefs" ino=18336 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 98.714350][ T7909] FAT-fs (nullb0): bogus number of reserved sectors [ 98.721008][ T7909] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 98.726005][ T7909] netdevsim netdevsim2: Firmware load for './file0/file1/../file0' refused, path contains '..' component [ 98.747064][ T5382] Dev loop2: unable to read RDB block 7 [ 98.749495][ T5382] loop2: AHDI p1 p2 p3 [ 98.751296][ T5382] loop2: partition table partially beyond EOD, truncated [ 98.754382][ T5382] loop2: p1 start 1601398130 is beyond EOD, truncated [ 98.758033][ T5382] loop2: p2 start 1702059890 is beyond EOD, truncated [ 98.815100][ T7916] sp0: Synchronizing with TNC [ 98.823955][ T7914] tipc: Enabled bearer , priority 0 [ 98.827120][ T7914] syzkaller0: entered promiscuous mode [ 98.829410][ T7914] syzkaller0: entered allmulticast mode [ 98.840808][ T7913] tipc: Resetting bearer [ 98.858689][ T7913] tipc: Disabling bearer [ 98.976667][ T5382] Dev loop2: unable to read RDB block 7 [ 98.977774][ T40] audit: type=1400 audit(2000000030.710:443): avc: denied { setopt } for pid=7918 comm="syz.0.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 98.978418][ T5382] loop2: AHDI p1 p2 p3 [ 98.978435][ T5382] loop2: partition table partially beyond EOD, truncated [ 98.978522][ T5382] loop2: p1 start 1601398130 is beyond EOD, truncated [ 98.978532][ T5382] loop2: p2 start 1702059890 is beyond EOD, truncated [ 99.001097][ T40] audit: type=1400 audit(2000000030.730:444): avc: denied { setopt } for pid=7922 comm="syz.0.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.386245][ T6039] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 99.546269][ T6039] usb 5-1: Using ep0 maxpacket: 8 [ 99.550219][ T6039] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 99.552572][ T6039] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 99.556044][ T6039] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.559987][ T6039] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 99.563476][ T6039] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 99.568223][ T6039] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 99.570557][ T6039] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 99.573989][ T6039] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.577812][ T6039] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 99.581226][ T6039] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 99.586020][ T6039] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 99.588544][ T6039] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 99.591973][ T6039] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.595604][ T6039] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 99.599123][ T6039] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 99.604579][ T6039] usb 5-1: string descriptor 0 read error: -22 [ 99.606621][ T6039] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 99.609509][ T6039] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.617157][ T6039] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 99.817263][ T7173] usb 5-1: USB disconnect, device number 9 [ 99.887669][ T5382] Dev loop2: unable to read RDB block 7 [ 99.889430][ T5382] loop2: AHDI p1 p2 p3 [ 99.890738][ T5382] loop2: partition table partially beyond EOD, truncated [ 99.892978][ T5382] loop2: p1 start 1601398130 is beyond EOD, truncated [ 99.895077][ T5382] loop2: p2 start 1702059890 is beyond EOD, truncated [ 99.930799][ T5382] Dev loop2: unable to read RDB block 7 [ 99.932668][ T5382] loop2: AHDI p1 p2 p3 [ 99.934301][ T5382] loop2: partition table partially beyond EOD, truncated [ 99.938066][ T5382] loop2: p1 start 1601398130 is beyond EOD, truncated [ 99.940285][ T5382] loop2: p2 start 1702059890 is beyond EOD, truncated [ 100.129675][ T6065] usb 6-1: USB disconnect, device number 14 [ 100.363544][ T5382] Dev loop2: unable to read RDB block 7 [ 100.365768][ T5382] loop2: AHDI p1 p2 p3 [ 100.368130][ T5382] loop2: partition table partially beyond EOD, truncated [ 100.370469][ T5382] loop2: p1 start 1601398130 is beyond EOD, truncated [ 100.372582][ T5382] loop2: p2 start 1702059890 is beyond EOD, truncated [ 100.409692][ T7947] tipc: Enabled bearer , priority 0 [ 100.412732][ T7947] syzkaller0: entered promiscuous mode [ 100.414875][ T7947] syzkaller0: entered allmulticast mode [ 100.428520][ T7947] tipc: Resetting bearer [ 100.431157][ T7946] tipc: Resetting bearer [ 100.438221][ T7946] tipc: Disabling bearer [ 100.495692][ T40] audit: type=1400 audit(2000000032.220:445): avc: denied { read write } for pid=7951 comm="syz.3.634" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 100.504067][ T40] audit: type=1400 audit(2000000032.220:446): avc: denied { open } for pid=7951 comm="syz.3.634" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 100.523553][ T5382] Dev loop2: unable to read RDB block 7 [ 100.525750][ T5382] loop2: AHDI p1 p2 p3 [ 100.527769][ T5382] loop2: partition table partially beyond EOD, truncated [ 100.529887][ T7955] syzkaller0: entered promiscuous mode [ 100.530070][ T5382] loop2: p1 start 1601398130 is beyond EOD, truncated [ 100.531861][ T7955] syzkaller0: entered allmulticast mode [ 100.533892][ T5382] loop2: p2 start 1702059890 is beyond EOD, truncated [ 100.609947][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.637'. [ 100.613878][ T40] audit: type=1400 audit(2000000032.340:447): avc: denied { read } for pid=7959 comm="syz.3.637" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 100.614318][ T7960] autofs4:pid:7960:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 100.640493][ T5382] Dev loop2: unable to read RDB block 7 [ 100.642307][ T5382] loop2: AHDI p1 p2 p3 [ 100.643718][ T5382] loop2: partition table partially beyond EOD, truncated [ 100.647664][ T5382] loop2: p1 start 1601398130 is beyond EOD, truncated [ 100.650591][ T5382] loop2: p2 start 1702059890 is beyond EOD, truncated [ 100.755074][ T5382] Dev loop2: unable to read RDB block 7 [ 100.757511][ T5382] loop2: AHDI p1 p2 p3 [ 100.758874][ T5382] loop2: partition table partially beyond EOD, truncated [ 100.761111][ T5382] loop2: p1 start 1601398130 is beyond EOD, truncated [ 100.763251][ T5382] loop2: p2 start 1702059890 is beyond EOD, truncated [ 100.778358][ T7975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7975 comm=syz.2.644 [ 100.792877][ T7977] syzkaller0: entered promiscuous mode [ 100.794668][ T7977] syzkaller0: entered allmulticast mode [ 100.802290][ T5382] Dev loop2: unable to read RDB block 7 [ 100.804129][ T5382] loop2: AHDI p1 p2 p3 [ 100.805520][ T5382] loop2: partition table partially beyond EOD, truncated [ 100.809471][ T5382] loop2: p1 start 1601398130 is beyond EOD, truncated [ 100.812046][ T5382] loop2: p2 start 1702059890 is beyond EOD, truncated [ 100.841434][ T7981] syzkaller0: entered promiscuous mode [ 100.843343][ T7981] syzkaller0: entered allmulticast mode [ 100.941966][ T5382] Dev loop2: unable to read RDB block 7 [ 100.943689][ T7985] 9pnet_fd: p9_fd_create_unix (7985): problem connecting socket: ./file0: -111 [ 100.944264][ T5382] loop2: AHDI p1 p2 p3 [ 100.948650][ T5382] loop2: partition table partially beyond EOD, truncated [ 100.950923][ T5382] loop2: p1 start 1601398130 is beyond EOD, truncated [ 100.953107][ T5382] loop2: p2 start 1702059890 is beyond EOD, truncated [ 101.008955][ T7994] netlink: 24 bytes leftover after parsing attributes in process `syz.1.652'. [ 101.045254][ T5382] Dev loop2: unable to read RDB block 7 [ 101.048765][ T5382] loop2: AHDI p1 p2 p3 [ 101.050579][ T5382] loop2: partition table partially beyond EOD, truncated [ 101.053158][ T5382] loop2: p1 start 1601398130 is beyond EOD, truncated [ 101.055473][ T5382] loop2: p2 start 1702059890 is beyond EOD, truncated [ 101.057379][ T7999] input: syz1 as /devices/virtual/input/input32 [ 101.138853][ T5972] Bluetooth: hci0: unexpected cc 0x204b length: 9 > 3 [ 101.301570][ T5382] Dev loop2: unable to read RDB block 7 [ 101.303974][ T5382] loop2: AHDI p1 p2 p3 [ 101.305745][ T5382] loop2: partition table partially beyond EOD, truncated [ 101.308937][ T5382] loop2: p1 start 1601398130 is beyond EOD, truncated [ 101.311539][ T5382] loop2: p2 start 1702059890 is beyond EOD, truncated [ 101.361650][ T5382] Dev loop2: unable to read RDB block 7 [ 101.363474][ T5382] loop2: AHDI p1 p2 p3 [ 101.364781][ T5382] loop2: partition table partially beyond EOD, truncated [ 101.367514][ T5382] loop2: p1 start 1601398130 is beyond EOD, truncated [ 101.369625][ T5382] loop2: p2 start 1702059890 is beyond EOD, truncated [ 101.376032][ T8011] program syz.2.658 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.405843][ T5382] Dev loop2: unable to read RDB block 7 [ 101.407841][ T5382] loop2: AHDI p1 p2 p3 [ 101.409212][ T5382] loop2: partition table partially beyond EOD, truncated [ 101.411563][ T5382] loop2: p1 start 1601398130 is beyond EOD, truncated [ 101.413727][ T5382] loop2: p2 start 1702059890 is beyond EOD, truncated [ 101.418946][ T8013] tipc: Enabled bearer , priority 0 [ 101.440663][ T8013] syzkaller0: entered promiscuous mode [ 101.442497][ T8013] syzkaller0: entered allmulticast mode [ 101.455133][ T8013] tipc: Resetting bearer [ 101.459610][ T8012] tipc: Resetting bearer [ 101.468706][ T8012] tipc: Disabling bearer [ 101.521457][ T5382] Dev loop2: unable to read RDB block 7 [ 101.523939][ T5382] loop2: AHDI p1 p2 p3 [ 101.525806][ T5382] loop2: partition table partially beyond EOD, truncated [ 101.529570][ T5382] loop2: p1 start 1601398130 is beyond EOD, truncated [ 101.532605][ T5382] loop2: p2 start 1702059890 is beyond EOD, truncated [ 101.543378][ T8022] netlink: 'syz.3.661': attribute type 10 has an invalid length. [ 101.549111][ T8022] netlink: 40 bytes leftover after parsing attributes in process `syz.3.661'. [ 101.561349][ T8022] team0: Port device geneve0 added [ 101.561990][ T8024] input: syz1 as /devices/virtual/input/input33 [ 101.591685][ T5382] Dev loop2: unable to read RDB block 7 [ 101.594059][ T5382] loop2: AHDI p1 p2 p3 [ 101.595736][ T5382] loop2: partition table partially beyond EOD, truncated [ 101.600872][ T5382] loop2: p1 start 1601398130 is beyond EOD, truncated [ 101.603729][ T5382] loop2: p2 start 1702059890 is beyond EOD, truncated [ 101.661398][ T8032] netlink: 'syz.1.665': attribute type 6 has an invalid length. [ 101.702829][ T8032] block nbd1: Attempted send on invalid socket [ 101.705897][ T8032] I/O error, dev nbd1, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 101.712034][ T8032] gfs2: error -5 reading superblock [ 101.927725][ T5382] Dev loop2: unable to read RDB block 7 [ 101.929469][ T5382] loop2: AHDI p1 p2 p3 [ 101.930790][ T5382] loop2: partition table partially beyond EOD, truncated [ 101.933048][ T5382] loop2: p1 start 1601398130 is beyond EOD, truncated [ 101.935176][ T5382] loop2: p2 start 1702059890 is beyond EOD, truncated [ 101.950558][ T8036] tipc: Enabled bearer , priority 0 [ 101.954221][ T8036] syzkaller0: entered promiscuous mode [ 101.957152][ T8036] syzkaller0: entered allmulticast mode [ 101.963167][ T8036] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 101.973738][ T8036] tipc: Resetting bearer [ 101.978324][ T8035] tipc: Resetting bearer [ 101.986525][ T8035] tipc: Disabling bearer [ 102.072372][ T5382] Dev loop2: unable to read RDB block 7 [ 102.074848][ T5382] loop2: AHDI p1 p2 p3 [ 102.079657][ T5382] loop2: partition table partially beyond EOD, truncated [ 102.081913][ T5382] loop2: p1 start 1601398130 is beyond EOD, truncated [ 102.084095][ T5382] loop2: p2 start 1702059890 is beyond EOD, truncated [ 102.219153][ T8043] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 102.227837][ T8043] netlink: 100 bytes leftover after parsing attributes in process `syz.0.667'. [ 102.309667][ T63] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 102.551638][ T8057] input: syz1 as /devices/virtual/input/input34 [ 102.929718][ T8087] snd_dummy snd_dummy.0: control 1:96:0:syz0:211 is already present [ 103.102930][ T8097] overlayfs: failed to resolve './file0': -2 [ 103.299280][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 103.299360][ T40] audit: type=1400 audit(2000000035.030:458): avc: denied { bind } for pid=8109 comm="syz.0.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.309542][ T40] audit: type=1400 audit(2000000035.040:459): avc: denied { write } for pid=8109 comm="syz.0.683" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 103.548692][ T8121] input: syz1 as /devices/virtual/input/input35 [ 103.597547][ T8129] tipc: Enabled bearer , priority 0 [ 103.602611][ T8129] tipc: Resetting bearer [ 103.607681][ T8127] tipc: Disabling bearer [ 103.688629][ T40] audit: type=1400 audit(2000000035.420:460): avc: denied { read } for pid=8134 comm="syz.0.688" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 103.689618][ T8135] sd 0:0:0:0: PR command failed: 1026 [ 103.694700][ T8139] netlink: 'syz.3.689': attribute type 1 has an invalid length. [ 103.696815][ T40] audit: type=1400 audit(2000000035.420:461): avc: denied { open } for pid=8134 comm="syz.0.688" path="/189/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 103.699110][ T8135] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 103.701735][ T40] audit: type=1400 audit(2000000035.420:462): avc: denied { ioctl } for pid=8134 comm="syz.0.688" path="/189/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70cd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 103.709205][ T8135] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 103.713282][ T8135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.720100][ T40] audit: type=1400 audit(2000000035.420:463): avc: denied { bind } for pid=8138 comm="syz.3.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 103.723768][ T8135] batadv_slave_0: entered promiscuous mode [ 103.740870][ T8143] netlink: 80 bytes leftover after parsing attributes in process `syz.3.690'. [ 103.745452][ T8143] netlink: 80 bytes leftover after parsing attributes in process `syz.3.690'. [ 103.817909][ T8156] FAULT_INJECTION: forcing a failure. [ 103.817909][ T8156] name failslab, interval 1, probability 0, space 0, times 0 [ 103.821972][ T8156] CPU: 3 UID: 0 PID: 8156 Comm: syz.3.694 Not tainted syzkaller #0 PREEMPT(full) [ 103.821987][ T8156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.821994][ T8156] Call Trace: [ 103.821998][ T8156] [ 103.822002][ T8156] dump_stack_lvl+0x16c/0x1f0 [ 103.822018][ T8156] should_fail_ex+0x512/0x640 [ 103.822038][ T8156] should_failslab+0xc2/0x120 [ 103.822051][ T8156] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 103.822062][ T8156] ? lock_acquire+0x179/0x350 [ 103.822078][ T8156] ? dst_alloc+0x99/0x1a0 [ 103.822089][ T8156] ? __pfx_ip6_dst_gc+0x10/0x10 [ 103.822101][ T8156] dst_alloc+0x99/0x1a0 [ 103.822112][ T8156] ip6_pol_route+0x96b/0x1230 [ 103.822124][ T8156] ? __pfx_ip6_pol_route+0x10/0x10 [ 103.822135][ T8156] ? is_bpf_text_address+0x94/0x1a0 [ 103.822152][ T8156] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 103.822162][ T8156] fib6_rule_lookup+0x5b8/0x720 [ 103.822179][ T8156] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 103.822197][ T8156] ? vlan_do_receive+0x5a1/0x13b0 [ 103.822211][ T8156] ? nft_do_chain_inet+0x18a/0x340 [ 103.822227][ T8156] ip6_route_input+0x662/0xc00 [ 103.822239][ T8156] ? __pfx_ip6_route_input+0x10/0x10 [ 103.822249][ T8156] ? lock_acquire+0x179/0x350 [ 103.822272][ T8156] ? udp_v6_early_demux+0x3fa/0xf70 [ 103.822288][ T8156] ip6_rcv_finish_core.constprop.0+0x1a0/0x5d0 [ 103.822302][ T8156] ipv6_rcv+0x1e8/0x650 [ 103.822313][ T8156] ? __pfx_ipv6_rcv+0x10/0x10 [ 103.822322][ T8156] __netif_receive_skb_one_core+0x12d/0x1e0 [ 103.822339][ T8156] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 103.822356][ T8156] ? lock_acquire+0x179/0x350 [ 103.822378][ T8156] ? __phys_addr+0xe8/0x180 [ 103.822393][ T8156] __netif_receive_skb+0x1d/0x160 [ 103.822410][ T8156] netif_receive_skb+0x137/0x7b0 [ 103.822426][ T8156] ? __pfx_netif_receive_skb+0x10/0x10 [ 103.822446][ T8156] tun_rx_batched.isra.0+0x3ee/0x740 [ 103.822463][ T8156] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 103.822479][ T8156] ? tun_get_user+0x1d8a/0x3ce0 [ 103.822493][ T8156] ? rcu_is_watching+0x12/0xc0 [ 103.822508][ T8156] tun_get_user+0x28e4/0x3ce0 [ 103.822527][ T8156] ? __pfx_tun_get_user+0x10/0x10 [ 103.822542][ T8156] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 103.822559][ T8156] ? find_held_lock+0x2b/0x80 [ 103.822571][ T8156] ? tun_get+0x191/0x370 [ 103.822588][ T8156] tun_chr_write_iter+0xdc/0x210 [ 103.822603][ T8156] vfs_write+0x7d3/0x11d0 [ 103.822614][ T8156] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 103.822630][ T8156] ? __pfx_vfs_write+0x10/0x10 [ 103.822639][ T8156] ? find_held_lock+0x2b/0x80 [ 103.822659][ T8156] ksys_write+0x12a/0x250 [ 103.822669][ T8156] ? __pfx_ksys_write+0x10/0x10 [ 103.822684][ T8156] do_syscall_64+0xcd/0x4c0 [ 103.822701][ T8156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.822737][ T8156] RIP: 0033:0x7f56d838d69f [ 103.822746][ T8156] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 103.822756][ T8156] RSP: 002b:00007f56d9221000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 103.822766][ T8156] RAX: ffffffffffffffda RBX: 00007f56d85c5fa0 RCX: 00007f56d838d69f [ 103.822773][ T8156] RDX: 0000000000000042 RSI: 0000200000000a40 RDI: 00000000000000c8 [ 103.822779][ T8156] RBP: 00007f56d9221090 R08: 0000000000000000 R09: 0000000000000000 [ 103.822785][ T8156] R10: 0000000000000042 R11: 0000000000000293 R12: 0000000000000001 [ 103.822791][ T8156] R13: 00007f56d85c6038 R14: 00007f56d85c5fa0 R15: 00007ffc1664ca38 [ 103.822804][ T8156] [ 103.837767][ T8153] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.693'. [ 104.067814][ T8179] overlay: Unknown parameter 'dont_hash' [ 104.073654][ T40] audit: type=1400 audit(2000000035.800:464): avc: denied { create } for pid=8178 comm="syz.3.700" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 104.082744][ T40] audit: type=1400 audit(2000000035.820:465): avc: denied { link } for pid=8178 comm="syz.3.700" name="file1" dev="tmpfs" ino=903 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 104.165681][ T40] audit: type=1400 audit(2000000035.890:466): avc: denied { getopt } for pid=8192 comm="syz.3.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.230135][ T40] audit: type=1400 audit(2000000035.960:467): avc: denied { watch_mount } for pid=8204 comm="syz.1.704" path="/174" dev="tmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 104.251544][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.705'. [ 104.265047][ T8210] overlayfs: missing 'lowerdir' [ 104.436255][ T1462] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 104.574858][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.597874][ T1462] usb 8-1: Using ep0 maxpacket: 16 [ 104.600913][ T1462] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.604330][ T1462] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.607580][ T1462] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 104.611545][ T1462] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 104.614356][ T1462] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.618441][ T1462] usb 8-1: config 0 descriptor?? [ 104.672497][ T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.755577][ T5975] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.759155][ T5975] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.763129][ T5975] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.769389][ T5975] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.773297][ T5975] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.782773][ T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.802618][ T8233] virt_wifi0 speed is unknown, defaulting to 1000 [ 104.839523][ T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.915613][ T8233] chnl_net:caif_netlink_parms(): no params data found [ 104.996995][ T60] bridge_slave_1: left allmulticast mode [ 104.999036][ T60] bridge_slave_1: left promiscuous mode [ 105.001780][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.007771][ T60] bridge_slave_0: left allmulticast mode [ 105.009545][ T60] bridge_slave_0: left promiscuous mode [ 105.011371][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.029438][ T1462] HID 045e:07da: Invalid code 65791 type 1 [ 105.034159][ T1462] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:045E:07DA.0003/input/input36 [ 105.047814][ T1462] microsoft 0003:045E:07DA.0003: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 105.279518][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.283781][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.288672][ T60] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 105.301393][ T60] bond0 (unregistering): Released all slaves [ 105.324214][ T8233] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.326956][ T8233] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.329176][ T8233] bridge_slave_0: entered allmulticast mode [ 105.331729][ T8233] bridge_slave_0: entered promiscuous mode [ 105.341572][ T8233] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.343825][ T8233] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.346025][ T8233] bridge_slave_1: entered allmulticast mode [ 105.348981][ T8233] bridge_slave_1: entered promiscuous mode [ 105.360495][ T1462] usb 8-1: USB disconnect, device number 7 [ 105.388476][ T60] tipc: Left network mode [ 105.454801][ T8233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.460745][ T8233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.515719][ T8233] team0: Port device team_slave_0 added [ 105.523082][ T8233] team0: Port device team_slave_1 added [ 105.580674][ T8233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.583509][ T8233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.601323][ T8233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.614627][ T8233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.619213][ T8233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.627395][ T8233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.648751][ T60] hsr_slave_0: left promiscuous mode [ 105.651241][ T60] hsr_slave_1: left promiscuous mode [ 105.653924][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.656979][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.660017][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.662317][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.683857][ T60] veth1_macvtap: left promiscuous mode [ 105.685748][ T60] veth0_macvtap: left promiscuous mode [ 105.688496][ T60] veth1_vlan: left promiscuous mode [ 105.690154][ T60] veth0_vlan: left promiscuous mode [ 106.200510][ T60] team0 (unregistering): Port device team_slave_1 removed [ 106.258429][ T60] team0 (unregistering): Port device team_slave_0 removed [ 106.339353][ T63] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 106.342130][ T63] Bluetooth: hci3: Injecting HCI hardware error event [ 106.752160][ T8233] hsr_slave_0: entered promiscuous mode [ 106.754523][ T8233] hsr_slave_1: entered promiscuous mode [ 106.758910][ T8233] debugfs: 'hsr0' already exists in 'hsr' [ 106.761120][ T8233] Cannot create hsr debugfs directory [ 106.807268][ T63] Bluetooth: hci0: command tx timeout [ 106.907019][ T9327] netlink: 16 bytes leftover after parsing attributes in process `syz.3.719'. [ 106.925610][ T8233] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.931542][ T8233] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.938195][ T8233] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.942921][ T8233] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.007140][ T8233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.008941][ T9356] fuse: Bad value for 'fd' [ 107.013560][ T9356] netlink: 80 bytes leftover after parsing attributes in process `syz.3.722'. [ 107.025246][ T8233] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.030483][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.032782][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.043294][ T9361] nbd: must specify a device to reconfigure [ 107.048361][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.050869][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.099061][ T9376] tipc: Can't bind to reserved service type 62 [ 107.178858][ T8233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.185219][ T9399] tipc: Enabling of bearer rejected, failed to enable media [ 107.193367][ T9402] input: syz1 as /devices/virtual/input/input37 [ 107.341085][ T8233] veth0_vlan: entered promiscuous mode [ 107.349159][ T8233] veth1_vlan: entered promiscuous mode [ 107.365791][ T8233] veth0_macvtap: entered promiscuous mode [ 107.374633][ T8233] veth1_macvtap: entered promiscuous mode [ 107.385821][ T8233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.394270][ T8233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.400164][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.405314][ T9438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.736'. [ 107.405645][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.413145][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.417286][ T9438] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 107.422772][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.427511][ T9438] loop2: detected capacity change from 0 to 7 [ 107.431900][ T9438] Dev loop2: unable to read RDB block 7 [ 107.433977][ T9438] loop2: AHDI p1 p2 p3 [ 107.435323][ T9438] loop2: partition table partially beyond EOD, truncated [ 107.441032][ T9438] loop2: p1 start 1601398130 is beyond EOD, truncated [ 107.443337][ T9438] loop2: p2 start 1702059890 is beyond EOD, truncated [ 107.471844][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.474919][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.489735][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.492160][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.495882][ T9450] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000006ÿ00000000000000000000' [ 107.499692][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.737'. [ 107.508288][ T9435] binder: 9433:9435 ioctl c0306201 200000000040 returned -22 [ 107.591471][ T9469] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 107.746408][ T1462] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 107.846525][ T63] Bluetooth: hci3: unexpected event for opcode 0x0c7c [ 107.850775][ T63] Bluetooth: hci3: unexpected event for opcode 0x0c7c [ 107.904766][ T9491] tipc: Enabling of bearer rejected, failed to enable media [ 107.907696][ T1462] usb 8-1: Using ep0 maxpacket: 8 [ 107.910543][ T1462] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 107.913014][ T1462] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 107.917603][ T1462] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.922211][ T1462] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 146, changing to 11 [ 107.926508][ T1462] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 107.930745][ T1462] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 107.933052][ T1462] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 107.937136][ T1462] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.941234][ T1462] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 146, changing to 11 [ 107.945536][ T1462] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 107.950324][ T1462] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 107.952653][ T1462] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 107.956787][ T1462] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.960591][ T1462] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 146, changing to 11 [ 107.964136][ T1462] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 107.970430][ T1462] usb 8-1: string descriptor 0 read error: -22 [ 107.972497][ T1462] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 107.975370][ T1462] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.987328][ T1462] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 108.035858][ T63] Bluetooth: hci3: unexpected cc 0x204b length: 9 > 3 [ 108.039244][ T63] Bluetooth: hci3: unexpected event for opcode 0x204b [ 108.468386][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 108.468397][ T40] audit: type=1400 audit(2000000040.200:490): avc: denied { create } for pid=9511 comm="syz.4.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 108.477150][ T40] audit: type=1400 audit(2000000040.200:491): avc: denied { sys_admin } for pid=9511 comm="syz.4.745" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 108.483938][ T40] audit: type=1400 audit(2000000040.210:492): avc: denied { mount } for pid=9511 comm="syz.4.745" name="/" dev="autofs" ino=21217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 108.600714][ T9539] netlink: 52 bytes leftover after parsing attributes in process `syz.4.749'. [ 108.607558][ T40] audit: type=1400 audit(2000000040.340:493): avc: denied { bind } for pid=9540 comm="syz.0.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 108.640486][ T40] audit: type=1400 audit(2000000040.370:494): avc: denied { read write } for pid=9547 comm="syz.0.752" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 108.648031][ T40] audit: type=1400 audit(2000000040.370:495): avc: denied { open } for pid=9547 comm="syz.0.752" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 108.655116][ T40] audit: type=1400 audit(2000000040.370:496): avc: denied { append } for pid=9547 comm="syz.0.752" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.778793][ T40] audit: type=1400 audit(2000000040.510:497): avc: denied { setopt } for pid=9557 comm="syz.4.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 108.886378][ T63] Bluetooth: hci0: command tx timeout [ 108.893948][ T9577] loop6: detected capacity change from 0 to 457 [ 108.899768][ T9577] loop6: AHDI p1 [ 108.930517][ T9584] veth1_macvtap: entered allmulticast mode [ 108.935998][ T9586] input: syz1 as /devices/virtual/input/input38 [ 108.971092][ T9593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.972345][ T9598] mkiss: ax0: crc mode is auto. [ 108.990266][ T9605] random: crng reseeded on system resumption [ 108.991124][ T40] audit: type=1400 audit(2000000040.720:498): avc: denied { append } for pid=9602 comm="syz.4.760" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 108.999498][ T40] audit: type=1400 audit(2000000040.720:499): avc: denied { open } for pid=9602 comm="syz.4.760" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 109.009918][ T9605] Restarting kernel threads ... [ 109.012161][ T9605] Done restarting kernel threads. [ 109.077680][ T9612] fuse: Unknown parameter 'grou00000000000000000000' [ 109.115855][ T9615] kernel read not supported for file /policy (pid: 9615 comm: syz.0.763) [ 109.230271][ T9610] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 109.237718][ T9615] /dev/sr0: Can't open blockdev [ 109.268641][ T9623] I/O error, dev loop0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.271663][ T9623] qnx6: unable to read the first superblock [ 109.273964][ T9623] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.278120][ T9623] qnx6: unable to read the first superblock [ 109.279987][ T9623] qnx6: unable to read the first superblock [ 109.428117][ T9636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9636 comm=syz.0.768 [ 109.578326][ T9643] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 109.581052][ T9643] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 109.588207][ T9643] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 109.592709][ T9643] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 109.595156][ T9643] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 109.599356][ T9643] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 110.976242][ T63] Bluetooth: hci0: command tx timeout [ 111.606303][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 111.606327][ T5975] Bluetooth: hci1: command 0x0c1a tx timeout [ 111.616298][ T5975] Bluetooth: hci3: command 0x0405 tx timeout [ 111.618955][ T9643] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 111.619082][ T5972] Bluetooth: hci3: hardware error 0x00 [ 111.621424][ T9643] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 111.627875][ T9643] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 111.634219][ T9643] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 111.636236][ T9643] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.639018][ T9643] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.770972][ T9698] block nbd2: Attempted send on invalid socket [ 111.773045][ T9698] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.776781][ T9698] exFAT-fs (nbd2): unable to read boot sector [ 111.779474][ T9698] exFAT-fs (nbd2): failed to read boot sector [ 111.781894][ T9698] exFAT-fs (nbd2): failed to recognize exfat type [ 111.787720][ T9698] netlink: 32 bytes leftover after parsing attributes in process `syz.2.775'. [ 112.035743][ T9710] tipc: Enabled bearer , priority 0 [ 112.039007][ T9710] syzkaller0: entered promiscuous mode [ 112.040753][ T9710] syzkaller0: entered allmulticast mode [ 112.050592][ T9710] tipc: Resetting bearer [ 112.053602][ T9709] tipc: Resetting bearer [ 112.059268][ T9709] tipc: Disabling bearer [ 112.180654][ T9720] kernel profiling enabled (shift: 6) [ 112.218696][ T9720] netlink: 32 bytes leftover after parsing attributes in process `syz.0.781'. [ 112.294576][ T9732] netlink: 68 bytes leftover after parsing attributes in process `syz.0.783'. [ 112.327047][ T1462] usb 8-1: USB disconnect, device number 8 [ 112.362087][ T9750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.785'. [ 112.448909][ T9762] netlink: 'syz.3.787': attribute type 1 has an invalid length. [ 112.451375][ T9762] netlink: 172 bytes leftover after parsing attributes in process `syz.3.787'. [ 113.127512][ T1462] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 113.276240][ T1462] usb 7-1: Using ep0 maxpacket: 8 [ 113.279608][ T1462] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.283740][ T1462] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.288096][ T1462] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.291510][ T1462] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.295768][ T1462] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 113.299116][ T1462] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.453764][ T9810] usb usb8: usbfs: process 9810 (syz.3.793) did not claim interface 0 before use [ 113.466308][ T7173] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 113.504642][ T1462] usb 7-1: usb_control_msg returned -32 [ 113.506795][ T1462] usbtmc 7-1:16.0: can't read capabilities [ 113.531397][ T6039] usb 7-1: USB disconnect, device number 13 [ 113.568712][ T9821] netlink: 'syz.2.794': attribute type 1 has an invalid length. [ 113.571135][ T9821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.794'. [ 113.633969][ T7173] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 12336, setting to 1024 [ 113.637587][ T7173] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 113.641449][ T7173] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.650486][ T7173] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 113.653543][ T7173] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 113.656011][ T7173] usb 9-1: Product: syz [ 113.657717][ T7173] usb 9-1: Manufacturer: syz [ 113.659608][ T7173] usb 9-1: SerialNumber: syz [ 113.665539][ T9829] fuse: Unknown parameter 'group_id00000000000000000000' [ 113.665641][ T9800] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 113.687138][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 113.689091][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.691032][ T5972] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 113.696301][ T5975] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.697914][ T9821] kvm: kvm [9818]: vcpu2, guest rIP: 0x9133 Unhandled WRMSR(0x11e) = 0x0 [ 113.755240][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.797'. [ 113.761950][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.797'. [ 113.765018][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.797'. [ 113.769273][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.797'. [ 113.772699][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.797'. [ 113.823517][ T9848] vlan0: entered promiscuous mode [ 113.831354][ T9848] team0: Port device vlan0 added [ 113.883624][ T7173] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 113.894279][ T7173] usb 9-1: USB disconnect, device number 2 [ 113.904397][ T7173] usblp0: removed [ 114.043515][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 114.043526][ T40] audit: type=1400 audit(2000000045.770:513): avc: denied { kexec_image_load } for pid=9879 comm="syz.3.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 114.351558][ T9899] fuse: Bad value for 'user_id' [ 114.353194][ T9899] fuse: Bad value for 'user_id' [ 114.385155][ T40] audit: type=1400 audit(2000000046.110:514): avc: denied { add_name } for pid=9900 comm="syz.2.807" name="control" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.393933][ T40] audit: type=1400 audit(2000000046.110:515): avc: denied { create } for pid=9900 comm="syz.2.807" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 114.400990][ T40] audit: type=1400 audit(2000000046.110:516): avc: denied { associate } for pid=9900 comm="syz.2.807" name="control" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 114.558191][ T9927] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 114.560234][ T9928] netlink: 'syz.4.813': attribute type 28 has an invalid length. [ 114.562676][ T9928] netlink: 'syz.4.813': attribute type 3 has an invalid length. [ 114.599980][ T40] audit: type=1400 audit(2000000046.330:517): avc: denied { getopt } for pid=9932 comm="syz.2.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 114.704216][ T9951] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.853621][ T40] audit: type=1400 audit(2000000046.580:518): avc: denied { read } for pid=9965 comm="syz.4.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 115.041032][ T40] audit: type=1400 audit(2000000046.770:519): avc: denied { map } for pid=9969 comm="syz.3.823" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 115.120984][ T40] audit: type=1400 audit(2000000046.850:520): avc: denied { ioctl } for pid=9969 comm="syz.3.823" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0xaa04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 115.485838][ T9984] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554432, id = 0 [ 115.499692][ T9986] nfs: Unknown parameter './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 115.766259][ T5975] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.768235][ T5975] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.768433][ T5972] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.787783][ T9999] fuse: Bad value for 'user_id' [ 115.789403][ T9999] fuse: Bad value for 'user_id' [ 115.821342][T10003] overlayfs: failed to resolve './file1': -2 [ 116.093654][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.097334][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.167033][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.170303][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.190014][ T40] audit: type=1400 audit(2000000047.920:521): avc: denied { execmem } for pid=10014 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 116.237886][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.241225][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.311665][ T5975] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 116.315170][ T5975] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 116.318424][ T5975] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 116.321755][ T5975] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 116.324791][ T5975] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 116.338578][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.341871][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.358696][T10015] virt_wifi0 speed is unknown, defaulting to 1000 [ 116.440417][T10015] chnl_net:caif_netlink_parms(): no params data found [ 116.526349][ T13] bridge_slave_1: left allmulticast mode [ 116.528321][ T13] bridge_slave_1: left promiscuous mode [ 116.530178][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.533886][ T13] bridge_slave_0: left allmulticast mode [ 116.535632][ T13] bridge_slave_0: left promiscuous mode [ 116.537836][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.745085][ T5975] Bluetooth: hci2: unexpected cc 0x204b length: 9 > 3 [ 116.747500][ T5975] Bluetooth: hci2: unexpected event for opcode 0x204b [ 116.832358][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.837026][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.840569][ T13] bond0 (unregistering): Released all slaves [ 116.899208][ T13] bond1 (unregistering): Released all slaves [ 116.921714][T10289] dns_resolver: Unsupported server list version (0) [ 116.929760][T10015] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.932062][T10015] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.934310][T10015] bridge_slave_0: entered allmulticast mode [ 116.937228][T10015] bridge_slave_0: entered promiscuous mode [ 116.943063][T10015] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.945291][T10015] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.947791][T10015] bridge_slave_1: entered allmulticast mode [ 116.950381][T10015] bridge_slave_1: entered promiscuous mode [ 116.978722][ T13] tipc: Left network mode [ 117.000526][T10015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.004828][T10015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.044914][T10015] team0: Port device team_slave_0 added [ 117.072091][T10015] team0: Port device team_slave_1 added [ 117.094408][T10605] tipc: Started in network mode [ 117.097820][T10605] tipc: Node identity 8aa44435b4c6, cluster identity 4711 [ 117.100906][T10605] tipc: Enabled bearer , priority 0 [ 117.130681][T10015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.133402][T10015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.143485][T10015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.149960][T10015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.152137][T10015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.160756][T10015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.186807][T10481] tipc: Resetting bearer [ 117.190268][T10480] tipc: Disabling bearer [ 117.253238][T10015] hsr_slave_0: entered promiscuous mode [ 117.255537][T10015] hsr_slave_1: entered promiscuous mode [ 117.259225][T10015] debugfs: 'hsr0' already exists in 'hsr' [ 117.261024][T10015] Cannot create hsr debugfs directory [ 117.292804][ T13] hsr_slave_0: left promiscuous mode [ 117.312006][ T13] hsr_slave_1: left promiscuous mode [ 117.314840][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.327300][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.332664][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.335706][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.368586][ T13] veth1_macvtap: left promiscuous mode [ 117.370915][ T13] veth0_macvtap: left promiscuous mode [ 117.373303][ T13] veth1_vlan: left promiscuous mode [ 117.375557][ T13] veth0_vlan: left promiscuous mode [ 117.383802][T10880] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 117.386089][T10880] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 117.386183][ T40] audit: type=1400 audit(2000000049.110:522): avc: denied { create } for pid=10868 comm="syz.3.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 117.495708][T10882] fuse: Bad value for 'fd' [ 117.508678][T10885] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 117.519168][T10885] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 117.531516][T10885] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 117.535563][T10885] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 117.541127][T10885] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 117.544498][T10885] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 117.549579][T10885] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 117.555131][T10885] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 117.564829][T10885] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 117.570623][T10885] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 117.828492][T10896] fuse: Unknown parameter 'gro+:ñšd00000000000000000000' [ 117.846719][ T5975] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.973043][ T13] team0 (unregistering): Port device team_slave_1 removed [ 118.035655][ T13] team0 (unregistering): Port device team_slave_0 removed [ 118.153381][T10907] syz.4.857: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 118.407213][ T5975] Bluetooth: hci1: command tx timeout [ 118.512983][T10912] veth1_to_batadv: mtu less than device minimum [ 118.515298][T10913] unknown channel width for channel at 909000KHz? [ 118.518104][T10913] unknown channel width for channel at 909000KHz? [ 118.524447][T10906] uprobe: syz.4.857:10906 failed to unregister, leaking uprobe [ 118.605231][T10920] netlink: 'syz.3.858': attribute type 29 has an invalid length. [ 118.736862][T11155] pim6reg: entered allmulticast mode [ 118.790782][T10015] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 118.798388][T10015] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 118.802308][T10015] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 118.807533][T10015] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 118.856572][T11188] fuse: Bad value for 'fd' [ 118.858235][T10015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.871916][T10015] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.883275][ T9689] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.885498][ T9689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.894106][ T9692] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.896443][ T9692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.947454][ T13] IPVS: stop unused estimator thread 0... [ 119.011376][T11205] nfs: Unknown parameter './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 119.079165][T11212] binder: BC_ACQUIRE_RESULT not supported [ 119.081062][T11212] binder: 11204:11212 ioctl c0306201 200000000500 returned -22 [ 119.095766][T11212] __nla_validate_parse: 6 callbacks suppressed [ 119.095777][T11212] netlink: 96 bytes leftover after parsing attributes in process `syz.4.869'. [ 119.138616][T11221] hpfs: Unknown parameter 'acl' [ 119.154356][T10015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.226591][T11221] netlink: 68 bytes leftover after parsing attributes in process `syz.4.870'. [ 119.231935][T11221] ufs: You didn't specify the type of your ufs filesystem [ 119.231935][T11221] [ 119.231935][T11221] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 119.231935][T11221] [ 119.231935][T11221] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 119.243745][T11221] ufs: ufstype=old is supported read-only [ 119.247637][T11221] ufs: ufs_fill_super(): bad magic number [ 119.250392][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 119.250400][ T40] audit: type=1400 audit(2000000050.979:530): avc: denied { accept } for pid=11220 comm="syz.4.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 119.341620][T10015] veth0_vlan: entered promiscuous mode [ 119.350534][T10015] veth1_vlan: entered promiscuous mode [ 119.374210][T10015] veth0_macvtap: entered promiscuous mode [ 119.380996][T10015] veth1_macvtap: entered promiscuous mode [ 119.397454][T10015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.403918][T10015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.410362][ T9692] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.413045][ T9692] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.418855][ T9692] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.422446][ T9692] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.463456][T11251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.872'. [ 119.467655][T11251] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 119.468301][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.471896][T11251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.473369][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.498283][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.502760][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.524560][ T40] audit: type=1400 audit(2000000051.249:531): avc: denied { mounton } for pid=10015 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 119.558777][ T40] audit: type=1400 audit(2000000051.289:532): avc: denied { read } for pid=11263 comm="syz.4.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 119.565635][T11264] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.873'. [ 119.590433][T11272] fuse: Invalid rootmode [ 119.712619][T11292] syzkaller0: entered promiscuous mode [ 119.714630][T11292] syzkaller0: entered allmulticast mode [ 119.722364][T11295] input: syz1 as /devices/virtual/input/input42 [ 119.840613][T11302] netlink: 'syz.5.879': attribute type 7 has an invalid length. [ 119.843668][T11302] netlink: 8 bytes leftover after parsing attributes in process `syz.5.879'. [ 119.848040][ T40] audit: type=1400 audit(2000000051.579:533): avc: denied { create } for pid=11301 comm="syz.5.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 119.856551][ T40] audit: type=1400 audit(2000000051.579:534): avc: denied { write } for pid=11301 comm="syz.5.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 119.864742][T11302] bond1 (unregistering): Released all slaves [ 119.997817][T11373] netlink: 'syz.5.880': attribute type 4 has an invalid length. [ 120.005396][T11373] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.010313][T11373] efs: cannot read volume header [ 120.041780][T11377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.881'. [ 120.045192][T11377] netlink: 40 bytes leftover after parsing attributes in process `syz.3.881'. [ 120.057983][T11376] 9pnet_virtio: no channels available for device syz [ 120.267624][T11395] fuse: Invalid rootmode [ 120.291763][T11382] option changes via remount are deprecated (pid=11381 comm=syz.5.882) [ 120.294961][T11382] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 120.298155][ T40] audit: type=1400 audit(2000000052.029:535): avc: denied { ioctl } for pid=11381 comm="syz.5.882" path="socket:[24299]" dev="sockfs" ino=24299 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.308135][ T40] audit: type=1400 audit(2000000052.039:536): avc: denied { sqpoll } for pid=11397 comm="syz.0.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 120.316541][T11398] binder: 11397:11398 ioctl c00c620f 200000000140 returned -22 [ 120.377201][T11410] all: renamed from lo (while UP) [ 120.420697][T11417] binder: 11415:11417 ioctl c0306201 200000000640 returned -22 [ 120.424659][T11417] input: syz1 as /devices/virtual/input/input43 [ 120.429265][T11417] input: failed to attach handler leds to device input43, error: -6 [ 120.451577][ T40] audit: type=1400 audit(2000000052.179:537): avc: denied { write } for pid=11421 comm="syz.5.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 120.460607][ T40] audit: type=1400 audit(2000000052.179:538): avc: denied { read } for pid=11421 comm="syz.5.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 120.461960][T11425] lo speed is unknown, defaulting to 1000 [ 120.473614][T11425] lo speed is unknown, defaulting to 1000 [ 120.480498][T11425] lo speed is unknown, defaulting to 1000 [ 120.493072][T11439] fuse: Invalid rootmode [ 120.496409][ T5975] Bluetooth: hci1: command tx timeout [ 120.548824][T11444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.894'. [ 120.619991][T11425] infiniband sz1: set active [ 120.622346][ T29] lo speed is unknown, defaulting to 1000 [ 120.624941][T11425] infiniband sz1: added lo [ 120.626480][ T40] audit: type=1400 audit(2000000052.349:539): avc: denied { map } for pid=11510 comm="syz.3.895" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 120.664065][T11519] .4@0Ù: renamed from bond_slave_1 (while UP) [ 120.669288][T11425] RDS/IB: sz1: added [ 120.673476][T11425] smc: adding ib device sz1 with port count 1 [ 120.675545][T11425] smc: ib device sz1 port 1 has pnetid [ 120.678239][ T10] lo speed is unknown, defaulting to 1000 [ 120.681267][T11425] lo speed is unknown, defaulting to 1000 [ 120.706237][ T34] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 120.748639][ T5975] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 120.801150][T11425] lo speed is unknown, defaulting to 1000 [ 120.876219][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 120.879441][ T34] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 120.881996][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 120.885369][ T34] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.889574][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 120.893126][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 120.897152][T11517] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 120.897990][ T34] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 120.899203][T11517] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 120.901234][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 120.903211][T11517] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 120.906913][ T34] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.909297][T11517] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 120.911937][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 120.917353][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 120.917649][T11425] lo speed is unknown, defaulting to 1000 [ 120.922135][T11517] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 120.922561][ T34] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 120.922586][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 120.922601][ T34] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.922615][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 120.922629][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 120.925391][ T34] usb 5-1: string descriptor 0 read error: -22 [ 120.944695][ T34] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 120.947725][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.953730][T11541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.959110][ T34] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 121.036081][T11425] lo speed is unknown, defaulting to 1000 [ 121.191671][T11566] fuse: Bad value for 'rootmode' [ 121.226315][ T6019] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 121.264778][ T29] usb 5-1: USB disconnect, device number 10 [ 121.267726][T11567] usb 5-1: Couldn't submit interrupt_out_urb -19 [ 121.396352][ T6019] usb 8-1: Using ep0 maxpacket: 8 [ 121.400236][ T6019] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 121.402804][ T6019] usb 8-1: config 179 has no interface number 0 [ 121.404807][ T6019] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 121.407894][T11597] netlink: 44 bytes leftover after parsing attributes in process `syz.5.906'. [ 121.409187][ T6019] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 121.411073][T11597] netlink: 43 bytes leftover after parsing attributes in process `syz.5.906'. [ 121.414586][ T6019] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 101, changing to 10 [ 121.414601][ T6019] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24697, setting to 1024 [ 121.414615][ T6019] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 121.418154][T11597] netlink: 'syz.5.906': attribute type 5 has an invalid length. [ 121.422150][ T6019] usb 8-1: config 179 interface 65 has no altsetting 0 [ 121.422203][ T6019] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 121.439428][ T6019] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.455431][ T6019] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input44 [ 121.499087][ T5367] input input44: unable to receive magic message: -110 [ 121.504051][ T5367] input input44: unable to receive magic message: -32 [ 121.515694][ T5367] input input44: unable to receive magic message: -32 [ 121.519335][T11615] netlink: 'syz.4.909': attribute type 1 has an invalid length. [ 121.523335][T11616] netlink: 'syz.4.909': attribute type 1 has an invalid length. [ 121.535255][ T5367] input input44: unable to receive magic message: -32 [ 121.545846][ T5367] input input44: unable to receive magic message: -32 [ 121.552042][ T5367] input input44: unable to receive magic message: -32 [ 121.561200][T11615] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.571448][T11616] bond1: entered promiscuous mode [ 121.646037][T11555] input input44: unable to receive magic message: -32 [ 121.669063][ T3249] usb 8-1: USB disconnect, device number 9 [ 121.670933][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 121.917803][ T3249] hid-generic 07FF:0009:0006.0004: item fetching failed at offset 0/35 [ 121.921727][ T3249] hid-generic 07FF:0009:0006.0004: probe with driver hid-generic failed with error -22 [ 121.997447][T11697] 9pnet_virtio: no channels available for device syz [ 122.227492][T11709] option changes via remount are deprecated (pid=11707 comm=syz.4.918) [ 122.230106][T11711] option changes via remount are deprecated (pid=11707 comm=syz.4.918) [ 122.456054][ T5972] Bluetooth: hci0: unexpected cc 0x204b length: 9 > 3 [ 122.458468][ T5972] Bluetooth: hci0: unexpected event for opcode 0x204b [ 122.471967][T11744] syzkaller0: entered promiscuous mode [ 122.473873][T11744] syzkaller0: entered allmulticast mode [ 122.584867][T11751] tmpfs: Cannot change global quota limit on remount [ 122.616085][T11755] IPv6: sit1: Disabled Multicast RS [ 122.618737][T11755] sit1: entered allmulticast mode [ 122.742449][T11765] gretap1: entered promiscuous mode [ 122.898254][ T5972] Bluetooth: hci2: command 0x0c1a tx timeout [ 122.966476][ T5972] Bluetooth: hci1: command 0x0419 tx timeout [ 123.022177][T11797] fuse: Unknown parameter 'use00000000000000000000' [ 123.296423][ T24] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 123.454820][ T24] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 123.457514][ T24] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 123.460756][ T24] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 123.464125][ T24] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 123.467674][ T24] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 123.471638][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 123.475198][ T24] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 123.479845][ T24] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 123.482399][ T24] usb 9-1: Product: syz [ 123.483676][ T24] usb 9-1: Manufacturer: syz [ 123.485149][ T24] usb 9-1: SerialNumber: syz [ 123.488294][ T24] usb 9-1: config 0 descriptor?? [ 123.490763][T11799] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 123.493941][ T24] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 123.499827][ T24] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 123.795942][T11930] syzkaller0: entered promiscuous mode [ 123.797856][T11930] syzkaller0: entered allmulticast mode [ 123.871582][ T24] usb 9-1: USB disconnect, device number 3 [ 123.895040][ T24] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 124.087076][T11977] netlink: 'syz.3.958': attribute type 2 has an invalid length. [ 124.256191][ T841] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 124.407137][ T841] usb 5-1: Using ep0 maxpacket: 8 [ 124.413131][ T841] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 124.415689][ T841] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 124.422041][ T841] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 124.427208][ T841] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 124.431555][ T841] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 124.438823][ T841] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 124.441982][ T841] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 124.447238][ T841] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 124.451804][ T841] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 124.455696][ T841] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 124.461312][ T841] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 124.464341][ T841] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 124.468109][ T841] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 124.471961][ T841] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 124.475303][ T841] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 124.482057][ T841] usb 5-1: string descriptor 0 read error: -22 [ 124.484491][ T841] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 124.489082][ T841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.496735][T12127] block nbd4: Attempted send on invalid socket [ 124.498868][T12127] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.501975][T12127] block nbd4: Attempted send on invalid socket [ 124.503910][T12127] I/O error, dev nbd4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.504129][ T841] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 124.509352][T12127] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 124.513632][T12127] block nbd4: Attempted send on invalid socket [ 124.515513][T12127] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.519819][T12127] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 124.523915][T12127] block nbd4: Attempted send on invalid socket [ 124.526038][T12127] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.529236][T12127] block nbd4: Attempted send on invalid socket [ 124.531170][T12127] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.533999][T12127] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 124.537121][T12127] block nbd4: Attempted send on invalid socket [ 124.539042][T12127] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.542271][T12127] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 124.545752][T12127] block nbd4: Attempted send on invalid socket [ 124.548762][T12127] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.551842][T12127] block nbd4: Attempted send on invalid socket [ 124.554649][T12127] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.557944][T12127] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 124.560996][T12127] block nbd4: Attempted send on invalid socket [ 124.562886][T12127] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.565923][T12127] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 124.569758][T12127] block nbd4: Attempted send on invalid socket [ 124.571964][T12127] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 124.574959][T12127] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 124.578349][T12127] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 124.721548][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 124.721558][ T40] audit: type=1400 audit(124.606:559): avc: denied { bind } for pid=12142 comm="syz.3.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 124.730823][ T40] audit: type=1400 audit(124.606:560): avc: denied { name_bind } for pid=12142 comm="syz.3.965" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 124.737497][ T40] audit: type=1400 audit(124.606:561): avc: denied { node_bind } for pid=12142 comm="syz.3.965" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 124.739928][T12143] __nla_validate_parse: 13 callbacks suppressed [ 124.739938][T12143] netlink: 666 bytes leftover after parsing attributes in process `syz.3.965'. [ 124.743457][ T40] audit: type=1400 audit(124.626:562): avc: denied { ioctl } for pid=12142 comm="syz.3.965" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 124.804664][ T34] usb 5-1: USB disconnect, device number 11 [ 124.806679][T12145] usb 5-1: Couldn't submit interrupt_out_urb -19 [ 124.874403][ T40] audit: type=1400 audit(124.756:563): avc: denied { ioctl } for pid=12164 comm="syz.3.967" path="socket:[28760]" dev="sockfs" ino=28760 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 124.934625][T12173] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.970'. [ 125.046554][ T5972] Bluetooth: hci1: command 0x0419 tx timeout [ 125.046639][ T3249] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 125.107275][T12180] nfs: Unknown parameter './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 125.167878][ T40] audit: type=1400 audit(125.056:564): avc: denied { mount } for pid=12181 comm="syz.4.972" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 125.176077][ T40] audit: type=1400 audit(125.056:565): avc: denied { mounton } for pid=12181 comm="syz.4.972" path="/78/file0" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 125.354601][ T40] audit: type=1400 audit(125.236:566): avc: denied { mounton } for pid=12186 comm="syz.3.971" path="/229/file0" dev="9p" ino=35913801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.363623][T12187] 9pnet_virtio: no channels available for device syz [ 125.367859][T12187] 9pnet_virtio: no channels available for device syz [ 125.371281][T12187] 9pnet_virtio: no channels available for device syz [ 125.374559][T12187] 9pnet_virtio: no channels available for device syz [ 125.378137][T12187] 9pnet_virtio: no channels available for device syz [ 125.381448][T12187] 9pnet_virtio: no channels available for device syz [ 125.385636][T12187] 9pnet_virtio: no channels available for device syz [ 125.389263][T12187] 9pnet_virtio: no channels available for device syz [ 125.392464][T12187] 9pnet_virtio: no channels available for device syz [ 125.395577][T12187] 9pnet_virtio: no channels available for device syz [ 125.400986][T12187] 9pnet_virtio: no channels available for device syz [ 125.423828][ T5976] 9pnet: Tag 0 still in use [ 125.434698][ C3] ------------[ cut here ]------------ [ 125.437070][ C3] refcount_t: underflow; use-after-free. [ 125.439111][ C3] WARNING: CPU: 3 PID: 12182 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 125.442043][ C3] Modules linked in: [ 125.443447][ C3] CPU: 3 UID: 0 PID: 12182 Comm: syz.4.972 Not tainted syzkaller #0 PREEMPT(full) [ 125.448189][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 125.452229][ C3] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 125.454195][ C3] Code: ff 89 de e8 98 08 d8 fc 84 db 0f 85 66 ff ff ff e8 ab 0d d8 fc c6 05 b6 37 b0 0b 01 90 48 c7 c7 c0 99 15 8c e8 27 b1 96 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 88 0d d8 fc 0f b6 1d 91 37 b0 0b 31 [ 125.460120][ C3] RSP: 0018:ffffc900006f8d88 EFLAGS: 00010086 [ 125.461982][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a3388 [ 125.464428][ C3] RDX: ffff88802c188000 RSI: ffffffff817a3395 RDI: 0000000000000001 [ 125.466817][ C3] RBP: ffff88805acf2228 R08: 0000000000000001 R09: 0000000000000000 [ 125.469263][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805acf2228 [ 125.471787][ C3] R13: ffff88804a01b000 R14: 0000000000000009 R15: 1ffff110202f380c [ 125.474233][ C3] FS: 0000000000000000(0000) GS:ffff8880d69b8000(0000) knlGS:0000000000000000 [ 125.476992][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.479051][ C3] CR2: 00007f56d91def98 CR3: 000000004b5ad000 CR4: 0000000000352ef0 [ 125.481453][ C3] Call Trace: [ 125.482539][ C3] [ 125.483453][ C3] p9_req_put+0x1ec/0x250 [ 125.484806][ C3] req_done+0x1dc/0x2e0 [ 125.486127][ C3] ? __pfx_req_done+0x10/0x10 [ 125.487596][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 125.489383][ C3] ? __pfx_req_done+0x10/0x10 [ 125.490844][ C3] vring_interrupt+0x31b/0x400 [ 125.492341][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 125.493963][ C3] __handle_irq_event_percpu+0x22c/0x7d0 [ 125.495710][ C3] handle_irq_event+0xab/0x1e0 [ 125.497245][ C3] handle_edge_irq+0x3ca/0x9e0 [ 125.498709][ C3] __common_interrupt+0xcd/0x2f0 [ 125.500207][ C3] common_interrupt+0xba/0xe0 [ 125.501674][ C3] [ 125.502600][ C3] [ 125.503511][ C3] asm_common_interrupt+0x26/0x40 [ 125.505026][ C3] RIP: 0010:stack_trace_consume_entry+0x73/0x170 [ 125.506994][ C3] Code: 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e ad 00 00 00 31 c0 3b 6b 08 0f 83 81 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 0c <48> 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 [ 125.512729][ C3] RSP: 0018:ffffc9000fd06fd8 EFLAGS: 00000287 [ 125.514564][ C3] RAX: dffffc0000000000 RBX: ffffc9000fd070b8 RCX: ffffc9000fd06f4c [ 125.516991][ C3] RDX: 1ffff92001fa0e18 RSI: ffffffff815d060f RDI: ffffc9000fd070c4 [ 125.519353][ C3] RBP: 000000000000000f R08: 0000000000000001 R09: 0000000000000000 [ 125.521745][ C3] R10: 0000000000000000 R11: 0000000000007f67 R12: ffffffff81a6ddf0 [ 125.524205][ C3] R13: ffffc9000fd070b8 R14: 0000000000000000 R15: ffff88802c188000 [ 125.526655][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 125.528577][ C3] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 125.530357][ C3] ? unwind_get_return_address+0x59/0xa0 [ 125.532138][ C3] arch_stack_walk+0x88/0x100 [ 125.533621][ C3] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 125.535422][ C3] stack_trace_save+0x8e/0xc0 [ 125.536912][ C3] ? __pfx_stack_trace_save+0x10/0x10 [ 125.538603][ C3] ? __lock_acquire+0x62e/0x1ce0 [ 125.540156][ C3] save_stack+0x160/0x1f0 [ 125.541510][ C3] ? __pfx_save_stack+0x10/0x10 [ 125.543028][ C3] ? free_unref_folios+0xa61/0x16b0 [ 125.544590][ C3] ? folios_put_refs+0x56f/0x740 [ 125.546143][ C3] ? shmem_undo_range+0x58f/0x1150 [ 125.547768][ C3] ? shmem_evict_inode+0x3a1/0xbe0 [ 125.549330][ C3] ? evict+0x3e3/0x920 [ 125.550579][ C3] ? iput+0x521/0x880 [ 125.551834][ C3] ? dentry_unlink_inode+0x29c/0x480 [ 125.553433][ C3] ? __dentry_kill+0x1d0/0x600 [ 125.554881][ C3] ? dput.part.0+0x4b1/0x9b0 [ 125.556294][ C3] ? dput+0x1f/0x30 [ 125.557519][ C3] ? __fput+0x51c/0xb70 [ 125.558814][ C3] ? task_work_run+0x150/0x240 [ 125.560298][ C3] ? do_exit+0x86f/0x2bf0 [ 125.561641][ C3] ? do_group_exit+0xd3/0x2a0 [ 125.563134][ C3] ? get_signal+0x2673/0x26d0 [ 125.564609][ C3] ? page_ext_put+0x3e/0xd0 [ 125.566038][ C3] __reset_page_owner+0x84/0x1a0 [ 125.567594][ C3] free_unref_folios+0xa61/0x16b0 [ 125.569160][ C3] ? rcu_is_watching+0x12/0xc0 [ 125.570649][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 125.572455][ C3] folios_put_refs+0x56f/0x740 [ 125.573943][ C3] ? __pfx_folios_put_refs+0x10/0x10 [ 125.575591][ C3] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 125.577508][ C3] shmem_undo_range+0x58f/0x1150 [ 125.579011][ C3] ? __pfx_shmem_undo_range+0x10/0x10 [ 125.580638][ C3] ? __lock_acquire+0x62e/0x1ce0 [ 125.582191][ C3] ? is_bpf_text_address+0x8a/0x1a0 [ 125.583804][ C3] ? bpf_ksym_find+0x127/0x1c0 [ 125.585304][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 125.587235][ C3] ? percpu_counter_add_batch+0xb8/0x1f0 [ 125.588956][ C3] shmem_evict_inode+0x3a1/0xbe0 [ 125.590459][ C3] ? __pfx_shmem_evict_inode+0x10/0x10 [ 125.592130][ C3] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 125.594010][ C3] ? find_held_lock+0x2b/0x80 [ 125.595445][ C3] ? evict+0x3a2/0x920 [ 125.596699][ C3] ? __pfx_shmem_evict_inode+0x10/0x10 [ 125.598359][ C3] evict+0x3e3/0x920 [ 125.599542][ C3] ? __pfx_evict+0x10/0x10 [ 125.600924][ C3] ? iput+0x519/0x880 [ 125.602171][ C3] iput+0x521/0x880 [ 125.603362][ C3] ? __pfx_generic_delete_inode+0x10/0x10 [ 125.605125][ C3] dentry_unlink_inode+0x29c/0x480 [ 125.606672][ C3] __dentry_kill+0x1d0/0x600 [ 125.608217][ C3] dput.part.0+0x4b1/0x9b0 [ 125.609593][ C3] dput+0x1f/0x30 [ 125.610758][ C3] __fput+0x51c/0xb70 [ 125.612023][ C3] ? _raw_spin_unlock_irq+0x23/0x50 [ 125.613612][ C3] task_work_run+0x150/0x240 [ 125.615061][ C3] ? __pfx_task_work_run+0x10/0x10 [ 125.616668][ C3] ? do_raw_spin_unlock+0x172/0x230 [ 125.618307][ C3] do_exit+0x86f/0x2bf0 [ 125.619652][ C3] ? __pfx_do_exit+0x10/0x10 [ 125.621112][ C3] ? do_raw_spin_lock+0x12c/0x2b0 [ 125.622714][ C3] ? find_held_lock+0x2b/0x80 [ 125.624195][ C3] do_group_exit+0xd3/0x2a0 [ 125.625651][ C3] get_signal+0x2673/0x26d0 [ 125.627110][ C3] ? __pfx_get_signal+0x10/0x10 [ 125.628637][ C3] ? do_futex+0x122/0x350 [ 125.630001][ C3] ? __pfx_do_futex+0x10/0x10 [ 125.631489][ C3] arch_do_signal_or_restart+0x8f/0x7d0 [ 125.633226][ C3] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 125.635166][ C3] ? __do_sys_rt_sigreturn+0x16b/0x230 [ 125.636873][ C3] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 125.638712][ C3] exit_to_user_mode_loop+0x84/0x110 [ 125.640348][ C3] do_syscall_64+0x3f6/0x4c0 [ 125.641809][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.643629][ C3] RIP: 0033:0x7f2401f8ebe9 [ 125.645005][ C3] Code: Unable to access opcode bytes at 0x7f2401f8ebbf. [ 125.647113][ C3] RSP: 002b:00007f2402db00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 125.649646][ C3] RAX: fffffffffffffe00 RBX: 00007f24021c5fa8 RCX: 00007f2401f8ebe9 [ 125.652072][ C3] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f24021c5fa8 [ 125.654467][ C3] RBP: 00007f24021c5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 125.656825][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.659189][ C3] R13: 00007f24021c6038 R14: 00007fffa73f6860 R15: 00007fffa73f6948 [ 125.661566][ C3] [ 125.662655][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 125.664922][ C3] CPU: 3 UID: 0 PID: 12182 Comm: syz.4.972 Not tainted syzkaller #0 PREEMPT(full) [ 125.667811][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 125.671104][ C3] Call Trace: [ 125.672172][ C3] [ 125.673082][ C3] dump_stack_lvl+0x3d/0x1f0 [ 125.674543][ C3] vpanic+0x6e8/0x7a0 [ 125.675789][ C3] ? __pfx_vpanic+0x10/0x10 [ 125.677191][ C3] ? refcount_warn_saturate+0x14a/0x210 [ 125.678890][ C3] panic+0xca/0xd0 [ 125.680040][ C3] ? __pfx_panic+0x10/0x10 [ 125.681391][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 125.682968][ C3] check_panic_on_warn+0xab/0xb0 [ 125.684485][ C3] __warn+0xf6/0x3c0 [ 125.685698][ C3] ? refcount_warn_saturate+0x14a/0x210 [ 125.687382][ C3] report_bug+0x3c3/0x580 [ 125.688697][ C3] ? refcount_warn_saturate+0x14a/0x210 [ 125.690369][ C3] handle_bug+0x184/0x210 [ 125.691701][ C3] exc_invalid_op+0x17/0x50 [ 125.693095][ C3] asm_exc_invalid_op+0x1a/0x20 [ 125.694606][ C3] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 125.696470][ C3] Code: ff 89 de e8 98 08 d8 fc 84 db 0f 85 66 ff ff ff e8 ab 0d d8 fc c6 05 b6 37 b0 0b 01 90 48 c7 c7 c0 99 15 8c e8 27 b1 96 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 88 0d d8 fc 0f b6 1d 91 37 b0 0b 31 [ 125.702334][ C3] RSP: 0018:ffffc900006f8d88 EFLAGS: 00010086 [ 125.704186][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a3388 [ 125.706548][ C3] RDX: ffff88802c188000 RSI: ffffffff817a3395 RDI: 0000000000000001 [ 125.708906][ C3] RBP: ffff88805acf2228 R08: 0000000000000001 R09: 0000000000000000 [ 125.711264][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805acf2228 [ 125.713639][ C3] R13: ffff88804a01b000 R14: 0000000000000009 R15: 1ffff110202f380c [ 125.716034][ C3] ? __warn_printk+0x198/0x350 [ 125.717496][ C3] ? __warn_printk+0x1a5/0x350 [ 125.718973][ C3] ? refcount_warn_saturate+0x149/0x210 [ 125.720659][ C3] p9_req_put+0x1ec/0x250 [ 125.722000][ C3] req_done+0x1dc/0x2e0 [ 125.723272][ C3] ? __pfx_req_done+0x10/0x10 [ 125.724733][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 125.726525][ C3] ? __pfx_req_done+0x10/0x10 [ 125.727995][ C3] vring_interrupt+0x31b/0x400 [ 125.729465][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 125.731075][ C3] __handle_irq_event_percpu+0x22c/0x7d0 [ 125.732814][ C3] handle_irq_event+0xab/0x1e0 [ 125.734315][ C3] handle_edge_irq+0x3ca/0x9e0 [ 125.735808][ C3] __common_interrupt+0xcd/0x2f0 [ 125.737323][ C3] common_interrupt+0xba/0xe0 [ 125.738780][ C3] [ 125.739687][ C3] [ 125.740570][ C3] asm_common_interrupt+0x26/0x40 [ 125.742113][ C3] RIP: 0010:stack_trace_consume_entry+0x73/0x170 [ 125.744037][ C3] Code: 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e ad 00 00 00 31 c0 3b 6b 08 0f 83 81 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 0c <48> 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 [ 125.749792][ C3] RSP: 0018:ffffc9000fd06fd8 EFLAGS: 00000287 [ 125.751654][ C3] RAX: dffffc0000000000 RBX: ffffc9000fd070b8 RCX: ffffc9000fd06f4c [ 125.754036][ C3] RDX: 1ffff92001fa0e18 RSI: ffffffff815d060f RDI: ffffc9000fd070c4 [ 125.756427][ C3] RBP: 000000000000000f R08: 0000000000000001 R09: 0000000000000000 [ 125.758774][ C3] R10: 0000000000000000 R11: 0000000000007f67 R12: ffffffff81a6ddf0 [ 125.761127][ C3] R13: ffffc9000fd070b8 R14: 0000000000000000 R15: ffff88802c188000 [ 125.763483][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 125.765344][ C3] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 125.767095][ C3] ? unwind_get_return_address+0x59/0xa0 [ 125.768759][ C3] arch_stack_walk+0x88/0x100 [ 125.770179][ C3] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 125.771918][ C3] stack_trace_save+0x8e/0xc0 [ 125.773334][ C3] ? __pfx_stack_trace_save+0x10/0x10 [ 125.774969][ C3] ? __lock_acquire+0x62e/0x1ce0 [ 125.776499][ C3] save_stack+0x160/0x1f0 [ 125.777831][ C3] ? __pfx_save_stack+0x10/0x10 [ 125.779392][ C3] ? free_unref_folios+0xa61/0x16b0 [ 125.780962][ C3] ? folios_put_refs+0x56f/0x740 [ 125.782457][ C3] ? shmem_undo_range+0x58f/0x1150 [ 125.784023][ C3] ? shmem_evict_inode+0x3a1/0xbe0 [ 125.785570][ C3] ? evict+0x3e3/0x920 [ 125.786820][ C3] ? iput+0x521/0x880 [ 125.788017][ C3] ? dentry_unlink_inode+0x29c/0x480 [ 125.789587][ C3] ? __dentry_kill+0x1d0/0x600 [ 125.791051][ C3] ? dput.part.0+0x4b1/0x9b0 [ 125.792445][ C3] ? dput+0x1f/0x30 [ 125.793616][ C3] ? __fput+0x51c/0xb70 [ 125.794896][ C3] ? task_work_run+0x150/0x240 [ 125.796379][ C3] ? do_exit+0x86f/0x2bf0 [ 125.797712][ C3] ? do_group_exit+0xd3/0x2a0 [ 125.799188][ C3] ? get_signal+0x2673/0x26d0 [ 125.800636][ C3] ? page_ext_put+0x3e/0xd0 [ 125.802035][ C3] __reset_page_owner+0x84/0x1a0 [ 125.803554][ C3] free_unref_folios+0xa61/0x16b0 [ 125.805084][ C3] ? rcu_is_watching+0x12/0xc0 [ 125.806578][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 125.808346][ C3] folios_put_refs+0x56f/0x740 [ 125.809795][ C3] ? __pfx_folios_put_refs+0x10/0x10 [ 125.811438][ C3] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 125.813336][ C3] shmem_undo_range+0x58f/0x1150 [ 125.814859][ C3] ? __pfx_shmem_undo_range+0x10/0x10 [ 125.816478][ C3] ? __lock_acquire+0x62e/0x1ce0 [ 125.818096][ C3] ? is_bpf_text_address+0x8a/0x1a0 [ 125.819688][ C3] ? bpf_ksym_find+0x127/0x1c0 [ 125.821144][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 125.823012][ C3] ? percpu_counter_add_batch+0xb8/0x1f0 [ 125.824645][ C3] shmem_evict_inode+0x3a1/0xbe0 [ 125.826200][ C3] ? __pfx_shmem_evict_inode+0x10/0x10 [ 125.827908][ C3] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 125.829730][ C3] ? find_held_lock+0x2b/0x80 [ 125.831193][ C3] ? evict+0x3a2/0x920 [ 125.832446][ C3] ? __pfx_shmem_evict_inode+0x10/0x10 [ 125.834135][ C3] evict+0x3e3/0x920 [ 125.835393][ C3] ? __pfx_evict+0x10/0x10 [ 125.836802][ C3] ? iput+0x519/0x880 [ 125.838043][ C3] iput+0x521/0x880 [ 125.839201][ C3] ? __pfx_generic_delete_inode+0x10/0x10 [ 125.840944][ C3] dentry_unlink_inode+0x29c/0x480 [ 125.842480][ C3] __dentry_kill+0x1d0/0x600 [ 125.843921][ C3] dput.part.0+0x4b1/0x9b0 [ 125.845298][ C3] dput+0x1f/0x30 [ 125.846443][ C3] __fput+0x51c/0xb70 [ 125.847667][ C3] ? _raw_spin_unlock_irq+0x23/0x50 [ 125.849253][ C3] task_work_run+0x150/0x240 [ 125.850660][ C3] ? __pfx_task_work_run+0x10/0x10 [ 125.852269][ C3] ? do_raw_spin_unlock+0x172/0x230 [ 125.853854][ C3] do_exit+0x86f/0x2bf0 [ 125.855149][ C3] ? __pfx_do_exit+0x10/0x10 [ 125.856546][ C3] ? do_raw_spin_lock+0x12c/0x2b0 [ 125.858057][ C3] ? find_held_lock+0x2b/0x80 [ 125.859456][ C3] do_group_exit+0xd3/0x2a0 [ 125.860837][ C3] get_signal+0x2673/0x26d0 [ 125.862231][ C3] ? __pfx_get_signal+0x10/0x10 [ 125.863723][ C3] ? do_futex+0x122/0x350 [ 125.865088][ C3] ? __pfx_do_futex+0x10/0x10 [ 125.866574][ C3] arch_do_signal_or_restart+0x8f/0x7d0 [ 125.868303][ C3] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 125.870223][ C3] ? __do_sys_rt_sigreturn+0x16b/0x230 [ 125.871923][ C3] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 125.873700][ C3] exit_to_user_mode_loop+0x84/0x110 [ 125.875380][ C3] do_syscall_64+0x3f6/0x4c0 [ 125.876806][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.878644][ C3] RIP: 0033:0x7f2401f8ebe9 [ 125.880049][ C3] Code: Unable to access opcode bytes at 0x7f2401f8ebbf. [ 125.882216][ C3] RSP: 002b:00007f2402db00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 125.884805][ C3] RAX: fffffffffffffe00 RBX: 00007f24021c5fa8 RCX: 00007f2401f8ebe9 [ 125.887231][ C3] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f24021c5fa8 [ 125.889595][ C3] RBP: 00007f24021c5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 125.892067][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.894533][ C3] R13: 00007f24021c6038 R14: 00007fffa73f6860 R15: 00007fffa73f6948 [ 125.897024][ C3] [ 125.898739][ C3] Kernel Offset: disabled [ 125.900103][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:58:44 Registers: info registers vcpu 0 CPU#0 RAX=00000000003dff2f RBX=0000000000000000 RCX=ffffffff8b940c29 RDX=0000000000000000 RSI=ffffffff8de513b8 RDI=ffffffff8c162b00 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab5c90 R15=0000000000000000 RIP=ffffffff8b93f78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f267a3acf98 CR3=000000004a07f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000306e616c77 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcfb336936 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcfb336936 00007ffcfb33693c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffae2812e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffae2812e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffae2812e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffae2812e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffae2812ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffae2812fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9d5757ad4cb39d79 17d3e5deade241b9 9e480733eec9eff4 c95d8c8538607ac5 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 dc1c78153100070b 1d1e7a6d3f36fa9c 7ebd02698e310004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a36c447a0de9b48 4f67144ec90809f3 877b85fdde4ab7d9 c2185105b73f8d8e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 51803a36c447a0de 9b484f67144ec908 09f3877b85fdde4a b7d9c2185105b73f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8d8edc1c78153100 070b1d1e7a6d3f36 fa9c7ebd02698e31 43ba4c8522a8ebd2 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8bd19d5757ad4cb3 9d7917d3e5deade2 41b99e480733eec9 eff4c95d8c853860 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7ac5e54a33bcd02f b01ce7b12940af44 ad5f2de755dd6f98 cdf20b065bc5d2aa ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88806a741ea0 RCX=ffffffff81af8ed1 RDX=ffff88802932a440 RSI=ffffffff81af8eab RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900066d7888 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed100d4e83d5 R14=0000000000000001 R15=0000000000000003 RIP=ffffffff81af8ead RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555566f655c8 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000e002fefc Opmask02=00000000fc000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcfb3367b0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcfb336936 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcfb336936 00007ffcfb33693c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffae2812e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffae2812e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffae2812e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffae2812e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffae2812ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffae2812fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000004 RBX=ffff88804dcd8af0 RCX=c4a0ced46dc29247 RDX=0000000000000000 RSI=ffff88804dcd8b90 RDI=ffff88804dcd8000 RBP=0000000000000000 RSP=ffffc900006484c0 R8 =0000000000000000 R9 =0000000000000000 R10=00000000000000a0 R11=0000000000000001 R12=ffff88804dcd8b90 R13=ffff88804dcd8000 R14=0000000000000004 R15=0000000000000001 RIP=ffffffff8197ab1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007ffae35566c0 ffffffff 00c00000 GS =0000 ffff8880d68b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc1664bec0 CR3=0000000060e4d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0023766564627573 2d6c34762f766564 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff69fa7866 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff69fa7866 00007fff69fa786c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2679612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2679612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2679612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2679612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2679612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2679612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161610004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0061616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85644675 RDI=ffffffff9b1120a0 RBP=ffffffff9b112060 RSP=ffffc900006f86f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000065 R14=ffffffff9b112060 R15=ffffffff85644610 RIP=ffffffff8564469f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f56d91def98 CR3=000000004b5ad000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff69fa76e0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff69fa7866 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff69fa7866 00007fff69fa786c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2679612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2679612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2679612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2679612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2679612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2679612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000