last executing test programs: 4m25.984782742s ago: executing program 32 (id=432): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1, 0x0, 0x0, 0x300}, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="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", 0xfff}, {&(0x7f0000000180)="dd43", 0x2}], 0x2}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe46a}, 0x94) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r6}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xc}]}, @func={0x2, 0x0, 0x0, 0xc, 0x5}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x69, 0x0, 0x6e, 0x2}]}, {0x0, [0x30, 0x61, 0x61, 0x61, 0x5f, 0x0]}}, &(0x7f00000004c0)=""/190, 0x50, 0xbe, 0x1, 0x4}, 0x28) (async) r7 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r7, 0x8040942d, &(0x7f0000000080)) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0x4}, 0x80, 0x0}, 0x0) 4m24.95057336s ago: executing program 33 (id=443): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x2a200) getsockname$packet(r0, &(0x7f0000000040), &(0x7f0000000080)=0x14) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x2, 0x3, 0x0, 0x3, 0x5}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000100)={{0xffffffffffffffff, 0x1, 0x0, 0x0, 0x9}, 0x7, 0xe43}) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000180)={0x1, 0x0, 0x20}) r2 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) socket$inet6(0xa, 0x800, 0x8) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$inet(r3, &(0x7f0000000880)={&(0x7f0000000240)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000280)="72efdae1c24630508d8575cae3bf86f16f44604cc735e0b2f259609112b52aa1ffac99e4f915f420ab3657fdec873fed4baa4c99eec75eae02383a007172e6ac634beeb5cf9452aa7128170d588962839e8099a87f9633e01d", 0x59}, {&(0x7f0000000300)="9da92af305ea4d1f1f36003c97c1eb9b02c5373cea687b716cd1076d1d4ff90965687ce9dbed319f4281558a46e48ed629f28a1d3ae24b492c91dab7f468f7c582a5f432dbe1da904e7c65ac809e598f48dcf804366d5caab76a2f34c98e962555975279b8fd6a576829c6b267cbe2f9791864dffcbd335ca278ed4875199d397042412c29fdbe34fa7f4f92a1887d5a09a41321f0aeec7b9205", 0x9a}, {&(0x7f00000003c0)="dbc28fe1c49495c4b45dcd91041996f1eb4ff5ad509bde955c514518af8671a63426a14ea2184d818411717fb0f44b54213977886692e9810161cae53f6fd962db073d9ba92d9d171e48aebb24051bb7471e191ff9a6c49803c50f0c431b40fcc18076862d147f97f30197cb42c703026a30a244e7a024a6dd8cd2dff5f630", 0x7f}, {&(0x7f0000000440)="27b2d443d94d938f11b701dc458e322e6baf9f2230a46b85b29f9f169c11bbdf9c3a88d7ffd86ffb6159dd375b7bc782ed8244ff1fbd64c7426e93ff2335066560", 0x41}, {&(0x7f00000004c0)="21de558f8d7ee5f9418a2f0cb26e35ec34c34f4faee8c80807c2d917194df0e0b356db57dc3e14a18738a42717f4784a9dfc9023ab015f086d13503b6a275312ac91a1315f914ce9bcf2c1296800e94457b6fa2ff321da4d13d21830228bb4209014fd31d7c80fb717d5f72b0d370275a55f8da17356a4231c7a8244ea", 0x7d}, {&(0x7f0000000540)="495016ca482e38e8f1d47fb546e21dd6038b60fee379e5ed8d1af7", 0x1b}, {&(0x7f0000000580)="ba5218b472e488563d93a9c6718c64360c1e84c3f740c8cdacf5b95d63fc42576f889fd13fc285e8d415a1679eeb2daef1c18f84992d7ed915b0df7dc933a0dd954b857b93215446f24a88c428c837259c0b767f71177bf88dbd558ed7621f96ad3705090a83e7796ecf96e521a167266b7a688959c6fb5e855216918439721aeb1fc722f5ef92303e534fec50b0400bd70e1b96a225836e19cc95ef306aaabce8aa257fd6217228670c890c6ddf84471f57481aee4ce9ca", 0xb8}, {&(0x7f0000000640)="4a89e77fff5362fc542052981de88cb4dfb512a93af0931c4e475ad34fb6572d3073309c50792e9ea31dc29bf3a536c5a5f7dc4d8e03c10bf73d925d4db59567cc970f970b76b39bb7e82d8fe7927cdf796aed7bab5499e87505b8fc37ddae3addec13db064e5aa009d569bf79c1f849da97db85a8e9580aa0330aa7c557ad777d6edc87d7dc8ed9aecc48e9a2de3167279be35299835ae38840a22e9762334649459f4f65391ba3698109e3bebf90c0bfbe", 0xb2}], 0x8, &(0x7f0000000780)=[@ip_retopts={{0xcc, 0x0, 0x7, {[@timestamp_addr={0x44, 0x44, 0x6c, 0x1, 0xa, [{@empty, 0x9}, {@remote, 0x1b8b}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1ff}, {@broadcast, 0x2}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x3}, {@private=0xa010101, 0x62}, {@empty, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}]}, @lsrr={0x83, 0xf, 0xe6, [@broadcast, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x21}]}, @timestamp_prespec={0x44, 0x44, 0x7b, 0x3, 0x3, [{@remote, 0x33}, {@loopback, 0xfffffff9}, {@multicast2, 0x4}, {@remote, 0x1800}, {@multicast1, 0x4}, {@rand_addr=0x64010101}, {@private=0xa010101, 0xfffffeff}, {@broadcast, 0x9}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x34, 0x1, 0x4, [{@multicast2, 0xf6c2}]}, @ssrr={0x89, 0x7, 0xdd, [@loopback]}, @ssrr={0x89, 0xb, 0x85, [@broadcast, @dev={0xac, 0x14, 0x14, 0x21}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3fd}}], 0xe8}, 0x20000000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f00000008c0)={0x3, 'veth0_vlan\x00', {0x5}, 0x3}) recvfrom$inet6(r1, &(0x7f0000000900)=""/194, 0xc2, 0x10140, &(0x7f0000000a00)={0xa, 0x4e23, 0x800, @empty, 0x6}, 0x1c) write$rfkill(r0, &(0x7f0000000a40)={0x800, 0x6, 0x2, 0x80}, 0x8) cachestat(r3, &(0x7f0000000a80)={0x6, 0x401}, &(0x7f0000000ac0), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000b40)=@o_path={&(0x7f0000000b00)='./file0\x00', 0xffffffffffffffff, 0x4000, r1}, 0x18) read$FUSE(r0, &(0x7f0000000b80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002bc0)={0xa8, 0x0, r4, [{0x6, 0x2, 0x0, 0x7fffffff}, {0x4, 0xc533, 0x4, 0x4c, '\xb5(-\''}, {0x0, 0x1, 0x0, 0x1}, {0x6, 0x7fffffff, 0xb, 0x1, 'veth0_vlan\x00'}, {0x0, 0x2, 0x5, 0x7, '&:%!k'}]}, 0xa8) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000002c80)={0x7, 0x6, 0xc4, 0x0, 0xe}) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000002d00)=r0) ioctl$KVM_RUN(r0, 0xae80, 0x0) bind$inet6(r1, &(0x7f0000002d40)={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x11}}, 0x1c) ioctl$DVD_READ_STRUCT(r0, 0x5390, &(0x7f0000002d80)=@manufact={0x4, 0x2, 0x800, "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"}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000003740)={r2, &(0x7f00000035c0)="9a9032c1c378090c66d1d52a1b9fe773c546592059852b86e99a087bf88e4629e82336f0605b61e6c26b89487403c10e446731de50fdb7ce0ab8b10daa0cfde62934fa377f82636d08a2b7594c0faa41c9ed6eec5d90364c2766adac7b2210e7eb6d695a8f81c3b47de3635ee97d085c53108c1a1a9a8d1bed8971967f4d1acdfa22e7949f57c3", &(0x7f0000003680)=""/186, 0x4}, 0x20) pwrite64(r3, &(0x7f0000003780)="e05319f16a1b6f8ada5524bcced922ad2e7b4657a431ae13faf4a4d2f8ffb7cd773829db061264b7941d96fbdf78483198b73f2baa41bfed96dead9c6be5cd15b489fced6abccf212e41ae78f149d1f5a3cf62b6d76f48786303a25942a8897337b9742e973eb863a8d65ccb02376279357ab7e52e6f57dac81cd61d8d9a1b7bf54d0922ad28ced927d0fa3f6c38b75b2b7b5828c1bce4b37ba802702c4891512a233710dd2e7d9e695da16a4501227a712f2d73e3b1de99090827de7c8ff3c08c495e76e528b62d8b9630ef735e6071b9c67bf322905f2afb426f7b651e45086d14ed5d54235e5d0d", 0xe9, 0x5) accept(r3, 0x0, &(0x7f0000003880)) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x22, &(0x7f00000038c0)=0x4, 0x4) 3m50.068435091s ago: executing program 5 (id=871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (rerun: 64) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x4404}}) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (rerun: 64) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x7}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3}) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x2, 0x2}}, 0x80, 0x0}, 0x4008880) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="af3e64f08189ef001601ba6100ec0f2264ba4100b80600ef660f38351d0f212666b94006000066b80000010066ba000000000f300f211a2e0f013c", 0x3b}], 0x1, 0xe, 0x0, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) (rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x0, r3}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x34, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRES16=r0, @ANYRES64=r4, @ANYRES32=0x0, @ANYRES32=r5, @ANYRES64=0x0], 0x40}}, 0x5a840) (rerun: 64) 3m49.865568401s ago: executing program 5 (id=875): syz_emit_ethernet(0x1289, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x0) 3m49.865294691s ago: executing program 5 (id=876): mkdir(&(0x7f0000000540)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000002d, &(0x7f0000000200)=0xb1e0, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000080)=0xf18a) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0x5, &(0x7f0000001a40)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x401, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80401}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r4, r3}) close_range(r2, 0xffffffffffffffff, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2) r7 = accept4(r6, 0x0, 0x0, 0x800) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f00000002c0), 0x93020007) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_vif\x00') pread64(r0, &(0x7f0000004040)=""/4099, 0x1057, 0x7) ioctl$TUNSETDEBUG(r8, 0x400454c9, &(0x7f00000001c0)=0x9) bind$unix(r7, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e23}, 0x6e) chdir(&(0x7f00000004c0)='./file0\x00') chdir(&(0x7f00000000c0)='./bus\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000140)="2600000014004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) 3m48.913615269s ago: executing program 5 (id=893): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='data', 0x4}}, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4, 0x4}], 0x1}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cpu.stat\x00', 0xf000, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x1ff, 0x4, 0x70da, 0x1, 0x80}) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000200)={0x7, "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"}) r6 = accept$nfc_llcp(r4, &(0x7f0000000140), &(0x7f0000000440)=0x60) ioctl$FITHAW(r6, 0xc0045878) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 3m48.913373291s ago: executing program 5 (id=894): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x2, 0x9, 0x30, 0x67, 0x0, 0x2, 0x1, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3, 0xe2}, @ssrr={0x89, 0x3, 0x2e}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x81, 0x8, 0x99f, 0x10000, 0x2}}}}}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000ac0)={r4, 0xd0}, &(0x7f0000000b00)=0x8) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x3, 0xc8, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}}}}]}, 0x38}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = dup(r5) accept4$vsock_stream(r6, 0x0, 0x0, 0x80800) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) chroot(0x0) pivot_root(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="010004bd7000fcdbdf250f0000000500280001000000050033000100000008000300", @ANYRES16=r7, @ANYRES16=r1, @ANYRESHEX], 0x2c}, 0x1, 0x0, 0x0, 0x2004c814}, 0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x24004885}, 0x24000800) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r9, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @void}}}, 0x28}}, 0x0) r11 = socket$can_bcm(0x1d, 0x2, 0x2) close(r11) 3m48.849823875s ago: executing program 5 (id=895): r0 = fanotify_init(0x4000, 0x0) fanotify_mark(r0, 0x80, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) (async, rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0xffffff3d, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1f}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r9, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000010301080000000000000000000000000c0002"], 0x20}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) (async, rerun: 64) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) (rerun: 64) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) (async) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)=0x4) 3m42.091787754s ago: executing program 3 (id=990): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='io_uring_register\x00', r3}, 0x18) r4 = io_uring_setup(0x53b5, &(0x7f0000000580)={0x0, 0xbf6b, 0x1000, 0x100002, 0x30f}) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x14, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) 3m42.091543336s ago: executing program 3 (id=991): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f00000000c0), 0x2c8, 0x0) accept4(r1, &(0x7f0000000000)=@tipc=@id, &(0x7f0000000080)=0x80, 0xc00) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000100001000000c2550000b23d62fd9000", @ANYRES32=0x0, @ANYBLOB="06300000d041000008002e0002000000"], 0x28}}, 0x40) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg(r3, &(0x7f0000005a80)=[{{0x0, 0x0, &(0x7f00000017c0)=[{0x0}, {&(0x7f0000001540)='W', 0x1}], 0x2}}], 0x1, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e24, 0x1, @local, 0x7ff}, 0x1c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002380)={0x20, r6, 0x301, 0x8, 0x25dfdbfc, {0x1c}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x200400c4}, 0x4040) r7 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) sendto$inet6(r7, &(0x7f0000000080)="255b2a20f709b4a43a1307c620044218fe1f90c8", 0x14, 0x800, 0x0, 0x0) getpeername$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) 3m42.027039563s ago: executing program 3 (id=992): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900442b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000026c0)={0x34, r0, 0x1, 0x70bd2c, 0x3, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd2}]}]}]}, 0x34}}, 0x8040) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000100)=0x1, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0xfff, 0x3a, 0x1000, 0x2000003a, 0x800, 0x2, 0x4}, 0x1c) r6 = socket$kcm(0x10, 0x2, 0x4) syz_emit_ethernet(0x49, &(0x7f0000000180)={@link_local, @empty, @void, {@x25={0x805, {0x1, 0x4, 0xfd, "46ec613c1cbc8f68eb642262a4d869382a96ed2cae2c5269194326a5c232e46a14ba8d4a5984fe771d7561f14e162110c0e35b987ec4447d"}}}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r7) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000040000000000093b3acc00800020000000000080004000000000001000100487afd5d5bbe33ea1b9e5aae4fd78e9e502dabc894affe782e6a13d1cf8220d8516e4ac9915670b0fca7460ffaeff0ecc52e71446b67c4331d57", @ANYRES32=0x0, @ANYBLOB="080005007f000001"], 0x34}, 0x1, 0x0, 0x0, 0x805}, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x1) r11 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r10, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x8080000, 0x0, r11}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r10, 0x4020aed2, &(0x7f0000000000)={0x8000000, 0x103000, 0x8}) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_TIOCOUTQ(r12, 0x5411, &(0x7f00000000c0)) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)='H\x00', 0x2}], 0x1}, 0x0) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r13, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r14, 0x0, 0x1, 0x4}}, 0x20) 3m41.747086348s ago: executing program 3 (id=994): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000340)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000500a80016000a0001400200002000060000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef528906301b7ce06bbace8017cbec", 0x67}, {&(0x7f0000001680)="66672324118a5a090ddd327d57e4e0e1353bb0cb85933035009e0e5dc3bc161cb6289a3389da904f7557a56e6113e564da5b96c6f863c7b8d71515a1897e1ca95f89d69521011a983e85f57f12a1856c9976f2976e645bf7220fcd53214a466fb3de85e1b1df808f772249265e447c034dd0", 0x72}], 0x2}, 0x4004000) (async) r1 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x2e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x13}}, &(0x7f0000000480)='syzkaller\x00'}, 0x90) (async) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) (async) syz_usb_control_io$sierra_net(r1, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x21, 0x8, {0x8, 0x11, "e4ff14eca81f"}}, 0x0}, 0x0) (async, rerun: 64) r2 = syz_open_dev$sg(&(0x7f0000000180), 0x100000000000000, 0x1) (rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) (async, rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async, rerun: 32) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) fcntl$lock(r3, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000000001}) memfd_create(&(0x7f0000000040)='y\x105\x14\xf8u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\x15]\x18\xf7\xc2,\xe2\x11\x86\xdc-\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xb4\x95\xd1\xc8s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\xef]\x9f{y\xda^~\xf0\xc2Gj+kV\x06\xee\x91\'\xae\x9c\x06\xb2\xd4\xfa,\xc0\xca\xd90$\xd7\xfe\xae\xddf?$\xb1\xeeE\b\xbc\xd1[\xd5tO`Z\x15 1\v\xa6\xd0[K!+>,FE\x10\t\xbb\x90Jj\xb8{i\xae\xce\xfa\xe1Z\xa1\xedg\xacr\xed%K\xcb/t\xbb\x10\xa1\x13\x88\xbc\xeb\x002\x82\xe3\x85g\xb4\xb3@\x0f\xe2]q\xf6\xe27\"\xd0\xa9\x94\xbb\xc42\xf8\xc8\x041\x00\\\xd70$\xab\xadW\xe8\xc1\xe3\xafR\x19n*\x01\xc1\xa0', 0x1) (async) write$binfmt_aout(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4"], 0x125) 3m41.043483399s ago: executing program 4 (id=1000): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r0, 0x0, &(0x7f0000000300)) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) sendfile(r3, r3, 0x0, 0xc3) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pi6 \x00'}, 0x20) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x140) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x121800, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@o_path={&(0x7f00000008c0)='./file0\x00', 0x0, 0x4000, r4}, 0x18) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) preadv(r8, &(0x7f0000002bc0)=[{&(0x7f0000002a40)=""/172, 0xac}], 0x1, 0x9d, 0x80) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0x4000, r1}, 0x18) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @ni={0x8b, 0x0, 0x0, 0x6, 0x96f9, 0x7}}}}}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000880)=0x464, 0x4) recvmmsg(r10, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x400005aa, 0x0) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r12 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r12, 0x1, 0xc, &(0x7f00000004c0)=""/118, &(0x7f0000000280)=0x76) getsockopt$bt_sco_SCO_CONNINFO(r11, 0x11, 0x2, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x14, &(0x7f00000003c0)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff8}, @generic={0x8, 0x3, 0x6, 0x18c3, 0x508b}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x400}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @generic={0xc, 0xe, 0xd, 0xfe, 0xfe}, @ldst={0x2, 0x2, 0x0, 0x6, 0xa, 0xffffffffffffffe0, 0xfffffffffffffffc}], &(0x7f0000000340)='syzkaller\x00', 0xfffff2ae, 0xc2, &(0x7f0000000480)=""/194, 0x41000, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0xe, 0x500, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000740)=[r6, r7, r8, r9], &(0x7f0000000780)=[{0x0, 0x3, 0x1, 0x3}], 0x10, 0x1}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f3, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xab00, 0x8000, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast1, @empty}}}}) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000040)={'xfrm0\x00', {0x2, 0x4e22, @multicast2}}) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x5, 0x4) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x3c, r14, 0x1, 0x70bd2b, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r13, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="020d2dbdf000fedbdf250700000006000c0010000400000005000600"/38], 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x4014) 3m40.111203535s ago: executing program 4 (id=1002): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313, 0x2}], 0x0, 0x1000000, 0x0}) r3 = socket(0x2, 0x80805, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000040)={'veth1_vlan\x00', 0x9}) sendmmsg$inet_sctp(r3, &(0x7f0000000240)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0xfffe, 0x417, 0x20c}}], 0x30}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000800000000001c140000fe0000010000000008000100001001"], 0x24}}, 0x0) 3m40.048479249s ago: executing program 4 (id=1004): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4c6840) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000800)={0x0, {0x3, 0x0, 0x8000005, 0x3, 0x5, 0x80000001}}) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @multicast1}}}, &(0x7f0000000080)=0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000240)=r2, 0x4) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x4) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) tee(r3, r0, 0x6, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xffffffff}, 0x48) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000007, 0x8010, r0, 0x2a9b9000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000040)=[@increfs_done={0x40106308, 0x2, 0x700}], 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x3, 0xffffffff, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5423, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 3m39.974735194s ago: executing program 4 (id=1006): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMRU1(r0, 0x4004743c, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) stat(&(0x7f0000000100)='./bus\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket$caif_stream(0x25, 0x1, 0x4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) mount$tmpfs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x10, &(0x7f0000000b80)={[{@gid={'gid', 0x3d, r5}}]}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000003c0)={{0x1, r1, r2, r3, r5, 0x80, 0x4}, 0x100000000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x4, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x4f27, 0xa, 0x10000, 0x10000004, 0x8, 0xfffffbf9, 0x0, 0x40000000, 0xffff0001, 0x100100, 0x2, 0x1, 0x9, 0xfffffffe, 0x404, 0xf, 0xfffffffc, 0x0, 0x4, 0x40000003, 0x89, 0xfffffffd, 0x0, 0x3ad, 0x400000b, 0xfff, 0x3c, 0x7fffffff, 0xa, 0x8000000, 0xfffffff8]}) ioctl$COMEDI_DEVINFO(r6, 0x80b06401, &(0x7f0000000180)) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x181) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[], 0x118) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbf525017c0000100036800c00020007000000000000000c00018008001600", @ANYRES32=0xee01], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r9, 0x40c32000) write$UHID_INPUT(r7, &(0x7f0000000c40)={0x8, {"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", 0x1000}}, 0x1006) 3m39.896650826s ago: executing program 0 (id=1010): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000040)) r1 = syz_clone(0x8200, &(0x7f0000000080)="fdb174efe4768ce315f7bed7ba257b3fc52f676b9e28793acf9eac47aad98415b4235ec4a6745cf484113027956c7ac59e923c194a2afaf5db912a882a03ce7746887499d9e837c7f5e2ffd39b5506e8873e9e09305b65226f61f4b4f9b3d6cb7cc490124b010104f537b613eed3c73e50e18b88d3cf0fbe23421f57af57e92f09afc8852ffc8e62543241ced6fd", 0x8e, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="6c453cd6e9a8cd94000fb014ed44ad5651d736b6d20b0e84fb22624400fa7f347dfd16064b8c268129a9b796ed9e8b41e299284cb6fca58d496fab209308fa8ceb55132c8e4ca2b9bac414eb51521174d0dccae230050eae3c545eb2e8915097ab62ed90b404ce1d27d629692d8cf7d5e43743d456594c691051ea35db73c178217e6d7efab2f9927be3dfcfbf53fd04ef9cbf47aa5c27ed46059e3115958756411a557ac73dd4898baa4b81f2c41337f82d54a473f660a3e9b7b6aba0062a72ef7961") fcntl$setownex(r0, 0xf, &(0x7f00000002c0)={0x2, r1}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000340)) write$P9_RLCREATE(r2, &(0x7f0000000380)={0x18, 0xf, 0x2, {{0x1, 0x2, 0x2}, 0x6}}, 0x18) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), r2) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x78, r4, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDR6={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_FAMILY={0x5}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FAMILY={0x5, 0xd, 0x38}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x803}, 0x20040004) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r3) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x24004001) (async) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000680), 0x101000, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000006c0)={0xc, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000700), &(0x7f0000000740)=0x4) (async) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x12, r3, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000780)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff}) (async, rerun: 64) r10 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) (rerun: 64) syz_io_uring_submit(r8, 0x0, &(0x7f0000000880)=@IORING_OP_FILES_UPDATE={0x14, 0x20, 0x0, 0x0, 0x6, &(0x7f0000000840)=[r3, r3, 0xffffffffffffffff, r9, r6, r10], 0x6, 0x0, 0x1}) (async) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000b40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000900)={0x1cc, r5, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6a}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc5}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "8ae4b62ff12ff6e6066a4011e1106edff7ac67e49f21a5e7396c8ec29ad87252"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x45, 0x3, "2ca209261bc7b3777bdfd7fe488a3ec0b4bec253ae70cd81a817880d628d9071a014aaa1c62f07b36f8c5adf1aca5adc7ea91f02ad5d12c8c1571d4e2757b47bfe"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x95a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb6f5}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe78}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4000008}, 0x44091) (async, rerun: 32) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000b80)=0x15) (async, rerun: 32) open$dir(&(0x7f0000000bc0)='./file0\x00', 0x8000, 0x19) (async, rerun: 32) r11 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000c80)={'syztnl0\x00', &(0x7f0000000c00)={'syztnl0\x00', 0x0, 0x4, 0xf, 0x81, 0x9, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x8, 0x10, 0x9, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r11, 0x89f8, &(0x7f0000000d80)={'ip_vti0\x00', &(0x7f0000000cc0)={'gre0\x00', r12, 0x7800, 0x10, 0x56eae7f2, 0x1, {{0x21, 0x4, 0x3, 0x8, 0x84, 0x68, 0x0, 0xc6, 0x2f, 0x0, @multicast2, @multicast2, {[@cipso={0x86, 0x6d, 0xffffffffffffffff, [{0x5, 0xb, "f9d5e5d9fb613e599b"}, {0x1, 0x7, "681e3d3856"}, {0x6, 0x8, "7ac7c200ba6d"}, {0x7, 0xe, "17ee0f14404e645d89532ea2"}, {0x6, 0xd, "fd195e28faab1773c600f7"}, {0x2, 0x9, "d6d7133d8d30d3"}, {0x5, 0x10, "0ac84739d98601bd03350a782c4b"}, {0x3, 0x10, "0dfdef0cd84a22cdde033f508d70"}, {0x5, 0x6, "2664880e"}, {0x1, 0x3, 'F'}]}]}}}}}) (async) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000dc0)=0x1, 0x4) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000e40)={0x5, &(0x7f0000000e00)=[{0x1, 0x40, 0x5d, 0x1}, {0x401, 0x7f, 0x2, 0x1}, {0x7fff, 0x1, 0xf8, 0x3}, {0x5a5, 0xfb, 0x6, 0x2}, {0x2, 0x10, 0x0, 0x7fff}]}) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000010c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001080)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) (rerun: 64) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000001100)={0x5, 0x10, 0xfa00, {&(0x7f0000000e80), r13, 0x1}}, 0x18) (async) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000001140), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000001180)) 3m39.832862016s ago: executing program 4 (id=1011): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="a6ff03076804268c989e0000a0dc", 0x0, 0x1ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fddbdf25010041000c00050025000000000000000c0002000000000000000000100007800c000180080001"], 0x3c}}, 0x8800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000ffdbdf250f0000000c000600f6ffffff01000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x24}, 0x94) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000002c0)="b07f4d3c03dae6f7e30219f4b0a8f0e75dec0ab2237e469cd30a8d53f6e1b334439be414e0909e9d1a4e889566b01ad730a477783dbd10c3e4e85dabd1206a77463fa0f9d14dc84f1df86e10cd07f83b3cb0589f510aa5c1302702a3e57aff714241198bffef7ee0e0c454e6aac1a991747611d46d7ff249620e335d05d4353fa9b51731d248a1a36c9802f1742fa69541d135", 0x93) 3m39.831898153s ago: executing program 0 (id=1012): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000001e80)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r2, r3], 0x2, 0x0, 0x0, 0xffffffffffffffff}) close(r1) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0xd) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r6, @ANYRES8=r7, @ANYRES32=r4, @ANYRESOCT=r5, @ANYBLOB="1ffa571ffca66b7410b060911b18", @ANYRES32=r7, @ANYRESHEX=r7, @ANYBLOB="86744d0b77564b314a2efb0d2d8c9773c63f54c7eb23e38a2068d62212cffed4e5f0aef1ab7d980083e34a2b8bd80076b4c28cabaea16c46af3d69cce32d279f090a0327bf316e9f31ded6b4a35ce4def8de5d08a09cbd1e4347a0119677773246a5105610cdd1e729426acd4d2e54962061f429fd5fe474df2a0a9d90970523e0f15d03b1d37c2fa851eaf4d08a3ec9e651eeb9c3bcd9c69807f7699dd3c509f7d3236c1de9c7324a10c3e94b0f7e7acca0f7700950ba66dfe4cc7896566560f40493362b5a9da187f4acbff727", @ANYRES32=r0], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x20044800) 3m39.829717125s ago: executing program 4 (id=1013): connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e21, @empty}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023893) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x20, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xc5833c80, 0x7}]}}}}}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000003800010326bd7002fadbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f00000000c0)) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="180000002d00090026bd7000000000000400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) 3m39.664535932s ago: executing program 0 (id=1014): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_linger(r1, 0x1, 0x3b, &(0x7f0000000740), &(0x7f0000000780)=0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003"], 0xfc}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) (async) getsockopt$sock_linger(r1, 0x1, 0x3b, &(0x7f0000000740), &(0x7f0000000780)=0x8) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003"], 0xfc}}, 0x0) (async) 3m39.664280516s ago: executing program 0 (id=1015): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r2, 0x3, 0x8}, &(0x7f0000000140)=0xc) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x8001, 0x3}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r2, 0x3, 0x8}, &(0x7f0000000140)=0xc) (async) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x8001, 0x3}) (async) 3m38.723406605s ago: executing program 0 (id=1016): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='timers\x00') socket$inet(0x2, 0x2, 0x2) r1 = syz_open_dev$video4linux(&(0x7f0000000180), 0x73, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xdd) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000000)={0x0, 0x9, 0x301a}) read$FUSE(r0, &(0x7f0000002580)={0x2020}, 0x2020) 3m38.645920926s ago: executing program 0 (id=1017): ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x4001) read$usbfs(r0, &(0x7f0000000040)=""/4096, 0x1000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001a80)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001ac0)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000001d40)={'\x00', 0xb3b, 0x2, 0x3, 0x4, 0x6, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001dc0)={0x80000001, 0x0, {0x0}, {0xffffffffffffffff}, 0x4, 0x8}) newfstatat(0xffffffffffffff9c, &(0x7f0000001e00)='./file0\x00', &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001ec0)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001f40)={{{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000002040)=0xe8) lstat(&(0x7f0000002080)='./file0\x00', &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002180)=[{{&(0x7f0000001040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001440)=[{&(0x7f00000010c0)="a37517db7559e2ae81b7c4f4409d847b58e7105a7dba632fc4f515c1c0bdad72f9f70d8cc98dcb002c1809b4d9b75668d32bf6117f0b599a12e3c9ffdfe6c5cbdf1e5c", 0x43}, {&(0x7f0000001140)="691bf09fecc15b43d8de4fa1e852e53b973e4a91e820fabbc5933d64f26befd1a4d86f89f479707f819ff5eaa3dbf6c4faf391aaf7b0cf37e7e8384f13f7579bece38453ba2c5e081adbaf260e987bdba2e5755d16cb782da18f8178ee41cc0487e8b08b5d77c126094917a7f453210636a20589485a58861d60ac730ff18caa0eac8ff3575193f3792ec9758d24fe0a807ea7dbb60580f2592b5e203b13ac3e3a74883d11e6a5774a4dcaa12449128ee5e5d63fd4abcca3d3e4aa00b3b109b3480bf055af1894807ab0d1c4ac862eb536d71d38569207", 0xd7}, {&(0x7f0000001240)='h', 0x1}, {&(0x7f0000001280)="2c626e537a4b0493d8702b2a4bebb62d09ff31afd2f9bc5b508bb0822d0b997263a2a691afebe7e8c2560466d6cb5dca8c05ded22ea38095d6eaebdad93519e4efa06c9d03596811f8cc7baded681dbffedc1c1678caece9e31f51d761d804fc813a13f28739a957b8ef1b42a82a222b1a", 0x71}, {&(0x7f0000001300)="f0a38fc60629fc5c1364163a5f086583bb96a73ebf0dc5b39931aafaeb392d7890677a471b062282048727b0dfedf190a53d3c515f3e6702", 0x38}, {&(0x7f0000001340)="f964c3149ea884f97f3dc5e5f9bac1564f8d5578db382fc7a480da0e7e7b391e934c6d28ba122546f54b3302ea97b91000eaa3065b2124fdc53ba0ffd114a80646fbe16e572597f1607f8051cb98b50476a06b20684ba79cd8716058269ae22e95e95eba691bf021f3742bc5d5ce46e8ce27419e81a0a21c30f234ac1b566dcf2b71baa6444a345f1fbf8999a8dbeea7d2236eb45f8af398c1325a6643c1ea8f979e52cf3093191b29cfa63e74a5fbf4e64dc9dc482f827fc5a03a88250257e98408dad425d65138883e7ebbfb61040e1103", 0xd2}], 0x6, &(0x7f00000014c0), 0x0, 0x4008080}}, {{&(0x7f0000001500)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001a00)=[{&(0x7f0000001580)="9c0185e1ebc79da6186ca8621d75d9e083", 0x11}, {&(0x7f00000015c0)="0c8947269f521c65299450a799f163b1588757a09520c95ad12b2f3bee394efb3fd1216a8ff76a7aea97d456d9456f9d081c557c19918b0d310621460ce4697e554c5901ac45249993f0098dfd4b7ce88554f8af1b4126d9038120eac84402ac1dcaca8bb746d6f6dad424d243a62dd7c66bbf789076f390fa5d0c2774c1754ee9d4c519571b0a1fd9debac5969af94cf49f3a396b6c8874d5875a45d197e0859f1a985ccf21725cbbf90da54a7c98adf399fbd08a605c28fde57e78af41ecdecf5150bdb6309cca4d26ae6b8411bd3afadf42e492c6bece9a17e1577a5c58723ad6f4b9e18217e0a69de1944a", 0xed}, {&(0x7f00000016c0)="af6e75328f6b354a9b75e7a68a67ee6ec50a187407f070a4e35888cc68bce3f3a5fca589cfca74487f5b5c88983c8129b88184b3b4fa3703b9d990b3f685e08dba4d97d503c1a1646624c44de641bfb7b80f3ed781a1b83ced1ff8b1eb4921bbde94b35b0b19171dfd5704a8368245fb254b3af26adc97756758f9fc22f80ba62cf7d94907f064694248fcdee568ed2223f96ea90f4987f37a9e63684898bf3a8a8ad3972e0022501aba4d12ea2d8c5acb75f105d2", 0xb5}, {&(0x7f0000001780)="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", 0xff}, {&(0x7f0000001880)="484a5d671611aec4240c47f8fa7480362b710693245284c08b2b05cca72adc6aecf71dee", 0x24}, {&(0x7f00000018c0)="e197ef47926044875c66f8c18ea048f0961e55881e42d9a7f6cd638daf05657c33bde45747f542184d4e9cd9c2f394343ef10c59ee27cda78d9eb78dc01117408026374b34b25d0116dd0171c2ebb5055fbd496d1429271b5b2ab1bf60f4f04b74084a67a8a2739d2d5b2272b9e7da4328506a53c89158d15a446b494550ecf0fd717e0522d9f9b1189cc0c73ddae7b596cabd47b5cee62e39936838d07cdc2aeaae8a1d2270fe9c0fd696da1cc3ec1e0830a0ca4937f04331498b6d16feae980f23652ae2d6d173c4648517e30cbe057d50f829f3d745d8f24ed1b96e6df4a9393f9899f470970c45cd7fcca3633b5de8b68ee8df6e61", 0xf7}, {&(0x7f00000019c0)="4e6a123a51495d0a931c6a35ea73d948d2600b11355e668aa739ce85dbe2ebc4ae9080c92ad2c42d4c55aa6e5d94f408b8901a", 0x33}], 0x7, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r1, r3, r4}}}], 0x20, 0x240048d4}}, {{&(0x7f0000001c00)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000001c80)="08653e705e034872ccadf2e8e749d3411c21aa7ba55be836222e3dad00e28a985df6a9bc034424370c7a89f782a7d9e2517b7db0a063721126aa9986ed87a910f4891e07c7a925b3f1", 0x49}], 0x1, &(0x7f0000002140)=[@cred={{0x1c, 0x1, 0x2, {r5, r7, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r12, r13}}}], 0x40, 0x4000}}], 0x3, 0x8000) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000002240), &(0x7f0000002280), 0x2, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000002300)={{0x0, 0x5, 0x4813d967, 0x100, 'syz1\x00'}, 0x4, 0x4, 0x1, r6, 0x1, 0x297ca434, 'syz1\x00', &(0x7f00000022c0)=['\x00'], 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002440)={0xffffffffffffffff}) io_uring_setup(0x69d2, &(0x7f0000002480)={0x0, 0x79e, 0x1, 0x3, 0x8a, 0x0, r2}) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002540), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000002800)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000027c0)={&(0x7f00000025c0)={0x1c4, r15, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0x42f0, 0x3a}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f3ab1b567b6d90b0c8484b63b0cb1979a34ee7257814bccc"}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3cf56cb854aad662d64983cca927614ca0b9ee1a1756f4ad"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a3173ab7f633316d76d7b7750b496a9bd259155082a9055a"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "90b7b6cad4832253d66fa1dc49afbc1e0c4b470a1f55b67a"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000002840)={0x5, 0x1}) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f00000028c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x1c, r17, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r16}, @void}}, ["", ""]}, 0x1c}}, 0x8012) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000029c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in=@local, 0x4e20, 0x3, 0x4e20, 0x0, 0xa, 0x0, 0x20, 0x33, r11, r8}, {0xfffffffffffffff7, 0x9, 0x101, 0x800, 0x7, 0x8000000000000000, 0x200, 0x626}, {0xa2, 0x9, 0x9, 0x1}, 0xe08, 0x6e6bb6, 0x3, 0x0, 0x3}, {{@in=@private=0xa010102, 0x4d5, 0x3c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x3502, 0x2, 0x1, 0x3, 0x8, 0x1, 0x4}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) r18 = syz_open_dev$usbfs(&(0x7f0000002ac0), 0x0, 0x60000) ioctl$USBDEVFS_ALLOW_SUSPEND(r18, 0x5522) ioctl$TIOCEXCL(r2, 0x540c) ioctl(r14, 0xffff7cd4, &(0x7f0000002b00)="96cea44e18618885bfec5ba265d2b0efe6796f7706af3c034ed8a90aee9c66dd445e7a2ec8d5275a0727d6fbc48e6465a5cb05d5d10daaa7809092993261c5555528f2726560832a6d05afa09ba7056759251babc619c616ac99aad9e4689bf6021c8a597caac53f90947a756b48e1cc43dfa18c2cdf5b614d20da96013a93d715b882876103ffe2bbc266bc586cd3ddc6c61c86392b6198191b8b088c7abd81e63852f61d14fab2bbb12210c9ac2f63d8522ff7f6ae4f8eb1e490ccfa042f055ae9") 3m38.509619776s ago: executing program 3 (id=1018): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaaaa08004c5a003800670000a60190780a0101007f0000010101070385070428a0860600000003440c7d2006000002000000010010"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x5739, &(0x7f0000000280)={0x0, 0x1, 0x10100, 0x0, 0x32e}, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents(r4, &(0x7f0000000080)=""/153, 0x99) getdents64(r4, &(0x7f00000001c0)=""/147, 0x93) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x10000001) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaaaa08004c5a003800670000a60190780a0101007f0000010101070385070428a0860600000003440c7d2006000002000000010010"], 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) (async) syz_io_uring_setup(0x5739, &(0x7f0000000280)={0x0, 0x1, 0x10100, 0x0, 0x32e}, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') (async) getdents(r4, &(0x7f0000000080)=""/153, 0x99) (async) getdents64(r4, &(0x7f00000001c0)=""/147, 0x93) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x10000001) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 3m38.305878131s ago: executing program 3 (id=1019): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x201}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1d}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x19c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0xb9, 0x8, "59e98df2ca11fff0e7b4f5484a58e43044bb93c2c6604c5af6acaafd35c0e45ee09a420813fcb3194163637e7e38c48cd188ff77a1f7ef7c677fdaadb0a021bd11f0ea5cb94fe7cf44fefdb4c868283ba50a3d267363f2abe28c06898fc6719e5c646641df042680005a6efe665c1b8f0bcabb059cc76d28b13041e0690e83d74681668eae92a6947f88e83dc4b4fd94d135597f3ac40bd19cbee5c483e66933154c713dd4997ecd7272dc8697aa1c7634ad923e11"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xa9, 0x8, "96fa7a213e270326762a9cc29d365ab505bed81682781d31e47ac2564147b93549b2a197154fa21760ba6cdcc6f38d7772df7d7a2485aab535a669e801d514ed55f891f9da2b4a1bca8f62edc6959374e67498c633954acf2a880b071e4ac08ad829d2a00533dd543cdc989bd14fe047dd574c1a17a251199613005553031b02a958b886f3a69d19e67f518e697ed54b0a89d65901a7a0f501057a9facafa3706410ce41ee"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x218}, 0x1, 0x0, 0x0, 0x24040050}, 0x24000054) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030f000000000000000007"], 0x48}}, 0x0) 3m31.869267278s ago: executing program 34 (id=895): r0 = fanotify_init(0x4000, 0x0) fanotify_mark(r0, 0x80, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) (async, rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0xffffff3d, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1f}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r9, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000010301080000000000000000000000000c0002"], 0x20}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) (async, rerun: 64) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) (rerun: 64) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) (async) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)=0x4) 3m23.526309997s ago: executing program 35 (id=1013): connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e21, @empty}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023893) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x20, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xc5833c80, 0x7}]}}}}}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000003800010326bd7002fadbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f00000000c0)) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="180000002d00090026bd7000000000000400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) 3m22.440816694s ago: executing program 36 (id=1017): ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x4001) read$usbfs(r0, &(0x7f0000000040)=""/4096, 0x1000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001a80)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001ac0)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000001d40)={'\x00', 0xb3b, 0x2, 0x3, 0x4, 0x6, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001dc0)={0x80000001, 0x0, {0x0}, {0xffffffffffffffff}, 0x4, 0x8}) newfstatat(0xffffffffffffff9c, &(0x7f0000001e00)='./file0\x00', &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001ec0)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001f40)={{{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000002040)=0xe8) lstat(&(0x7f0000002080)='./file0\x00', &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002180)=[{{&(0x7f0000001040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001440)=[{&(0x7f00000010c0)="a37517db7559e2ae81b7c4f4409d847b58e7105a7dba632fc4f515c1c0bdad72f9f70d8cc98dcb002c1809b4d9b75668d32bf6117f0b599a12e3c9ffdfe6c5cbdf1e5c", 0x43}, {&(0x7f0000001140)="691bf09fecc15b43d8de4fa1e852e53b973e4a91e820fabbc5933d64f26befd1a4d86f89f479707f819ff5eaa3dbf6c4faf391aaf7b0cf37e7e8384f13f7579bece38453ba2c5e081adbaf260e987bdba2e5755d16cb782da18f8178ee41cc0487e8b08b5d77c126094917a7f453210636a20589485a58861d60ac730ff18caa0eac8ff3575193f3792ec9758d24fe0a807ea7dbb60580f2592b5e203b13ac3e3a74883d11e6a5774a4dcaa12449128ee5e5d63fd4abcca3d3e4aa00b3b109b3480bf055af1894807ab0d1c4ac862eb536d71d38569207", 0xd7}, {&(0x7f0000001240)='h', 0x1}, {&(0x7f0000001280)="2c626e537a4b0493d8702b2a4bebb62d09ff31afd2f9bc5b508bb0822d0b997263a2a691afebe7e8c2560466d6cb5dca8c05ded22ea38095d6eaebdad93519e4efa06c9d03596811f8cc7baded681dbffedc1c1678caece9e31f51d761d804fc813a13f28739a957b8ef1b42a82a222b1a", 0x71}, {&(0x7f0000001300)="f0a38fc60629fc5c1364163a5f086583bb96a73ebf0dc5b39931aafaeb392d7890677a471b062282048727b0dfedf190a53d3c515f3e6702", 0x38}, {&(0x7f0000001340)="f964c3149ea884f97f3dc5e5f9bac1564f8d5578db382fc7a480da0e7e7b391e934c6d28ba122546f54b3302ea97b91000eaa3065b2124fdc53ba0ffd114a80646fbe16e572597f1607f8051cb98b50476a06b20684ba79cd8716058269ae22e95e95eba691bf021f3742bc5d5ce46e8ce27419e81a0a21c30f234ac1b566dcf2b71baa6444a345f1fbf8999a8dbeea7d2236eb45f8af398c1325a6643c1ea8f979e52cf3093191b29cfa63e74a5fbf4e64dc9dc482f827fc5a03a88250257e98408dad425d65138883e7ebbfb61040e1103", 0xd2}], 0x6, &(0x7f00000014c0), 0x0, 0x4008080}}, {{&(0x7f0000001500)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001a00)=[{&(0x7f0000001580)="9c0185e1ebc79da6186ca8621d75d9e083", 0x11}, {&(0x7f00000015c0)="0c8947269f521c65299450a799f163b1588757a09520c95ad12b2f3bee394efb3fd1216a8ff76a7aea97d456d9456f9d081c557c19918b0d310621460ce4697e554c5901ac45249993f0098dfd4b7ce88554f8af1b4126d9038120eac84402ac1dcaca8bb746d6f6dad424d243a62dd7c66bbf789076f390fa5d0c2774c1754ee9d4c519571b0a1fd9debac5969af94cf49f3a396b6c8874d5875a45d197e0859f1a985ccf21725cbbf90da54a7c98adf399fbd08a605c28fde57e78af41ecdecf5150bdb6309cca4d26ae6b8411bd3afadf42e492c6bece9a17e1577a5c58723ad6f4b9e18217e0a69de1944a", 0xed}, {&(0x7f00000016c0)="af6e75328f6b354a9b75e7a68a67ee6ec50a187407f070a4e35888cc68bce3f3a5fca589cfca74487f5b5c88983c8129b88184b3b4fa3703b9d990b3f685e08dba4d97d503c1a1646624c44de641bfb7b80f3ed781a1b83ced1ff8b1eb4921bbde94b35b0b19171dfd5704a8368245fb254b3af26adc97756758f9fc22f80ba62cf7d94907f064694248fcdee568ed2223f96ea90f4987f37a9e63684898bf3a8a8ad3972e0022501aba4d12ea2d8c5acb75f105d2", 0xb5}, {&(0x7f0000001780)="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", 0xff}, {&(0x7f0000001880)="484a5d671611aec4240c47f8fa7480362b710693245284c08b2b05cca72adc6aecf71dee", 0x24}, {&(0x7f00000018c0)="e197ef47926044875c66f8c18ea048f0961e55881e42d9a7f6cd638daf05657c33bde45747f542184d4e9cd9c2f394343ef10c59ee27cda78d9eb78dc01117408026374b34b25d0116dd0171c2ebb5055fbd496d1429271b5b2ab1bf60f4f04b74084a67a8a2739d2d5b2272b9e7da4328506a53c89158d15a446b494550ecf0fd717e0522d9f9b1189cc0c73ddae7b596cabd47b5cee62e39936838d07cdc2aeaae8a1d2270fe9c0fd696da1cc3ec1e0830a0ca4937f04331498b6d16feae980f23652ae2d6d173c4648517e30cbe057d50f829f3d745d8f24ed1b96e6df4a9393f9899f470970c45cd7fcca3633b5de8b68ee8df6e61", 0xf7}, {&(0x7f00000019c0)="4e6a123a51495d0a931c6a35ea73d948d2600b11355e668aa739ce85dbe2ebc4ae9080c92ad2c42d4c55aa6e5d94f408b8901a", 0x33}], 0x7, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r1, r3, r4}}}], 0x20, 0x240048d4}}, {{&(0x7f0000001c00)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000001c80)="08653e705e034872ccadf2e8e749d3411c21aa7ba55be836222e3dad00e28a985df6a9bc034424370c7a89f782a7d9e2517b7db0a063721126aa9986ed87a910f4891e07c7a925b3f1", 0x49}], 0x1, &(0x7f0000002140)=[@cred={{0x1c, 0x1, 0x2, {r5, r7, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r12, r13}}}], 0x40, 0x4000}}], 0x3, 0x8000) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000002240), &(0x7f0000002280), 0x2, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000002300)={{0x0, 0x5, 0x4813d967, 0x100, 'syz1\x00'}, 0x4, 0x4, 0x1, r6, 0x1, 0x297ca434, 'syz1\x00', &(0x7f00000022c0)=['\x00'], 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002440)={0xffffffffffffffff}) io_uring_setup(0x69d2, &(0x7f0000002480)={0x0, 0x79e, 0x1, 0x3, 0x8a, 0x0, r2}) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002540), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000002800)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000027c0)={&(0x7f00000025c0)={0x1c4, r15, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0x42f0, 0x3a}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f3ab1b567b6d90b0c8484b63b0cb1979a34ee7257814bccc"}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3cf56cb854aad662d64983cca927614ca0b9ee1a1756f4ad"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a3173ab7f633316d76d7b7750b496a9bd259155082a9055a"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "90b7b6cad4832253d66fa1dc49afbc1e0c4b470a1f55b67a"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000002840)={0x5, 0x1}) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f00000028c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x1c, r17, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r16}, @void}}, ["", ""]}, 0x1c}}, 0x8012) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000029c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in=@local, 0x4e20, 0x3, 0x4e20, 0x0, 0xa, 0x0, 0x20, 0x33, r11, r8}, {0xfffffffffffffff7, 0x9, 0x101, 0x800, 0x7, 0x8000000000000000, 0x200, 0x626}, {0xa2, 0x9, 0x9, 0x1}, 0xe08, 0x6e6bb6, 0x3, 0x0, 0x3}, {{@in=@private=0xa010102, 0x4d5, 0x3c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x3502, 0x2, 0x1, 0x3, 0x8, 0x1, 0x4}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) r18 = syz_open_dev$usbfs(&(0x7f0000002ac0), 0x0, 0x60000) ioctl$USBDEVFS_ALLOW_SUSPEND(r18, 0x5522) ioctl$TIOCEXCL(r2, 0x540c) ioctl(r14, 0xffff7cd4, &(0x7f0000002b00)="96cea44e18618885bfec5ba265d2b0efe6796f7706af3c034ed8a90aee9c66dd445e7a2ec8d5275a0727d6fbc48e6465a5cb05d5d10daaa7809092993261c5555528f2726560832a6d05afa09ba7056759251babc619c616ac99aad9e4689bf6021c8a597caac53f90947a756b48e1cc43dfa18c2cdf5b614d20da96013a93d715b882876103ffe2bbc266bc586cd3ddc6c61c86392b6198191b8b088c7abd81e63852f61d14fab2bbb12210c9ac2f63d8522ff7f6ae4f8eb1e490ccfa042f055ae9") 3m21.345613101s ago: executing program 37 (id=1019): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x201}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1d}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x19c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0xb9, 0x8, "59e98df2ca11fff0e7b4f5484a58e43044bb93c2c6604c5af6acaafd35c0e45ee09a420813fcb3194163637e7e38c48cd188ff77a1f7ef7c677fdaadb0a021bd11f0ea5cb94fe7cf44fefdb4c868283ba50a3d267363f2abe28c06898fc6719e5c646641df042680005a6efe665c1b8f0bcabb059cc76d28b13041e0690e83d74681668eae92a6947f88e83dc4b4fd94d135597f3ac40bd19cbee5c483e66933154c713dd4997ecd7272dc8697aa1c7634ad923e11"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xa9, 0x8, "96fa7a213e270326762a9cc29d365ab505bed81682781d31e47ac2564147b93549b2a197154fa21760ba6cdcc6f38d7772df7d7a2485aab535a669e801d514ed55f891f9da2b4a1bca8f62edc6959374e67498c633954acf2a880b071e4ac08ad829d2a00533dd543cdc989bd14fe047dd574c1a17a251199613005553031b02a958b886f3a69d19e67f518e697ed54b0a89d65901a7a0f501057a9facafa3706410ce41ee"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x218}, 0x1, 0x0, 0x0, 0x24040050}, 0x24000054) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030f000000000000000007"], 0x48}}, 0x0) 1m3.854163337s ago: executing program 9 (id=2567): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20001) ioctl$BLKFRASET(r1, 0x1264, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x859b}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1m3.853627707s ago: executing program 9 (id=2569): r0 = syz_usb_connect(0x5, 0x3f, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/10], 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 1m3.330426168s ago: executing program 9 (id=2584): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000ae5ffffff000040"]) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000000440)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r8, 0x933, 0x7) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000054000100040000000000000807000000", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="00000000e100000000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40840}, 0x0) 1m3.157346805s ago: executing program 9 (id=2590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = socket(0x28, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'wlan1\x00', &(0x7f0000000500)=@ethtool_drvinfo={0x3, "d59db50bd23f89e4f6b901c557ad35ab303118d27e61f3d701e7d7fb646293b6", "afd43af0b171d16b3fc7a248eec1801719a3f9e8e29e5323df8a203a6e41b2ec", "d2d52d680ec7786d6bdc9501b545e25b464a41a31e310de18aed4c7240d34235", "f41006a98bbaf1e5adb7075fc45fe2c391ea955c0b4927990da996e7e95ac3dc", "cb72bffa37a5e5fa0c9668a63fdb3fc289d9423c8cf460663a432dad0238767f", "ed16be76e2fd7cca740d9a09", 0x7, 0x400000, 0x48, 0x0, 0x6}}) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="40003a000a000200ffffffffffff000008000f"], 0x30}}, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='sched_kthread_stop_ret\x00', r6}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r10 = eventfd2(0x8, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r10, 0x7, 0x2, r10}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000380)={0xbc, 0x0, 0x1}) (async, rerun: 32) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x5, 0x7, 0x6f, 0x4, 0xf, 0x9, 0x3, 0x41, 0x13, 0x5, 0x90, 0x5, 0xed, 0xc}}) (async, rerun: 32) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xb, 0x4000000004, 0x14, 0xfffffffffffffffe, 0x1000, 0xdda, 0x1000004, 0x7fffffffffff9, 0x3, 0x0, 0x1, 0xc438, 0x5, 0x0, 0x1], 0x85b2a054ad555207, 0x3c4310}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r12) sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x30, r13, 0x5, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x44010}, 0x4) (async) write$binfmt_elf64(r11, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x24, 0x0, 0x95, 0x8002, 0x3, 0x3e, 0x101, 0x294, 0xfffffffffffffc18, 0x24d, 0xfffffffa, 0x0, 0x38, 0x1, 0xfffd, 0x7f, 0x808}, [{0x3, 0x4, 0x7, 0xa, 0x101, 0x6, 0x7, 0xffffffffffffff7f}], "db55a3354ca6d746db00abec7dc7bab5a753e28de04049bfa713bf4cef51bb53d0ad"}, 0x9a) close(r11) (async) mkdir(&(0x7f0000000940)='./file0\x00', 0x51) (async) readlink(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)=""/168, 0xa8) (async, rerun: 32) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) (rerun: 32) 1m3.033047791s ago: executing program 9 (id=2591): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x243014, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x4000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0500000007000000df0700006e45000041010000658618c7ce166b76adec5235eb2ef1d24693e371ac1c98ca94d0e482163f172e4c4bb2041c9e8918c8be7ff10c8388d5fd711763af9a811fb8720b98d2a3ad71fe78d627a8d38e5e3f354b1326071627dd955cbfb69b0620bf5379396d7870a532146374828034f5ea43873c4c638a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdffffff00"/28], 0x50) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f00000005c0)={&(0x7f0000000240)=@canfd={{0x2, 0x0, 0x1, 0x1}, 0xe, 0x3, 0x0, 0x0, "d159a1c1d454a46825c5970361e4bafcbbc089edbb2a9b6605a4d5140473ac5fabc1470dcad825e566f3f709cd45965fa4a0899399d343e91f3a132efaf62bed"}, 0x48}}, 0x4000010) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x9, [@type_tag={0x3, 0x0, 0x0, 0x12, 0x1}, @volatile={0xe, 0x0, 0x0, 0x9, 0x5}, @ptr={0x4, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x4}, @enum64={0x2, 0x2, 0x0, 0x13, 0x1, 0xc, [{0x10, 0x2, 0x6}, {0xb, 0x7, 0xffff7fff}]}]}, {0x0, [0x61, 0x10, 0x61, 0x5f, 0x4f, 0x61, 0x5f]}}, &(0x7f0000000440)=""/192, 0x79, 0xc0, 0x1, 0x1, 0xb969f5ab8b012c36}, 0x28) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000340)='.pending_reads\x00', 0x2080, 0x98) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x7fffffff}, [@generic={0xa, 0xb, 0xf, 0x81, 0x3ff}, @call={0x85, 0x0, 0x0, 0x24}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f00000000c0)='syzkaller\x00', 0x800, 0x0, 0x0, 0x41000, 0x8, '\x00', r3, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1, 0x6, 0x8001, 0x6}, 0x10, 0x106e9, 0xffffffffffffffff, 0x3, &(0x7f00000003c0)=[r5, r1, r1, r1], &(0x7f0000000500)=[{0x5, 0x1, 0xf, 0xb}, {0x0, 0x1, 0x7, 0x2}, {0x5, 0x1, 0xa, 0x9}], 0x10, 0x7}, 0x94) 1m2.99179007s ago: executing program 9 (id=2592): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/10], 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 46.850536702s ago: executing program 38 (id=2592): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/10], 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 24.72910217s ago: executing program 1 (id=3106): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@local}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x0, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000300)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], r1, 0x0, '\x00', 0x1, 0x7}) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$FUSE_DIRENT(r0, &(0x7f0000000380)={0x30, 0x0, 0x0, [{0x1, 0xffffffff, 0x2, 0x3, '\'*'}]}, 0x30) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000004c0)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x7, 0x1, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000940)={&(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x8, 0x1, 0x0, r8}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000b00)={&(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[{}], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0], 0x1, 0x7, 0x8, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000c00)={0x100, 0x4, &(0x7f0000000500)=[r8, r5, r6, r4], &(0x7f0000000540)=[0x10001, 0xbaa, 0x1], &(0x7f0000000b80)=[r9, r1, r1, r10], &(0x7f0000000bc0)=[0xc0, 0x38, 0x10001], 0x0, 0x8001}) chdir(&(0x7f0000000c40)='./file0\x00') (async) r12 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000c80)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$snddsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x1010, r12, 0xf000) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r13, 0x894b, &(0x7f0000000cc0)) (async) symlink(&(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)='./file0\x00') ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000d80)={r3}) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x13, r2, 0xe58c8000) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, r12, 0xe7b44000) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r12, 0xc02064b9, &(0x7f0000000e40)={&(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e00), 0x6, r11}) (async) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000e80)=0x15a) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r12, 0xc01064bd, &(0x7f0000000f00)={&(0x7f0000000ec0)="8917bd6ac51895a62f60e0fb21ff565e3ebbbbe5e4f5f708df37f5", 0x1b}) munlockall() (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$FITHAW(r13, 0xc0045878) getsockopt(r0, 0x9, 0x8000, &(0x7f0000000f40)=""/74, &(0x7f0000000fc0)=0x4a) (async) ioctl$sock_SIOCOUTQNSD(r13, 0x894b, &(0x7f0000001000)) link(&(0x7f0000001040)='./file0\x00', &(0x7f0000001080)='./file0\x00') (async) recvmsg$inet_nvme(r0, &(0x7f0000001700)={&(0x7f00000010c0)=@xdp, 0x80, &(0x7f0000001600)=[{&(0x7f0000001140)=""/179, 0xb3}, {&(0x7f0000001200)=""/228, 0xe4}, {&(0x7f0000001300)=""/216, 0xd8}, {&(0x7f0000001400)=""/7, 0x7}, {&(0x7f0000001440)=""/84, 0x54}, {&(0x7f00000014c0)=""/137, 0x89}, {&(0x7f0000001580)=""/86, 0x56}], 0x7, &(0x7f0000001680)=""/79, 0x4f}, 0x0) 24.677285635s ago: executing program 1 (id=3108): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x22) (async) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x22) move_mount(0xffffffffffffff9c, 0x0, r0, 0x0, 0x64) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x1070bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x200c8000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) (async) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="b800008ec0f69a506c66b9800000c00f326635000400000f300f01c9670f01df0f4f230faf070f09ba4200b000eef3ad", 0x30}], 0x1, 0xbc, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="b800008ec0f69a506c66b9800000c00f326635000400000f300f01c9670f01df0f4f230faf070f09ba4200b000eef3ad", 0x30}], 0x1, 0xbc, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000ac0)={r9, 0xd0}, &(0x7f0000000b00)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000280)=ANY=[@ANYRES32=r9, @ANYBLOB="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", @ANYRES16], 0xff) preadv2(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000200)=""/51, 0x33}, {&(0x7f0000002340)=""/4096, 0x1000}], 0x3, 0x9, 0x9, 0x10) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="231306e53f0b53743ff62a9000070900be00830000000057a90da1f60b00000417"], 0x0}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) (async) r10 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EVIOCGKEYCODE_V2(r10, 0x80284504, &(0x7f0000000100)=""/101) (async) ioctl$EVIOCGKEYCODE_V2(r10, 0x80284504, &(0x7f0000000100)=""/101) socket$nl_route(0x10, 0x3, 0x0) 24.60612174s ago: executing program 1 (id=3109): r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r1}, 0x8, 0x6, 0x1}) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000100), &(0x7f0000000140)={'U+', 0x5}, 0x16, 0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f5, 0x2, 0x70bd25, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x28008801}, 0x400c040) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x4001, 0x0) ioctl$PTP_PIN_SETFUNC2(r3, 0x40603d10, &(0x7f00000002c0)={'\x00', 0x3, 0x1, 0x3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2cd20ddf6afb006e) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r4) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r5, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x10) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000580), 0x40000, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r4) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r6, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xeb1, 0x19}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000700)={{0x4, 0x2}, {0xba52, 0xb}, 0x7, 0x1}) write$P9_RLINK(r3, &(0x7f0000000740)={0x7, 0x47, 0x1}, 0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x40, 0xde0, 0xf, 0x9, 0x1, 0xe98, 0x3}, &(0x7f0000000840)=0x9c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000880)={r7, 0x9}, 0x8) r8 = syz_open_dev$hidraw(&(0x7f00000008c0), 0x1, 0x83) ioctl$HIDIOCGRDESC(r8, 0x90044802, &(0x7f0000000900)={0x863, "6f757b8b1f7c494ef5ecd11d52662efcebfe95ad17723c45c96628991c72ebff50f09729090762021843fc998043f1c1b6183099330137f9d93d8ee9034c1f52a26a56a35a115d1bddb31b088b5034069258c432115dd58ef69bddfac887823c6aeb64f4187c6d3132ee9ae3b4a358eefa70dd47037e1c0851becb5751cc8da1a7c6c27b79de8202b53f40bf89fb08543d09ffeb71849f9922f7331716e59cf813a4ec7c5454aa70cfde75af221256af45696ecd8837f8db8fce07f87c2676fb488a30556670cf6664e488c499aa26922e4ece8eb4c4d8a17e9cd138579c724a29a4c76af0d241e761d2eca455bb042effdff79447710b4a634f825f912ee49457085c495370849d2f7c93de449a50037c35c6bb3873a4e8d20152208a0c9feac7b3675105ba9056ef63cf0fba3e1a97507c04378674b50b87aad741fab3075f99dabb52e56c3e7f4c6e4ca923f4bb53d4c0f5c2700fcf318c42fd69f2a2bfae080a85175f46d38df481070eb58c9f296b921a40bd53ac685445dd1206010d9080c36aca1aacd2eb36a8abf0373a62406512d2ae9953abb03d9c6354338c825a2fcb14dab49bbc6087a80d7fca41d287d722d9eef523cfdb6bbd07ec5f9e95be26ec400bb4491eac2fd54f5256dfe3caee0693d7b1b28e9218de7f9e08701d9cb86378d425802152897ad2ebdf268dc6085c1e7e177d88200b303d273e560abac0252e24df445e8d864d52a086f805a927a143d02cf1b809904d09b55d672edf5f63aa7e9185aaeacb20910da7cc27ed30d48d3978d1c963265587d6913d20315b16b6b79802e34a99e1750a520d51555474419f3b8b4f01875b0211d902372ac9504c153fba5ec41d5d6050d0219eabad9db89d8a9b8b9df31c1b2381a18cf01a02bc23481f55c5ac51de5d55f8c2c3a8b05d9ecb52a6ab28c591ae3d578d04abbbb62cc0f66f896459a4eea5689315b3f4fe25378a29b3fc65a2d6074d7d3c723b16f26a625502ca06a0bc90b78c8f2f04334489d0516f6afb2ca11fe4808a91b1820db634b544d2599e099911c55aa5b74fea58c419434abc91e8d17b1fa06af4d872d2c1ee58fe81df5f3a950650242ff2b65cd71fee5c8e46cfc7fcf34e3458f6a940fc571ded1811a35f84fa5c2e2ef15e42692629869c58e9a91a165092f83f7d0bbab92a3512f9dc91966b1f1152abfe29a34c479a1c40063837a2a85db1be9410c0287e7d1a3947ab2a06b4608f0b8488e3a231c66f7eea5d700b665e14efbd581af27a01c32bd5619b38dd6c1f394298fe2adc6f8492d9105d575c9e6302420b09d2f21a746eb5a2f9ab61c4a07e273c8f27fbcb61c2979165169c1f390c5d6c0b171e3403745863a777e8cf8d7cd44517cbaa47a718a6be9d480c539ace4ef15bbc881816eb64db8125e59d63601b6062e5f2e035add1961c6bf526b99204851524a1ec583c5c2aa302f6c244e2cd96a29d5915066d3efecf532d3c643ba7ff7a844fc4ace09daeaac7e254c730a85ccf8f70fb6db71a147d20b2c0a60216df64bcb0a35988370f37e11eadb17757fb94dac45b733a38339c502c453f778a428731d395ecbdc7ff3ee0c94aa181ea86c8c9b9cc87d097afda0a66170a0d9c0a33cd6e51577d26b7845d3c3beb4e688f217d18d08899bd1282cd94f323d7d2457b49c4bde48ee5e762b2acd1df033ecd5a0b594d1d8548b8da2474b110b6bde19b5445592bb193b83010c43ad8d696f9f8a90b3a5026f5faf09791eb8cb1c4f39bdc78fb26046e9e8061f0bdb0389aa09707e44daac529bb6985d0a154902012d0eb494b8524533929311fe924dfc98eaec820068f2f43a9a8e07532d9364d30eca46760b6c3fef68a5f833170a8c57851eaef4bf04dff812f345894d6d5e6dc111361c99a76512bd9d7c66a10905bdaf9a8076c354259b32ed74b1385244918e9edd9463ad374cd3aed745c38f6d36262768e62dbbc84c3f38c1422404bc2e6dde6b6d2dd2b301baa36389408695006315c530aaa402740cdd5f0357a695922484bb32bca652b537ea1dee69e21007692c3e3e0feebc71c890b0f5e8f7314fef6d9897486653173be8f8403bd943ea083cc1ab4d7160e03c4966fd82a962eb1eb72aace6626889032cd04b125cf49c21e774cfd8e0015cbf6ddff54c0f343a372892259bc5f682266ca4a711f7bccaf3acbb6aa0e1db6b850c65158f5814cd5a6ccfd237ae793ea2090af03aead7c65fc96ec0f785c819c3e97b21d00be9a2034d9030536552981a614d2bcf4f23648c104f497776b0c6d97cffd80fc151670ff9b9460a8916cfdb6259a90f653bbecb64303e0b479d14321672ad997dff54ee6b13a3a42786a2e8bd5e0dc52e9a791754ee22389f83fad3c5cf7df971f49b4c3e1ffad93e2505e21ec82a2acd264eefd0da726650399c8a4aae61e5d296387a86558cf9ec5ea05fd5355b1df7af9ddc7afa511451e140b7d25a68f115a9f726ef21e7231fecd926101d15b2792254f2f0443336823380a5ec6c12888f714c50be335318c74e7777da3aedf58fec09dafccd63fdf05174246db7c5a27dd5c67047f25e25ca1d6e6c91400292e8c7b447eb1074d4a70e18381b27c3cb472a0174274911214e6fb01fd2f5463569a5f31281927adcb6010920677b6264c140506340a507abccba4369eb6b8225fc6a4c43920a12390ec3b14dd2b5773c74483a7901ea3b9a3b2705ba3a4999a825c584739d5fc2a8842fa9963e46ab7b139c5b9a5d7187c9ada24198502c70770f2f9425ccb4e35efed967f366d0007c6f5ea4edbd753e1f9dad0d3b518061e14318bc5fe36c8338c2289de92117596fca260d7c37e81833c7639be42b5b9aff96161d0cec2fcc8b3583f9b6852364cc480b56e9be3300d989377b7ac3cad6049896ea688eec4341d539070838d013e526cfdb77638415da41178d6d1cbde39ef667de0331e34fdf86aa59a7d38ed2abf5d3e66b729806e73d30014518664a10bfd34bf8f8f72201229b1f2dffd84155699"}) shutdown(r2, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000001180)={'raw\x00', 0x9c, "4a9136441c0a23d65ca58d2e052143a9803d7c2d1b15244eaef255c299591c7d8d203cdb3380b1c4a1ae35a05eaae78286be9a6f90e7a648bbe88382c41d8663f9ddf02cf7c65bea4ca4d0fdf65a81e2a191dfb7075bca1ef23adff29efe0a7f717738710bacf65114b472eec87fa334d626a5a20a7b7b23751b399451ce431524b1ce6f90ab03b76188eaf4e21e296fb27b42099610315b1b62925a"}, &(0x7f0000001240)=0xc0) write$usbip_server(r3, &(0x7f0000001280)=@ret_submit={{0x3, 0xa7e, 0x0, 0x1, 0x2}, 0x3, 0x93, 0x0, 0x339, 0xfffffffd, 0x0, "14bde5ad6e6bfa5ce992acdd5edb12aeec981fc240a2c4c1fe94faa12f968edcdd141737ed9e908a52e82576ca52d9ab0fb2fd80c8bff7cd11016d594d09fd193d3b1ff01bfc99848f8ceca7580e21c9e377c25aecf5cf8f410211264cde47b81834b94da6a647e9a6949043ca18645bec73afeeb6900f152c5b8cdce672a1a5e28ac14b9c197f14bce3026fc878fb44c43ade", [{0xfffffff8, 0x973, 0x8, 0x1}, {0x0, 0x5, 0x8, 0x2}, {0x9, 0x7e, 0x5, 0x8c9}, {0x8, 0x7ff, 0x0, 0x2}, {0x5, 0xb, 0x3, 0xbe}, {0x80000001, 0x3ff, 0x39b, 0x3}, {0xce2, 0x8, 0x5, 0x80000000}, {0x8, 0x3cb, 0x81, 0x5a}, {0x1, 0x200, 0xc00000, 0x5}, {0x349e, 0x7fffffff, 0xa7b, 0x5}, {0x0, 0x5d7, 0x3, 0x9}, {0x7, 0x82, 0x6}, {0x5, 0x7ff, 0x4, 0x8}, {0x7, 0x51, 0x2, 0x4}, {0x7, 0x9, 0x3, 0x1}, {0xb8f1, 0x3, 0x1, 0x2}, {0xd, 0x4b4, 0xf60, 0x6}, {0x1ffe, 0x7, 0xa, 0x5}, {0x1, 0x3ff, 0x4, 0x5}, {0x3266, 0x9ea, 0x8001, 0x28}, {0x4, 0x1, 0x101, 0xc2}, {0x8, 0x0, 0xb, 0x718}, {0x8, 0x3, 0x0, 0x2}, {0x7, 0x4, 0x2, 0x7}, {0xea9, 0xff, 0x1, 0x3}, {0xfff, 0xad2, 0x2, 0x7}, {0x5, 0x7}, {0x0, 0x101, 0x3, 0x5}, {0x4, 0x63, 0x9, 0x2}, {0x3, 0x9, 0x6, 0xfffffa93}, {0x4, 0x4, 0x8, 0x5}, {0x0, 0x5, 0x5eb, 0xefc}, {0x23, 0x8000, 0x0, 0x34000000}, {0x5, 0x1, 0x2, 0x3}, {0x3, 0x0, 0x80, 0x7}, {0x8, 0x57, 0xe3f7, 0xfffffffc}, {0x1, 0x2, 0x8, 0x1}, {0x5, 0x8, 0xffff, 0x1}, {0x9, 0x3, 0x8, 0x9a}, {0x40, 0x3, 0x5, 0x6}, {0x8, 0x7, 0x81, 0x4}, {0xe64, 0x7f, 0x6, 0xfff00000}, {0xd619, 0xa, 0x625, 0x4}, {0x4, 0xc, 0x8, 0xf}, {0x800, 0x3, 0xf5e, 0x8}, {0x2, 0x6, 0x6a11, 0x4}, {0x6, 0x80000000, 0x1c751160, 0x2}, {0x0, 0x5, 0x7, 0x10}, {0x1, 0x10001, 0x29, 0x1}, {0x10000, 0x5, 0x6ad9c48, 0x25a613e7}, {0x800, 0x4, 0x6, 0x9}, {0x5, 0x7ff, 0x7, 0xa}, {0x80000001, 0xab6f, 0x1, 0xd}, {0x101, 0x8000000}, {0x4, 0x101, 0xcb, 0xfffffff9}, {0x12, 0x4, 0x9, 0x8}, {0x8, 0x100, 0x4, 0x2}, {0x9, 0x4000, 0x6, 0x5}, {0x4, 0x0, 0xffffff7f, 0x4}, {0x2, 0x20d, 0x4, 0x1}, {0x1, 0x1, 0x0, 0x2d}, {0x81, 0x3, 0x5, 0x1}, {0x3, 0xa6, 0x4, 0x4}, {0xea3d, 0x6, 0xe70ad30e, 0x1}, {0x385b, 0xfffffbff, 0x10000, 0x4}, {0x1, 0x3, 0x1, 0x8}, {0xffff, 0x5, 0x40, 0x8000}, {0x25, 0x246, 0xffff, 0x72b}, {0x7, 0x1ff, 0x2, 0x5}, {0x799e, 0xd, 0xffff, 0x6}, {0x88e, 0xd, 0x1, 0x8}, {0x80000000, 0xf, 0x1, 0xaa}, {0x4, 0x3, 0x8, 0x2}, {0x8, 0x2, 0xd, 0x300}, {0x3, 0x1, 0x4, 0xf75}, {0xf, 0x1ff, 0x3}, {0x7, 0x5, 0x9, 0x40}, {0x7, 0x9, 0x5, 0x9}, {0xfffffff9, 0x4, 0x9, 0x38}, {0x808, 0x5b83, 0x5, 0x4}, {0x5, 0x9, 0x9, 0x8}, {0xf, 0x4, 0xba63, 0x95e7}, {0x5, 0x4, 0x8820, 0x5}, {0x3, 0x10, 0x6, 0x4}, {0xedd, 0x400, 0x8000, 0x2}, {0x1, 0xc37, 0x401, 0x3}, {0x1, 0x8, 0x3, 0x6}, {0xd, 0x2, 0x9, 0x1}, {0x1, 0x4, 0x1, 0xfffffff0}, {0x87fd, 0x149, 0x6, 0x470}, {0xade, 0x114c, 0xb, 0x7f}, {0x0, 0xd70, 0x7, 0xc}, {0x6, 0x90, 0x1, 0x6}, {0x8, 0x1, 0x21240ec4}, {0x0, 0xfffff0df, 0x10001, 0x5}, {0x2, 0xfffffff2, 0xfffffff8, 0x2}, {0x1, 0x2, 0xffffffff, 0x5}, {0x7f, 0x1, 0x10001, 0xfffffffa}, {0x1531, 0x5, 0x101, 0xaf79}, {0x3, 0xffffffff, 0x7fffffff, 0xfffffffd}, {0x6, 0x1, 0xfffffff5, 0x2}, {0x8, 0xfffffffd, 0x101, 0x5}, {0xf8, 0xfffff000, 0x2, 0x81}, {0x9, 0x9, 0x7, 0x6}, {0x3, 0x2, 0x0, 0x75adb428}, {0x1ff, 0xfffffffd, 0x10001, 0x8001}, {0x2, 0x3, 0x4, 0x7}, {0x7, 0x4, 0x3ff, 0x7}, {0x11, 0x9, 0xb26, 0x8}, {0x83, 0x7800, 0x9}, {0x25, 0x0, 0x13c, 0x8}, {0x10000, 0x0, 0xfffffff9}, {0x0, 0x0, 0xf4e}, {0x6, 0x1, 0x2, 0x3}, {0x3, 0xffff, 0x6, 0x5}, {0x401, 0x87, 0x300, 0x80}, {0x6, 0x7, 0x96, 0x7}, {0x29, 0x5, 0x5e, 0x1ff}, {0xfffffffa, 0x6, 0x3198, 0x413d}, {0x9, 0x3, 0x79, 0x7fffffff}, {0x6, 0xbd6, 0x2, 0x7}, {0x8, 0x5, 0x1, 0x3ff}, {0xd, 0x1000000, 0xfffffffb, 0x2}, {0x3, 0x1a80, 0x9, 0x100}, {0x48a, 0x4, 0x5, 0x6}, {0x4, 0xd194b86, 0x106, 0x1}, {0x6, 0x40c3, 0xd, 0x8}, {0x4, 0x9, 0x1, 0x4}, {0xfffffffc, 0x4ae, 0x0, 0x2}, {0x3, 0x0, 0x0, 0x5}, {0x40, 0x7, 0xff, 0x80000000}, {0x14000000, 0xb, 0x5}, {0x9, 0x80000000, 0x3, 0x8}, {0x9, 0x0, 0xffffffff, 0x6f}, {0xfffff6c9, 0x6, 0x4, 0x9}, {0x1, 0x6, 0x3, 0x7}, {0x80000000, 0x1, 0x8, 0x3ff}, {0x6, 0x6, 0xfffffc01, 0x401}, {0x9, 0xfffffffa, 0x4}, {0x0, 0x371, 0x0, 0x9}, {0x0, 0x5, 0x4, 0x9}, {0x4, 0x2d2d, 0xd, 0x8}, {0x401, 0x6, 0x2, 0x101}, {0x5, 0x5, 0x5, 0xb}, {0x10001, 0x2, 0xffff, 0x81}, {0x10000, 0x1, 0xc94, 0xdd5d}, {0x101, 0x7bf, 0x6ad9, 0x400}, {0x4d, 0x0, 0x3, 0xe}, {0x1, 0x3, 0x8, 0x2}, {0x78, 0x8, 0xfd2, 0x5}, {0x8, 0x7, 0xa978, 0x2}, {0x6, 0x0, 0x9, 0x200}, {0x400, 0x0, 0x1, 0x8}, {0x93bd, 0xfff, 0x7, 0x1}, {0x3, 0x4, 0x9, 0x1}, {0x9, 0xf8, 0x57f8, 0x6000}, {0x1, 0xd, 0x0, 0x6}, {0x7, 0x0, 0xabb, 0x100}, {0x1, 0xacbb, 0xfffffff7, 0x5}, {0x8, 0x78e1b96e, 0xffff13e1}, {0x800, 0xf1, 0xfffffffa, 0x400}, {0xfffffcc1, 0x1, 0x6, 0x8f3c}, {0x8, 0x4, 0x1, 0x1000}, {0x3, 0x3, 0xfffffffb, 0x8}, {0x9, 0x1, 0x2514, 0x100}, {0x7fffffff, 0x200, 0x7fffffff, 0x3}, {0x10, 0x7, 0x2, 0x80000000}, {0x0, 0x7, 0x5, 0xfffffffb}, {0x7fff, 0x7f, 0x3ff, 0x200}, {0x0, 0x3, 0x7, 0x100}, {0xffff, 0x7, 0x8000}, {0xffff, 0x7, 0xff, 0x4}, {0xff, 0x9, 0x6, 0x2}, {0x3, 0x3, 0x9, 0x7fffffff}, {0x9, 0x8, 0x2}, {0x35d, 0x4, 0x3, 0x5}, {0x5, 0x8, 0x99, 0x8000}, {0xd, 0xc0ae, 0xed1, 0x7}, {0x800, 0xb, 0xcb5, 0x1}, {0xa, 0x6, 0xdf, 0x1000}, {0x8, 0x401, 0x5d, 0x9}, {0xe, 0x80000000, 0x6, 0x8}, {0x80000001, 0xffffffff, 0xfffffffa, 0x6}, {0x1, 0x400, 0x3, 0x1}, {0x400, 0x7fffffff, 0x9, 0x5}, {0x81, 0x9, 0x2, 0x80}, {0x8001, 0x9, 0x2, 0x69150248}, {0x4, 0x7fffffff, 0x1, 0x8b}, {0x7fff, 0x3d3, 0x5, 0x80}, {0xc1, 0x8, 0x2d5, 0x2}, {0x5, 0x2, 0x1, 0x5}, {0x5, 0xd, 0x0, 0x4}, {0x9, 0x78d1, 0x6, 0x1000}, {0x7, 0x8, 0x8, 0x8}, {0x9, 0x7, 0xfffffff9, 0x10001}, {0x9, 0x3a3, 0x7, 0x100}, {0x4, 0x0, 0x1, 0x3800000}, {0xb, 0x80000001, 0x7fffffff}, {0x80000001, 0x101, 0x4, 0x10}, {0x8, 0x3a43, 0x2, 0x5}, {0x0, 0xb62, 0x7d6, 0x6d}, {0x4, 0x0, 0xd6, 0x1}, {0x1, 0x9, 0x2, 0x7}, {0x62, 0x85, 0x200, 0xfff}, {0x5, 0x7, 0x800, 0x5}, {0x3, 0xffffffff, 0x800, 0x4}, {0x6, 0xea9c, 0x8, 0x5}, {0x6, 0x8001, 0x3, 0x9}, {0x832, 0x3, 0xb, 0xffffffff}, {0xc553, 0x8, 0x6}, {0x2, 0x900000, 0x9, 0x22f4}, {0x6, 0x3, 0xb2a6, 0xf}, {0x9, 0x3, 0x401, 0x7}, {0xf, 0xfff, 0x400, 0x2446}, {0x7, 0x6, 0x2, 0x6}, {0x4, 0x4, 0x5, 0x1}, {0x9, 0x8, 0x10, 0x10001}, {0x10, 0x4, 0x2, 0x3}, {0xc05, 0x7, 0x2}, {0xfffffffe, 0x6, 0x0, 0xb}, {0x6, 0x7, 0x5, 0x7}, {0x80000001, 0x6, 0x70000, 0x10}, {0xe, 0x9, 0x7}, {0x1, 0x39, 0x4, 0x5}, {0x902e, 0x4, 0x80, 0x3}, {0xffffffff, 0x3, 0xffffffff, 0xff}, {0x9f, 0x3, 0x7, 0x80000000}, {0xffff, 0x1, 0xfffffff9, 0x55}, {0x9, 0xfad, 0x83e, 0x7fff}, {0x3, 0xfff, 0x3, 0xffffff01}, {0x82, 0x79, 0x1}, {0x7, 0x8, 0x6, 0x7ff}, {0x80000000, 0x5, 0x7, 0x8}, {0x4, 0x100, 0xde, 0x8000}, {0xffffff81, 0x5, 0x6, 0x4}, {0x1, 0x1, 0x4, 0x5}, {0x8, 0x9, 0xd, 0x8fee}, {0x3, 0x8, 0x4, 0x7fffffff}, {0x5, 0x8, 0x2, 0x100}, {0x5, 0x3, 0x81, 0x1}, {0x7, 0x6, 0x3, 0xffffff00}, {0x7ff, 0x6, 0x2, 0x7}, {0x257, 0x8, 0x101, 0x8}, {0x0, 0x7, 0x51da, 0x101}, {0x62, 0x7, 0x5, 0x2}, {0x9, 0x8, 0x98, 0x1}, {0x49e, 0x2, 0x5, 0x5}, {0x1, 0x81, 0x8857, 0xf00}, {0x3, 0x4, 0xfff, 0x80000001}, {0x7, 0xd3, 0x4, 0x2}, {0x2, 0x6, 0x5, 0x9}, {0x1, 0xffff0000, 0x7, 0x8}, {0x7f, 0x5, 0x1556}, {0x7, 0x6, 0x8c58, 0x100}, {0x7, 0x49, 0x6, 0xc0}, {0x7, 0x7f, 0x8, 0x132b}, {0x1, 0x3, 0x4, 0xffffffff}, {0xc, 0x6, 0x4, 0x200}, {0x7c8, 0xffffc950, 0xc29, 0x1000}, {0x1, 0x5, 0x0, 0x9}, {0x3, 0x0, 0x6, 0x8}, {0x3ff, 0xffffffff, 0x5, 0x200}, {0x5, 0x400, 0x1, 0x9f2}, {0x2, 0x6088c7c5, 0x4, 0xfffffffc}, {0x800, 0x8, 0x8, 0x7}, {0xaa, 0x3, 0x5, 0x4}, {0xe, 0x9, 0x8, 0x3}, {0x6, 0xe3, 0x9, 0x8}, {0x3, 0x2, 0x82d3, 0x4}, {0x0, 0x9, 0x0, 0xb8}, {0xbe, 0x0, 0x9, 0x3}, {0xfff, 0x3, 0x2, 0x14ad2571}, {0x4, 0x0, 0x0, 0x8}, {0x4, 0x3, 0x8, 0x7f}, {0x236, 0x4, 0x80000000, 0xfffff000}, {0xff, 0x6, 0x3, 0x7f}, {0x5692, 0xffffc139, 0x7fffffff, 0x3}, {0x8000, 0x8, 0x9, 0x2}, {0xb, 0x3, 0x5, 0x2}, {0x40, 0x4, 0x1, 0x40}, {0x0, 0x9, 0x4, 0xc0000}, {0x50a, 0x4, 0x3, 0x8001}, {0x3ff, 0x1c, 0x9, 0x9}, {0x515b, 0x1000, 0x3, 0x5}, {0xd, 0x5, 0x7f, 0x8}, {0xa9, 0xd55, 0x57, 0xa}, {0x3, 0xffff, 0x6, 0xfffffffa}, {0xcd, 0xff, 0x7, 0x8}, {0x5, 0xfffffffd, 0x0, 0x100}, {0xbf48, 0x3, 0x3, 0x2d32}, {0x7ff, 0x5, 0xaa, 0x3}, {0x2, 0x1248, 0x2, 0x80}, {0x8, 0x6, 0x7}, {0x5, 0x7fffffff, 0x59, 0x3}, {0xbc2, 0x80000000, 0x80000001, 0x5}, {0x7, 0x3, 0xa4e7, 0x442}, {0x100, 0x9, 0x6, 0x7000}, {0x1, 0xfffffffc, 0x4020, 0xffff}, {0x38, 0xfffffff8, 0x4, 0x5}, {0x61f}, {0x9, 0x7, 0x3, 0xffffffff}, {0xd12e, 0xfffffff7, 0x6, 0xa}, {0x8, 0x8, 0x101, 0x32505e50}, {0x4, 0x101, 0x8}, {0x17, 0x7, 0xbc, 0x6}, {0x7fff, 0x8, 0xc1, 0x4}, {0x5, 0x7fff, 0x10, 0xffff}, {0x8, 0xc24d, 0x6, 0x10}, {0x3, 0x1, 0x4}, {0x4, 0x2e, 0x10001, 0x5}, {0xa, 0x0, 0x2, 0x4}, {0xc269, 0xffffff6d, 0x401, 0xf5b}, {0x4, 0x5, 0x200, 0x2}, {0xffffffff, 0x0, 0xff, 0x400}, {0x1ff, 0x2, 0x0, 0x7}, {0x8, 0x2, 0x8001, 0xa370}, {0x1, 0x9, 0x1800, 0x2}, {0x0, 0x7, 0x1000, 0xbbb3956}, {0xfffffffa, 0x5, 0x6, 0x101}, {0x9, 0x5, 0x12c, 0xa}, {0x2, 0x8, 0x2, 0x8}, {0x3d, 0x7, 0x3, 0x7fffffff}, {0x3b6, 0x3, 0x3ff, 0xfffffffb}, {0x9a0, 0x8, 0x3, 0x16}, {0x6, 0x0, 0xfffffff8, 0x1}, {0x3, 0x692, 0x800, 0x7c74}, {0x0, 0x894, 0x2, 0x3ff}, {0xe, 0x7, 0x9, 0x400}, {0x5, 0x9, 0xcdf, 0xffff}, {0x6, 0xa, 0x8, 0x3}, {0x4, 0x9, 0x473, 0x9}, {0x3, 0xfffffffd, 0x0, 0x6028c8e2}, {0x3, 0x0, 0x9, 0x32}, {0x8, 0xf79d, 0x7a, 0x100}, {0x4ab5, 0x10001, 0x40, 0xc062}, {0x9, 0x9, 0xff, 0x200}, {0xfffffff7, 0x80000000, 0x6880, 0xfffffffc}, {0x202e, 0x10000, 0xb, 0x4}, {0x4, 0x7ff, 0x2d, 0x6}, {0xedee, 0x10000, 0x4, 0x10000}, {0x7, 0x1, 0x8, 0x8}, {0xfffffffb, 0x8, 0x8, 0x80000000}, {0x6cb, 0x8, 0x3, 0x6}, {0x5, 0xfffffffb, 0xb, 0x81}, {0xf6, 0x9, 0x5, 0x5}, {0xa5a, 0x4, 0x7, 0x1a}, {0x3, 0x4, 0x5}, {0x1, 0x3ff, 0x8, 0x5}, {0x6, 0xffffffff, 0x9, 0xe6}, {0xfffffff8, 0xfffffffa, 0xffffff15, 0x101}, {0xabb, 0x81, 0x2, 0x9b}, {0x4, 0x2, 0x7, 0x81}, {0x1, 0x11, 0x4, 0x5}, {0x9, 0x3, 0x6, 0x5aa}, {0x8, 0xc7d, 0x1ff, 0xe440}, {0xa, 0x6, 0x7}, {0xfffffc01, 0x0, 0x8, 0xa3}, {0x28000000, 0x7, 0x6, 0x9}, {0x6, 0x5, 0x85, 0x7}, {0x80, 0xe089, 0x2}, {0x81, 0xcc05, 0x2, 0x5}, {0x2, 0x2ecf, 0x26d85a4b, 0x3}, {0x8, 0x0, 0xff, 0x4}, {0x2, 0xd848, 0x81, 0x6}, {0x7, 0x1000, 0xff, 0x6}, {0x8000, 0x65aadb0, 0x4, 0x8}, {0xfffffffb, 0x5, 0x5, 0x5}, {0x9, 0xf8000000, 0x504f, 0x9}, {0x800000, 0x80000000}, {0x7, 0x2d0d8eec, 0x3, 0x1}, {0x3, 0x5, 0x3, 0x6}, {0x75, 0x6d2, 0x7fffffff, 0xdc4e}, {0x18, 0x8, 0x3de0, 0xb}, {0xc7, 0x7fffffff, 0x7, 0x6}, {0xe80f, 0x8, 0x8000, 0x1}, {0x4, 0xe2c3, 0x4, 0xfffffff7}, {0x6, 0x0, 0x0, 0x2d}, {0xf9, 0xd, 0x400, 0x8}, {0x1000, 0x3, 0x2}, {0x4bb80, 0x6, 0x400, 0x105}, {0x80000000, 0x8, 0x0, 0x4}, {0x8, 0x1, 0x1, 0x6}, {0x0, 0x40, 0x6, 0x1000}, {0x5, 0x1506, 0x9, 0x1}, {0x6, 0xb1, 0x0, 0xc97}, {0x8, 0x26503f80, 0x8, 0x5}, {0x8001, 0x6, 0x2, 0x3}, {0x8, 0xc, 0x0, 0x7fff}, {0xf0, 0x6, 0x2abd6290, 0x6}, {0x9, 0x81, 0x3, 0x5}, {0x8001, 0x7, 0xfffffffd, 0x6}, {0xb3, 0x3592, 0x2, 0x3}, {0x3, 0x1ff, 0xb, 0x2}, {0x7fff, 0x7, 0x9, 0xffffffff}, {0x0, 0x9, 0xff, 0xff}, {0x1, 0x6, 0x4, 0x4}, {0x5, 0x7fff, 0x1, 0x3}, {0x38fd, 0x3, 0x0, 0x7}, {0x7, 0xfffffffc, 0x80, 0xa7}, {0x3, 0x8, 0x4, 0x3}, {0x7, 0x4, 0x5, 0x8}, {0x3, 0x3ff, 0x6, 0x3a5791bb}, {0xb, 0x7, 0x7, 0x2}, {0x8, 0xdb1, 0x1, 0x8}, {0x5, 0x85f3, 0x9, 0x6}, {0xfff, 0xd19, 0x933, 0x1}, {0x9, 0x3, 0x4, 0xcef3}, {0x1, 0x9, 0x5, 0x2}, {0x80000000, 0x2, 0xdb, 0xfffffffa}, {0x726b91a3, 0x1, 0xf8e, 0x5}, {0x6, 0x3, 0x4, 0x6}, {0xe77, 0x4621, 0x2, 0x8}, {0x1, 0x20000000, 0x4, 0x10001}, {0xffffffa1, 0x6, 0x8, 0x2}, {0xe09, 0x1ff, 0x3, 0x5}, {0x4, 0x8, 0x6}, {0x3, 0x8000, 0x4, 0x42}, {0x1ff, 0x2, 0xf, 0x9}, {0x7, 0x0, 0x81c9, 0x3}, {0x10001, 0x4, 0x0, 0x1}, {0x1, 0x1c, 0x7, 0x9}, {0x6, 0x0, 0x7f, 0x8}, {0x1000, 0x101, 0x80000001, 0x401}, {0x4, 0x68, 0x81, 0x5}, {0x0, 0x1d1, 0x2, 0x6}, {0x10, 0x8, 0x0, 0x6}, {0x0, 0x4, 0xc, 0x7ff}, {0xee8f548, 0x200, 0x9}, {0x8, 0x40, 0x4000000, 0xfa}, {0x7, 0x81, 0xffffff00, 0x9}, {0x3, 0xffff, 0x0, 0x3}, {0x1, 0xffffffff, 0xfffff800, 0x8001}, {0xb99e, 0xfffffffc, 0x1}, {0x77, 0x1, 0x4, 0x7}, {0x101, 0xcb7, 0x1, 0x54}, {0x4, 0x8, 0x81, 0xe33}, {0x8dad, 0xe, 0x4, 0x6}, {0xffffff00, 0xaf, 0x0, 0xa}, {0xf, 0x7, 0x7, 0x7}, {0xdf, 0x1, 0x8, 0x4}, {0x3, 0x8, 0x6, 0x3}, {0x1000000, 0xc3, 0x5, 0xffffffff}, {0x2, 0x9, 0x9, 0x4}, {0x9, 0x2, 0x2, 0x1}, {0xe84, 0x3, 0x7, 0xfffffff0}, {0x2, 0x5, 0x1ff, 0x9}, {0x1, 0xff, 0xff, 0x5}, {0x49, 0x9, 0x3, 0xffffffff}, {0x3c, 0x0, 0x3ff, 0x8}, {0x3, 0x7, 0x6, 0x9}, {0xc, 0x3, 0x3, 0x29}, {0x5, 0x2, 0x7ff, 0x7ff}, {0x9, 0x1, 0xd733, 0x7}, {0x101, 0x3, 0xfffffffe, 0x7fffffff}, {0x4, 0xffffffff, 0x10001, 0xa6}, {0x80, 0x1e6, 0x2d, 0x2}, {0x10, 0x80, 0xffffffff, 0xffffecdf}, {0x4, 0xb, 0x6, 0x9}, {0x400, 0x7, 0x8, 0x8}, {0x3, 0x3, 0x3, 0x6}, {0x8, 0x2, 0x100, 0x7}, {0x2, 0xffff, 0x80000000, 0xfc7}, {0x7, 0x9, 0x6, 0x2}, {0x8001, 0x6, 0x0, 0x7ccd}, {0x125, 0x371, 0x8, 0x7f}, {0xb1f, 0x80000001, 0x6, 0x5}, {0x1, 0x2ff5, 0x7, 0x6}, {0x400, 0x3, 0x2, 0xff000000}, {0x0, 0x800, 0xe8f2}, {0xee9, 0xfb, 0x0, 0xff}, {0xffff, 0xd, 0x5, 0x5}, {0x9, 0x0, 0x7, 0x5}, {0xfffffbff, 0xd74, 0x970, 0x8}, {0x4, 0xa50, 0xc, 0x9}, {0x6, 0x2}, {0xffffffff, 0x1, 0xc, 0x3}, {0x0, 0x5, 0x0, 0x1}, {0x3, 0x2, 0x9, 0x2}, {0x4, 0x7bd, 0x50, 0x5}, {0x7, 0x2, 0x4, 0x52be}, {0x7, 0x7ff, 0x2, 0x6e}, {0x3, 0x10, 0x2, 0x1}, {0x3, 0x81, 0x939, 0x5}, {0x6, 0x1, 0x3a37, 0x9}, {0x6, 0x8, 0x9d}, {0x7, 0xe9, 0x80000001, 0x2}, {0x1, 0x4, 0xcb5c, 0x1}, {0x8, 0xc, 0x0, 0x4}, {0x5, 0x4, 0x2, 0x8}, {0x6, 0x10001, 0x5af, 0x8}, {0x9, 0xf49, 0x7, 0x80000001}, {0x7, 0x5, 0x9, 0x9}, {0x9, 0x1000, 0x81, 0x5}, {0x1ff, 0x5, 0x3ff, 0x81}, {0x18, 0x8, 0x2, 0xfffffff7}, {0x7fff, 0x7, 0xb, 0x6}, {0x1, 0x4, 0x9, 0x77c0436e}, {0x8, 0x3, 0x6, 0xfffffe00}, {0x506c, 0x4, 0xc, 0x9}, {0x3, 0x4, 0x4, 0x3}, {0x1, 0xa12c, 0x2, 0x5}, {0x0, 0x80, 0x5011, 0x6}, {0x10001, 0xfffffff9, 0x8, 0xe50}, {0x0, 0x1, 0xd, 0x5}, {0x3, 0x10, 0x4, 0x3}, {0x7fffffff, 0xa8, 0x70, 0xfffffff8}, {0x10000, 0x0, 0x3, 0xc8}, {0x9, 0x4, 0xfff, 0xfff}, {0x664, 0x8, 0xfff, 0x5}, {0x4, 0x6, 0xffffffff, 0x226ca766}, {0x3, 0x9, 0x6, 0xe335}, {0x80, 0x401, 0x6, 0x4}, {0x200, 0x5, 0x4, 0xfffffff8}, {0x5, 0x5, 0x4, 0x8}, {0x4, 0x5, 0x2, 0x2}, {0xfffff0a0, 0x3, 0x6, 0xffff}, {0xffffffff, 0xffff5630, 0x0, 0xcc}, {0x4, 0x9, 0xffff, 0xdc94}, {0x1a0, 0xbafd, 0x83, 0x6}, {0x3622, 0x8, 0x2, 0x401}, {0x3, 0x9, 0x8, 0x9b2a}, {0xfffffffe, 0x7, 0x8f39, 0x8}, {0x1, 0x40, 0x5, 0x2}, {0xbc3, 0x2, 0x7}, {0xe, 0x800000, 0x4, 0x5}, {0x10, 0x10100, 0x74, 0x1000}, {0xc5, 0x5, 0x1, 0x7}, {0x0, 0x7, 0x8, 0x2}, {0x9, 0x8, 0x0, 0x5}, {0xff, 0x4, 0x9, 0x5}, {0x3, 0x1, 0xa2e}, {0x5ecf, 0x8, 0x29, 0x10}, {0x8, 0x9, 0x6, 0xfffffff6}, {0x4, 0x0, 0xe, 0x8}, {0x1f0, 0x0, 0x5, 0x80000000}, {0x9, 0x1, 0x6, 0x5}, {0x4, 0xffff, 0x3, 0x2}, {0x7, 0x7, 0x0, 0x1}, {0xfff, 0x6, 0x6, 0x2}, {0xffff, 0xa770, 0x3, 0x367}, {0x45e9, 0x5, 0x0, 0x3ff}, {0x7ff, 0x2, 0x6, 0x8}, {0xef, 0x7, 0x4059}, {0x0, 0x8, 0x1, 0x10}, {0xfffffffc, 0x4b2a729d, 0x0, 0x4}, {0x6, 0x4, 0x1, 0x2}, {0xdcaf, 0xfefc, 0x6, 0x2}, {0x4, 0x6, 0x42, 0x10000}, {0xe, 0x8, 0xfff, 0x80000000}, {0x4, 0x0, 0x6460, 0x8001}, {0x2, 0xffffffb6, 0xffffffff, 0x2}, {0xffffffff, 0x10001, 0x9, 0x800}, {0xd5, 0x9a4, 0x0, 0x4}, {0xa, 0x27, 0x3, 0x9}, {0x0, 0x8, 0xffffff09, 0x80000001}, {0x5, 0x3, 0x8, 0x802}, {0x101, 0x2, 0x8}, {0x5, 0x8, 0x7, 0x5}, {0x101, 0x3496, 0x5, 0x10}, {0xfffffff8, 0x200, 0x7, 0x6}, {0x5, 0xff, 0x80000000, 0x6}, {0xfffffffa, 0x80000000, 0x8, 0x2}, {0x1, 0x7, 0x5, 0x14}, {0xba, 0x3, 0x2ad6, 0x6}, {0x0, 0x919d, 0x9, 0x4}, {0xb, 0x1, 0x80000001, 0x5}, {0xb1, 0x7d2b, 0x2, 0x7fff}, {0xfff, 0x7ff, 0x4, 0x1}, {0x3, 0x4b0e, 0xffffffff, 0x7}, {0xfffffff8, 0x3, 0x7b8, 0x3}, {0xfffffff8, 0x4, 0x5e9, 0x1e7}, {0x2, 0x4, 0x1, 0x4}, {0x8, 0x7, 0x10000}, {0x0, 0x0, 0x4, 0x9}, {0xfffffcbe, 0xb5cc, 0xfffffff9, 0xffffffff}, {0x2be, 0x8000, 0x5, 0x1}, {0x7c2793c9, 0x7, 0xc261, 0x1}, {0x7, 0xfffffffd, 0xc2}, {0x100, 0xda40, 0x0, 0x5}, {0x1, 0x7, 0x80, 0x4}, {0x30811cea, 0x7, 0x1ff, 0x3}, {0xd3600, 0x3, 0x80000001}, {0x24a2, 0xff, 0x5, 0x7f26}, {0x9, 0x57, 0x1, 0x6}, {0x1, 0x81, 0x4000000}, {0x3, 0x1, 0xd, 0x630}, {0x9, 0x80, 0x1, 0x7}, {0x9, 0x8, 0x8000, 0x8}, {0xec, 0xd, 0x3, 0xcb}, {0x5, 0x6, 0x4}, {0x7, 0x9, 0x4, 0x5d09}, {0x3, 0x7, 0x9, 0x27f2}, {0x6, 0xff, 0xa, 0x3d4}, {0x6, 0x2, 0x9e, 0x8}, {0x9, 0x8001, 0xc, 0xca0}, {0xe1a3, 0xb130, 0x42, 0xc}, {0x6, 0x8, 0x80, 0x4}, {0xfffffffe, 0xb4b, 0x9, 0x82fb}, {0xf25, 0x0, 0x2, 0xfffffff7}, {0x2, 0x9, 0x4, 0x200}, {0x4, 0x9, 0x4, 0x7}, {0x3ff, 0x6, 0x6, 0x93a}, {0xa, 0xfffffaf4, 0x0, 0xa76}, {0xe5c, 0x1, 0x8, 0xcaf}, {0x8d, 0x1, 0xa4, 0x400}, {0x8, 0x6, 0x7}, {0x2, 0x0, 0x1, 0x8}, {0x8, 0x7, 0x8000, 0xb0}, {0x102, 0xa3a7, 0x6, 0x9}, {0x800, 0x9, 0x2, 0x3870}, {0x1aa8, 0x81, 0x8, 0x6}, {0x7, 0x7, 0x8, 0x1000}, {0x6, 0x2, 0xffffffff, 0xa55f}, {0x3ff, 0x7fffffff, 0x4, 0x2}, {0xffffffff, 0xecab, 0x8, 0x8}, {0x29a, 0xea, 0x762e, 0x1ff}, {0x166edd85, 0x8, 0x0, 0x800}, {0x3, 0x5, 0x286, 0x4}, {0x1ff, 0xaf6, 0xe1, 0x7}, {0x0, 0x8, 0x1ff, 0xffffffcd}, {0x4, 0x9, 0xfffffff7, 0x8}, {0x0, 0x2, 0x7, 0x8}, {0x3, 0x39b, 0xfffffff5, 0x9}, {0x4, 0x5, 0x80, 0x14}, {0x20a, 0x9f, 0x7fff, 0x7fff}, {0x9, 0x3, 0x0, 0x8}, {0x0, 0x0, 0xffffff96, 0x18000}, {0x35b2, 0x7, 0x5, 0x3ff}, {0x1, 0x4b32, 0x9011, 0xcb6b}, {0x4, 0xffffffff, 0x5, 0x10000}, {0xfffffe01, 0x8, 0x90d6, 0x10001}, {0x0, 0x7, 0x3, 0x7f}, {0x4, 0x3, 0x101, 0x5}, {0x9, 0x4, 0x3, 0x7}, {0x8, 0xd, 0x2, 0x80000000}, {0x1, 0x8, 0xfffffc00}, {0x0, 0x0, 0x800000, 0x8}, {0xb1, 0xfffff710, 0x800, 0xff}, {0xe, 0x2, 0x8}, {0x2, 0x81, 0x7, 0x8}, {0x6, 0x3, 0x4, 0x2}, {0xcf7, 0x9, 0x1, 0x401}, {0x7, 0x835, 0x5}, {0x5, 0xab, 0x9, 0x8}, {0x7, 0x484, 0x0, 0x1ff}, {0x84c, 0x4000000, 0x2, 0x8001}, {0x31b, 0x101, 0xbbb, 0x5}, {0x8001, 0xd, 0x3, 0x1}, {0x9, 0x4, 0xe, 0xeca}, {0x0, 0x7, 0x6, 0x6}, {0xd, 0x9, 0x0, 0x6}, {0xffffffff, 0x80000001, 0xe19d, 0xd3d}, {0x8, 0x9, 0xca, 0x9}, {0x4, 0xc, 0x7, 0xc6}, {0xff, 0x1, 0x7, 0xd1c6}, {0x8, 0x6, 0x2, 0x4}, {0xb, 0x80000000, 0x54a3, 0x7}, {0x1d, 0xa3c, 0x101, 0x6}, {0x7, 0x6, 0x4, 0xeca}, {0x9, 0xfffffff7, 0x80000001, 0x10001}, {0x401, 0x3, 0x9, 0x8}, {0x5, 0x5, 0x9, 0x7}, {0x4, 0x2, 0x5, 0x2}, {0xfffffffc, 0x4, 0x66, 0x9}, {0xc1, 0x3, 0x8, 0x8}, {0x1, 0xb, 0xff, 0x8000}, {0xe798, 0x8, 0x81, 0x4}, {0x6, 0xffff, 0xffff0a57}, {0x0, 0x3, 0x7, 0x9}, {0x3, 0xd1, 0x3}, {0x4, 0xfff, 0x5, 0xb}, {0x5, 0x3, 0x7, 0x2}, {0x3, 0x3, 0x5, 0x8}, {0x10, 0xd9bf, 0x8a, 0x6}, {0x9, 0x5, 0x9, 0x9}, {0x80000000, 0xeb, 0x1, 0x8}, {0x6, 0xfffffff7, 0xc4a3, 0x9}, {0x2, 0x4, 0x9, 0x2}, {0x6, 0x9, 0x1, 0x2}, {0x8, 0x4, 0x101, 0x5}, {0xd48, 0xd71, 0xffffffff, 0x3ff}, {0x80000000, 0x6, 0x8, 0x3}, {0x7, 0x2, 0x5, 0xc}, {0x2800000, 0x0, 0x9, 0x3}, {0xffffffff, 0x0, 0x0, 0x7}, {0x4, 0x2, 0x4}, {0x842, 0x6, 0x7, 0x7}, {0x3, 0x4, 0x7, 0x80000001}, {0x9, 0x2, 0x9, 0x6}, {0xd3, 0xbf, 0x8, 0x400}, {0x7, 0x10, 0x1, 0xb}, {0x101, 0x7, 0x800, 0xfff}, {0x5, 0x3, 0x0, 0x9}, {0x200, 0x7, 0xea, 0x401}, {0xffffffff, 0x8, 0x1, 0x10000}, {0x6, 0x5, 0x3, 0x6}, {0x5, 0x3, 0x8001}, {0x2, 0x1, 0x2, 0x2}, {0x3, 0x7, 0x1ff, 0x3}, {0x5e, 0xa74, 0x6, 0x3}, {0x4, 0x3, 0x3, 0x6}, {0x0, 0x3, 0x7, 0x1000}, {0x7, 0x4, 0x8}, {0x4, 0x0, 0x7, 0x401}, {0x800, 0x5, 0x3, 0x8}, {0x6, 0x8, 0x3, 0x80000000}, {0x80000000, 0x9, 0x1, 0x5}, {0x10, 0x0, 0xffff0f84, 0x3}, {0x3, 0x0, 0x7}, {0x8001, 0x7, 0x9, 0x1}, {0x1ff, 0xb, 0x2, 0x2e}, {0x0, 0x3, 0x3, 0xb0e}, {0x5, 0xd, 0x9, 0x3}, {0x5, 0x2, 0x8001, 0x3}, {0x38a4, 0xf, 0x303b6af5, 0xfffffffe}, {0x0, 0x3, 0xffff, 0x8}, {0x8c90, 0xff4, 0x9}, {0x962, 0x40, 0x7, 0x9}, {0x3, 0x2b20d9ed, 0x101, 0x5}, {0xfffff801, 0x6, 0x1000, 0x9}, {0x5, 0x0, 0x8d, 0xe}, {0x7, 0x6, 0x5, 0xffff3b6f}, {0x2, 0xffff, 0x3, 0xc}, {0xfffffffc, 0x2, 0x0, 0xf28}, {0x4d, 0x2, 0x76}, {0x3ff, 0x80, 0x5, 0x10001}, {0x4, 0x731190a, 0x60, 0x2}, {0x7f, 0x80, 0x1, 0x4}, {0x8, 0x2, 0x1ff, 0x1}, {0x81, 0x8, 0x0, 0x80000001}, {0x2, 0x2, 0x6}, {0x2, 0x4, 0xffffff80, 0x9}, {0x0, 0x6, 0x2, 0x129fcb72}, {0x0, 0x4595, 0x3, 0x8}, {0x3, 0x43, 0x2, 0x27}, {0x1, 0xd4ba, 0xd, 0x4}, {0x6, 0x2, 0x4, 0x5ac5}, {0x6, 0xd, 0x9}, {0xfffffffe, 0x449, 0x7fffffff, 0xb676}, {0x1, 0x8d, 0x3ff, 0xa0}, {0x5, 0x101, 0x0, 0xf0d93cef}, {0xffff, 0x7f, 0x10, 0x3ff}, {0x10000, 0x8, 0x1ff, 0x80}, {0xfffffff8, 0x3, 0x2, 0x53dc8d57}, {0xfffff826, 0x1, 0x0, 0x5}, {0xf, 0x2, 0x400, 0x21}, {0x7, 0x0, 0x9, 0x80000000}, {0x5, 0x80, 0x4, 0x40}, {0x601, 0x3, 0x4, 0x7c34}, {0x7, 0x6, 0x8, 0x7}, {0xfffffffe, 0x79, 0x6, 0xffff0000}, {0x6, 0x1, 0x9, 0xd6}, {0xb17, 0x400, 0x92, 0x7}, {0x21, 0x2, 0x7, 0x10000}, {0x100, 0xb, 0x5, 0x6}, {0x2, 0x46f, 0x9, 0x9}, {0xf, 0xffff, 0x7, 0x4}, {0x4, 0x1000, 0x8, 0x6}, {0x7, 0x1000, 0x1, 0x4}, {0x80000001, 0x5, 0x2, 0x2}, {0x400, 0xb, 0x8, 0x9}, {0xffff0001, 0x2, 0x8000, 0x1ff}, {0x5, 0x7, 0x2, 0x3}, {0x6, 0xfff, 0x9, 0x2}, {0xbfab, 0x6, 0x7fffffff, 0x1ff}, {0x6f0, 0x7, 0x8, 0x8}, {0x7fff, 0x10040, 0x41, 0x7}, {0x1, 0x81, 0x3, 0xe78}, {0x3, 0x80, 0x81, 0x5}, {0x9, 0x4, 0xffffffff, 0x3}, {0x800, 0x6df9, 0x9, 0xf26}, {0x200, 0x7, 0x9d, 0x8}, {0xe, 0x14, 0x6, 0x80000000}, {0x10, 0x7, 0xf7d, 0x80000000}, {0x1, 0x3, 0xfffffffa, 0x7ff}, {0x3, 0x9d37, 0x3, 0xb0}, {0x2, 0x0, 0x2, 0x7}, {0x2, 0x2, 0x1}, {0x7, 0x8, 0x8}, {0x4, 0x3, 0x9, 0x10001}, {0xecf, 0x5296, 0x3, 0x90}, {0x2e, 0x9, 0x9, 0x6}, {0x2, 0xffffda99, 0xa, 0x80}, {0xffffffff, 0x3, 0x10}, {0x6, 0x400, 0xfffffff7, 0x6}, {0xae, 0x9, 0xc}, {0x48c, 0x7, 0x13a5, 0x2}, {0x96d1, 0xffffff11, 0x8000, 0xbbe}, {0xab0, 0x6, 0x4, 0xbc3f}, {0xfffffff8, 0xc6a5, 0xa2, 0x378}, {0x7, 0x1, 0xff, 0xe4000000}, {0xc6, 0x1, 0xfffffff8}, {0x8, 0x8001, 0x8000, 0x998}, {0x401, 0x3, 0x8, 0x8}, {0x9, 0xba, 0xfffeffff, 0x7}, {0x9, 0x0, 0x400, 0x9}, {0x3, 0x8, 0xb, 0xe}, {0x8, 0x9, 0xb, 0x6fee6f5f}, {0x5, 0x6, 0x1000, 0x47}, {0x9, 0x7, 0x9, 0x5}, {0x5, 0x10001, 0x2, 0x8}, {0x6, 0x2, 0x8, 0xfe00}, {0xc01, 0x7, 0xffffffff, 0x3}, {0x1, 0x3ff, 0x2, 0x1}, {0x8, 0x80, 0x2, 0x9}, {0x6, 0xf, 0x7, 0xf20}, {0xcd, 0x3, 0x6, 0x4}, {0x7f545341, 0x43ed, 0x5, 0x4}, {0x7, 0x8, 0x2, 0x2}, {0x1, 0x4, 0x76000000, 0x8b0f}, {0x8, 0x7c, 0x4, 0x1}, {0x3, 0x8, 0x1eb9, 0x6}, {0x3, 0x6, 0x200}, {0x3, 0x1, 0x4, 0x7fffffff}, {0x6, 0x3, 0x1ff, 0x5}, {0xf, 0x0, 0x100, 0x34b16ee}, {0xe, 0x5, 0x7166}, {0x3, 0xffffffff, 0x6, 0xbf}, {0xe, 0x7, 0xff, 0x7}, {0x7db, 0x2, 0x3, 0x86f}, {0x0, 0xa, 0x7fff, 0x7}, {0x2, 0x3ff, 0x3, 0x8001}, {0x0, 0xfffff6f9, 0x3, 0x3}, {0x40, 0x4, 0x6be0}, {0x4, 0x4, 0xffff2083, 0xff}]}, 0x3453) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000004740)={@private1, 0x0}, &(0x7f0000004780)=0x14) sendmsg$nl_route(r3, &(0x7f0000004840)={&(0x7f0000004700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004800)={&(0x7f00000047c0)=@getstats={0x1c, 0x5e, 0x800, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, 0x4}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x24000000) write$P9_RXATTRWALK(r3, &(0x7f0000004880)={0xf, 0x1f, 0x1, 0x9}, 0xf) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000048c0)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@empty}}, &(0x7f00000049c0)=0xe8) quotactl_fd$Q_QUOTAOFF(r8, 0xffffffff80000300, r10, 0x0) 24.492164596s ago: executing program 1 (id=3110): socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000002300)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) (async, rerun: 32) umount2(&(0x7f00000000c0)='./file0\x00', 0x4) (async, rerun: 32) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) (async) sendmmsg$inet6(r1, &(0x7f00000010c0)=[{{&(0x7f0000000680)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c, 0x0}}], 0x1, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000004a00010000000000000000000a0080", @ANYRES64], 0x30}}, 0x0) (async) umount2(&(0x7f0000000080)='./file0\x00', 0x4) (async, rerun: 32) r3 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) (rerun: 32) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f0000000000)={0x1, 0x2}) (async, rerun: 64) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async, rerun: 64) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) (async, rerun: 32) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r4], 0x20}}, 0x0) (async) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x4c, 0x14, 0x511, 0x0, 0x0, {0x2b, 0x0, 0x0, 0x1, {0x4e22, 0x0, [], [0x0, 0x0, 0x0, 0x3]}, 0x4}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8004) 24.458214406s ago: executing program 1 (id=3112): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0xa) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x1934071, &(0x7f0000000340)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) 21.178173982s ago: executing program 1 (id=3117): r0 = add_key$user(&(0x7f0000000080), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000200)='\x00', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r1, r0}, &(0x7f0000000240)=""/54, 0x36, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000140)=0x0) getgroups(0x4, &(0x7f0000000180)=[0x0, 0xee00, 0xee00, 0xee01]) keyctl$chown(0x4, r1, r2, r3) syz_clone3(&(0x7f0000000080)={0x2001080, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 21.052024815s ago: executing program 39 (id=3117): r0 = add_key$user(&(0x7f0000000080), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000200)='\x00', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r1, r0}, &(0x7f0000000240)=""/54, 0x36, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000140)=0x0) getgroups(0x4, &(0x7f0000000180)=[0x0, 0xee00, 0xee00, 0xee01]) keyctl$chown(0x4, r1, r2, r3) syz_clone3(&(0x7f0000000080)={0x2001080, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 5.579495314s ago: executing program 2 (id=3222): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "5ccc4d7e83cf2134148d201d1a5ec3c278ab1d7a5f46bd8423f0dea408817bad", "146d2e1133e7bc1a4f3a3b06e63746c47c7f68d7e3d6b785795fdc68d94c0b4a", "f203b1df578bfd30116a43e42d764d9de85464edfadef5f4039622b74b035f4e", "151dc9949e69c4fd2a112a36c00b330695aaca7b9e25a645d59f984dfbfbcaa1", "83b587777a177887fc343eecf537d7ba5b0208f283a8438c690e95c9dd673137", "acf065ec5a148b6fd797a58f", 0x5, 0x9, 0x9, 0x1, 0x1}}) r1 = socket$nl_route(0x10, 0x3, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000002800)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x14, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003"], 0xd8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240), 0x10200, 0x0) ioctl$UI_SET_PROPBIT(r7, 0x4004556e, 0x12) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000300), 0x4) setsockopt$inet6_tcp_int(r6, 0x11a, 0x3, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x20590e85}}]}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21c0}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x3c}}, 0x0) 4.104036697s ago: executing program 2 (id=3229): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/10], 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 1.761433953s ago: executing program 8 (id=3256): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0x927c0}) 1.758247967s ago: executing program 8 (id=3258): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') (fail_nth: 1) 1.479516156s ago: executing program 8 (id=3261): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xa2}]}}]}, 0x3c}}, 0x20004055) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.479269528s ago: executing program 8 (id=3263): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffffffff, 0xfffffffc, 0x0, 0x0, 0xffffffff}, 0x20001, 0x0, 0x4000007, 0x8, 0x101, 0x14, 0x0, 0x0, 0x0, 0x2000, {0x1, 0xed, 0x0, 0x0, 0x5}}}}]}, 0x78}}, 0x4080) 1.470498248s ago: executing program 6 (id=3264): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000002c0)={0x38, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfff}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x54, r2, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @none}, &(0x7f0000000440)=0xe, 0x80800) sendmmsg$inet(r3, &(0x7f0000000d00)=[{{&(0x7f00000004c0)={0x2, 0x8, @local}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000500)="fef96c2bf1dcc8ba2e20705edcc0f50442d270072283257d2d73d6d8980c7a84394b49127668a68778e401f1d5c1ff632c045b5d0e8b6014b9034f0d47f4a844dfdde1a86a7c49d0e8c9d038811afcf8b5e7b534e806d1258f6c777c111abc68b48ddcc5f5775d8e7867701c1909c143b15e", 0x72}, {&(0x7f0000000580)="fc7eb9ef8ca033d310651024c0fbd7298dbc7b72b1a74c8aef9da6690f622ad1959e0ff4e7ab666ada33f9ec9097b5c494ff3a7474", 0x35}, {&(0x7f0000000640)="7b180f825812a0dac8c9952f4f6d10a08ec961d08fc507bce17198fcb07975a21ee5d8e7720d3a088f03c175e02d5bd53d53515ea62b346b77cc26221289d853a3c3a732175894e8732fa4833d98e1708939902be921719e60188897125c13ec27b27e0b98909587ff773cd66a2ab4774c8f207166cb72d4cf51729adc48782ebbec", 0x82}, {&(0x7f0000000700)="af10b66a43c5fbaa97a5c5c669151b5ae0b113a88761a093a1ed401128b5cd9811a795e504d5b1f3e6406cf24c9081ef311a93ccb203a5b81e375a676cd038c1cb07ca29eaf0e51412f1a247c1a9ce272b6a4e48935a4153e43795a3c59a5806ab86376d9ae892a74057c9798a05052448355bad89d6b7de2eaf12cc82e86b2551aeb8a8544b8682e0a6ba440f1f44c7c23ae8b94e266ccb8a061eef353e79257e5bd83b19b1d1a51e4ab17e8ebf83a081ba5c26a0a8b3f90c0ff1168b04b99b0d0f6ccf4e0780cecde5f5b923ead3662ea8a797c415d9dc9faff7d7575099a683860166bfe6b5d8a3e1", 0xea}, {&(0x7f0000000800)="7f8932d357dfa44c1f598e0ef35d46f78f9f62ecf1d52db4574fc5d786849e005486a1cebc4a7d98c852abe349446a9d70c8fb2394317f4356074415f689ec8326ae39c402845e9f32f62251c20162f78e63f2f7549eb84ae0777b90b643d5eca61b81d3426f70b062d5e606e8b2a1aaedad2a8539f6ae5c4c5e91602b2b3ee8a5773aae1603813e83b162e0c272c6713fedbb5830", 0x95}, {&(0x7f00000009c0)="18432f5b40c9ce34377647ea46251636cdb2f79ff9b07b88c17e8d14f73666723db30dfe5e16830059fe74fca7e995b68b6378f2a83a4f24f7cee5cb534ffa3594905f6076ea251078945050d2a36b09c27b885850610ec9a543e6060970702cf46446ec3f3ec03927e05fae406872ffbc962e4e4600ebc67df1966cdbe6e366c2ff87eae431b1975636ca965768a253d76ad99e2a294845326cde36b6307a211c05eb8c53d37dfbc859e96dc2f54a07db686457011e3c6b8fbf3fce4c02fb9a759d20d6c90f908368f52e64cb24f02be5bcc0", 0xd3}], 0x6, &(0x7f0000000ac0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x37}}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@end, @timestamp_addr={0x44, 0x24, 0xf5, 0x1, 0x3, [{@multicast2, 0x8}, {@empty, 0x5}, {@loopback, 0x400}, {@local, 0x9}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x104, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0x4b, 0x3, 0x8, [{@loopback, 0x5}, {@rand_addr=0x64010101, 0xfffffffa}, {@private=0xa010100, 0x7ff}, {@multicast2, 0x6}]}, @lsrr={0x83, 0x2b, 0x2a, [@remote, @multicast1, @local, @multicast1, @multicast1, @private=0xa010100, @rand_addr=0x64010102, @multicast2, @multicast2, @multicast1]}, @timestamp_prespec={0x44, 0xc, 0xb3, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x41}, 0x9}]}, @cipso={0x86, 0x69, 0xffffffffffffffff, [{0x6, 0xf, "7350c801868c19bc0c97dcfbbd"}, {0x7, 0x8, "b7aad4a537bf"}, {0x2, 0xc, "832b2acd956fdd706f28"}, {0x6, 0x3, "ef"}, {0x5, 0x3, "f1"}, {0x0, 0x6, "0f072023"}, {0x2, 0xf, "b7d0364b8b7fc26c220d1726d4"}, {0x2, 0xd, "7aa2ee038c65a39b3a4d11"}, {0x6, 0x10, "e5277374a448cda7f46219aa8b94"}, {0x4, 0x8, "9ae3ea60d281"}]}, @rr={0x7, 0x2b, 0x59, [@multicast1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @rand_addr=0x64010100, @remote, @multicast2, @private=0xa010102, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x41}]}, @ra={0x94, 0x4}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2800000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x1a8}}, {{&(0x7f00000005c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000c80)="535db34fe9867930e9c6a0c3371b1c781d8381010b3549a142157d6e2f79255cfe8720a2adf275ff9fa5f74e7ae9f442e4e4da446452adf41d1dd8e22870c7ea02534749b631ad8b2d", 0x49}], 0x1}}], 0x2, 0x4001011) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r6, 0x4068aea3, &(0x7f0000000180)={0xdf, 0x0, 0x8000}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x8}, {0xe, 0xffff}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000340)={[0x2, 0x1, 0x0, 0x40, 0x0, 0x0, 0x1, 0xb44, 0x8, 0x100, 0x7, 0x7, 0x8, 0x10, 0x7, 0x2], 0x11117002, 0x400}) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001080)="d8000000180001004e81f782db4cb904021d0800fe007c05e8fe55a10a0012000200142603600e12080005000000000001000000e00002400500fa7c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee50150305870ca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd64fa1dba9bfe4edef3d93452a92954b43", 0xd8}, {&(0x7f0000000000)="aa3518c8f26a9b7e3493f9168c8cc1c0e85e4f4a5c5c76b39f7c193469a19042b60c5a0716e48088879e267b03d798450826baccea7ea13e46a6231699f99b5033e7054d133493a8f6df01081545e524482c2a394b126e917e54da98cddf52b0027a4f32ce41d007dafc14eb88b1aa95660213db952375246e95f2b27dd19c9f3aaacfb8e99b6a0c30b1556ab89e9a6fb17bd9621139e369c8b40df232047511235e412d6c95f5adf3b936577c82e1db633b", 0xb2}], 0x2, 0x0, 0xffffffffffffffce}, 0x24048800) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/226, 0xe2, 0x7fffffff) ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="02000000"], 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.465366155s ago: executing program 8 (id=3265): syz_emit_ethernet(0x3e, &(0x7f0000003740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x6308}}}}}}, 0x0) 1.465261612s ago: executing program 8 (id=3266): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_emit_ethernet(0x1f, &(0x7f0000001100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="e955f5ea6ade", @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, '/', "a74338", 0x88e7, "840f767ab0bdfcb9cc"}}}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) 1.376415113s ago: executing program 6 (id=3268): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x6e, 0x85, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) (async) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x1, 0xa, 0xb, '\x00', 0x7}) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000100)={{0x0, 0x1, 0x12000000, 0x2, 0x3}, 0x9, 0x5, 0x4}) (async) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$CDROM_LOCKDOOR(r4, 0x5329, 0x0) (async) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0xe6, 0x561, 0x1a0000, 0x4, 0xffffffffffffffff, 0x1000000000007, 0x9, 0x27ff, 0x4, 0xb4, 0x5, 0x8, 0xa, 0x40, 0xc976, 0x6], 0x2, 0x120200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.323950499s ago: executing program 6 (id=3270): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') (fail_nth: 2) 1.234011364s ago: executing program 6 (id=3273): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r1, 0x1, 0xf, 0x6, @multicast}, 0x14) (async) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x2800) (async) sendto$packet(r0, &(0x7f0000000180)="0b0312002e1264000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14) 1.152221056s ago: executing program 6 (id=3276): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000ffdbdf250a0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800130002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x45}, 0x8014) socket$tipc(0x1e, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000001740)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r2, &(0x7f0000000380)={0x28, 0x0, r3, {{0x7, 0x7fffffffffffffff, 0x2}}}, 0x28) statx(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1000, 0x4, &(0x7f0000000500)) 864.063107ms ago: executing program 2 (id=3277): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008031, 0xffffffffffffffff, 0x78477000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3006, 0x41d0}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}]}, 0x28}}, 0x40) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x8, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00009ba000/0x1000)=nil) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00'], 0x79) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) futex_waitv(&(0x7f0000000d80)=[{0x1, 0x0, 0x4}], 0x1, 0x0, 0x0, 0x1) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 628.415671ms ago: executing program 7 (id=3279): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000000c0)={r0, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x11, "339f020bbe82b39800000000a50a4b8300000d0ec0c1cfcbb1c4369d03740250ceaac594f1b3d741dd17c1c50d1aef2a565ef1e83323691c58d6651c00", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200", [0x0, 0x2000000000000]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') 564.322672ms ago: executing program 7 (id=3280): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000200)={0xc1, 0x0, 0x2}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f00000000c0)={0xee, 0x7, 0x3146, 0x5, 0xaae7}) r3 = socket$inet6(0xa, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4}) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r9, 0x8010500c, &(0x7f0000000400)) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr=0x64010100, 0x0, 0x4, 'lblcr\x00', 0x0, 0xfffffff8}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r8, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f00000001c0)={{0xa, 0x4e24, 0x101, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, {0xa, 0x4e24, 0x80000001, @private0, 0x3}, 0x1, {[0x200, 0x5, 0x4, 0x5, 0x8, 0x2, 0x39, 0x1]}}, 0x5c) ioctl$KVM_CAP_X86_GUEST_MODE(r6, 0x4068aea3, &(0x7f0000000000)) keyctl$invalidate(0x15, r5) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101042, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000640)={0x1, @win={{0xffffff7f, 0x9, 0x100, 0xd1c6}, 0x1, 0x6, &(0x7f00000003c0)={{0x2, 0x2, 0x62, 0x4}, &(0x7f00000002c0)={{0x3, 0x7, 0x9, 0x1}, &(0x7f0000000240)={{0x3, 0x6, 0xb5f, 0x9}}}}, 0x40, &(0x7f0000000400)="e51e44b973945496873d7643b2e799866ff9633acc8e2c2c34b1d6fc3a", 0x3}}) unlink(&(0x7f0000000040)='.\x00') sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="54010000100033060000000000000000ffffffff000000000000000000000000e00000020000e0ff00000000000000000000000000000000000000a02c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a", @ANYRES8=r3], 0x154}}, 0x0) 448.656031ms ago: executing program 2 (id=3281): r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4008041) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) (async) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r3, 0xfff) dup3(r3, r2, 0x80000) (async) r4 = dup3(r3, r2, 0x80000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073597a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c00014000000000000000002c0001800a0001006c696d69740000001c0002800c00024000000000100000000c0001"], 0x110}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) close_range(r1, 0xffffffffffffffff, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) 428.541234ms ago: executing program 2 (id=3282): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') (fail_nth: 3) 156.705344ms ago: executing program 2 (id=3283): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) r1 = syz_open_dev$sndpcmc(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x80984120, &(0x7f0000000080)) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, '\x00', @bt={0x7d59, 0x3, 0x3, 0x324, 0x9e, 0x4, 0x19, 0x8}}) (async) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000000200)={0x1, [{0x2, 0x68, 0x10d, &(0x7f0000000000)="7a39697893002773dcd386c7d1"}, {0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x0, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x1, 0x0, 0x5d, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x0, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x80000000, 0x0}, {0x3, 0x0, 0xa, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7ffdffff, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ppoll(&(0x7f00000000c0)=[{r0, 0x7040}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 155.643345ms ago: executing program 7 (id=3284): setresgid(0xee00, 0xee01, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = io_uring_setup(0x7939, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x1, 0x215}) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r3}, 0x3f) recvfrom(r3, &(0x7f00000004c0)=""/186, 0xba, 0x10021, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x20, r4, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048885}, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) 155.344193ms ago: executing program 6 (id=3285): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/10], 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 138.614973ms ago: executing program 7 (id=3286): ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='.\x00', &(0x7f0000000200)='ocfs2\x00', 0x200800, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000015000100fcfffffffcdbdf350f"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 21.996604ms ago: executing program 7 (id=3287): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') 0s ago: executing program 7 (id=3288): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x4, 0x0}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f00000000c0)={0x0, r3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='6'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x40, 0x20, 0x200, 0x4, {{0x8, 0x4, 0x1, 0x8, 0x20, 0x65, 0x0, 0x8, 0x29, 0x0, @local, @broadcast, {[@timestamp_prespec={0x44, 0xc, 0x4e, 0x3, 0x2, [{@broadcast, 0x8}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x994, 0xfffffff9, {{0x14, 0x4, 0x0, 0x7, 0x50, 0x68, 0x0, 0x5, 0x0, 0x0, @multicast2, @local, {[@timestamp_addr={0x44, 0x1c, 0x85, 0x1, 0x4, [{@multicast2, 0x4}, {@private=0xa010102, 0x80000001}, {@multicast2, 0x4}]}, @noop, @timestamp_addr={0x44, 0x1c, 0x6c, 0x1, 0xb, [{@broadcast, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x48406402}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=@RTM_NEWMDB={0x98, 0x54, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x0, 0x3, {@in6_addr=@private1}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x6, 0x1, {@ip4=@broadcast}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x2, 0x3, {@in6_addr=@mcast1, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x1, 0x1, {@ip4=@private=0xa010100}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000800}, 0x40001) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280), 0x0, 0x5, 0x0, 0x0, r2}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="380100001a0013070000000010000000000000000000000001fe0200000000000000000000000000426e2100"/57, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414350000000000000000000000000000000032000000ffffffff0000000000000000000000000000000000000000fcffffffffffffff030000000000000000000000000000000020000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000030000000a000500000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}}, 0x0) kernel console output (not intermixed with test programs): aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 281.205108][ T6663] usb 11-1: new high-speed USB device number 22 using dummy_hcd [ 281.236218][ C2] vkms_vblank_simulate: vblank timer overrun [ 281.283526][ T5983] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 281.307771][ T40] audit: type=1400 audit(522.581:1402): avc: denied { ioctl } for pid=17513 comm="syz.8.2524" path="socket:[62820]" dev="sockfs" ino=62820 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 281.321529][T17516] /dev/sg0: Can't lookup blockdev [ 281.377106][ T6663] usb 11-1: device descriptor read/64, error -71 [ 281.397012][T17522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=17522 comm=syz.8.2526 [ 281.455204][T17526] fuse: Unknown parameter 'rootser_id' [ 281.493994][ T6663] usb usb11-port1: attempt power cycle [ 281.576111][ T40] audit: type=1400 audit(522.833:1403): avc: denied { execute } for pid=17537 comm="syz.7.2537" path="/333/file0/cpuset.memory_pressure_enabled" dev="9p" ino=71827947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 281.861648][ T6663] usb 11-1: new high-speed USB device number 23 using dummy_hcd [ 281.879286][ T6663] usb 11-1: device descriptor read/8, error -71 [ 282.147206][ T6663] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 282.167978][ T6663] usb 11-1: device descriptor read/8, error -71 [ 282.295820][ T6663] usb usb11-port1: unable to enumerate USB device [ 283.784437][ T5983] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 283.829503][T17560] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2533'. [ 283.903232][T17560] loop7: detected capacity change from 0 to 7 [ 283.909574][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.911021][T17575] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2538'. [ 283.912462][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 283.919429][ T40] audit: type=1400 audit(525.022:1404): avc: denied { mounton } for pid=17572 comm="syz.6.2538" path="/384/file0" dev="tmpfs" ino=2117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 283.919880][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.931528][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 283.934800][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.937667][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 283.940326][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.943261][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 283.948275][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.951184][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 283.953873][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.956689][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 283.959308][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.963088][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 283.966414][ T9789] ldm_validate_partition_table(): Disk read failed. [ 283.968636][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.972370][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 283.976016][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.978860][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 283.981505][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.985102][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 283.988699][ T9789] Dev loop7: unable to read RDB block 0 [ 283.991036][ T9789] loop7: unable to read partition table [ 283.993031][ T9789] loop7: partition table beyond EOD, truncated [ 284.025163][T17587] netlink: 'syz.7.2541': attribute type 1 has an invalid length. [ 284.038493][ T29] usb 13-1: new high-speed USB device number 26 using dummy_hcd [ 284.090477][T17592] openvswitch: netlink: Key type 127 is out of range max 32 [ 284.185589][ T5983] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 284.189420][ T29] usb 13-1: device descriptor read/64, error -71 [ 284.299284][ T5983] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 284.418492][ T5983] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 284.421723][T17614] hub 8-0:1.0: USB hub found [ 284.424022][T17614] hub 8-0:1.0: 1 port detected [ 284.466379][ T29] usb 13-1: new high-speed USB device number 27 using dummy_hcd [ 284.605745][ T29] usb 13-1: device descriptor read/64, error -71 [ 284.623340][T17636] XFS (nbd7): no-recovery mounts must be read-only. [ 284.733921][ T29] usb usb13-port1: attempt power cycle [ 285.041711][ T40] audit: type=1400 audit(526.069:1405): avc: denied { read } for pid=17653 comm="syz.6.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 285.118658][ T29] usb 13-1: new high-speed USB device number 28 using dummy_hcd [ 285.151275][ T29] usb 13-1: device descriptor read/8, error -71 [ 285.418072][ T29] usb 13-1: new high-speed USB device number 29 using dummy_hcd [ 285.426772][T17661] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2558'. [ 285.439850][ T29] usb 13-1: device descriptor read/8, error -71 [ 285.448775][T17661] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2558'. [ 285.557231][ T29] usb usb13-port1: unable to enumerate USB device [ 285.652979][T17674] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 285.731449][T17682] netlink: 'syz.9.2562': attribute type 1 has an invalid length. [ 285.733899][T17682] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2562'. [ 285.763271][T17678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17678 comm=syz.6.2561 [ 285.892065][T17698] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2563'. [ 285.897465][T17698] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2563'. [ 285.935851][ T40] audit: type=1400 audit(526.911:1406): avc: denied { execute } for pid=17699 comm="syz.7.2564" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=64804 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 285.972613][ T5983] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 286.042592][T17717] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2570'. [ 286.060608][T17719] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2570'. [ 286.064104][T17719] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2570'. [ 286.186931][T17734] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2572'. [ 286.191895][T17734] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2572'. [ 286.280024][ T5983] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 286.365888][ T40] audit: type=1400 audit(527.313:1407): avc: denied { append } for pid=17759 comm="syz.7.2579" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 286.580893][T17777] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 286.611977][ T5983] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 286.642313][ T40] audit: type=1400 audit(527.566:1408): avc: denied { setopt } for pid=17785 comm="syz.7.2587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 286.650850][ T40] audit: type=1400 audit(527.584:1409): avc: denied { setopt } for pid=17788 comm="syz.6.2586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 286.692021][ T40] audit: type=1400 audit(527.622:1410): avc: denied { bind } for pid=17788 comm="syz.6.2586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 286.720948][T17787] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 286.727857][ T5983] Bluetooth: hci5: unexpected event for opcode 0x0429 [ 286.751296][T17800] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002 [ 286.897930][ T40] audit: type=1400 audit(527.809:1411): avc: denied { mounton } for pid=17813 comm="syz.9.2591" path="/482/file1/file0" dev="autofs" ino=64963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 287.006891][ T5983] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 287.209778][T17864] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2601'. [ 287.217315][T17864] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2601'. [ 287.528440][ T5983] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 287.584118][T13321] tipc: Subscription rejected, illegal request [ 287.693262][T17907] netlink: 'syz.7.2609': attribute type 10 has an invalid length. [ 287.717387][ T9] usb 13-1: new high-speed USB device number 30 using dummy_hcd [ 287.736279][T17912] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2611'. [ 287.745722][T17910] SELinux: failed to load policy [ 287.747807][T17912] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2611'. [ 287.810440][T17916] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2612'. [ 287.861606][T17925] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 287.867414][ T9] usb 13-1: device descriptor read/64, error -71 [ 287.898237][ T5983] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 287.954932][ T40] audit: type=1400 audit(528.800:1412): avc: denied { unmount } for pid=9761 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 287.956662][T17978] No source specified [ 287.982865][T17985] batadv_slave_1: entered promiscuous mode [ 288.035897][T17982] batadv_slave_1: left promiscuous mode [ 288.047514][T17990] block nbd7: Attempted send on invalid socket [ 288.050948][T17990] befs: (nbd7): unable to read superblock [ 288.118412][T17997] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=30296 sclass=netlink_xfrm_socket pid=17997 comm=syz.7.2621 [ 288.134647][ T9] usb 13-1: new high-speed USB device number 31 using dummy_hcd [ 288.139762][ T40] audit: type=1400 audit(528.968:1413): avc: denied { accept } for pid=17994 comm="syz.6.2620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 288.199226][ T40] audit: type=1400 audit(529.034:1414): avc: denied { setopt } for pid=18008 comm="syz.7.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 288.283915][ T9] usb 13-1: device descriptor read/64, error -71 [ 288.412831][ T9] usb usb13-port1: attempt power cycle [ 288.433824][T18033] netlink: 'syz.7.2629': attribute type 1 has an invalid length. [ 288.436284][T18034] netlink: 'syz.7.2629': attribute type 1 has an invalid length. [ 288.469859][T18033] tipc: Started in network mode [ 288.471462][T18033] tipc: Node identity 3e914272bc2f, cluster identity 4711 [ 288.473738][T18033] tipc: Enabled bearer , priority 0 [ 288.481161][T18032] tipc: Resetting bearer [ 288.786220][ T9] usb 13-1: new high-speed USB device number 32 using dummy_hcd [ 288.808588][ T9] usb 13-1: device descriptor read/8, error -71 [ 289.097999][ T9] usb 13-1: new high-speed USB device number 33 using dummy_hcd [ 289.139662][ T9] usb 13-1: device descriptor read/8, error -71 [ 289.268276][ T9] usb usb13-port1: unable to enumerate USB device [ 289.549181][ T29] tipc: Node number set to 2193506930 [ 289.876465][T18032] tipc: Disabling bearer [ 289.961679][ T5983] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 290.014616][ T40] audit: type=1400 audit(530.717:1415): avc: denied { setopt } for pid=18066 comm="syz.7.2634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 290.051317][ T5983] Bluetooth: hci5: unexpected event for opcode 0x0c7b [ 290.130460][T18082] hub 8-0:1.0: USB hub found [ 290.132298][T18082] hub 8-0:1.0: 1 port detected [ 290.681205][T18119] overlayfs: missing 'lowerdir' [ 290.685710][T18119] overlayfs: overlapping lowerdir path [ 290.687246][ T5983] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 290.745466][T18129] netlink: 'syz.8.2646': attribute type 10 has an invalid length. [ 290.772502][T18126] netlink: 'syz.7.2645': attribute type 7 has an invalid length. [ 290.775746][T18126] netlink: 'syz.7.2645': attribute type 8 has an invalid length. [ 290.780506][T18126] openvswitch: netlink: IP tunnel TTL not specified. [ 290.783183][ T5983] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 290.826047][ T40] audit: type=1400 audit(531.475:1416): avc: denied { setattr } for pid=18195 comm="syz.7.2648" name="PPTP" dev="sockfs" ino=64460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 290.933837][T18200] "syz.8.2649" (18200) uses obsolete ecb(arc4) skcipher [ 291.019383][T18222] program syz.8.2653 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.094110][T18240] netlink: 'syz.6.2656': attribute type 4 has an invalid length. [ 291.117278][T18240] netlink: 'syz.6.2656': attribute type 4 has an invalid length. [ 291.133799][T18248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18248 comm=syz.8.2657 [ 291.141989][T18248] program syz.8.2657 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.158440][T18251] binder_alloc: binder_alloc_mmap_handler: 18249 200000ffe000-200000fff000 already mapped failed -16 [ 291.210895][T18254] ip6erspan0: entered promiscuous mode [ 291.242877][T18258] block nbd6: not configured, cannot reconfigure [ 291.297660][T18267] netlink: zone id is out of range [ 291.312435][T18267] netlink: set zone limit has 4 unknown bytes [ 291.322068][T18264] program syz.8.2662 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.327436][T18264] bond0: Error: Cannot enslave bond to itself. [ 291.412265][T18275] nbd: must specify a size in bytes for the device [ 291.505675][T18300] __nla_validate_parse: 5 callbacks suppressed [ 291.505685][T18300] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.2671'. [ 291.510740][T18300] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2671'. [ 291.542123][T18310] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2673'. [ 291.551557][T18308] netlink: 304 bytes leftover after parsing attributes in process `syz.8.2674'. [ 291.613465][T18325] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2677'. [ 291.616997][T18325] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2677'. [ 291.658900][T18325] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2677'. [ 291.719891][ T5983] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 291.724200][T18345] geneve3: entered promiscuous mode [ 291.725821][T18345] geneve3: entered allmulticast mode [ 291.730871][ T59] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 291.734793][ T59] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 291.739789][ T59] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 291.743023][ T59] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 291.753741][T18352] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2682'. [ 291.757540][T18352] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2682'. [ 291.817347][T18352] netlink: 'syz.8.2682': attribute type 39 has an invalid length. [ 292.041537][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 292.041553][ T40] audit: type=1400 audit(532.616:1421): avc: denied { rename } for pid=18370 comm="syz.8.2686" name="file0" dev="9p" ino=71827745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 292.047556][ T7744] usb 12-1: new high-speed USB device number 20 using dummy_hcd [ 292.052693][ T40] audit: type=1400 audit(532.625:1422): avc: denied { setattr } for pid=18370 comm="syz.8.2686" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=71827745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 292.186500][ T7744] usb 12-1: device descriptor read/64, error -71 [ 292.262879][T18378] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2687'. [ 292.344222][T18382] lo: entered allmulticast mode [ 292.374716][T18383] lo: left allmulticast mode [ 292.403446][ T5983] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 292.444639][ T7744] usb 12-1: new high-speed USB device number 21 using dummy_hcd [ 292.454265][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 292.456773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 292.464973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 292.505490][T18401] xfrm0 speed is unknown, defaulting to 1000 [ 292.509799][T18401] lo speed is unknown, defaulting to 1000 [ 292.632745][T18427] SELinux: failed to load policy [ 292.661618][T18401] IPVS: You probably need to specify IP address on multicast interface. [ 292.664687][T18401] IPVS: Error connecting to the multicast addr [ 292.945879][ T6059] usb 13-1: new high-speed USB device number 34 using dummy_hcd [ 293.106113][ T6059] usb 13-1: Using ep0 maxpacket: 16 [ 293.110759][ T6059] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 293.115039][ T6059] usb 13-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 293.128099][ T6059] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.132499][ T6059] usb 13-1: config 0 descriptor?? [ 293.139382][ T6059] input: bcm5974 as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/input/input29 [ 293.299238][ T7744] usb 12-1: device descriptor read/64, error -71 [ 293.379500][ T40] audit: type=1400 audit(533.869:1423): avc: denied { getopt } for pid=18426 comm="syz.8.2693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 293.384611][T18427] 9p: Unknown uid 00000000004294967295 [ 293.427482][ T7744] usb usb12-port1: attempt power cycle [ 293.479830][ T5367] bcm5974 13-1:0.0: could not read from device [ 293.486718][ T6059] bcm5974 13-1:0.0: could not read from device [ 293.493480][ T5367] bcm5974 13-1:0.0: could not read from device [ 293.502017][ T6059] input: failed to attach handler mousedev to device input29, error: -5 [ 293.508297][ T5367] bcm5974 13-1:0.0: could not read from device [ 293.512133][ T5367] bcm5974 13-1:0.0: could not read from device [ 293.513575][ T6059] usb 13-1: USB disconnect, device number 34 [ 293.683813][ T6663] usb 11-1: new high-speed USB device number 25 using dummy_hcd [ 293.811805][ T7744] usb 12-1: new high-speed USB device number 22 using dummy_hcd [ 293.847084][ T7744] usb 12-1: device descriptor read/8, error -71 [ 293.875977][ T6663] usb 11-1: Using ep0 maxpacket: 8 [ 293.879955][ T6663] usb 11-1: config 0 has no interfaces? [ 293.882476][ T6663] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 293.886289][ T6663] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.893002][ T6663] usb 11-1: config 0 descriptor?? [ 294.112300][ T60] usb 11-1: USB disconnect, device number 25 [ 294.122495][ T7744] usb 12-1: new high-speed USB device number 23 using dummy_hcd [ 294.144721][ T7744] usb 12-1: device descriptor read/8, error -71 [ 294.273495][ T7744] usb usb12-port1: unable to enumerate USB device [ 294.556398][ T5983] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 294.838483][ T6059] usb 13-1: new high-speed USB device number 35 using dummy_hcd [ 295.010828][ T6059] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 295.016303][ T6059] usb 13-1: config 0 interface 0 has no altsetting 0 [ 295.021582][ T6059] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 295.025439][ T6059] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 295.028903][ T6059] usb 13-1: Product: syz [ 295.031162][ T6059] usb 13-1: Manufacturer: syz [ 295.033214][ T6059] usb 13-1: SerialNumber: syz [ 295.036739][ T6059] usb 13-1: config 0 descriptor?? [ 295.042669][ T6059] usb 13-1: selecting invalid altsetting 0 [ 295.127514][ T5983] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 295.130748][ T5983] Bluetooth: hci5: Injecting HCI hardware error event [ 295.135144][ T5981] Bluetooth: hci5: hardware error 0x00 [ 295.263825][ T9] usb 13-1: USB disconnect, device number 35 [ 295.734235][T18541] sd 0:0:0:0: PR command failed: 1026 [ 295.736414][T18541] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 295.739217][T18541] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 295.776752][ T40] audit: type=1400 audit(536.113:1424): avc: denied { map } for pid=18545 comm="syz.6.2709" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 295.785016][ T40] audit: type=1400 audit(536.113:1425): avc: denied { execute } for pid=18545 comm="syz.6.2709" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 295.832455][ T5983] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 296.050198][T18582] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 296.062363][ T40] audit: type=1400 audit(536.375:1426): avc: denied { mounton } for pid=18581 comm="syz.8.2717" path="/362/bus/bus/file0" dev="overlay" ino=1989 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysfs_t tclass=file permissive=1 [ 296.104664][T18587] binder: 18586:18587 ioctl c0306201 200000000640 returned -22 [ 296.207225][ T60] usb 11-1: new high-speed USB device number 26 using dummy_hcd [ 296.220748][ T5983] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 296.333956][T18604] netlink: 'syz.8.2723': attribute type 1 has an invalid length. [ 296.367586][ T60] usb 11-1: Using ep0 maxpacket: 16 [ 296.370710][ T60] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.374116][ T60] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.377229][ T60] usb 11-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 296.380426][ T60] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.384331][ T60] usb 11-1: config 0 descriptor?? [ 296.469227][T18618] ptrace attach of "/syz-executor exec"[9774] was attempted by " b\x0a\x0c ! \x07    ?j}6ٱĞ Dl\x0a9:$VQ\x09d'ZbWzr‘Q``V\x5c4fL\x0a6\x0az^k`q0ȟ [ 296.470605][T18618] 9pnet_virtio: no channels available for device 127.0.0.1 [ 296.623354][ T60] usbhid 11-1:0.0: can't add hid device: -71 [ 296.625839][ T60] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 296.630412][ T60] usb 11-1: USB disconnect, device number 26 [ 297.019713][ T9894] usb 13-1: new full-speed USB device number 36 using dummy_hcd [ 297.043501][T18660] __nla_validate_parse: 6 callbacks suppressed [ 297.043519][T18660] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2736'. [ 297.181359][ T9894] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 4093, setting to 64 [ 297.184808][ T9894] usb 13-1: config 0 interface 0 has no altsetting 0 [ 297.185582][T18671] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2739'. [ 297.189071][ T9894] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 297.195455][ T9894] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 297.198259][ T9894] usb 13-1: Product: syz [ 297.199859][ T9894] usb 13-1: Manufacturer: syz [ 297.201620][ T9894] usb 13-1: SerialNumber: syz [ 297.205176][ T9894] usb 13-1: config 0 descriptor?? [ 297.210162][ T9894] usb 13-1: selecting invalid altsetting 0 [ 297.210973][T18670] No source specified [ 297.219036][T18670] 9pnet_fd: Insufficient options for proto=fd [ 297.351906][ T5981] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 297.430350][T18643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.433817][T18643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.446716][ T6059] usb 13-1: USB disconnect, device number 36 [ 297.525478][ T40] audit: type=1400 audit(537.750:1427): avc: denied { read } for pid=18748 comm="syz.8.2743" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 297.567969][T18755] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2745'. [ 297.608184][ T5981] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 297.697956][ T40] audit: type=1400 audit(537.909:1428): avc: denied { accept } for pid=18775 comm="syz.8.2749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 297.820129][T18786] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2752'. [ 297.919540][T18791] netlink: 'syz.8.2754': attribute type 1 has an invalid length. [ 297.950651][ T9894] usb 11-1: new high-speed USB device number 27 using dummy_hcd [ 297.953501][ T40] audit: type=1400 audit(538.152:1429): avc: denied { unmount } for pid=18790 comm="syz.8.2754" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 297.955707][ T9] Process accounting resumed [ 297.974919][T18791] bond2: (slave bridge1): making interface the new active one [ 297.978662][T18791] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 298.110361][ T9894] usb 11-1: Using ep0 maxpacket: 8 [ 298.113354][ T9894] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 298.115979][ T9894] usb 11-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 298.120053][ T9894] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 298.123885][ T9894] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.378856][T18846] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 298.443407][T18850] hfsplus: unable to find HFS+ superblock [ 298.785328][ T5981] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 298.929199][ T40] audit: type=1400 audit(539.059:1430): avc: denied { watch } for pid=18929 comm="syz.7.2764" path="/426/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 299.235583][T18950] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2772'. [ 299.929980][T18984] loop6: detected capacity change from 0 to 63 [ 299.934276][ T40] audit: type=1400 audit(540.004:1431): avc: denied { map } for pid=18983 comm="syz.8.2780" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 299.935300][ T9789] buffer_io_error: 10 callbacks suppressed [ 299.935310][ T9789] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.944282][ T40] audit: type=1400 audit(540.004:1432): avc: denied { execute } for pid=18983 comm="syz.8.2780" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 299.947077][T18984] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.958524][T18984] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.963137][T18984] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.965887][T18984] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.968453][ T9789] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.971994][T18984] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.974602][T18984] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.977197][ T9789] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.980342][T18984] Buffer I/O error on dev loop6, logical block 0, async page read [ 300.207477][ T5981] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 300.367698][ T40] audit: type=1400 audit(540.406:1433): avc: denied { accept } for pid=19006 comm="syz.8.2784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 300.478083][T19012] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2786'. [ 300.913742][ T9894] usb 11-1: USB disconnect, device number 27 [ 301.083306][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 301.094182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 301.103910][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 301.107688][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 301.116414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 301.193920][ T40] audit: type=1400 audit(541.182:1434): avc: denied { read } for pid=19076 comm="syz.6.2798" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 301.201110][ T40] audit: type=1400 audit(541.182:1435): avc: denied { open } for pid=19076 comm="syz.6.2798" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 301.622776][T19095] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 301.650672][ T9894] usb 11-1: new high-speed USB device number 28 using dummy_hcd [ 301.810665][ T9894] usb 11-1: Using ep0 maxpacket: 8 [ 301.815885][ T9894] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 301.819752][ T9894] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 301.819767][ T9894] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 301.819780][ T9894] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 301.830395][ T9894] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 301.830420][ T9894] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 301.830432][ T9894] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.837678][T19109] block nbd8: Attempted send on invalid socket [ 301.846688][T19109] blk_print_req_error: 12 callbacks suppressed [ 301.846742][T19109] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 301.846813][T19109] EXT4-fs (nbd8): unable to read superblock [ 302.048691][T19125] dummy0: left allmulticast mode [ 302.050724][T19125] bridge0: port 3(dummy0) entered disabled state [ 302.051116][ T9894] usb 11-1: usb_control_msg returned -32 [ 302.055286][ T9894] usbtmc 11-1:16.0: can't read capabilities [ 302.078786][T19125] batman_adv: batadv0: Adding interface: dummy0 [ 302.081377][T19125] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.092095][T19125] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 302.129032][T19125] siw: device registration error -23 [ 302.206180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 302.489540][T19151] SELinux: failed to load policy [ 302.803168][T19186] usbtmc 11-1:16.0: INITIATE_ABORT_BULK_OUT returned e6 [ 302.808028][T19181] wg1: entered promiscuous mode [ 302.809649][T19181] wg1: entered allmulticast mode [ 302.818333][ T9] usb 11-1: USB disconnect, device number 28 [ 303.067920][ T40] audit: type=1400 audit(542.931:1436): avc: denied { execute } for pid=19220 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 303.070695][T19219] misc userio: Invalid payload size [ 303.075868][ T40] audit: type=1400 audit(542.931:1437): avc: denied { execute_no_trans } for pid=19220 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 303.123381][T19223] netlink: 'syz.6.2824': attribute type 1 has an invalid length. [ 303.127416][T19223] netlink: 228 bytes leftover after parsing attributes in process `syz.6.2824'. [ 303.159746][T19227] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2825'. [ 303.235295][T19239] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2827'. [ 303.248871][ T5983] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.252530][ T5983] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.257079][ T5983] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.260870][ T5983] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.267060][ T5983] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.275924][ T40] audit: type=1400 audit(543.118:1438): avc: denied { mounton } for pid=19240 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 303.294138][T19240] xfrm0 speed is unknown, defaulting to 1000 [ 303.297416][T19240] lo speed is unknown, defaulting to 1000 [ 303.336238][T19269] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2828'. [ 303.340750][T19269] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2828'. [ 303.436311][T19240] chnl_net:caif_netlink_parms(): no params data found [ 303.561867][T19485] fuse: Bad value for 'user_id' [ 303.564472][T19485] fuse: Bad value for 'user_id' [ 303.616059][T13335] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.620811][T13335] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.651518][T19240] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.655634][T19240] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.657953][T19240] bridge_slave_0: entered allmulticast mode [ 303.660782][T19240] bridge_slave_0: entered promiscuous mode [ 303.663904][T19240] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.666238][T19240] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.668793][T19240] bridge_slave_1: entered allmulticast mode [ 303.672421][T19240] bridge_slave_1: entered promiscuous mode [ 303.772973][ T40] audit: type=1400 audit(543.585:1439): avc: denied { name_bind 0x1000000 } for pid=19654 comm="syz.7.2839" path="socket:[68395]" dev="sockfs" ino=68395 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 303.805749][T13335] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.813447][T13335] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.827842][T19240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.833606][T19240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.883179][ T40] audit: type=1400 audit(543.688:1440): avc: denied { bind } for pid=19707 comm="syz.8.2840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 303.901634][T19783] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2841'. [ 303.902693][T19832] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 303.904027][T19240] team0: Port device team_slave_0 added [ 303.906762][T19240] team0: Port device team_slave_1 added [ 303.932671][T13335] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.936034][T13335] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.020266][T19950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.046683][T13335] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.051157][T13335] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.072315][T19240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.075265][T19240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.086839][T19240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.093882][T19240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.096791][T19240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.108838][T19240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.187598][ T40] audit: type=1400 audit(543.978:1441): avc: denied { getopt } for pid=20084 comm="syz.6.2847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 304.211138][T19240] hsr_slave_0: entered promiscuous mode [ 304.213622][T19240] hsr_slave_1: entered promiscuous mode [ 304.215819][T19240] debugfs: 'hsr0' already exists in 'hsr' [ 304.220650][T19240] Cannot create hsr debugfs directory [ 304.460660][T13335] batman_adv: batadv0: Interface deactivated: gretap3 [ 304.497269][T20281] IPVS: length: 184 != 24 [ 305.140125][T13335] batman_adv: batadv0: Removing interface: gretap3 [ 305.247764][ T40] audit: type=1400 audit(544.970:1442): avc: denied { bind } for pid=20294 comm="syz.7.2857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 305.248310][T13335] bond4 (unregistering): (slave bridge0): Releasing active interface [ 305.478135][ T5981] Bluetooth: hci0: command tx timeout [ 305.580088][T13335] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 305.587395][T13335] bond0 (unregistering): Released all slaves [ 305.672817][T13335] bond1 (unregistering): (slave veth5): Releasing active interface [ 305.677307][T13335] bond1 (unregistering): (slave team0): Releasing active interface [ 305.682504][T13335] bond1 (unregistering): Released all slaves [ 305.688903][T13335] bond2 (unregistering): Released all slaves [ 305.697462][T13335] bond3 (unregistering): Released all slaves [ 305.703903][T13335] bond4 (unregistering): Released all slaves [ 305.711711][T13335] bond5 (unregistering): Released all slaves [ 305.740642][T20281] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2854'. [ 305.747276][T20281] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.828626][T13335] : left promiscuous mode [ 305.861696][T20381] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2862'. [ 305.869305][T20381] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2862'. [ 305.958426][T13335] tipc: Disabling bearer [ 305.967320][T13335] tipc: Left network mode [ 305.985795][ T40] audit: type=1400 audit(545.662:1443): avc: denied { listen } for pid=20386 comm="syz.8.2864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 305.987667][T20400] macvtap1: entered allmulticast mode [ 305.995716][T20400] veth0_macvtap: entered allmulticast mode [ 306.245554][T20440] netlink: 'syz.6.2870': attribute type 1 has an invalid length. [ 306.250696][T20440] netlink: 'syz.6.2870': attribute type 2 has an invalid length. [ 306.253899][T20440] netlink: 1172 bytes leftover after parsing attributes in process `syz.6.2870'. [ 306.326180][T13335] batadv_slave_0: left promiscuous mode [ 306.337707][T13335] batadv_slave_1: left promiscuous mode [ 306.364686][T13335] hsr_slave_0: left promiscuous mode [ 306.376482][T13335] hsr_slave_1: left promiscuous mode [ 306.478359][T13335] veth1_macvtap: left promiscuous mode [ 306.480594][T13335] veth0_macvtap: left promiscuous mode [ 306.482700][T13335] veth1_vlan: left promiscuous mode [ 306.489738][T13335] veth0_vlan: left promiscuous mode [ 306.716123][T20494] block nbd6: shutting down sockets [ 306.988080][ T5981] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 307.715201][ T5981] Bluetooth: hci0: command tx timeout [ 308.194857][ T1116] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 308.197209][ T1116] ata1: failed to read log page 10h (errno=-5) [ 308.210886][ T1116] ata1.00: exception Emask 0x1 SAct 0x8 SErr 0x0 action 0x0 [ 308.213890][ T1116] ata1.00: irq_stat 0x40000000 [ 308.218734][ T1116] ata1.00: failed command: WRITE FPDMA QUEUED [ 308.220717][T19240] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 308.221397][ T1116] ata1.00: cmd 61/50:18:c6:0c:10/00:00:00:00:00/40 tag 3 ncq dma 40960 out [ 308.221397][ T1116] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 308.231677][ T1116] ata1.00: status: { DRDY } [ 308.233937][T19240] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 308.234566][ T1116] ata1.00: configured for UDMA/100 [ 308.239945][ T1116] ata1: EH complete [ 308.242632][T19240] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 308.255164][T19240] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 308.259422][T20538] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 308.270221][T20538] netlink: 'syz.7.2883': attribute type 1 has an invalid length. [ 308.300042][ T5981] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 308.419024][T19240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.429822][T19240] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.435257][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.438334][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.455773][T13320] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.458823][T13320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.462985][T20565] binder: 20563:20565 ioctl c0306201 200000000080 returned -14 [ 308.465262][ T40] audit: type=1400 audit(547.981:1444): avc: denied { write } for pid=20563 comm="syz.8.2889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 308.512794][T13335] IPVS: stop unused estimator thread 0... [ 308.608411][T20581] netlink: 'syz.7.2894': attribute type 58 has an invalid length. [ 308.639713][T19240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.668387][T19240] veth0_vlan: entered promiscuous mode [ 308.674771][T19240] veth1_vlan: entered promiscuous mode [ 308.697921][T19240] veth0_macvtap: entered promiscuous mode [ 308.703752][T19240] veth1_macvtap: entered promiscuous mode [ 308.715996][T20603] __nla_validate_parse: 6 callbacks suppressed [ 308.716006][T20603] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2899'. [ 308.717600][T19240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.726405][T20593] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2897'. [ 308.729688][T19240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.733624][T13320] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.736455][T13320] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.741697][T13335] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.744375][T13335] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.783650][ T40] audit: type=1326 audit(548.271:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20614 comm="syz.6.2900" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4838eba9 code=0x7ffc0000 [ 308.798450][ T40] audit: type=1326 audit(548.271:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20614 comm="syz.6.2900" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd4838eba9 code=0x7ffc0000 [ 308.803739][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.806737][ T40] audit: type=1326 audit(548.271:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20614 comm="syz.6.2900" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4838eba9 code=0x7ffc0000 [ 308.808023][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.815032][ T40] audit: type=1326 audit(548.271:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20614 comm="syz.6.2900" exe="/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7efd4838eba9 code=0x7ffc0000 [ 308.815056][ T40] audit: type=1326 audit(548.271:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20614 comm="syz.6.2900" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4838eba9 code=0x7ffc0000 [ 308.815079][ T40] audit: type=1326 audit(548.290:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20614 comm="syz.6.2900" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efd4838eba9 code=0x7ffc0000 [ 308.815101][ T40] audit: type=1326 audit(548.290:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20614 comm="syz.6.2900" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4838eba9 code=0x7ffc0000 [ 308.815122][ T40] audit: type=1326 audit(548.290:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20614 comm="syz.6.2900" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4838eba9 code=0x7ffc0000 [ 308.815142][ T40] audit: type=1326 audit(548.299:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20614 comm="syz.6.2900" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efd4838eba9 code=0x7ffc0000 [ 308.876018][T13329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.879114][T13329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.911699][T20633] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2902'. [ 308.915414][T20633] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 308.928037][T20635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2823'. [ 308.932104][T20635] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20635 comm=syz.1.2823 [ 308.953183][ T6059] usb 12-1: new high-speed USB device number 24 using dummy_hcd [ 309.124266][ T6059] usb 12-1: Using ep0 maxpacket: 8 [ 309.127497][ T6059] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 309.130591][ T6059] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 309.133616][ T6059] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 309.137237][ T6059] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 309.140471][ T6059] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 309.144771][ T6059] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 309.147721][ T6059] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.285273][ T7744] usb 11-1: new full-speed USB device number 29 using dummy_hcd [ 309.372773][ T6059] usb 12-1: GET_CAPABILITIES returned 0 [ 309.374669][ T6059] usbtmc 12-1:16.0: can't read capabilities [ 309.442233][ T839] usb 12-1: USB disconnect, device number 24 [ 309.464724][ T7744] usb 11-1: not running at top speed; connect to a high speed hub [ 309.469453][ T7744] usb 11-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.472920][ T7744] usb 11-1: config 1 interface 0 has no altsetting 0 [ 309.479690][ T7744] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 309.482742][ T7744] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.485842][ T7744] usb 11-1: Product: 鮢࢙㜴䰠펉봧誉᷇楤⊔ٞ뀟踲꾨¨㛡➞嗹쎮謹넾瘮㨹計零 [ 309.492453][ T7744] usb 11-1: Manufacturer: 롥佋ꭆ歁뿉벖 [ 309.495210][ T7744] usb 11-1: SerialNumber: ࡃ [ 309.620938][ T5983] Bluetooth: Unexpected continuation frame (len 171) [ 309.721986][T20701] binder: 20699:20701 ioctl 4018620d 0 returned -22 [ 309.794732][T20703] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2911'. [ 309.926153][ T5983] Bluetooth: hci0: command tx timeout [ 310.393415][T20736] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 310.405769][T20738] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2917'. [ 310.476797][T20751] Bluetooth: MGMT ver 1.23 [ 310.486180][T20751] can0: slcan on ttyprintk. [ 310.491769][T20751] loop6: detected capacity change from 0 to 63 [ 310.504413][T20751] buffer_io_error: 183 callbacks suppressed [ 310.504427][T20751] Buffer I/O error on dev loop6, logical block 2, async page read [ 310.513157][T20751] Buffer I/O error on dev loop6, logical block 2, async page read [ 310.522985][T20751] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.526506][T20751] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.529634][T20751] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.532535][T20751] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.535003][T20751] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.538315][T20751] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.541450][T20751] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.544307][T20751] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.734558][T20771] "syz.7.2923" (20771) uses obsolete ecb(arc4) skcipher [ 310.803382][T20750] can0 (unregistered): slcan off ttyprintk. [ 310.930326][T20786] program syz.1.2926 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 310.997017][T20787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2926'. [ 311.342935][T20789] ubi31: attaching mtd0 [ 311.344767][T20789] ubi31 error: ubi_attach_mtd_dev: bad VID header (2) or data offsets (66) [ 311.349016][T20790] ubi31: attaching mtd0 [ 311.350424][T20790] ubi31 error: ubi_attach_mtd_dev: bad VID header (2) or data offsets (66) [ 311.466143][ T5981] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 311.704730][T20818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5126 sclass=netlink_route_socket pid=20818 comm=syz.8.2933 [ 311.792987][T20828] IPv6: NLM_F_CREATE should be specified when creating new route [ 311.812028][T20830] bridge0: port 3(veth0_to_bridge) entered blocking state [ 311.814725][T20830] bridge0: port 3(veth0_to_bridge) entered disabled state [ 311.817163][T20830] veth0_to_bridge: entered allmulticast mode [ 311.820423][T20830] veth0_to_bridge: entered promiscuous mode [ 311.822777][T20830] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 311.827743][T20830] bridge0: port 3(veth0_to_bridge) entered blocking state [ 311.830189][T20830] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 311.896651][T20835] netlink: 'syz.1.2938': attribute type 10 has an invalid length. [ 311.911272][T20835] team0: Port device dummy0 added [ 311.916629][T20835] netlink: 'syz.1.2938': attribute type 10 has an invalid length. [ 311.917582][T20843] loop4: detected capacity change from 0 to 2560 [ 311.919786][T20835] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 311.929039][T20835] team0: Failed to send options change via netlink (err -105) [ 311.932000][T20835] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 311.935888][T20835] team0: Port device dummy0 removed [ 311.943735][T20835] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 311.960606][T20848] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2942'. [ 312.006880][T20856] loop6: detected capacity change from 0 to 7 [ 312.025930][T20856] Dev loop6: unable to read RDB block 7 [ 312.028169][T20856] loop6: unable to read partition table [ 312.031398][T20856] loop6: partition table beyond EOD, truncated [ 312.036871][T20856] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 312.044897][T20862] netlink: 'syz.1.2944': attribute type 39 has an invalid length. [ 312.161242][ T5981] Bluetooth: hci0: command tx timeout [ 312.255334][ T7744] cdc_ether 11-1:1.0: probe with driver cdc_ether failed with error -71 [ 312.265646][ T7744] usb 11-1: USB disconnect, device number 29 [ 312.307633][T20922] block nbd8: Attempted send on invalid socket [ 312.310394][T20922] I/O error, dev nbd8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 312.324839][T20922] block nbd8: Attempted send on invalid socket [ 312.327389][T20922] I/O error, dev nbd8, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 312.331416][T20922] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 312.336299][T20922] block nbd8: Attempted send on invalid socket [ 312.338671][T20922] I/O error, dev nbd8, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 312.342890][T20922] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 312.348065][T20922] block nbd8: Attempted send on invalid socket [ 312.350650][T20922] I/O error, dev nbd8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 312.354954][T20922] block nbd8: Attempted send on invalid socket [ 312.357470][T20922] I/O error, dev nbd8, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 312.360985][T20922] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 312.365207][T20922] block nbd8: Attempted send on invalid socket [ 312.367895][T20922] I/O error, dev nbd8, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 312.371298][T20922] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 312.374336][T20924] IPv6: NLM_F_CREATE should be specified when creating new route [ 312.374894][T20922] block nbd8: Attempted send on invalid socket [ 312.379703][T20922] I/O error, dev nbd8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 312.382537][T20922] block nbd8: Attempted send on invalid socket [ 312.384418][T20922] I/O error, dev nbd8, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 312.388016][T20922] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 312.391139][T20922] block nbd8: Attempted send on invalid socket [ 312.393186][T20922] I/O error, dev nbd8, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 312.396420][T20922] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 312.399696][T20922] block nbd8: Attempted send on invalid socket [ 312.401677][T20922] I/O error, dev nbd8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 312.404623][T20922] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 312.408031][T20922] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 312.411776][T20922] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 312.491384][ T5981] Bluetooth: hci6: unexpected event for opcode 0x1405 [ 312.509637][T20933] xfrm0 speed is unknown, defaulting to 1000 [ 312.512512][T20933] lo speed is unknown, defaulting to 1000 [ 312.550811][T20951] mkiss: ax0: crc mode is auto. [ 312.657868][T20974] tmpfs: Unknown parameter '0xffffffffffffffff' [ 312.765620][T20980] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 312.803512][ T9894] usb 13-1: new high-speed USB device number 37 using dummy_hcd [ 312.830063][T20974] block nbd7: shutting down sockets [ 312.880245][T20992] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2963'. [ 312.910675][T20994] xt_l2tp: missing protocol rule (udp|l2tpip) [ 312.949438][T21003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2969'. [ 312.963179][ T9894] usb 13-1: Using ep0 maxpacket: 8 [ 312.967296][ T9894] usb 13-1: config 179 has an invalid interface number: 65 but max is 0 [ 312.970724][ T9894] usb 13-1: config 179 has no interface number 0 [ 312.974319][ T9894] usb 13-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 312.978963][ T9894] usb 13-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 312.983199][ T9894] usb 13-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 312.988304][ T9894] usb 13-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 312.992995][ T9894] usb 13-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 313.027272][ T9894] usb 13-1: config 179 interface 65 has no altsetting 0 [ 313.030118][ T9894] usb 13-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 313.033805][ T9894] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.058460][ T9894] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:179.65/input/input32 [ 313.102890][ T5367] input input32: unable to receive magic message: -110 [ 313.107575][ T5367] input input32: unable to receive magic message: -32 [ 313.111042][ T5367] input input32: unable to receive magic message: -32 [ 313.114716][ T5367] input input32: unable to receive magic message: -32 [ 313.270209][T20951] IPv6: NLM_F_CREATE should be specified when creating new route [ 313.270298][ T5981] Bluetooth: hci6: unexpected event 0x03 length: 6 < 11 [ 313.275244][ T9894] usb 13-1: USB disconnect, device number 37 [ 313.275643][ C2] xpad 13-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 313.942907][T21066] netlink: 'syz.6.2978': attribute type 1 has an invalid length. [ 313.945544][T21065] netlink: 'syz.6.2978': attribute type 1 has an invalid length. [ 313.951433][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 313.951449][ T40] audit: type=1400 audit(553.106:1472): avc: denied { setattr } for pid=21064 comm="syz.6.2978" name="NETLINK" dev="sockfs" ino=71269 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 314.042922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 314.111614][T21076] openvswitch: netlink: Flow actions attr not present in new flow. [ 314.189879][T21079] io-wq is not configured for unbound workers [ 314.197192][ T40] audit: type=1400 audit(553.340:1473): avc: denied { write } for pid=21078 comm="syz.6.2982" name="/" dev="9p" ino=71827743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 314.908287][ T6059] hid-generic 0362:07FF:7FFFFFFF.000A: item fetching failed at offset 0/2 [ 314.913408][ T6059] hid-generic 0362:07FF:7FFFFFFF.000A: probe with driver hid-generic failed with error -22 [ 315.077358][T21080] overlayfs: statfs failed on './file0' [ 315.149217][T21086] delete_channel: no stack [ 315.320311][T21143] fuse: Bad value for 'group_id' [ 315.322215][T21143] fuse: Bad value for 'group_id' [ 315.326897][T21142] netlink: 'syz.6.2993': attribute type 10 has an invalid length. [ 315.332505][T21142] hsr_slave_0: left promiscuous mode [ 315.335141][T21142] hsr_slave_1: left promiscuous mode [ 315.454248][ T34] usb 12-1: new high-speed USB device number 25 using dummy_hcd [ 315.460223][T21156] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=21156 comm=syz.8.2996 [ 315.584282][T21174] netlink: 'syz.1.3000': attribute type 16 has an invalid length. [ 315.586784][T21174] __nla_validate_parse: 2 callbacks suppressed [ 315.586793][T21174] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3000'. [ 315.593798][ T34] usb 12-1: device descriptor read/64, error -71 [ 315.616993][T21177] Invalid source name [ 315.618311][T21177] UBIFS error (pid: 21177): cannot open "ubifs", error -22 [ 315.621850][T21178] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 315.629594][T21178] IPv6: NLM_F_CREATE should be specified when creating new route [ 315.644287][T21181] overlayfs: overlapping lowerdir path [ 315.715793][T21191] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3005'. [ 315.731434][T21194] kvm: user requested TSC rate below hardware speed [ 315.772081][T21203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3007'. [ 315.842035][T21212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3011'. [ 315.860702][ T34] usb 12-1: new high-speed USB device number 26 using dummy_hcd [ 315.869345][T21207] netlink: 596 bytes leftover after parsing attributes in process `syz.6.3010'. [ 315.958639][T21212] team0: Port device team_slave_0 removed [ 316.010298][ T34] usb 12-1: device descriptor read/64, error -71 [ 316.117472][T21231] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3012'. [ 316.128224][ T34] usb usb12-port1: attempt power cycle [ 316.191895][T21196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.195718][T21196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.199369][T21196] netlink: 'syz.8.3006': attribute type 13 has an invalid length. [ 316.252609][ T40] audit: type=1400 audit(555.257:1474): avc: denied { mounton } for pid=21247 comm="syz.6.3014" path="/506/file0" dev="configfs" ino=2108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 316.262109][ T40] audit: type=1400 audit(555.257:1475): avc: denied { read } for pid=21247 comm="syz.6.3014" name="/" dev="configfs" ino=2108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 316.270002][ T40] audit: type=1400 audit(555.257:1476): avc: denied { open } for pid=21247 comm="syz.6.3014" path="/506/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 316.278417][ T40] audit: type=1400 audit(555.257:1477): avc: denied { read } for pid=21247 comm="syz.6.3014" name="/" dev="configfs" ino=2108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 316.286285][ T40] audit: type=1400 audit(555.257:1478): avc: denied { read } for pid=21247 comm="syz.6.3014" name="/" dev="configfs" ino=2108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 316.294422][ T40] audit: type=1400 audit(555.304:1479): avc: denied { unmount } for pid=9761 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 316.438017][ T839] usb 13-1: new high-speed USB device number 38 using dummy_hcd [ 316.502650][ T34] usb 12-1: new high-speed USB device number 27 using dummy_hcd [ 316.510691][T21267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3019'. [ 316.514539][T21267] Invalid logical block size (-5) [ 316.524475][ T34] usb 12-1: device descriptor read/8, error -71 [ 316.576364][T21275] ipvlan3: entered promiscuous mode [ 316.580908][T21275] bridge0: port 3(ipvlan3) entered blocking state [ 316.583039][T21275] bridge0: port 3(ipvlan3) entered disabled state [ 316.585156][T21275] ipvlan3: entered allmulticast mode [ 316.586839][T21275] bridge0: entered allmulticast mode [ 316.590417][T21275] ipvlan3: left allmulticast mode [ 316.592042][T21275] bridge0: left allmulticast mode [ 316.621717][ T839] usb 13-1: config 0 has no interfaces? [ 316.623539][ T839] usb 13-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00 [ 316.626948][ T839] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.632847][ T839] usb 13-1: config 0 descriptor?? [ 316.693353][ T9894] hid_parser_main: 73 callbacks suppressed [ 316.693371][ T9894] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 316.696773][T21284] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3022'. [ 316.698646][ T9894] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 316.698667][ T9894] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 316.707644][ T9894] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 316.710483][ T9894] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 316.712965][ T9894] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 316.715260][ T9894] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 316.719934][ T9894] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 316.722388][ T9894] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 316.724724][ T9894] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 316.731422][ T9894] hid-generic 0000:0000:0000.000B: hidraw1: HID v0.03 Device [syz1] on syz1 [ 316.793351][ T34] usb 12-1: new high-speed USB device number 28 using dummy_hcd [ 316.813467][ T34] usb 12-1: device descriptor read/8, error -71 [ 316.852941][ T839] usb 13-1: USB disconnect, device number 38 [ 316.910112][T21304] netlink: 'syz.1.3024': attribute type 6 has an invalid length. [ 316.944195][ T34] usb usb12-port1: unable to enumerate USB device [ 317.277465][T21317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28888 sclass=netlink_route_socket pid=21317 comm=syz.6.3027 [ 317.322959][ T40] audit: type=1400 audit(556.257:1480): avc: denied { map } for pid=21318 comm="syz.6.3028" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 317.603535][ T9894] usb 11-1: new high-speed USB device number 30 using dummy_hcd [ 317.764091][ T9894] usb 11-1: Using ep0 maxpacket: 16 [ 317.784837][ T9894] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.788362][ T9894] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.791904][ T9894] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 317.796764][ T9894] usb 11-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 317.800614][ T9894] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.804457][ T9894] usb 11-1: config 0 descriptor?? [ 317.983611][T21310] overlayfs: statfs failed on './file0' [ 318.007474][ T40] audit: type=1400 audit(556.903:1481): avc: denied { append } for pid=21354 comm="syz.8.3033" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 318.027722][ T9894] HID 045e:07da: Invalid code 65791 type 1 [ 318.034534][T21356] netlink: 156 bytes leftover after parsing attributes in process `syz.8.3033'. [ 318.035326][ T9894] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:045E:07DA.000C/input/input34 [ 318.045665][T21356] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 318.046176][ T9894] microsoft 0003:045E:07DA.000C: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 318.053870][ T9894] usb 11-1: USB disconnect, device number 30 [ 318.328553][T21398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.352081][ T53] usb 13-1: new full-speed USB device number 39 using dummy_hcd [ 318.514895][ T53] usb 13-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 318.519360][ T53] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 318.525775][ T53] usb 13-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 318.528281][T21415] 9pnet: Found fid 0 not clunked [ 318.529719][ T53] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.535558][ T53] usb 13-1: Product: 㠁 [ 318.537387][ T53] usb 13-1: Manufacturer: ࠁ [ 318.539203][ T53] usb 13-1: SerialNumber: 懵႘䦐햝䉇沺ᤚ磺걒瑅辌ꖚ窾晳鶼덓臄퉓돏㚮ﻑ덷떩ຟ犻⧉릚땑ぎഹ氛ᩥ꧂ [ 318.608149][T21419] can0: slcan on ttyprintk. [ 318.611902][T21419] loop6: detected capacity change from 0 to 63 [ 318.617275][T21419] buffer_io_error: 867 callbacks suppressed [ 318.617286][T21419] Buffer I/O error on dev loop6, logical block 2, async page read [ 318.622249][T21419] Buffer I/O error on dev loop6, logical block 2, async page read [ 318.642139][T21428] team0: Device gtp0 is of different type [ 318.652393][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.657481][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 318.663609][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 318.668950][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 318.674278][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 318.678543][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 318.683187][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 318.687330][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 318.692652][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 318.752325][T21418] can0 (unregistered): slcan off ttyprintk. [ 318.766578][T21378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.771394][T21378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.781284][T21378] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3036'. [ 318.848935][T21443] 9pnet_fd: Insufficient options for proto=fd [ 318.925653][ T53] usb 13-1: 0:2 : does not exist [ 318.932421][ T53] usb 13-1: USB disconnect, device number 39 [ 319.075333][T21469] kvm: pic: non byte write [ 319.078177][T21469] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 319.089168][T21469] kvm: pic: non byte write [ 319.260131][T21491] XFS (nbd6): no-recovery mounts must be read-only. [ 319.300542][T21493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.322286][T21493] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 319.324154][T21493] PKCS7: Only support pkcs7_signedData type [ 319.334229][T21493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.341568][T21493] binder: BINDER_SET_CONTEXT_MGR already set [ 319.344447][T21493] binder: 21492:21493 ioctl 4018620d 200000000280 returned -16 [ 319.438054][ T40] audit: type=1400 audit(558.240:1482): avc: denied { read } for pid=21499 comm="syz.7.3054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 319.549675][ T839] usb 11-1: new high-speed USB device number 31 using dummy_hcd [ 319.721190][ T839] usb 11-1: too many configurations: 9, using maximum allowed: 8 [ 319.732149][ T839] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.734984][ T839] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 319.738577][ T839] usb 11-1: config 0 interface 0 has no altsetting 0 [ 319.741846][ T839] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.745403][ T839] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 319.748808][ T839] usb 11-1: config 0 interface 0 has no altsetting 0 [ 319.751715][ T839] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.755098][ T839] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 319.758540][ T839] usb 11-1: config 0 interface 0 has no altsetting 0 [ 319.761717][ T839] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.768355][ T839] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 319.772993][ T839] usb 11-1: config 0 interface 0 has no altsetting 0 [ 319.777300][ T839] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.780593][ T839] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 319.783949][ T839] usb 11-1: config 0 interface 0 has no altsetting 0 [ 319.787052][ T839] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.789864][ T839] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 319.793245][ T839] usb 11-1: config 0 interface 0 has no altsetting 0 [ 319.797333][ T839] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.800244][ T839] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 319.804411][ T839] usb 11-1: config 0 interface 0 has no altsetting 0 [ 319.807686][ T839] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.810796][ T839] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 319.814584][ T839] usb 11-1: config 0 interface 0 has no altsetting 0 [ 319.827649][ T839] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 319.830569][ T839] usb 11-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 319.833444][ T839] usb 11-1: Product: syz [ 319.834776][ T839] usb 11-1: Manufacturer: syz [ 319.836251][ T839] usb 11-1: SerialNumber: syz [ 319.843986][ T839] usb 11-1: config 0 descriptor?? [ 319.848844][ T839] yurex 11-1:0.0: USB YUREX device now attached to Yurex #0 [ 320.071173][ T839] usb 11-1: USB disconnect, device number 31 [ 320.074820][ T839] yurex 11-1:0.0: USB YUREX #0 now disconnected [ 320.530113][ T40] audit: type=1400 audit(559.259:1483): avc: denied { execute } for pid=21546 comm="syz.7.3060" path="/proc/bus/input/devices" dev="proc" ino=4026532007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 320.719062][ T40] audit: type=1400 audit(559.437:1484): avc: denied { execute } for pid=21550 comm="syz.7.3062" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=73658 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 320.764612][T13320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.767754][T13320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.825491][T21556] 9pnet_virtio: no channels available for device syz [ 320.830166][T21555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21555 comm=syz.7.3064 [ 320.840629][T21555] netlink: 'syz.7.3064': attribute type 1 has an invalid length. [ 320.884284][T21555] bond3: (slave bridge5): making interface the new active one [ 320.890917][T21555] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 320.916911][T21556] bond3: (slave bridge6): Enslaving as an active interface with a down link [ 321.249382][T21633] binder: BINDER_SET_CONTEXT_MGR already set [ 321.253438][T21633] binder: 21632:21633 ioctl 4018620d 200000004a80 returned -16 [ 321.294600][T21640] can0: slcan on ttyprintk. [ 321.297703][T21640] loop6: detected capacity change from 0 to 63 [ 321.301606][T21640] Buffer I/O error on dev loop6, logical block 2, async page read [ 321.306220][T21640] Buffer I/O error on dev loop6, logical block 2, async page read [ 321.390461][T21639] can0 (unregistered): slcan off ttyprintk. [ 321.453462][ T6663] usb 13-1: new full-speed USB device number 40 using dummy_hcd [ 321.548837][T21659] netlink: 'syz.7.3075': attribute type 12 has an invalid length. [ 321.597674][T21669] __nla_validate_parse: 2 callbacks suppressed [ 321.597686][T21669] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3078'. [ 321.605501][T21669] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3078'. [ 321.618379][ T6663] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 321.621907][ T6663] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 321.626542][ T6663] usb 13-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 321.629561][ T6663] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.634267][ T6663] usb 13-1: config 0 descriptor?? [ 321.638589][T21625] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 321.747990][T21685] netlink: 536 bytes leftover after parsing attributes in process `syz.6.3080'. [ 321.751751][T21685] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3080'. [ 321.801159][T21689] cgroup: fork rejected by pids controller in /syz6 [ 321.862710][ T6663] usbhid 13-1:0.0: can't add hid device: -71 [ 321.864659][ T6663] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 321.868061][ T6663] usb 13-1: USB disconnect, device number 40 [ 322.432925][T13320] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.450355][T21709] can0: slcan on ttyprintk. [ 322.529586][T13320] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.531160][T21718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3085'. [ 322.561540][ T5983] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 322.564788][ T5983] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 322.569446][T21708] can0 (unregistered): slcan off ttyprintk. [ 322.572115][ T5983] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 322.579483][ T5983] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 322.589592][ T5983] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 322.611752][ T839] IPVS: starting estimator thread 0... [ 322.618783][T21720] xfrm0 speed is unknown, defaulting to 1000 [ 322.622398][T21720] lo speed is unknown, defaulting to 1000 [ 322.696546][T13320] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.704251][T21735] IPVS: using max 31 ests per chain, 74400 per kthread [ 322.844165][T13320] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.911106][T21720] chnl_net:caif_netlink_parms(): no params data found [ 323.063281][T21853] tipc: Enabled bearer , priority 0 [ 323.077280][T21853] syzkaller0: entered promiscuous mode [ 323.080459][T21853] syzkaller0: entered allmulticast mode [ 323.102057][T21853] tipc: Resetting bearer [ 323.197565][T21852] tipc: Resetting bearer [ 323.236123][T21852] tipc: Disabling bearer [ 323.265941][T21720] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.268708][T21720] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.272604][T21720] bridge_slave_0: entered allmulticast mode [ 323.275293][T21720] bridge_slave_0: entered promiscuous mode [ 323.287419][T21720] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.289773][T21720] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.292501][T21720] bridge_slave_1: entered allmulticast mode [ 323.295961][T21720] bridge_slave_1: entered promiscuous mode [ 323.299094][T13320] bridge_slave_1: left allmulticast mode [ 323.301510][T13320] bridge_slave_1: left promiscuous mode [ 323.306049][T13320] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.322779][T13320] bridge_slave_0: left allmulticast mode [ 323.325402][T13320] bridge_slave_0: left promiscuous mode [ 323.328077][T13320] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.382124][T22071] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3095'. [ 323.550435][T22076] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 323.553327][T22076] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 323.556979][T22076] vhci_hcd vhci_hcd.0: Device attached [ 323.564018][T22077] vhci_hcd: cannot find a urb of seqnum 6909543 max seqnum 0 [ 323.565397][T22076] netlink: 4756 bytes leftover after parsing attributes in process `syz.7.3095'. [ 323.567635][T13329] vhci_hcd: stop threads [ 323.572881][T13329] vhci_hcd: release socket [ 323.574946][T13329] vhci_hcd: disconnect device [ 323.630855][T22085] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 323.634050][T22084] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 323.641829][T22085] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3097'. [ 323.653171][T22084] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3097'. [ 323.677386][ C3] net_ratelimit: 24559 callbacks suppressed [ 323.677404][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 323.684789][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 323.689680][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 323.694775][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 323.699460][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 323.704670][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 323.709800][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 323.714877][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 323.720053][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 323.725203][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 324.231470][T13320] bond0 (unregistering): left promiscuous mode [ 324.233661][T13320] bond_slave_0: left promiscuous mode [ 324.235520][T13320] bond_slave_1: left promiscuous mode [ 324.244092][T13320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.261044][T13320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.278547][T13320] bond0 (unregistering): Released all slaves [ 324.284790][T13320] bond1 (unregistering): Released all slaves [ 324.389126][T21720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.397467][T22082] can0: slcan on ttyprintk. [ 324.399047][T13320] tipc: Disabling bearer [ 324.401944][T13320] tipc: Disabling bearer [ 324.407151][T13320] tipc: Left network mode [ 324.449803][T21720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.555300][T22217] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3098'. [ 324.558610][T22080] can0 (unregistered): slcan off ttyprintk. [ 324.583046][T21720] team0: Port device team_slave_0 added [ 324.591415][T22217] bridge0: entered promiscuous mode [ 324.593741][T22217] bridge0: port 1(macvlan0) entered blocking state [ 324.595928][T22217] bridge0: port 1(macvlan0) entered disabled state [ 324.599915][T22217] macvlan0: entered allmulticast mode [ 324.601700][T22217] bridge0: entered allmulticast mode [ 324.611407][T22217] macvlan0: left allmulticast mode [ 324.613086][T22217] bridge0: left allmulticast mode [ 324.621397][T22217] bridge0: left promiscuous mode [ 324.706970][T21720] team0: Port device team_slave_1 added [ 324.809964][T21720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.813501][T21720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.822554][T21720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.830145][ T5983] Bluetooth: hci1: command tx timeout [ 324.882401][T22484] ptrace attach of "/syz-executor exec"[9772] was attempted by "/syz-executor exec"[22484] [ 324.896511][ T5983] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 324.900544][ T5983] Bluetooth: hci6: Injecting HCI hardware error event [ 324.913691][ T5981] Bluetooth: hci6: hardware error 0x00 [ 324.938337][T21720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.945122][T21720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.954146][T21720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.222563][T21720] hsr_slave_0: entered promiscuous mode [ 325.225209][T21720] hsr_slave_1: entered promiscuous mode [ 325.227379][T21720] debugfs: 'hsr0' already exists in 'hsr' [ 325.231100][T21720] Cannot create hsr debugfs directory [ 325.236664][T22632] can0: slcan on ttyprintk. [ 325.415308][ T40] audit: type=1400 audit(563.833:1485): avc: denied { mounton } for pid=22770 comm="syz.1.3110" path="/74/file0/file0" dev="afs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 325.434220][ T40] audit: type=1400 audit(563.833:1486): avc: denied { mounton } for pid=22770 comm="syz.1.3110" path="/74/file0/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 325.434323][T22631] can0 (unregistered): slcan off ttyprintk. [ 325.471135][T13320] batadv0: left promiscuous mode [ 325.505013][T13320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.507985][T13320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.530752][T13320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.533804][T13320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.584569][ T40] audit: type=1400 audit(563.982:1487): avc: denied { setopt } for pid=22797 comm="syz.7.3113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 325.617377][T13320] veth1_macvtap: left promiscuous mode [ 325.619296][T13320] veth0_macvtap: left promiscuous mode [ 325.621261][T13320] veth1_vlan: left promiscuous mode [ 325.627290][T13320] veth0_vlan: left promiscuous mode [ 327.038545][ T5983] Bluetooth: hci1: command tx timeout [ 327.123034][ T5981] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 328.932409][T22893] program syz.7.3120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 328.938870][ T40] audit: type=1400 audit(567.134:1488): avc: denied { mounton } for pid=22892 comm="syz.7.3120" path="/bus" dev="ramfs" ino=79379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 328.940045][T22893] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 328.958149][T22893] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 328.962729][T22893] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 328.980586][T22894] can0: slcan on ttyprintk. [ 328.984884][T22894] loop6: detected capacity change from 0 to 63 [ 328.988548][T22894] Buffer I/O error on dev loop6, logical block 2, async page read [ 329.009286][T22894] Buffer I/O error on dev loop6, logical block 2, async page read [ 329.034228][ C3] net_ratelimit: 51718 callbacks suppressed [ 329.034239][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 329.036297][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.039983][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 329.044998][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.048511][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 329.053562][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.058368][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 329.063346][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.067981][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 329.072692][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.100301][ T5983] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 329.114537][ T5983] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 329.124723][ T5983] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 329.130199][ T5983] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 329.134247][ T5983] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 329.177116][T22906] xfrm0 speed is unknown, defaulting to 1000 [ 329.179645][T22906] lo speed is unknown, defaulting to 1000 [ 329.268042][T22926] __nla_validate_parse: 1 callbacks suppressed [ 329.268053][T22926] netlink: 14601 bytes leftover after parsing attributes in process `syz.7.3121'. [ 329.273209][ T5981] Bluetooth: hci1: command tx timeout [ 329.275588][T22926] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3121'. [ 329.483106][T22891] can0 (unregistered): slcan off ttyprintk. [ 329.748928][T22906] chnl_net:caif_netlink_parms(): no params data found [ 329.759649][T22955] dlm: no locking on control device [ 329.761712][T22955] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3122'. [ 329.985467][T13320] IPVS: stop unused estimator thread 0... [ 330.024043][T22906] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.027042][T22906] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.030960][T22906] bridge_slave_0: entered allmulticast mode [ 330.035172][T22906] bridge_slave_0: entered promiscuous mode [ 330.054047][T22906] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.061304][T22906] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.064395][T22906] bridge_slave_1: entered allmulticast mode [ 330.072469][T22906] bridge_slave_1: entered promiscuous mode [ 330.180459][T22906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.186999][T22906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.195206][T21720] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 330.319613][T21720] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 330.536444][ T40] audit: type=1400 audit(568.621:1489): avc: denied { listen } for pid=23488 comm="syz.8.3124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 330.538717][T13335] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.565448][T22906] team0: Port device team_slave_0 added [ 330.567844][T21720] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 330.577918][T22906] team0: Port device team_slave_1 added [ 330.624699][T21720] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 330.683856][T22906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.686941][T22906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.699385][T22906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.754245][T13335] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.770839][T22906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.773474][T22906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.782014][T22906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.905197][T13335] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.988146][T22906] hsr_slave_0: entered promiscuous mode [ 330.992137][T22906] hsr_slave_1: entered promiscuous mode [ 330.995061][T22906] debugfs: 'hsr0' already exists in 'hsr' [ 330.997495][T22906] Cannot create hsr debugfs directory [ 331.062933][T23746] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 331.142742][T13335] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.325667][ T5981] Bluetooth: hci0: command tx timeout [ 331.460271][T13335] bridge_slave_1: left allmulticast mode [ 331.465332][T13335] bridge_slave_1: left promiscuous mode [ 331.467172][T13335] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.483312][ T5981] Bluetooth: hci1: command tx timeout [ 331.537341][T13335] bridge_slave_0: left allmulticast mode [ 331.539278][T13335] bridge_slave_0: left promiscuous mode [ 331.543339][T13335] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.571312][T23967] Bluetooth: MGMT ver 1.23 [ 331.576066][T23967] loop6: detected capacity change from 0 to 63 [ 331.583191][T23967] Buffer I/O error on dev loop6, logical block 2, async page read [ 331.587078][T23967] Buffer I/O error on dev loop6, logical block 2, async page read [ 331.769783][T23976] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3132'. [ 331.773213][T23976] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3132'. [ 332.356788][T13335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.368392][T13335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.381582][T13335] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 332.391166][T13335] bond0 (unregistering): Released all slaves [ 332.676023][T13309] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.679411][T13309] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.719766][T23994] afs: Unknown parameter 'feck\wrte' [ 332.778946][T13309] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.791880][T21720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.794631][T13309] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.825742][T21720] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.836139][T13334] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.838872][T13334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.846156][T13309] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.849021][T13309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.851027][T24002] loop6: detected capacity change from 0 to 63 [ 332.861010][T24002] Buffer I/O error on dev loop6, logical block 2, async page read [ 332.863683][T24002] Buffer I/O error on dev loop6, logical block 2, async page read [ 332.956607][T24007] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 333.165697][T13335] hsr_slave_0: left promiscuous mode [ 333.172024][T13335] hsr_slave_1: left promiscuous mode [ 333.177332][T13335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.180407][T13335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.193426][T13335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.202520][T13335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.309652][T13335] veth1_macvtap: left promiscuous mode [ 333.312899][T13335] veth0_macvtap: left promiscuous mode [ 333.314771][T13335] veth1_vlan: left promiscuous mode [ 333.316513][T13335] veth0_vlan: left promiscuous mode [ 333.536243][ T5981] Bluetooth: hci0: command tx timeout [ 333.539043][T24053] 9pnet: p9_errstr2errno: server reported unknown error ?n [ 333.539043][T24053] kl [ 334.391389][ C1] net_ratelimit: 51883 callbacks suppressed [ 334.391392][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 334.391402][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.391570][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.393527][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 334.397202][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.401222][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 334.404608][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.408546][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 334.411865][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.415763][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 335.086973][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 335.279823][T13335] team0 (unregistering): Port device team_slave_1 removed [ 335.760537][ T5981] Bluetooth: hci0: command tx timeout [ 336.678225][T21720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 336.899202][T24075] veth1_virt_wifi: entered allmulticast mode [ 337.089184][T22906] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 337.110541][T22906] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 337.165573][T22906] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 337.200405][T21720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.206781][T22906] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 337.300305][T22906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.322175][T22906] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.328419][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.330840][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.355041][T13309] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.357322][T13309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.463555][T22906] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 337.466775][T22906] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 337.519276][T21720] veth0_vlan: entered promiscuous mode [ 337.537187][T21720] veth1_vlan: entered promiscuous mode [ 337.551822][T21720] veth0_macvtap: entered promiscuous mode [ 337.562120][T21720] veth1_macvtap: entered promiscuous mode [ 337.601808][T21720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.620275][T21720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.632107][T13309] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.635517][T13309] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.638962][T13309] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.766084][T13319] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.893182][T22906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.971312][T22906] veth0_vlan: entered promiscuous mode [ 337.975332][T13319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.981393][T13319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.984747][ T5981] Bluetooth: hci0: command tx timeout [ 338.002735][T22906] veth1_vlan: entered promiscuous mode [ 338.041873][T13309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.045781][T13309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.095978][T22906] veth0_macvtap: entered promiscuous mode [ 338.109186][T22906] veth1_macvtap: entered promiscuous mode [ 338.122866][ T34] usb 12-1: new high-speed USB device number 29 using dummy_hcd [ 338.137152][T22906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.150217][T22906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.153888][T24179] overlayfs: unescaped trailing colons in lowerdir mount option. [ 338.162901][ T1151] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.165713][ T1151] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.173405][ T1151] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.183146][ T1151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.256795][T24188] binder: 24184:24188 unknown command 0 [ 338.261629][T24188] binder: 24184:24188 ioctl c0306201 200000000300 returned -22 [ 338.276503][ T40] audit: type=1400 audit(575.859:1490): avc: denied { execute } for pid=24184 comm="syz.6.3156" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 338.286398][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.289513][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.341442][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.347808][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.401394][ T34] usb 12-1: Using ep0 maxpacket: 8 [ 338.478351][ T34] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 338.481073][ T34] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 338.484138][ T34] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 338.494593][ T34] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 338.516868][T24205] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3158'. [ 338.541391][ T34] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 338.544821][ T34] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 338.549156][ T34] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 338.577191][ T34] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.612031][ T34] usbtmc 12-1:16.0: probe with driver usbtmc failed with error -22 [ 338.732422][T24220] xfrm0 speed is unknown, defaulting to 1000 [ 338.772715][T24220] lo speed is unknown, defaulting to 1000 [ 339.207964][T24260] netlink: 'syz.6.3163': attribute type 21 has an invalid length. [ 339.286756][ T40] audit: type=1326 audit(576.804:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24261 comm="syz.2.3165" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ce98eba9 code=0x7ffc0000 [ 339.298219][ T40] audit: type=1326 audit(576.804:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24261 comm="syz.2.3165" exe="/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fd7ce98eba9 code=0x7ffc0000 [ 339.309003][T24266] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3166'. [ 339.315453][ T40] audit: type=1326 audit(576.804:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24261 comm="syz.2.3165" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ce98eba9 code=0x7ffc0000 [ 339.337703][ T40] audit: type=1326 audit(576.851:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24265 comm="syz.2.3166" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7ce98eba9 code=0x0 [ 339.519499][T24271] netlink: 'syz.6.3167': attribute type 11 has an invalid length. [ 339.718307][T24291] ptrace attach of "/syz-executor exec"[22906] was attempted by "/syz-executor exec"[24291] [ 339.748554][ C1] net_ratelimit: 52494 callbacks suppressed [ 339.748573][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.748680][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 339.751567][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.756427][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 339.761297][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.764776][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 339.769929][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.773400][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 339.778226][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.787723][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 339.829475][ T40] audit: type=1400 audit(577.309:1495): avc: denied { listen } for pid=24296 comm="syz.2.3171" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 339.881891][ T40] audit: type=1326 audit(577.356:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24302 comm="syz.2.3174" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7ce98eba9 code=0x0 [ 339.941394][ T40] audit: type=1400 audit(577.421:1497): avc: denied { watch watch_reads } for pid=24302 comm="syz.2.3174" path="pipe:[80809]" dev="pipefs" ino=80809 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 341.060246][ T53] usb 12-1: USB disconnect, device number 29 [ 341.096895][T24333] netlink: 'syz.7.3179': attribute type 1 has an invalid length. [ 341.114012][T24333] 8021q: adding VLAN 0 to HW filter on device bond4 [ 341.120582][T24333] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3179'. [ 341.257123][ T40] audit: type=1400 audit(578.646:1498): avc: denied { append } for pid=24369 comm="syz.7.3180" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 341.279979][ T40] audit: type=1400 audit(578.665:1499): avc: denied { watch } for pid=24376 comm="syz.8.3182" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=3116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 341.288342][ T6663] usb 11-1: new full-speed USB device number 32 using dummy_hcd [ 341.463730][ T6663] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 341.467719][ T6663] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 341.471549][ T6663] usb 11-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 341.477589][ T6663] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.485537][ T6663] usb 11-1: config 0 descriptor?? [ 341.492082][T24319] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 341.540042][T24404] netlink: 'syz.8.3187': attribute type 26 has an invalid length. [ 341.714962][ T6663] usbhid 11-1:0.0: can't add hid device: -71 [ 341.721559][ T6663] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 341.726997][ T6663] usb 11-1: USB disconnect, device number 32 [ 341.761755][T24415] xfrm0 speed is unknown, defaulting to 1000 [ 341.766956][T24415] lo speed is unknown, defaulting to 1000 [ 341.817752][T24437] : entered promiscuous mode [ 342.085548][T24456] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3193'. [ 342.088500][T24456] netlink: 'syz.8.3193': attribute type 30 has an invalid length. [ 342.091367][T24456] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3193'. [ 342.265025][T24475] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3197'. [ 342.268764][T24475] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3197'. [ 342.617086][T24498] fuse: Bad value for 'fd' [ 343.046884][T24516] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3207'. [ 343.670650][T24536] loop4: detected capacity change from 0 to 2560 [ 343.687655][T24536] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 343.693858][T24536] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 343.700124][T24536] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 343.704597][T24536] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 343.710626][T24536] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 343.716871][T24536] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 343.721840][T24536] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 343.727626][T24536] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 343.734524][T24536] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 343.740782][T24536] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 343.770292][T24538] netlink: 'syz.6.3215': attribute type 2 has an invalid length. [ 343.775788][T24538] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3215'. [ 343.791637][T24536] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 343.799514][T13319] Bluetooth: hci2: Frame reassembly failed (-84) [ 344.408586][T24566] 9pnet_fd: Insufficient options for proto=fd [ 344.876004][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 344.876016][ T40] audit: type=1400 audit(582.032:1502): avc: denied { create } for pid=24576 comm="syz.7.3225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 344.889919][ T40] audit: type=1400 audit(582.041:1503): avc: denied { ioctl } for pid=24576 comm="syz.7.3225" path="socket:[82523]" dev="sockfs" ino=82523 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 344.901029][ T40] audit: type=1400 audit(582.050:1504): avc: denied { write } for pid=24576 comm="syz.7.3225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 345.063961][ T40] audit: type=1400 audit(582.209:1505): avc: denied { watch } for pid=24580 comm="syz.7.3227" path="/573/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 345.072014][ T40] audit: type=1400 audit(582.209:1506): avc: denied { watch_sb watch_reads } for pid=24580 comm="syz.7.3227" path="/573/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 345.105651][ C3] net_ratelimit: 43639 callbacks suppressed [ 345.105668][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 345.105714][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.108430][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 345.111944][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.116561][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 345.120089][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.124792][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 345.128351][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.133074][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:64:94:a3:dc:23, vlan:0) [ 345.136475][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.447913][ T6663] usb 12-1: new high-speed USB device number 30 using dummy_hcd [ 345.608327][ T6663] usb 12-1: Using ep0 maxpacket: 8 [ 345.614193][ T6663] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 345.617266][ T6663] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 345.620455][ T6663] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 345.623897][ T6663] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 345.627078][ T6663] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 345.632507][ T6663] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 345.636147][ T6663] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.754570][T24566] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode [ 345.815016][T24602] netlink: 'syz.8.3228': attribute type 39 has an invalid length. [ 345.862786][ T6663] usb 12-1: GET_CAPABILITIES returned 0 [ 345.866533][ T6663] usbtmc 12-1:16.0: can't read capabilities [ 345.906646][ T40] audit: type=1400 audit(582.985:1507): avc: denied { bind } for pid=24608 comm="syz.8.3231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 345.923156][T24609] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3231'. [ 345.926544][T24609] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3231'. [ 345.950777][ T5981] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 345.953503][ T5983] Bluetooth: hci2: command 0x1003 tx timeout [ 346.060674][ T53] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 346.116303][T24581] loop7: detected capacity change from 0 to 7 [ 346.239234][ T53] usb 7-1: Using ep0 maxpacket: 8 [ 346.242119][ T53] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 346.244674][ T53] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 346.247611][ T53] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 346.248896][T24625] binder: 24624:24625 unknown command 0 [ 346.250819][ T53] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 346.255868][ T53] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 346.258881][ T53] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 346.260307][T24625] binder: 24624:24625 ioctl c0306201 200000000080 returned -22 [ 346.262920][ T53] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 346.268868][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.274265][ T53] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22 [ 346.906763][T24581] Dev loop7: unable to read RDB block 7 [ 346.909159][T24581] loop7: unable to read partition table [ 346.911636][T24581] loop7: partition table beyond EOD, truncated [ 346.915296][T24581] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 346.929859][ T53] usb 12-1: USB disconnect, device number 30 [ 347.095717][T24648] tmpfs: Bad value for 'mpol' [ 347.163835][T24659] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3237'. [ 347.335582][T24662] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3238'. [ 347.339246][T24662] bond0: option use_carrier: invalid value (29) [ 347.385975][T24670] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3241'. [ 347.388855][T24670] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3241'. [ 347.406855][T24672] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3239'. [ 347.409599][T24672] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3239'. [ 347.441275][T24675] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3242'. [ 347.447543][ T40] audit: type=1400 audit(584.426:1508): avc: denied { execmod } for pid=24676 comm="syz.8.3243" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=82705 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 347.460357][T24675] loop7: detected capacity change from 0 to 524255232 [ 347.484175][T24683] syzkaller0: entered promiscuous mode [ 347.486586][T24683] syzkaller0: entered allmulticast mode [ 347.549756][T24685] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 347.552543][T24685] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 347.558303][T24685] vhci_hcd vhci_hcd.0: Device attached [ 347.561152][T24686] vhci_hcd: connection closed [ 347.561295][T13334] vhci_hcd: stop threads [ 347.565008][T13334] vhci_hcd: release socket [ 347.566698][T13334] vhci_hcd: disconnect device [ 347.632241][T24692] loop6: detected capacity change from 0 to 63 [ 347.776822][T24702] comedi comedi4: bad chanlist[0]=0x00100000 chan=0 range length=2 [ 348.077089][T24720] netlink: 'syz.6.3254': attribute type 58 has an invalid length. [ 348.175231][T24726] loop6: detected capacity change from 0 to 63 [ 348.199434][T24731] loop6: detected capacity change from 0 to 63 [ 348.250384][T24741] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3261'. [ 348.310012][T24746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24746 comm=syz.8.3263 [ 348.611614][T24778] loop6: detected capacity change from 0 to 63 [ 348.645369][ T53] usb 13-1: new high-speed USB device number 41 using dummy_hcd [ 348.658705][T24785] loop6: detected capacity change from 0 to 63 [ 348.722454][ T839] IPVS: starting estimator thread 0... [ 348.816269][ T53] usb 13-1: Using ep0 maxpacket: 16 [ 348.816395][T24799] IPVS: using max 47 ests per chain, 112800 per kthread [ 348.824100][ T53] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.832095][ T53] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.836271][ T53] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 348.845036][ T53] usb 13-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 348.851419][ T53] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.856835][ T53] usb 13-1: config 0 descriptor?? [ 349.024769][ T839] usb 7-1: USB disconnect, device number 5 [ 349.216109][T24820] blk_print_req_error: 2 callbacks suppressed [ 349.216151][T24820] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.221414][T24820] efs: cannot read volume header [ 349.309247][T24825] loop6: detected capacity change from 0 to 63 [ 349.312687][T24825] buffer_io_error: 320 callbacks suppressed [ 349.312696][T24825] Buffer I/O error on dev loop6, logical block 2, async page read [ 349.318155][T24825] Buffer I/O error on dev loop6, logical block 2, async page read [ 349.341933][ T53] hid_parser_main: 73 callbacks suppressed [ 349.341953][ T53] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 349.347349][ T53] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 349.350172][ T53] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 349.358140][ T53] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 349.360986][ T53] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 349.374617][ T53] input: HID 0955:7214 Haptics as /devices/virtual/input/input36 [ 349.422156][ T53] shield 0003:0955:7214.000D: Registered Thunderstrike controller [ 349.439992][ T53] shield 0003:0955:7214.000D: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.8-1/input0 [ 349.817900][T24866] nbd_handle_cmd: 2 callbacks suppressed [ 349.817921][T24866] block nbd7: Attempted send on invalid socket [ 349.830621][T24866] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.834795][T24866] (syz.7.3286,24866,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 349.840604][T24866] (syz.7.3286,24866,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 349.848586][T24866] (syz.7.3286,24866,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 349.852308][T24866] (syz.7.3286,24866,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 349.877025][T24756] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 349.884205][T24756] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 349.892547][T24868] loop6: detected capacity change from 0 to 63 [ 349.896425][T24868] Buffer I/O error on dev loop6, logical block 2, async page read [ 349.899291][T24868] Buffer I/O error on dev loop6, logical block 2, async page read [ 349.926740][T24756] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 349.963979][T24756] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 349.966022][T24756] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 349.997577][T24756] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 350.044786][ T6663] usb 13-1: USB disconnect, device number 41 [ 350.055092][ T53] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 350.061197][ T6663] ------------[ cut here ]------------ [ 350.062906][ T6663] workqueue: work disable count underflowed [ 350.064762][ T6663] WARNING: CPU: 2 PID: 6663 at kernel/workqueue.c:4326 enable_work+0x2f8/0x340 [ 350.067632][ T6663] Modules linked in: [ 350.069295][ T6663] CPU: 2 UID: 0 PID: 6663 Comm: kworker/2:4 Not tainted syzkaller #0 PREEMPT(full) [ 350.073849][ T6663] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 350.077132][ T6663] Workqueue: usb_hub_wq hub_event [ 350.078780][ T6663] RIP: 0010:enable_work+0x2f8/0x340 [ 350.080376][ T6663] Code: 89 ee e8 9b 50 38 00 45 84 ed 0f 85 29 fe ff ff e8 ad 55 38 00 c6 05 1d 7a 10 0f 01 90 48 c7 c7 a0 05 ac 8b e8 49 fa f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 e7 b5 9e 00 e9 aa fe ff ff [ 350.086311][ T6663] RSP: 0018:ffffc9000399f3c0 EFLAGS: 00010086 [ 350.088330][ T6663] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a4388 [ 350.090838][ T6663] RDX: ffff888029354880 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 350.093349][ T6663] RBP: ffff88804b6ae738 R08: 0000000000000001 R09: 0000000000000000 [ 350.095783][ T6663] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000733e79 [ 350.098269][ T6663] R13: 0000000000000000 R14: ffff88804b6ae698 R15: ffff88804b6ae730 [ 350.100753][ T6663] FS: 0000000000000000(0000) GS:ffff8880d68b2000(0000) knlGS:0000000000000000 [ 350.103514][ T6663] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 350.105547][ T6663] CR2: 000000110c326ca5 CR3: 00000000349d5000 CR4: 0000000000352ef0 [ 350.107905][ T6663] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 350.110375][ T6663] DR3: 000000000000e58e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 350.112836][ T6663] Call Trace: [ 350.113855][ T6663] [ 350.114813][ T6663] ? __pfx_enable_work+0x10/0x10 [ 350.116394][ T6663] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 350.118248][ T6663] __cancel_work_sync+0xe7/0x130 [ 350.119818][ T6663] thermal_zone_device_unregister+0x28e/0x4d0 [ 350.121778][ T6663] ? __pfx_shield_remove+0x10/0x10 [ 350.123394][ T6663] power_supply_unregister+0x10a/0x150 [ 350.124998][ T6663] shield_remove+0x75/0x130 [ 350.126271][ T6663] ? __pfx_shield_remove+0x10/0x10 [ 350.127812][ T6663] hid_device_remove+0xd1/0x260 [ 350.129386][ T6663] ? __pfx_hid_device_remove+0x10/0x10 [ 350.131114][ T6663] device_remove+0xc8/0x170 [ 350.132575][ T6663] device_release_driver_internal+0x44b/0x620 [ 350.134541][ T6663] bus_remove_device+0x22f/0x420 [ 350.136290][ T6663] device_del+0x396/0x9f0 [ 350.137683][ T6663] ? __pfx_device_del+0x10/0x10 [ 350.139216][ T6663] ? do_raw_spin_lock+0x12c/0x2b0 [ 350.140800][ T6663] hid_destroy_device+0x19c/0x240 [ 350.142381][ T6663] usbhid_disconnect+0xa0/0xe0 [ 350.143928][ T6663] usb_unbind_interface+0x1dd/0x9e0 [ 350.145593][ T6663] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 350.147404][ T6663] ? __pfx_usb_unbind_interface+0x10/0x10 [ 350.149261][ T6663] device_remove+0x125/0x170 [ 350.150779][ T6663] device_release_driver_internal+0x44b/0x620 [ 350.153047][ T6663] bus_remove_device+0x22f/0x420 [ 350.154744][ T6663] device_del+0x396/0x9f0 [ 350.156134][ T6663] ? __pfx_device_del+0x10/0x10 [ 350.157693][ T6663] ? kobject_put+0x210/0x5a0 [ 350.159161][ T6663] usb_disable_device+0x355/0x7d0 [ 350.160934][ T6663] usb_disconnect+0x2e1/0x9c0 [ 350.162561][ T6663] hub_event+0x1c81/0x4fe0 [ 350.163995][ T6663] ? __lock_acquire+0xb97/0x1ce0 [ 350.165588][ T6663] ? __pfx_hub_event+0x10/0x10 [ 350.167132][ T6663] ? assoc_array_insert+0x1f80/0x3970 [ 350.168911][ T6663] ? rcu_is_watching+0x12/0xc0 [ 350.170576][ T6663] process_one_work+0x9cc/0x1b70 [ 350.172206][ T6663] ? __pfx_process_one_work+0x10/0x10 [ 350.173871][ T6663] ? assign_work+0x1a0/0x250 [ 350.175321][ T6663] worker_thread+0x6c8/0xf10 [ 350.176773][ T6663] ? __kthread_parkme+0x19e/0x250 [ 350.178287][ T6663] ? __pfx_worker_thread+0x10/0x10 [ 350.179852][ T6663] kthread+0x3c2/0x780 [ 350.181145][ T6663] ? __pfx_kthread+0x10/0x10 [ 350.182556][ T6663] ? rcu_is_watching+0x12/0xc0 [ 350.184033][ T6663] ? __pfx_kthread+0x10/0x10 [ 350.185507][ T6663] ret_from_fork+0x56a/0x730 [ 350.186955][ T6663] ? __pfx_kthread+0x10/0x10 [ 350.188433][ T6663] ret_from_fork_asm+0x1a/0x30 [ 350.189962][ T6663] [ 350.190951][ T6663] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 350.193213][ T6663] CPU: 2 UID: 0 PID: 6663 Comm: kworker/2:4 Not tainted syzkaller #0 PREEMPT(full) [ 350.196158][ T6663] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 350.199508][ T6663] Workqueue: usb_hub_wq hub_event [ 350.201111][ T6663] Call Trace: [ 350.202168][ T6663] [ 350.203143][ T6663] dump_stack_lvl+0x3d/0x1f0 [ 350.204668][ T6663] vpanic+0x6e8/0x7a0 [ 350.206215][ T6663] ? __pfx_vpanic+0x10/0x10 [ 350.207777][ T6663] ? enable_work+0x2f8/0x340 [ 350.209292][ T6663] panic+0xca/0xd0 [ 350.210500][ T6663] ? __pfx_panic+0x10/0x10 [ 350.211910][ T6663] ? check_panic_on_warn+0x1f/0xb0 [ 350.213525][ T6663] check_panic_on_warn+0xab/0xb0 [ 350.215065][ T6663] __warn+0xf6/0x3c0 [ 350.216310][ T6663] ? __pfx_vprintk_emit+0x10/0x10 [ 350.217853][ T6663] ? enable_work+0x2f8/0x340 [ 350.219286][ T6663] report_bug+0x3c3/0x580 [ 350.220653][ T6663] ? enable_work+0x2f8/0x340 [ 350.222076][ T6663] handle_bug+0x184/0x210 [ 350.223529][ T6663] exc_invalid_op+0x17/0x50 [ 350.225427][ T6663] asm_exc_invalid_op+0x1a/0x20 [ 350.227194][ T6663] RIP: 0010:enable_work+0x2f8/0x340 [ 350.229072][ T6663] Code: 89 ee e8 9b 50 38 00 45 84 ed 0f 85 29 fe ff ff e8 ad 55 38 00 c6 05 1d 7a 10 0f 01 90 48 c7 c7 a0 05 ac 8b e8 49 fa f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 e7 b5 9e 00 e9 aa fe ff ff [ 350.236016][ T6663] RSP: 0018:ffffc9000399f3c0 EFLAGS: 00010086 [ 350.238497][ T6663] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a4388 [ 350.241742][ T6663] RDX: ffff888029354880 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 350.244329][ T6663] RBP: ffff88804b6ae738 R08: 0000000000000001 R09: 0000000000000000 [ 350.246829][ T6663] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000733e79 [ 350.249374][ T6663] R13: 0000000000000000 R14: ffff88804b6ae698 R15: ffff88804b6ae730 [ 350.252023][ T6663] ? __warn_printk+0x198/0x350 [ 350.253671][ T6663] ? __warn_printk+0x1a5/0x350 [ 350.255194][ T6663] ? __pfx_enable_work+0x10/0x10 [ 350.256772][ T6663] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 350.258929][ T6663] __cancel_work_sync+0xe7/0x130 [ 350.260799][ T6663] thermal_zone_device_unregister+0x28e/0x4d0 [ 350.262880][ T6663] ? __pfx_shield_remove+0x10/0x10 [ 350.264575][ T6663] power_supply_unregister+0x10a/0x150 [ 350.266252][ T6663] shield_remove+0x75/0x130 [ 350.267656][ T6663] ? __pfx_shield_remove+0x10/0x10 [ 350.269424][ T6663] hid_device_remove+0xd1/0x260 [ 350.271097][ T6663] ? __pfx_hid_device_remove+0x10/0x10 [ 350.272880][ T6663] device_remove+0xc8/0x170 [ 350.274365][ T6663] device_release_driver_internal+0x44b/0x620 [ 350.276350][ T6663] bus_remove_device+0x22f/0x420 [ 350.278130][ T6663] device_del+0x396/0x9f0 [ 350.279895][ T6663] ? __pfx_device_del+0x10/0x10 [ 350.281778][ T6663] ? do_raw_spin_lock+0x12c/0x2b0 [ 350.283770][ T6663] hid_destroy_device+0x19c/0x240 [ 350.285464][ T6663] usbhid_disconnect+0xa0/0xe0 [ 350.287263][ T6663] usb_unbind_interface+0x1dd/0x9e0 [ 350.289403][ T6663] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 350.291363][ T6663] ? __pfx_usb_unbind_interface+0x10/0x10 [ 350.293560][ T6663] device_remove+0x125/0x170 [ 350.295638][ T6663] device_release_driver_internal+0x44b/0x620 [ 350.298052][ T6663] bus_remove_device+0x22f/0x420 [ 350.299825][ T6663] device_del+0x396/0x9f0 [ 350.301250][ T6663] ? __pfx_device_del+0x10/0x10 [ 350.302998][ T6663] ? kobject_put+0x210/0x5a0 [ 350.304911][ T6663] usb_disable_device+0x355/0x7d0 [ 350.306899][ T6663] usb_disconnect+0x2e1/0x9c0 [ 350.308834][ T6663] hub_event+0x1c81/0x4fe0 [ 350.310635][ T6663] ? __lock_acquire+0xb97/0x1ce0 [ 350.312690][ T6663] ? __pfx_hub_event+0x10/0x10 [ 350.314653][ T6663] ? assoc_array_insert+0x1f80/0x3970 [ 350.316907][ T6663] ? rcu_is_watching+0x12/0xc0 [ 350.318993][ T6663] process_one_work+0x9cc/0x1b70 [ 350.321204][ T6663] ? __pfx_process_one_work+0x10/0x10 [ 350.323463][ T6663] ? assign_work+0x1a0/0x250 [ 350.325365][ T6663] worker_thread+0x6c8/0xf10 [ 350.327269][ T6663] ? __kthread_parkme+0x19e/0x250 [ 350.329317][ T6663] ? __pfx_worker_thread+0x10/0x10 [ 350.331444][ T6663] kthread+0x3c2/0x780 [ 350.333151][ T6663] ? __pfx_kthread+0x10/0x10 [ 350.335016][ T6663] ? rcu_is_watching+0x12/0xc0 [ 350.337121][ T6663] ? __pfx_kthread+0x10/0x10 [ 350.339008][ T6663] ret_from_fork+0x56a/0x730 [ 350.340971][ T6663] ? __pfx_kthread+0x10/0x10 [ 350.342849][ T6663] ret_from_fork_asm+0x1a/0x30 [ 350.344816][ T6663] [ 350.346874][ T6663] Kernel Offset: disabled [ 350.348685][ T6663] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:50:02 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffea0001768e80 RCX=ffffffff82075292 RDX=ffff888027f60000 RSI=ffffffff820626ba RDI=ffffea0001768e80 RBP=0000000000000000 RSP=ffffc90006617810 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=00007f7c0586a000 R13=0000000000000000 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff81bb9d48 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbbed972960 CR3=000000003b56c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=00000000000089af DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffdcff85d0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffdcff8756 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffdcff8756 00007fffdcff875c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7cea12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7cea12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7cea12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7cea12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7cea12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7cea12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=00000000fffffffd RCX=ffffffff8a42c39a RDX=ffff888024ee2440 RSI=ffffffff8a42c43a RDI=0000000000000005 RBP=ffff8880560ae4c8 RSP=ffffc9000069f858 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=0000000000000003 R14=0000000000000007 R15=0000000000000000 RIP=ffffffff81bb9d48 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2fd23ffc CR3=0000000033dd0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 39eb4557b14f57df dc3d4dfb641d5cc7 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c4deeae10ce3b088 2c65879051a4e640 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e784185042888f92 7f9349eac38ef760 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9df7b6a6b0e801ac ddc72674ddf2fa08 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000060 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000020 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 240cefacbfdaafda 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8c758fb200000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a98e2996bed1fa7 a6a2470b416fc6cd ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000004506e760 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3f84c25b04ac82ba 77d1b8e9852e4ffc ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d0a63db8b06e5f22 6008756bb4a948da ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 74c8694844ff6e77 7e794f85b0a33b17 d08c7a3c05208728 89f7048010f9deb2 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 82b78fbfd07bd4db 1254351b0879ae6b a4a7c24d84868846 1cf4690856478ad5 ZMM18=3b9be395bbb76e46 da735d21d0f7e189 3b9be395bbb76e46 da735d21d0f7e189 3b9be395bbb76e46 da735d21d0f7e189 3b9be395bbb76e46 da735d21d0f7e189 ZMM19=4712000000000000 0000000000000007 4712000000000000 0000000000000006 4712000000000000 0000000000000005 4712000000000000 0000000000000004 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000800040009 000a000803000000 ffffffda0b000000 ffffffd2000003e6 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000800040000 0008000800000014 0000002000000034 0000004800000058 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000500000000 0000000000000013 0000000001f78a40 000000140000001c ZMM24=6153ccb86153ccb8 6153ccb86153ccb8 6153ccb86153ccb8 6153ccb86153ccb8 6153ccb86153ccb8 6153ccb86153ccb8 6153ccb86153ccb8 6153ccb86153ccb8 ZMM25=ac72459bac72459b ac72459bac72459b ac72459bac72459b ac72459bac72459b ac72459bac72459b ac72459bac72459b ac72459bac72459b ac72459bac72459b ZMM26=63a198ea63a198ea 63a198ea63a198ea 63a198ea63a198ea 63a198ea63a198ea 63a198ea63a198ea 63a198ea63a198ea 63a198ea63a198ea 63a198ea63a198ea ZMM27=e780d269e780d269 e780d269e780d269 e780d269e780d269 e780d269e780d269 e780d269e780d269 e780d269e780d269 e780d269e780d269 e780d269e780d269 ZMM28=00000200000001ff 000001fe000001fd 000001fc000001fb 000001fa000001f9 000001f8000001f7 000001f6000001f5 000001f4000001f3 000001f2000001f1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=940e0000940e0000 940e0000940e0000 940e0000940e0000 940e0000940e0000 940e0000940e0000 940e0000940e0000 940e0000940e0000 940e0000940e0000 info registers vcpu 2 CPU#2 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8564b755 RDI=ffffffff9b1180e0 RBP=ffffffff9b1180a0 RSP=ffffc9000399ed30 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000065 R14=ffffffff9b1180a0 R15=ffffffff8564b6f0 RIP=ffffffff8564b77f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c326ca5 CR3=00000000349d5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000e58e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c8439b4600 000055c8439b4600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdd9407de0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5250452d206f7420 6575642074726f70 6572204449482074 7365757165722044 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f544f5250452d20 6f74206575642074 726f706572204449 4820747365757165 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7220444d4354534f 4820656b69727473 7265646e75685420 74757074756f206f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 742064656c696146 203a443030302e34 3132373a35353930 3a3330303020646c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65696873205d3335 542020205b5d3239 303535302e303533 20205b203a6c656e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000007 RBX=ffff8880276e8af0 RCX=0000000036198be1 RDX=0000000000000000 RSI=ffff8880276e8be0 RDI=ffff8880276e8bb8 RBP=0000000000000000 RSP=ffffc900006f7b18 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000006 R11=0000000000000000 R12=ffff8880276e8be0 R13=ffff8880276e8000 R14=0000000000000006 R15=0000000000000001 RIP=ffffffff81976653 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7c06dedf98 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000002fefcf8 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 679bcb9dd288b190 631a9257336de35c ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e964d792fa987e35 5f228d4e33b2a7fe ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 35ee42c74c719920 d56790300c6a5a9f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0e23c06bf0f520f6 667d38ac30046cc4 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000060 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000020 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 eb5848448ac165ff 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 061f1d6000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ace187651c697418 be4a3582613c862b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000006dece0c1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 54fb9e6325cd913f 4e6a4d6c0fbdb83e ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e4b20df2c903c340 795f359c4a33a670 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c061a74a8 00007f7c061a74a0 00007f7c061a7498 00007f7c061a7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c06d0d100 00007f7c061a7460 00007f7c061a7478 00007f7c061a74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c061a74b8 00007f7c061a74b0 00007f7c061a74a8 00007f7c061a74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000