last executing test programs: 2m5.456949145s ago: executing program 0 (id=1): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz1\x00', {0x5, 0x5, 0x5, 0xfff7}, 0x24, [0x6, 0x83bd, 0x69e, 0xffffff81, 0x0, 0x8, 0x3, 0xc160, 0x4, 0xfffffffa, 0x0, 0x6, 0xfffff94d, 0x4, 0x8f6, 0x1e, 0x80, 0xfffffff8, 0x1, 0x1000, 0x0, 0x7c12ad8f, 0xff, 0x5, 0x80000001, 0x6, 0x8, 0x5, 0x800001, 0x81, 0xb6, 0x5, 0x3, 0xd, 0x6, 0x192, 0x3, 0xffff, 0x5, 0xa0, 0x40, 0xc, 0xa, 0x9, 0xfffffff9, 0x0, 0x8, 0x6, 0x1, 0xffffffff, 0x0, 0x7ff, 0x0, 0x80, 0x7e, 0xf, 0xffffffff, 0xa, 0x2, 0x7, 0xffffffff, 0x4, 0x0, 0xffffffff], [0x5, 0x9, 0x7ff, 0xfffffffc, 0x8, 0x7, 0x7, 0x0, 0x1000, 0x0, 0x5426, 0xfffffeff, 0x8, 0x4, 0x4, 0x10, 0x8, 0x0, 0x8, 0x3, 0x800, 0xbd98, 0x6b, 0x73, 0x2, 0x1ff, 0x3, 0x0, 0xb, 0x65, 0xe, 0xa3, 0x1000, 0x166, 0x5, 0x3, 0xd, 0x5, 0x9, 0x5, 0xd, 0x5, 0xb, 0x2, 0x10002, 0x4130, 0x7, 0x8, 0x4, 0xfffffff4, 0x7, 0x2, 0x1, 0x4e9d, 0x2, 0x6, 0x10000000, 0x3, 0xfffffff9, 0x10000, 0x7, 0xd, 0xb, 0x9], [0x7, 0x894, 0xa0d, 0xffff, 0x2, 0x401, 0x8, 0x1, 0x5, 0x1, 0x1, 0x1ff, 0x7fffffff, 0x2dd618ae, 0xb, 0x8, 0x5, 0x4, 0x2, 0x8001, 0x2, 0xffffff0e, 0xc, 0x4, 0xb77c, 0x4, 0x5, 0xc, 0x80000000, 0x1, 0x7, 0xffff6b87, 0x1, 0x4, 0xfffffffd, 0xe95, 0x7, 0x28000, 0xff, 0x7, 0x2, 0xe, 0x2, 0x8, 0x807, 0x9, 0x200, 0x0, 0x6, 0xfffffffc, 0x21b0, 0x4, 0x200, 0x3, 0x9, 0x7, 0x6a3, 0xd, 0x614d935e, 0x201, 0x400, 0x7a, 0x1ff, 0x2], [0xc, 0xfffffff7, 0x2, 0x1, 0x200, 0xd2a, 0x3, 0x7, 0x9, 0x5, 0x2, 0x80000000, 0x400003, 0x6, 0xffffff56, 0xfffffffd, 0x3a, 0x3, 0xc, 0x1, 0x1, 0x7, 0xfff00000, 0x2, 0xc0, 0x4, 0x7, 0x2, 0xec, 0x62, 0x10001, 0x1, 0x114, 0x5, 0x3, 0xfffffff8, 0x0, 0x0, 0x28, 0x8000, 0x3, 0x5, 0x2, 0x9, 0x4, 0x15, 0x0, 0x9, 0xffffff42, 0x1, 0x3, 0xc, 0xfffffffe, 0x59eb, 0x3ff, 0x7, 0xffffffff, 0x8, 0xfffb, 0x3, 0x3, 0x5, 0xf, 0x6]}, 0x45c) r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000300)={0x1}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x8200, 0x38) r3 = socket(0x400000000010, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbf8, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x3ff}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x40888) write(r2, &(0x7f0000000000)='3', 0x4e) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@nullb, 0xee00, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000140)={0x0, 0x4, 0x800, 0xff}) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getae={0x4c, 0x1f, 0x200, 0x70bd2a, 0x25dfdbfc, {{@in6=@loopback, 0x4d3, 0x2, 0x6c}, @in=@private=0xa010100, 0x8, 0x3504}, [@offload={0xc, 0x1c, {r7, 0x2}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048000}, 0x8000) pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f00000005c0)='fd', 0x0, r8) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x2) fchdir(r10) 2m5.282837424s ago: executing program 0 (id=7): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xe1}}, './file0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@private2}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x34}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x4, 0x4e21, 0x76, 0x8, 0x100, 0x0, 0x3b, 0x0, r1}, {0x2, 0x5, 0xfff, 0x127, 0x43e0, 0xfda0, 0xa, 0x4}, {0x3, 0xd, 0x9, 0xac40}, 0xfffffff3, 0x6e6bbf, 0x1, 0x0, 0x0, 0x2}, {{@in=@rand_addr=0x64010100, 0x4d2, 0x6c}, 0x2, @in6=@mcast1, 0x0, 0x5, 0x0, 0x4, 0x6, 0x4, 0x100}}, 0xe8) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000140)=0x83e3, 0x1e37) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x109}) mmap(&(0x7f00003e9000/0x4000)=nil, 0x4000, 0xe, 0x40010, r3, 0x100000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x39, 0x1a, r2, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) 2m5.203456225s ago: executing program 0 (id=8): r0 = socket(0x18, 0xa, 0xfffffffe) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3fd}}, 0x24) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r1, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FITHAW(r2, 0xc0045878) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x13, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 2m5.028243861s ago: executing program 0 (id=11): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x402, 0x10b) write(r3, &(0x7f00000002c0)='6', 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f00000001c0)=""/229, 0xe5) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) landlock_restrict_self(r1, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0x2b) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80000001500018a"], 0xb8}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0xfffffffe, 0x0, 0x8000}, 0x50) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)=0xffffffff) write$ppp(r6, &(0x7f0000000900)="80fd0f010004", 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000800000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000005400000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000000000010b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000600ef0079b21000000000009500000000000200"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, 0x24}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) read$FUSE(r7, 0x0, 0x0) r8 = accept$alg(0xffffffffffffffff, 0x0, 0x0) getsockname(r8, &(0x7f0000000200)=@ieee802154, &(0x7f0000000280)=0x80) 2m4.933495469s ago: executing program 0 (id=16): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', 'syz', 0x20, 0x7f}, 0x2e, 0xfffffffffffffffa) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') (async) close(0x3) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) (async) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) futex(&(0x7f0000000140)=0x4, 0x8, 0xfffffffe, 0x0, 0x0, 0x2) (async) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async) keyctl$describe(0x6, r0, &(0x7f0000000040)=""/27, 0x1b) (async) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 1m49.853665872s ago: executing program 32 (id=16): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', 'syz', 0x20, 0x7f}, 0x2e, 0xfffffffffffffffa) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') (async) close(0x3) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) (async) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) futex(&(0x7f0000000140)=0x4, 0x8, 0xfffffffe, 0x0, 0x0, 0x2) (async) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async) keyctl$describe(0x6, r0, &(0x7f0000000040)=""/27, 0x1b) (async) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 1m7.100728392s ago: executing program 3 (id=588): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x18, 0x1, 0x9, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFCTH_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000840) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = io_uring_setup(0x5822, &(0x7f0000000580)={0x0, 0x8270, 0x1000, 0x3, 0x846}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/133, 0x85}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) r4 = dup(r1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r5, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1f}}}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x15a4}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, {0x18, 0x0, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000801) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x20000084) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltgid}]}}) 1m7.021843478s ago: executing program 3 (id=589): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r3, &(0x7f0000000300)={&(0x7f00000006c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000640)="97452a300c00"/17, 0x11}, {&(0x7f00000002c0)="9e762d2f24d02a99cb0aa5", 0xb}], 0x2, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010102}}}], 0x20}, 0x2400c804) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00000000c0)={'ip6erspan0\x00'}) ioctl$SIOCX25SENDCALLACCPT(r4, 0x89e9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet6_int(r6, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r6, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f0000000000)=0x4, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001340)=@newsa={0x15c, 0x10, 0x1, 0x0, 0xfffffffd, {{@in6=@loopback, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@broadcast, {0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x6d42}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0xa, 0x1, 0x0, 0xe2}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x70bd29, 0x0, 0x0, 0x1}}, @algo_auth={0x48, 0x1, {{'crc32\x00'}}}, @extra_flags={0x8, 0x18, 0x7}]}, 0x15c}}, 0x0) sendto$inet6(r6, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) recvmmsg(r6, &(0x7f0000006600)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40010163, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008, 0x40000000}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x1}, {}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffc00}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffa, 0x2, 0x1, 0x8, 0x3}}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 1m6.940856601s ago: executing program 3 (id=592): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async, rerun: 32) io_uring_setup(0x1f41, &(0x7f0000000040)={0x0, 0x100aeb9, 0xd000, 0x5, 0x60}) (async, rerun: 32) r0 = io_uring_setup(0x2398, &(0x7f0000001600)={0x0, 0x1f1e, 0x400, 0x0, 0x379}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000100)=0xbffe) ioctl$KVM_RUN(r3, 0xae80, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000006f00)=[{0x0, 0x0, 0x0}], 0x1) 1m6.802006892s ago: executing program 3 (id=596): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4000}, 0x94) 1m6.801628634s ago: executing program 3 (id=597): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000900)='./proc\x00', &(0x7f0000000a00)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/fs/cifs/Stats\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x5d0, 0x1b8, 0x1b8, 0x418, 0x1b8, 0x1b8, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8000, 0x3}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6c}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [0x0, 0xff], [], 'veth0_to_team\x00', 'syzkaller0\x00', {0xff}}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x120, 0x18da, 'kmp\x00', "825610de5ad9fa1530d931009214a111797e8f1597fabe8a933ad4d823aac0e2beaec8435ecf7e5b5b884a22f56d00bc30ea50c6f9aa105e562b24147e26aebef1cb45766c7d27f3e6148d66f882d947dbdc34c4d24c84da3dfa80fe02f3d655860df9c93c088bca440b81139288125a49689b39a7fa6bd60a8737af8102c00b", 0x9, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) 1m6.731514184s ago: executing program 3 (id=598): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time={0x3, 0x5a62}, {0x0, 0x8}, {}, @raw32}, {0x0, 0x0, 0x7, 0x0, @time, {}, {}, @quote}, {0x4, 0x0, 0xf2, 0x9, @tick=0x7, {0x6, 0x9}, {0xff, 0x8}, @control={0x8, 0x9, 0x8}}, {0x7, 0x1, 0x6, 0x0, @time={0xa, 0x6}, {0x4, 0xf}, {0x9, 0xff}, @result={0x6, 0x2}}], 0x70) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {0xfd}, {0x2}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {0x8}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @tick=0x7f, {}, {}, @note={0x4, 0x0, 0x7, 0x9a, 0x20000}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0x7f}, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x7, 0x0, 0x0, 0x0, @time, {0x80}, {}, @raw8={"448cc816080000b4f270be53"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{0x0, 0x4}}}], 0xc4) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000300)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x9, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r2}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @ldst={0x1, 0x0, 0x3, 0x1}, @exit], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r5 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r5, 0xc0845658, &(0x7f0000000000)={0x0, @reserved}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{}, [@TCA_NETEM_LOSS={0x42, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0x8f}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x7fff, 0x7, 0x1}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x98}}, 0x0) 54.817074224s ago: executing program 1 (id=732): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xba06}]}}]}, 0x38}}, 0x4048000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0xcb14, 0x10100, 0x3, 0x4001bf}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='2', 0x49) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x41c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000000c0002800500010000000000080007400000000008000840000000013c000e802c0001801400"], 0xd8}}, 0x0) 54.751313167s ago: executing program 1 (id=734): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 54.75000647s ago: executing program 1 (id=735): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005f40)={0x0, 0x0, &(0x7f0000005f00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x80b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xc, 0x7}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x7, 0x60320000, 0x2276, 0x85a, 0x0, 0x2, 0x0, 0x0, 0x4, 0x7f}}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) (async) r3 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) r4 = socket(0x8, 0x5, 0x5) syz_usb_ep_read(r3, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x101000, 0x125) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x101000, 0x125) preadv(r5, &(0x7f0000001b00)=[{&(0x7f0000000000)=""/237, 0xed}], 0x1, 0x3, 0x0) futimesat(r5, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={{0x77359400}, {0x77359400}}) fcntl$getownex(r4, 0x10, &(0x7f0000000240)={0x0, 0x0}) prlimit64(r6, 0xe, &(0x7f00000002c0)={0x1, 0xfffffffffffffffa}, &(0x7f0000000300)) syz_usb_ep_write(r3, 0x81, 0x40, &(0x7f0000000100)="900100"/64) (async) syz_usb_ep_write(r3, 0x81, 0x40, &(0x7f0000000100)="900100"/64) ioctl$sock_SIOCOUTQNSD(r4, 0x40106153, &(0x7f0000000000)) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x2c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110001000300000000000000000000006400000000000000"], 0x20}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101400, 0x50) (async) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101400, 0x50) openat(r7, &(0x7f00000000c0)='./file0\x00', 0x82, 0x47) (async) openat(r7, &(0x7f00000000c0)='./file0\x00', 0x82, 0x47) 53.55126296s ago: executing program 1 (id=741): mkdir(&(0x7f0000000080)='./file0\x00', 0x135) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 53.550786725s ago: executing program 1 (id=742): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1000010, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6375, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) r2 = syz_ublk_setup_io_uring(0x401b, &(0x7f0000000000)={0x0, 0x6ba, 0x1, 0x1, 0x1cb}, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000180)) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2e150, 0x18}, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000006c0)={r3, &(0x7f0000000500)="17fe56e52e9bcacd345adc5f557b494827b720b9ab9b41ea4da17b5bd1458053d3cf7fd475aa0a610b731f8180f2096b6ecd30720fe055da0453153ab52cb617492b20d3b132af54bc170fbf60fa6ad27b0d2d35928194b63725baf8c4ac5325644f5771989c0e154da9c04c4902b1d7db16973edec9cb0e9c01db835d087871f1e4a543ea6c1ef4f77e839b5f9667e6873b3250c884b2448617e62afddabd732c132a720297bd4cdd2bbbe8538b91d4b3c6acbd93253164a52e6bd79c9c079ee957a8182e99273e366b061d", &(0x7f0000000600)=@buf="5e49c80e1317506c3b4ee2815c84749690a88b5938cddc36683138258023f9618c64dd17daf0d40a80122568d563f9c4700c483a248f54508489c39f2498e62cf9779cc1e7d3a61f5509abaab91fad5559c7d87b45d3edf2e6971d7eb6d4755e6dcd00d96c6a7af2ff72253dbf4d77c12daf8d4c4cea3947a34ccfceb4250a99d59da3d5a2024e362341d6572ba090cc4a7f4d", 0x1}, 0x20) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0980, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4048aec9, &(0x7f0000000840)={0x6, 0x0, @ioapic={0x2, 0x80, 0x7, 0x200, 0x0, [{0x4f, 0xa, 0x3}, {0x1, 0x2, 0x4, '\x00', 0x4}, {0x2, 0x4, 0x5, '\x00', 0x9}, {0x6, 0x1}, {0x0, 0x3, 0x8, '\x00', 0x2}, {0x9, 0x9, 0x7, '\x00', 0x7}, {0x80, 0xdc, 0x2, '\x00', 0xc}, {0x4, 0x4c, 0x6, '\x00', 0x3}, {0x1, 0xbc, 0xdf, '\x00', 0xfb}, {0x2, 0x40, 0x1, '\x00', 0x8}, {0x7, 0x7f, 0x9, '\x00', 0xfb}, {0x8d, 0x1, 0xf1, '\x00', 0x8}, {0xd, 0x1, 0xff, '\x00', 0xff}, {0x3, 0x3, 0x8, '\x00', 0x86}, {0x7, 0x3, 0xa}, {0x81, 0x0, 0x76, '\x00', 0x7}, {0x5, 0x7a, 0x8, '\x00', 0x9}, {0x3, 0x0, 0x6, '\x00', 0x8}, {0x8, 0x2, 0x42}, {0xd, 0x10, 0x5, '\x00', 0x2}, {0x8, 0x2, 0x8, '\x00', 0x9}, {0x4, 0x81, 0xb3, '\x00', 0x81}, {0x1, 0x7f, 0xc5, '\x00', 0x7}, {0x3, 0x2, 0x9, '\x00', 0x5}]}}) syz_io_uring_setup(0xcd3, &(0x7f0000000200)={0x0, 0x200096c, 0x1000, 0x1, 0x22a, 0x0, r2}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) syz_emit_ethernet(0x40, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @esp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x100, 0x0, 0x0, 0x32, 0x0, @remote, @local}, {0x4d2, 0x1, @basic, "", 0x0, 0x0}}}}}, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) write$UHID_INPUT(r6, &(0x7f00000015c0)={0x8, {"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", 0x1000}}, 0x1006) 53.071918483s ago: executing program 1 (id=744): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) 53.011890068s ago: executing program 33 (id=744): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) 51.654260684s ago: executing program 34 (id=598): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time={0x3, 0x5a62}, {0x0, 0x8}, {}, @raw32}, {0x0, 0x0, 0x7, 0x0, @time, {}, {}, @quote}, {0x4, 0x0, 0xf2, 0x9, @tick=0x7, {0x6, 0x9}, {0xff, 0x8}, @control={0x8, 0x9, 0x8}}, {0x7, 0x1, 0x6, 0x0, @time={0xa, 0x6}, {0x4, 0xf}, {0x9, 0xff}, @result={0x6, 0x2}}], 0x70) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {0xfd}, {0x2}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {0x8}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @tick=0x7f, {}, {}, @note={0x4, 0x0, 0x7, 0x9a, 0x20000}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0x7f}, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x7, 0x0, 0x0, 0x0, @time, {0x80}, {}, @raw8={"448cc816080000b4f270be53"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{0x0, 0x4}}}], 0xc4) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000300)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x9, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r2}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @ldst={0x1, 0x0, 0x3, 0x1}, @exit], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r5 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r5, 0xc0845658, &(0x7f0000000000)={0x0, @reserved}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{}, [@TCA_NETEM_LOSS={0x42, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0x8f}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x7fff, 0x7, 0x1}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x98}}, 0x0) 15.385439573s ago: executing program 2 (id=857): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$rxrpc(0x21, 0x2, 0x2) (rerun: 64) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r2, 0xa) (async) recvmmsg(r2, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018}) (async) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e", @ANYRES32, @ANYRES16=r4], 0x28}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setitimer(0x2, &(0x7f0000000340)={{0x77359400}, {0x7fffffffffffffff}}, 0x0) (async) r6 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async) getitimer(0x2, &(0x7f0000000000)) (async) sendto$inet(r5, &(0x7f0000000300)="12345678000001000000000100000001000000010101000000000001", 0x1c, 0x24008000, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) (async) sendto$inet(r5, 0x0, 0x0, 0x4040884, 0x0, 0x0) (async, rerun: 64) socket$inet(0xa, 0x801, 0x84) (rerun: 64) mount$fuse(0x0, 0x0, 0x0, 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) (async) capset(0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x238, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x224, 0x1, [@m_skbmod={0x44, 0x1, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @random="4389e70276dd"}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}]}, {0x4}, {0xc}, {0xc}}}, @m_mpls={0x30, 0xd, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_tunnel_key={0x130, 0x1b, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xfffffffc}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xd421}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}]}, {0xbe, 0x6, "03d96b57254acfbac1d4491407a12bfb52f1e2a437ae70ce0b4357df404de9930764a09f68b77ba955607a1e728f067819d7f0afaad98719a83a359fe3c05d8682f52d0daf335d7398b77c320fdac42b1a6024e985042c0be9306e06af3c16f789c9dfa101d3fb0277816c9028894a40b0814f9ad842dad7679ddc5dad8e66480f3e0c4a94c87b1cece587488c4d45e9c8426542d6524f8224a75ff622f7619c2361326b90020b5c0271be14bc51a0ac02b7dfeff68bf8cb2ed6"}, {0xc}, {0xc, 0x8, {0x4, 0x3}}}}, @m_gact={0x7c, 0xb, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1e53, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xa, 0x7f, 0x2, 0x5}}]}, {0x2b, 0x6, "a2c936f89978256d5b39f98cf201358c4ec939fe1f8571b9f500cc160fc7668014e9bb2332b7b3"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x238}}, 0x0) (async, rerun: 64) write$cgroup_type(r0, &(0x7f0000000100), 0x9) (rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x8400, 0x0) syz_kvm_setup_syzos_vm$x86(r7, &(0x7f000099a000/0x400000)=nil) 14.506312647s ago: executing program 2 (id=864): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) (async) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r2 = openat(r1, &(0x7f00000000c0)='./proc\x00', 0x103002, 0x110) write(r2, &(0x7f0000000000)='3', 0x4e) socket$kcm(0xa, 0x5, 0x0) syz_open_dev$sndpcmc(&(0x7f0000002900), 0x1, 0x2) 14.378197752s ago: executing program 2 (id=865): r0 = gettid() (async) setns(0xc9, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/tcp\x00') pread64(r1, &(0x7f0000001340)=""/102390, 0x18ff6, 0x18ff6) (async, rerun: 32) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async, rerun: 32) r2 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fffffffff000000010000028000000168", 0x14) (async) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) (async) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) (async) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) (async, rerun: 32) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000401000)}, 0x400000}) (async, rerun: 32) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f00000001c0)=0x2) (async, rerun: 32) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000300)={0x1}) (async, rerun: 32) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000200)=0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x437, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) mprotect(&(0x7f000029c000/0x1000)=nil, 0x1000, 0x1) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x20, 0x7800, 0x0, 0x3) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) 6.956601684s ago: executing program 2 (id=868): setns(0xc9, 0x0) setns(0xffffffffffffffff, 0x20000000) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x4402) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c", 0x3}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) sendfile(r1, r1, 0x0, 0xa00000000) setns(0xc9, 0x0) (async) setns(0xffffffffffffffff, 0x20000000) (async) syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x4402) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c", 0x3}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) (async) sendfile(r1, r1, 0x0, 0xa00000000) (async) 6.956332694s ago: executing program 2 (id=869): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x19b) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) (async) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x84) fgetxattr(r3, &(0x7f0000000180)=@known='trusted.overlay.upper\x00', 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x1, 0xffffffff, 0x20, 0x169}]}) r7 = openat$cgroup_ro(r0, &(0x7f0000002100)='cgroup.controllers\x00', 0x275a, 0x0) flock(r7, 0x2) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r8, &(0x7f0000000040)={0x2020}, 0x229) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) 6.95443864s ago: executing program 2 (id=871): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300020c00000000000000000000000300060000000000020000000000000000000000000000000200010000000000050009077fffffff030005000000000002000000ac9414aa0000000000000000020008000800"], 0x60}, 0x1, 0x7}, 0x0) (async) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x10, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x44, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0x5}, {0xfff3}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x1}]}, 0x44}}, 0x0) 5.901224885s ago: executing program 6 (id=888): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, 0x0) chdir(&(0x7f0000000100)='./file0\x00') (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000240)='pids.current\x00', 0x275a, 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES64=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00a1e57d6c7971bb7d5b688b2d634a5f296ed8a2aec859381639907cd849377130c1dfd3f17cee6f6e80c4291fff837de6c6eac95db7550000b26d2a46910259c855354bddd79220701b2264b70f9b572ef0c83ea298403760768bd04539eb9c69a518d7808e9f47db3dcd961239fe7f57f5f2108e379cd3db70d1465d8e9192ca51d8d8d6a5338c9699f6a1704a0630fd5f0205882a2bf4555b85219a504080163d5ab403036a8b219b22217cec876d876c3d242df71318b0fb3c53fe450d8a49c300000000e0d8857e5fcb88b02fc69c269952cc53c4caa95694dd318950f291a5db5e89fd9bf853a6838f5add7ed677cdb11d104fb881e635078956e72235689bf4e8c744ccbd2239eec835ec90feba6bf79b1e46b9c660bfca6cdc4448c0eb0bc77a602146d598441731ed4600"/317]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x100, 0x2}}, 0x50) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x7}, {0x6, 0x8d, 0x0, 0x1}]}) (async) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r2, &(0x7f00000083c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275000000000000000064b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895ca9bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="b000000000000000f9ffffffffffffff030000200000000008000000000000000400000000000000080000000000000088bc000009000000040000000000000005000000000000000500000000000000060000000000000073170000000000002e010000000000000700000008000000fafffff700c0000000000000", @ANYRES32, @ANYRES32=r5, @ANYRESOCT=r6], 0x0, 0x0, 0x0}) (async) setuid(r4) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r8 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xdf4, 0x80, 0x7, 0x2e5}) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000140)=[r9, r8], 0x2) (async) r10 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x4, 0x4, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) (async) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8], 0x0) (async) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffcd9) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0x0) (async) preadv(r11, &(0x7f0000000dc0)=[{&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000280)=""/9, 0x5}, {&(0x7f00000006c0)=""/240, 0xf0}, {&(0x7f00000007c0)=""/191, 0xbf}, {&(0x7f00000008c0)=""/149}, {&(0x7f0000000980)=""/182}, {&(0x7f0000000a40)=""/186}, {&(0x7f0000000c00)=""/236}, {&(0x7f0000000d00)=""/179}], 0x4, 0x0, 0x7) r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r11, r12, &(0x7f0000973000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x10, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x0, 'veth1_to_bond\x00', {0x4}, 0x7}) (async) ioctl$KVM_RUN(r12, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) 3.001454263s ago: executing program 5 (id=907): setns(0xc9, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94ce3377526beb5ab2c7b9ca5fa07558139ed03dc06270ee042", 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x7fff, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000100)="11", 0x1}, {&(0x7f0000001400)="e34d26a434f21bcbde1f689d8bbe191892a8dce1a6d9415ad35a52dfa0a81e9cf3c31c5f36d4eb5d191e396501951e5daf5b3bb3a1aa5eb7ce0823dbc3f0eab291cc4081f0ab382cff662b6f844376487df74df55b933d679bc3306000a8f6e5be4707d0304e75f44f7537aaa7f6797e6ceb7fb8ba91bb0324b16f6cd841bcb0bad9b35662b576e34a6a70657410525c3c5c1363d35b11f53790788bb00edf67af27c479ae5ab834ed3969d8bfc356f69881949a4118ba21da78130eac93bd6f1700b9def56dccdd18c555e348f1b10c4b1e045af1f2a36ba9"}, {&(0x7f0000001500)="0635cb95a253abd3824f1c9937bd1d86967549c679cf29d6d851c2a68b087f7a1b538ddf8b13f3e968"}], 0x1}}, {{&(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x0, @random="4a006ca000aa", 'lo\x00'}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000280)="62cfd6d7146cd424ff88bbfd20fab1c4bc6dbd3d48a4af77a97845931a9179d10ba9d923949f4edc2766b474ef4a37b0a1cd8bdc52f0644e80c9f938928a", 0x3e}], 0x1, &(0x7f0000000300)=[@mark={{0x14, 0x1, 0x24, 0x10003}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x80000001}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0xea87}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0xbbc}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000004c0)="ca4ef0ae6ea9933e5be81e40a6781be556be9de62ac6008280edd40a49d72a0b6e3ab8d4e7f34e313c483efef398db76ca9a32139fb83dc171b2914d27b17ddb9a27134556fce09774c4e52d92b4a1f00545112dd02f056340e121c2742f6792cbf63f34fffe6a6406dc23b68e88843c08a0da84479edbf941802e80fc75de3d55d2686425b6fa7098728c3df1bb073b221a172ef26b6eacd17f68f806ad4e3f887da71fd8998ae3782abceef7099c217a5321", 0xb3}, {&(0x7f0000000580)="336813deea50e85560afe26461d676969b5e71dd1f36f014d62585149e398469e1e45ef0122e647867b97abe120eeec47ec99bda4efd0f1e03b4982cb7079e92be66ca6650926963f4d4fe3dd9096e5e3d260ef6af1a1658fe796a1bb7631888ae748a5766ef96f05b8ad186ce7ea976d88019b01227e1d2702b05297a662fb3e15c1ad077df0e99dc99b7fc97d758a13a51febaf9f5ea6de5ac1787dbc7", 0x9e}, {&(0x7f0000001340)="9b6782bc47ca119c59f0ecd46a9e42e6aa4b41e1a8dd99841f7a229f66aac2a56ec5c08b5244e7cad59f3cbf9771d168aa20ee84eef50b0c34e29a23dfb1d07a522bc220847123cc85438fc0378a19bc650d75b3f4a52aa7b4717ccc75a5f946a9e10a249586c47b081f71f70762a738480eab9711783355cd4fe30f30ba894ad19dd4adf60e0480ab49849c5937a46393a81b5ed06cad1d1730233757a10855", 0xa0}, {&(0x7f0000000700)="842820a3be5191c0926b7b8ddcf5176c34dc6fbb5358227f07d24100e8d77312a8d06bc9d67028cf8642fdd90d008aea03913b94279533b6064bbc0da47e083ad376076382e1c023351c5ca3ed316ec1eb43fe4f3ce9c5ace6f81325cd4db12fc7cdcc1f20b0fa07364a70a75bfc8386c362c0e5f6f2188dd3ff319ec567981f4b2a7f08a4f25a32f78759f8f3e1b703bf7eeb205d946fd2505f50ae93d95db23bac9f73e7a65c", 0xa7}, {&(0x7f00000007c0)="dc9168ef1711f0b2381214d1ca54bc9166907cfd472e3727230cbd72aab0b1cc74105e4d8504c0b21e0b0084a8faf63ea63da17ac93c2b94865671ab9fb84834e7b5f9e24429129eb1163fa2c661b38fc5a55135121113647dbaeca595d8430ff02cecce2358957c32bcc438a5b327f90aaff6f0d401bc1d31d0", 0x7a}, {&(0x7f0000000840)="84557d69dc5f5ab4924998e442ef5b84c6090aacdfbe6bf09c19680aa34da25445c4f40f3ad63f595737e2950b181b0d772ad4af1a0ab797be5454a6f2233b279eb55556514cdb43614ade25ca988bccb16b4fd31f1be553ea7559521c70c879e70c7d750a1fdf18aa462dfdf034a91cd599263b3b540db12fe3ce17c7ba159107a9a8008aff919456a72619851fff2e38bdf4967c2dd071d458bbc4d46c05be9ebf5bd44d3bc83e28d615c0a72c37944a175b8e1a7f230e1056049ae8", 0xbd}, {&(0x7f0000000900)="689268100fe8c2684e2a21a0928b5345c398f905620724a565ad84c27e9b833287993ea8820b5eaac605b88e246e5d22614ee90936d5ced847ed1c40aec4e4aa9dbb89a143f8049b6c123551879dbb19ccb50f06b3aefd2e6289589d65ee38e0212040af0f7367864f6c851528ba7ec58b9c66fd653271e7de805786535da9dba0e3a6628b102123cc9ac410f94b45ba2e71f6553f28bfeeec31b5a7fc3ac15b52f46929e01fa6d0577cb1ed7ab1a37e7f32c88b19882819eb214e9180d2f4cd52", 0xc1}, {&(0x7f0000000a00)="286cc3cf9d72e11d54b17fc17700bdceced8b1c15b2373463a36190765822e9cf279b156343719a0bbc78593929ef1fa99b5d3e88a53561e659a876a8bd2705482fb3626cd8e4224f87d507211c7e216a3e94575a4faca948838e749253d748b6e511f359518e697d75065d7ee1800ce257f538de2ed29c54b96180ed42ec2f967835bd298fa0c2741336ddfa1db61c743bdc141c701988bc2323d7361019cc40096f32741003b6edd08b49a93b1e5e6014586789ab3ea4001ce5056099b8d92ea3355ca7d5ab2144b8c", 0xca}], 0x8}}, {{&(0x7f0000000b80)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x400000}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000c00)="dbd3b599dd52378416f89757bf87645da049e74c1042eac087543b1c05e9437342026159e27f50ceb65aa99bdf6bf826a010d4e0048223f219d44090d81d76cd570f1aa91b120b39493edec502cb72b4564eb7d7cd9bcc8e89361183406c9f1013fb1a78cd7e2fb85047520eb75c03b20daca98fad650a9ca609de0d0e581cbac76d16357d9b1ccb144fb48767200719d4f1b83ec3f38e51dcba03dc0f04974aec4d09edbe7c63f8aed0f283", 0xac}, {&(0x7f0000000cc0)="30bddc788b916b299c94f408e1f4d57209eb71af05260f6be9a12b171577010b5b07fecc24", 0x25}, {&(0x7f0000000d00)="c5c2b909603a3b34d15a68f25ff04c7d53420eae5ff0b2a4f2a5c468b80b9cb7999a61d93037a0178c3a304e5e185036153b53313649d57f1fb38e82b2c83fdb8f227ce6d038e0a8a50db0bc4ed35faf6fd5af0fb9e29186aa71a835d340c100a8550ab85276804e9e882c20f504d01de702131f864a078f6d229638da970844c1e14578a02055c0dcdd366d5da824177d7b04e7b501bf9f689b2d844292b89f7e49d01947dc094df97c36186d5e4bd8ebb9fbba5dce8658da899545c7f6d8be90114e85ce8ecca236b5c66a6995f82aa8f29781", 0xd4}, {&(0x7f0000000e00)="a289458602ddd649cfba16136a79edb73595843fd8afb25ffa6bc18d725854069c541f8f5af47bca0a357e2963fe5e9d3e7fe67550eb5ad170bb5c9a0a6e38295334a07fe845ecd239a6188ea5c76dc5e067ec0c47c38aa397c3c1dc944610d87c79547eee0f9fdf52cfa1fd856faaaad61be3b32475d9094016fdff849b6acb918e8c0ef642c76d129ab0d77d5f10ec2c133d5bdc8a9dbd1bb3bda096bcaf791a", 0xa1}, {&(0x7f0000000f00)="a80519e5bae97b7e4328505ab36a41d830152ccf8c5bba789d372785b36125c5827da092e49ed1b721ed9e4533e16bfd8667c2e28756d8f26cf8b2d430ed0a50171def823df1bff98b937b4553afe9a33f61da021208cef01488990180f8846d9e37056186b4de031bc2f50fb1b6845fffcf5b05011f01692222d5f16943422ecf8614bcfca175a09a80b070c064c236c5d78f97961e8532b1cb1e66b613719fb414dee9224d7560761973d0734082aa6da6c250cbe8770b11d02a92f59d436597d92fb4402bb8c9bd881b82e168eb0384141f0ac9f4fab812fd70b505dd1ab0d760", 0xe2}, {&(0x7f0000001000)="03d00760bed69f9debf67e6de68e45c055a85e376e12b4dfd1d7a513e7275557b61496d1ce5cc706556c4240c0564ffaf63dadb58cfdd07966f9c38bf855075fafd7a048d518cf2bc012e11455dd5002ba4ee171037e24efa48aa0d1c728c28bdd619145e2790172b81a2b461bed0d694004df80d59a0bb37645217dd7691ec4f44d479035de5ade5e2ff1cb465c1ddf02b8c5b81d8194774de308a29188fb834af01ab1ff2b23ebe6795b9b2ed1eda7b59c30fe6806094b49fa08febcb04e28a76d0b003f97c19c6cdadb084a0d", 0xce}, {&(0x7f0000001100)="e5f7e9e5bb1659b9c685a743f0910ae2fce284ff", 0x14}], 0x7, &(0x7f00000011c0)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xc07}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0xfffffffffffffd33, 0x1, 0x3d, 0x5e}}], 0x60}}], 0x4, 0x8015) 2.941734571s ago: executing program 5 (id=908): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x105, @local, 0x4b, 0x4}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xd3a, @mcast2, 0x3}, r4}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc60, @remote, 0x9}, r4, 0x9dffffff}}, 0x48) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r6, 0x11a, 0x5, 0x0, &(0x7f0000000040)=0x7ccd4176) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000001c00000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r7, r2, 0x25, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 2.881173886s ago: executing program 5 (id=909): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="28f9300b8815"}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x8000, 0x80, 0x8000, 0x9, {{0xe, 0x4, 0x2, 0x20, 0x38, 0x68, 0x0, 0xf, 0x2f, 0x0, @private=0xa010101, @rand_addr=0x64010101, {[@timestamp={0x44, 0x24, 0x97, 0x0, 0x3, [0x8f36, 0x2, 0x3, 0x2, 0xb, 0x2, 0x3, 0x0]}]}}}}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r2, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x40014) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x8, 0xd, 0x1, @private0, @rand_addr=' \x01\x00', 0x0, 0x80, 0x3, 0x5}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x58, &(0x7f0000000680)}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=ANY=[@ANYBLOB="440000001000010425bd70000000040000000000", @ANYRES32=r8, @ANYBLOB="03050011cc4b4d1c00ed6f0000240012800c00000100"/44], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000007c0)={'erspan0\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x1, 0x40, 0x9, 0xfffffffe, {{0xf, 0x4, 0x1, 0x2a, 0x3c, 0x67, 0x0, 0x2, 0x2f, 0x0, @local, @multicast1, {[@ra={0x94, 0x4}, @noop, @end, @timestamp_prespec={0x44, 0x1c, 0x8, 0x3, 0x8, [{@loopback, 0x8}, {@multicast1, 0x4}, {@local, 0x7ff}]}, @ra={0x94, 0x4}]}}}}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000800)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd8, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0xd6, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c00)={'ip_vti0\x00', &(0x7f0000000b00)={'gretap0\x00', 0x0, 0x700, 0x8, 0x678, 0x0, {{0x2a, 0x4, 0x2, 0x3, 0xa8, 0x68, 0x0, 0x65, 0x4, 0x0, @multicast1, @loopback, {[@generic={0x94, 0x3, '\a'}, @rr={0x7, 0x17, 0x7, [@rand_addr=0x64010100, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1a}, @remote, @multicast2]}, @timestamp_addr={0x44, 0x34, 0xb4, 0x1, 0x9, [{@multicast2, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x2}, {@local, 0x16}, {@local, 0x9163}, {@private=0xa010100, 0x5}, {@multicast2, 0x5}]}, @timestamp_prespec={0x44, 0x34, 0xe2, 0x3, 0xf, [{@remote, 0xc3}, {@multicast1, 0x7ff}, {@remote, 0x10000}, {@broadcast, 0x5}, {@loopback, 0x4}, {@empty, 0x9e}]}, @timestamp={0x44, 0x10, 0xb1, 0x0, 0x9, [0x885, 0x0, 0x97ce]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'sit0\x00', 0x0, 0x80, 0x7, 0x5, 0x8, {{0x16, 0x4, 0x0, 0x1, 0x58, 0x68, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010100, @remote, {[@timestamp={0x44, 0x1c, 0x27, 0x0, 0x6, [0x0, 0x7, 0x40000000, 0x8, 0x1000, 0x8]}, @rr={0x7, 0x7, 0x64, [@rand_addr=0x64010100]}, @end, @lsrr={0x83, 0x1f, 0xcf, [@loopback, @multicast1, @multicast2, @private=0xa010102, @multicast2, @multicast1, @multicast2]}]}}}}}) (async, rerun: 64) r13 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r13, &(0x7f00000001c0)={0x1d, r14}, 0x10) (async, rerun: 32) r15 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r16 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r16, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async, rerun: 32) getsockname$packet(r16, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (rerun: 32) sendmsg$nl_route(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r17, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async, rerun: 64) sendmsg$nl_route(r16, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r17], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'ip6tnl0\x00', &(0x7f0000000d00)={'ip6gre0\x00', 0x0, 0x4, 0xea, 0x5d, 0x1, 0x2, @mcast1, @local, 0x8000, 0x7800, 0x7, 0x66}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000080), 0xc, &(0x7f0000001480)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="a4060000", @ANYRES16=0x0, @ANYBLOB="000429bd7000fedbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="d80102803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400060000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000300000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000600", @ANYRES32=r1, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400030000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="80020280acd1bed700000100616374697665706f7274000000000000000063320c599d5e3bb82a23af9110cdc600"/56, @ANYRES32=r5, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400ff00000008000600", @ANYRES32=r6, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES16=r15, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="40000100240001007072696f726974790000000000000000000000000000000000000000000000000500030000000000080004000f00000008200600", @ANYRES32=r9, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=r10, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000500000008000100", @ANYRES32=0x0, @ANYBLOB="2002028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400000004003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000a00000008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400030000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000010008000600", @ANYRES32=r18, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000817000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB], 0x6a4}, 0x1, 0x0, 0x0, 0x800}, 0x1) 2.878650773s ago: executing program 6 (id=910): socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xb}]}, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x1) (async) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000000e) (async, rerun: 64) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0xba040, 0x0) (rerun: 64) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) (async) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f0000000040)=""/23, &(0x7f0000000100)=0x17) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc0000000000000000000000000000007f00000100000000000000000000000000000004000100000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="02000000000000000400000000000000000000000000000000000000000000000000000000000000fdffffffffffffff000000000000000000000000000000001e000000ffffffff04000000000000000000000000000000000000000000000009000000000000000001020000000000"], 0xb8}}, 0x8004850) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYRESDEC=r0], 0xb8}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14410000", @ANYRES16=0x0, @ANYBLOB="170900000000e4ffffff01000000"], 0x14}}, 0x4000) (async, rerun: 32) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC=r4], 0x0, 0x0, 0x53, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x40004}, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r7 = syz_io_uring_setup(0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2000000}, &(0x7f0000000100)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000000110)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}}) (async) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0xfffffffc}}) io_uring_enter(r7, 0x6, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000003540)={'wlan0\x00'}) (rerun: 64) 2.741815454s ago: executing program 6 (id=911): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r1, 0xd, 0x0, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000972000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000100)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x40000105, 0x0, 0x6}]}) 2.601667938s ago: executing program 6 (id=912): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x82842) ioctl$SNDCTL_TMR_STOP(r0, 0x5403) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @remote, @val={@void, {0x8100, 0x4, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x68, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4e21, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x800, 0x0, 0x0, {[@eol]}}}}}}}, 0x0) 2.601135399s ago: executing program 6 (id=913): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r1, 0x400, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @remote}, "090086ddffff0000"}}}}}, 0x0) fcntl$setlease(r1, 0x400, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r2, &(0x7f0000001880)=[{&(0x7f00000005c0)="06c3", 0x2}, {&(0x7f0000000880)="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", 0x61e}], 0x2) 2.531447793s ago: executing program 6 (id=914): mknod$loop(&(0x7f0000000200)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r2, 0x0, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) 2.231475905s ago: executing program 4 (id=918): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) syz_open_dev$midi(&(0x7f0000000040), 0xb6, 0x48801) (async) r3 = syz_open_dev$midi(&(0x7f0000000040), 0xb6, 0x48801) ppoll(&(0x7f0000000000)=[{r3, 0x1100}, {r3, 0xc169}], 0x2, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) 2.141452636s ago: executing program 4 (id=919): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2c, r2, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x200008d5}, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) pselect6(0x40, &(0x7f0000000900)={0x6, 0x0, 0x1ff, 0x3, 0x5, 0x52a9396a, 0x1, 0x8}, 0x0, &(0x7f0000000980)={0x8, 0x7fff, 0x0, 0xc, 0xf, 0x9, 0x3, 0x9}, &(0x7f00000009c0)={0x0, 0x3938700}, 0x0) 2.051353857s ago: executing program 4 (id=920): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$l2tp6(0xa, 0x2, 0x73) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000280)={0x0, @bt={0x8, 0x1, 0x1, 0x0, 0x5, 0x246, 0x2, 0x5, 0x3, 0x9, 0x7, 0xbf, 0x7ff, 0xffffffff, 0x19, 0x2, {0x727a, 0x5ea}, 0x5, 0x2}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl(r3, 0x4048aecb, &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f000000e400)={0x2020}, 0x2020) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000280)={0x0, @bt={0x8, 0x1, 0x1, 0x0, 0x5, 0x246, 0x2, 0x5, 0x3, 0x9, 0x7, 0xbf, 0x7ff, 0xffffffff, 0x19, 0x2, {0x727a, 0x5ea}, 0x5, 0x2}}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl(r3, 0x4048aecb, &(0x7f0000000240)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) (async) read$FUSE(r4, &(0x7f000000e400)={0x2020}, 0x2020) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) close_range(r5, 0xffffffffffffffff, 0x0) (async) 1.890295598s ago: executing program 4 (id=921): pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000280)="14", 0x1}], 0x1, 0x9, 0xfffffffc, 0xa0) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10) (async) sendmsg$inet_sctp(r0, &(0x7f00000003c0)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4004001) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x25, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x81, 0x1001, 0x3d0, 0x80000004, 0x84, 0x7ff, 0x2}, 0x9c) r1 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x4, 0x2, 0x1, 0x0, 0x40}) (async) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, {0x0}, 0x400000}) (async) unshare(0x64000600) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) syz_emit_vhci(&(0x7f0000001040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_conn_rsp={{0x3, 0x81, 0x8}, {0xb8cd, 0x7, 0x1, 0xf7}}, @l2cap_info_rsp={{0xb, 0x7, 0x21}, {0x10, 0x6, "e3ea34d577547adb0c6b9b3c2766d02055e4f9e0a7713684a169619404"}}]}}, 0x3a) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000e3e2ba05febe", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028008000d0080000000"], 0x40}}, 0x0) (async) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000200012800b0001006d61637365630000100002800c0004000300000100c2800008003f6f93f7f04b0cbc970500", @ANYRES32=r5, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 1.810777578s ago: executing program 5 (id=922): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r4], 0x3c}}, 0x0) write(r1, &(0x7f0000000140)="ffffffffffff0011223344558864", 0xe) rt_sigsuspend(&(0x7f00000000c0)={[0x7e44]}, 0x8) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040)=0x80000004, 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 861.398285ms ago: executing program 5 (id=923): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000e80)="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", 0x19d}], 0x1}}], 0x1, 0x100000c0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x4088000, &(0x7f0000000140)="3cc1f8ce577f2e4d8956", 0xa, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="d7a2fbf41dbc06b1b69830c35a9cc5e0ffa66a64014fee59ae9d0715ec974d5fe91640d3122775dc9ef0939cd1bd35c3c394f035979724ac02538385fcd0f7becf3b6fc2e9bd7d2a0815f26a3741a4218cef06c4002df1196a2f81b4f1f7d9ea9572e94bcbd6663b3bb2b587fa51d6ce5b30e18f05973656071f8a3434da6ea70292c3ef76b9a36835cf3338e77b02278d8da1051de5353019e7877d1e16cae5bf4b9d930e887be69b915fd640f5ba4bc01d759443b4c1351076cf3bbed83177e65f3f3b77a7592b0733a84a19352341bc25332cf8e0bafde7684190ef2bfd6090b942c18e3248e9a23df0cf3e") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='wlan1\x00', 0x10) ioctl(r1, 0x3b8e, &(0x7f0000000000)="10") ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000580)={0x28, 0x1, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl(r1, 0x3b89, &(0x7f0000001000)="3000000004000000030000000600"/24) 530.042109ms ago: executing program 4 (id=924): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x98d882, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRES64=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRES64=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r3, &(0x7f0000000480)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x108}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000006380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x802, 0x40) writev(r4, &(0x7f0000000380)=[{&(0x7f0000000700)="f313", 0x2}], 0x1) close(r3) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$binfmt_format(r7, &(0x7f0000000a00)='1\x00', 0x2) (async) write$binfmt_format(r7, &(0x7f0000000a00)='1\x00', 0x2) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r8, &(0x7f0000000040)={0x1f, @none}, 0x3f) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, &(0x7f0000000500)=0x1, 0x4) (async) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, &(0x7f0000000500)=0x1, 0x4) r9 = syz_io_uring_setup(0x2ae1, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x3, 0x306}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r9, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) unshare(0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010024bd7000fcdbdf252100000008000300", @ANYRES32=r13, @ANYBLOB="14002c80080000008009"], 0x30}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) accept$inet(r2, 0x0, 0x0) (async) accept$inet(r2, 0x0, 0x0) 361.411509ms ago: executing program 4 (id=925): newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r0, r0, 0x0) setuid(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) quotactl_fd$Q_GETFMT(r2, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x70bd28, 0x25dfdbfd, {0xa, 0x40, 0x5, 0xc8, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0x1, 0x8, 0x7d7, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40080) 0s ago: executing program 5 (id=926): r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x5, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x4011) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x101, 0x67}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xbf5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40014}, 0x800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r2, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004411}, 0x40010) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80088}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c804}, 0x400c010) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r3, 0x100, 0x70bd26, 0xffffff01, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10010}, 0x20040800) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000600)={[0x10000]}, 0x8, 0x800) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, r6, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x80}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvtap0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffffffffff04}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x97}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x14) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x74, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bridge\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:apt_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}]}, 0x74}, 0x1, 0x0, 0x0, 0x81}, 0x4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xeb}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40844}, 0x4) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, r3, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000811) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, r7, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}]}, 0x34}, 0x1, 0x0, 0x0, 0x400e044}, 0x44) pipe2$watch_queue(&(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat(r9, &(0x7f0000000cc0)='./file0\x00', 0x2929c0, 0x2) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000d40), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, r10, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x4080) sendmsg$IPSET_CMD_SWAP(r9, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x20, 0x6, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044004}, 0x1) syz_open_dev$audion(&(0x7f0000000f40), 0x6, 0xa82) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r1) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40000100}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x30, r11, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000011}, 0x4640ac2cb135b983) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r12, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x90a24}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xc0, r7, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xfff, 0x32}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x766a}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7c}]]}, 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl(r12, 0x5, &(0x7f0000001240)="314cc8d3edf59681b8ef0764cad1165dab1f6d7fe46b3ec8991b80acc472cf2f9b3a55e6f1a5c9cd996232f3d65919766cc176d32ae84ba9a851ebd024bdc282a2e742e21c480fbb908a02c20ec2ded3a68bdc1ab9484c1e3bd413f22e9258a4f1f27d0a8a3bdc2ddd37ebfda4809ccdf5db44032653c1a88e1a9994110cd7f5cb0aa779ab4e85a4a1f59dad8b6b4685b593771a87f5a2cf973ad89b9cabe2165b689bec3eec0110777b30cb3e126cc43d43915ee9e2495bd99c67d6d50651e849d52f02b1e176571aaf535ac4af") kernel console output (not intermixed with test programs): g to 11 [ 88.740783][ T25] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.740796][ T25] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 88.740808][ T25] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 88.740826][ T25] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 88.740839][ T25] usb 8-1: config 168 interface 0 has no altsetting 0 [ 88.742066][ T25] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 88.742083][ T25] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 88.742100][ T25] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 88.742113][ T25] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.742126][ T25] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 88.742138][ T25] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 88.742152][ T25] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 88.742165][ T25] usb 8-1: config 168 interface 0 has no altsetting 0 [ 88.743911][ T25] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 88.743928][ T25] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 88.743945][ T25] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 88.743959][ T25] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.743971][ T25] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 88.743984][ T25] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 88.743997][ T25] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 88.744010][ T25] usb 8-1: config 168 interface 0 has no altsetting 0 [ 88.747381][ T25] usb 8-1: string descriptor 0 read error: -22 [ 88.747473][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.761289][ T25] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 88.961898][ T2338] usb 8-1: USB disconnect, device number 7 [ 89.062956][ T7388] syz.2.378(7388): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 89.183381][ T7367] adutux: No device or device unplugged -19 [ 89.317623][ T5717] net_ratelimit: 243 callbacks suppressed [ 89.317646][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.359384][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.359495][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.361862][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.364250][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.364408][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.398398][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.439429][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.439639][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.443295][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.526107][ T7405] netlink: 'syz.1.385': attribute type 30 has an invalid length. [ 89.695602][ T7424] jffs2: notice: (7424) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 89.749218][ T7428] 0x000000000000-0x000000000008 : "" [ 89.819166][ T7428] ftl_cs: FTL header corrupt! [ 89.849596][ T7439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.390'. [ 90.267728][ T44] kauditd_printk_skb: 38 callbacks suppressed [ 90.267748][ T44] audit: type=1400 audit(90.190:666): avc: denied { override_creds } for pid=7464 comm="syz.3.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 90.329433][ T65] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 90.335656][ T44] audit: type=1400 audit(90.260:667): avc: denied { write } for pid=7471 comm="syz.3.398" name="usb_gadget" dev="configfs" ino=2351 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 90.337829][ T44] audit: type=1400 audit(90.260:668): avc: denied { write } for pid=7471 comm="syz.3.398" name="functions" dev="configfs" ino=19070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 90.338084][ T7472] LUN: removable file: (no medium) [ 90.379814][ T44] audit: type=1400 audit(90.310:669): avc: denied { append } for pid=7473 comm="syz.1.399" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 90.402924][ T44] audit: type=1400 audit(90.330:670): avc: denied { read } for pid=7471 comm="syz.3.398" name="file" dev="configfs" ino=20070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 90.435048][ T44] audit: type=1400 audit(90.360:671): avc: denied { write } for pid=7473 comm="syz.1.399" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 90.437470][ T44] audit: type=1400 audit(90.360:672): avc: denied { map } for pid=7473 comm="syz.1.399" path="/dev/sr0" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 90.480166][ T65] usb 9-1: Using ep0 maxpacket: 8 [ 90.481664][ T65] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 90.482559][ T65] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 90.482596][ T65] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 90.482609][ T65] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 90.482622][ T65] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 90.482634][ T65] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.482654][ T65] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.511561][ T7481] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 90.537810][ T44] audit: type=1400 audit(90.460:673): avc: denied { read } for pid=7480 comm="syz.1.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.579717][ T7489] netlink: 'syz.1.403': attribute type 39 has an invalid length. [ 90.747146][ T65] usb 9-1: usb_control_msg returned -32 [ 90.747171][ T65] usbtmc 9-1:16.0: can't read capabilities [ 90.956138][ T7496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.405'. [ 91.476023][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.407'. [ 91.476092][ T7529] bridge_slave_1: left allmulticast mode [ 91.476111][ T7529] bridge_slave_1: left promiscuous mode [ 91.476291][ T7529] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.482822][ T7529] bridge_slave_0: left allmulticast mode [ 91.482846][ T7529] bridge_slave_0: left promiscuous mode [ 91.483017][ T7529] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.674153][ T7550] fuse: Unknown parameter '00000000000000000000' [ 91.778528][ T7568] netlink: 128 bytes leftover after parsing attributes in process `syz.1.415'. [ 91.825643][ T44] audit: type=1400 audit(91.750:674): avc: denied { write } for pid=7572 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.846015][ T7560] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.846403][ T7560] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.884057][ T44] audit: type=1400 audit(91.810:675): avc: denied { module_request } for pid=7580 comm="syz.1.417" kmod="net-pf-35-proto-4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 91.921545][ T7560] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.921579][ T7560] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.978729][ T7560] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.978756][ T7560] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.027911][ T7589] FAULT_INJECTION: forcing a failure. [ 92.027911][ T7589] name failslab, interval 1, probability 0, space 0, times 0 [ 92.027936][ T7589] CPU: 1 UID: 0 PID: 7589 Comm: syz.1.418 Tainted: G L syzkaller #0 PREEMPT(full) [ 92.027953][ T7589] Tainted: [L]=SOFTLOCKUP [ 92.027959][ T7589] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.027967][ T7589] Call Trace: [ 92.027973][ T7589] [ 92.027979][ T7589] dump_stack_lvl+0x100/0x190 [ 92.028015][ T7589] should_fail_ex.cold+0x5/0xa [ 92.028035][ T7589] should_failslab+0xc2/0x120 [ 92.028057][ T7589] __kmalloc_cache_noprof+0x91/0x6d0 [ 92.028073][ T7589] ? lockdep_init_map_type+0x5c/0x250 [ 92.028090][ T7589] ? snd_seq_prioq_new+0x3f/0x110 [ 92.028112][ T7589] snd_seq_prioq_new+0x3f/0x110 [ 92.028128][ T7589] snd_seq_queue_alloc+0x12b/0x540 [ 92.028144][ T7589] snd_seq_ioctl_create_queue+0xa9/0x370 [ 92.028162][ T7589] call_seq_client_ctl+0xa3/0x130 [ 92.028180][ T7589] snd_seq_kernel_client_ctl+0x35/0x50 [ 92.028198][ T7589] alloc_seq_queue+0xdb/0x180 [ 92.028216][ T7589] ? __pfx_alloc_seq_queue+0x10/0x10 [ 92.028241][ T7589] ? find_held_lock+0x2b/0x80 [ 92.028262][ T7589] ? mark_held_locks+0x40/0x70 [ 92.028280][ T7589] snd_seq_oss_open+0x2b2/0xa10 [ 92.028303][ T7589] odev_open+0x6f/0x90 [ 92.028318][ T7589] ? __pfx_odev_open+0x10/0x10 [ 92.028334][ T7589] soundcore_open+0x2e3/0x5a0 [ 92.028359][ T7589] ? __pfx_soundcore_open+0x10/0x10 [ 92.028376][ T7589] chrdev_open+0x234/0x6a0 [ 92.028393][ T7589] ? __pfx_chrdev_open+0x10/0x10 [ 92.028411][ T7589] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 92.028428][ T7589] do_dentry_open+0x6ab/0x14d0 [ 92.028444][ T7589] ? __pfx_chrdev_open+0x10/0x10 [ 92.028465][ T7589] vfs_open+0x82/0x3f0 [ 92.028485][ T7589] path_openat+0x19fa/0x2440 [ 92.028505][ T7589] ? __pfx_path_openat+0x10/0x10 [ 92.028526][ T7589] do_file_open+0x20e/0x430 [ 92.028544][ T7589] ? __pfx_do_file_open+0x10/0x10 [ 92.028571][ T7589] ? _raw_spin_unlock+0x28/0x50 [ 92.028593][ T7589] ? alloc_fd+0x471/0x7a0 [ 92.028614][ T7589] do_sys_openat2+0x10f/0x1e0 [ 92.028632][ T7589] ? __pfx_do_sys_openat2+0x10/0x10 [ 92.028655][ T7589] __x64_sys_openat+0x12d/0x210 [ 92.028675][ T7589] ? __pfx___x64_sys_openat+0x10/0x10 [ 92.028701][ T7589] do_syscall_64+0x123/0x790 [ 92.028716][ T7589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.028729][ T7589] RIP: 0033:0x7f3b7899e159 [ 92.028740][ T7589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.028752][ T7589] RSP: 002b:00007f3b76bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 92.028764][ T7589] RAX: ffffffffffffffda RBX: 00007f3b78c25fa0 RCX: 00007f3b7899e159 [ 92.028772][ T7589] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00000000ffffff9c [ 92.028780][ T7589] RBP: 00007f3b78a3506b R08: 0000000000000000 R09: 0000000000000000 [ 92.028787][ T7589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.028795][ T7589] R13: 00007f3b78c26038 R14: 00007f3b78c25fa0 R15: 00007ffd419d9178 [ 92.028810][ T7589] [ 92.036245][ T7589] trusted_key: encrypted_key: insufficient parameters specified [ 92.099379][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.099409][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.139426][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.139454][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.139477][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.139493][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.139513][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.139528][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.162922][ T7594] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20000 [ 92.198740][ T7563] IPVS: starting estimator thread 0... [ 92.274483][ T7605] sch_tbf: burst 65537 is lower than device lo mtu (65550) ! [ 92.289448][ T7597] IPVS: using max 25 ests per chain, 60000 per kthread [ 92.560415][ T7621] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 93.036985][ T7648] fuse: Unknown parameter '00000000000000000000' [ 93.196363][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.196564][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.196759][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.196936][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.197110][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.197300][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.197472][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.197641][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.197846][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.198019][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.198184][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.198355][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.198534][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.198702][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.198892][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.199070][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.199238][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.199592][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.199764][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.199945][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.200112][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.200278][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.200448][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.200619][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.200789][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.201449][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.201654][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.201837][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.202009][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.202524][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.202691][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.202861][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.203031][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.203199][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.203438][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.203611][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.203823][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.203994][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.204162][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.204332][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.204502][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.204673][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.204854][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.205032][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.205245][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.205424][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.205673][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.205863][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.206049][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.206226][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.206399][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.206574][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.206751][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.206933][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.207106][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.207286][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.207463][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.207641][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.207863][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.208042][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.208219][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.208398][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.208569][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.208738][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.208922][ T7653] 9p: Unknown access argument 18446744073709551615: -34 [ 93.227790][ T25] usb 9-1: USB disconnect, device number 6 [ 93.312507][ T7653] __nla_validate_parse: 1 callbacks suppressed [ 93.312520][ T7653] netlink: 108 bytes leftover after parsing attributes in process `syz.3.437'. [ 93.316250][ T7653] netlink: 108 bytes leftover after parsing attributes in process `syz.3.437'. [ 93.316264][ T7653] netlink: 84 bytes leftover after parsing attributes in process `syz.3.437'. [ 93.595968][ T7681] netlink: 'syz.4.443': attribute type 4 has an invalid length. [ 93.608944][ T7676] netlink: 40 bytes leftover after parsing attributes in process `syz.3.442'. [ 93.609011][ T7676] netlink: 40 bytes leftover after parsing attributes in process `syz.3.442'. [ 93.609059][ T7676] netlink: 40 bytes leftover after parsing attributes in process `syz.3.442'. [ 93.609106][ T7676] netlink: 40 bytes leftover after parsing attributes in process `syz.3.442'. [ 93.609149][ T7676] netlink: 40 bytes leftover after parsing attributes in process `syz.3.442'. [ 93.609191][ T7676] netlink: 40 bytes leftover after parsing attributes in process `syz.3.442'. [ 93.609464][ T7676] netlink: 40 bytes leftover after parsing attributes in process `syz.3.442'. [ 94.355693][ T5717] net_ratelimit: 3528 callbacks suppressed [ 94.355713][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.399529][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.399747][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.399834][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.401208][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.402637][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.405361][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.459358][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.459543][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.459614][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.681429][ T7728] fuse: Unknown parameter '00000000000000000000' [ 95.559467][ T2338] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 95.709929][ T2338] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 95.710896][ T2338] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 95.710913][ T2338] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 95.710924][ T2338] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 95.710937][ T2338] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 95.712760][ T2338] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.712773][ T2338] usb 6-1: Product: syz [ 95.712781][ T2338] usb 6-1: Manufacturer: syz [ 95.712793][ T2338] usb 6-1: SerialNumber: syz [ 95.715873][ T2338] usb 6-1: config 0 descriptor?? [ 95.921380][ T2338] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 95.967318][ T7777] input: syz0 as /devices/virtual/input/input10 [ 95.972550][ T44] kauditd_printk_skb: 14 callbacks suppressed [ 95.972561][ T44] audit: type=1400 audit(95.900:690): avc: denied { ioctl } for pid=7776 comm="syz.4.469" path="socket:[22187]" dev="sockfs" ino=22187 ioctlcmd=0x6f01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.126885][ T30] usb 6-1: USB disconnect, device number 3 [ 96.137933][ T7796] fuse: Unknown parameter 'user00000000000000000000' [ 96.219030][ T7799] xt_hashlimit: size too large, truncated to 1048576 [ 96.328182][ T44] audit: type=1400 audit(96.250:691): avc: denied { append } for pid=7803 comm="syz.2.473" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 96.364850][ T44] audit: type=1400 audit(96.290:692): avc: denied { read } for pid=7805 comm="syz.2.474" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 96.364998][ T44] audit: type=1400 audit(96.290:693): avc: denied { open } for pid=7805 comm="syz.2.474" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 96.721002][ T7563] IPVS: starting estimator thread 0... [ 96.740425][ T7813] IPVS: Scheduler module ip_vs_mh not found [ 96.811418][ T7816] IPVS: using max 43 ests per chain, 103200 per kthread [ 96.982402][ T7829] netlink: 'syz.3.480': attribute type 7 has an invalid length. [ 96.982417][ T7829] netlink: 'syz.3.480': attribute type 8 has an invalid length. [ 96.999452][ T1713] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 97.160285][ T1713] usb 6-1: not running at top speed; connect to a high speed hub [ 97.160306][ T1713] usb 6-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 97.163360][ T1713] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25702, setting to 64 [ 97.166581][ T1713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.166606][ T1713] usb 6-1: Product: syz [ 97.166619][ T1713] usb 6-1: Manufacturer: syz [ 97.166632][ T1713] usb 6-1: SerialNumber: syz [ 97.174807][ T7813] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 97.176561][ T1713] oti6858 6-1:1.0: oti6858 converter detected [ 97.185123][ T1713] usb 6-1: oti6858 converter now attached to ttyUSB0 [ 97.380072][ T1713] usb 6-1: USB disconnect, device number 4 [ 97.393883][ T1713] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 97.394205][ T1713] oti6858 6-1:1.0: device disconnected [ 97.679031][ T7856] fuse: Unknown parameter 'user00000000000000000000' [ 97.850997][ T5734] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 97.851032][ T5734] Bluetooth: hci2: Injecting HCI hardware error event [ 97.851948][ T67] Bluetooth: hci2: hardware error 0x00 [ 97.911067][ T7859] CUSE: unknown device info "" [ 97.911078][ T7859] CUSE: unknown device info "" [ 97.911082][ T7859] CUSE: unknown device info "" [ 97.911087][ T7859] CUSE: unknown device info "" [ 97.911091][ T7859] CUSE: zero length info key specified [ 97.930892][ T44] audit: type=1400 audit(97.860:694): avc: denied { map } for pid=7860 comm="syz.1.491" path="/proc/363/task/364" dev="proc" ino=21104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 97.942396][ T44] audit: type=1400 audit(97.870:695): avc: denied { append } for pid=7864 comm="syz.3.492" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 98.015703][ T7876] syz_tun: entered allmulticast mode [ 98.018685][ T44] audit: type=1400 audit(97.940:696): avc: denied { name_connect } for pid=7871 comm="syz.4.495" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 98.119116][ T7884] team0: No ports can be present during mode change [ 98.253534][ T7892] rnbd_client L607: Mapping device / on session s+, (access_mode: rw, nr_poll_queues: 0) [ 98.254433][ T7892] rnbd_client L1256: Session s+ not found, and path parameter not given [ 98.330193][ T7898] __nla_validate_parse: 67 callbacks suppressed [ 98.330210][ T7898] netlink: 24 bytes leftover after parsing attributes in process `syz.4.504'. [ 98.360848][ T7898] overlayfs: failed lookup in lower (newroot/107, name='file0', err=-40): overlapping layers [ 98.389157][ T44] audit: type=1400 audit(98.310:697): avc: denied { read } for pid=7899 comm="syz.4.505" dev="nsfs" ino=4026533324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 98.389476][ T44] audit: type=1400 audit(98.320:698): avc: denied { open } for pid=7899 comm="syz.4.505" path="net:[4026533324]" dev="nsfs" ino=4026533324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 98.441262][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 98.456990][ T5734] Bluetooth: hci2: unexpected event for opcode 0x080f [ 98.599620][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 98.600153][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 98.602506][ T9] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 98.602547][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.602567][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 98.602587][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 98.602607][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.602640][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.675980][ T7915] netlink: 32 bytes leftover after parsing attributes in process `syz.2.510'. [ 98.809694][ T9] usb 8-1: usb_control_msg returned -32 [ 98.809720][ T9] usbtmc 8-1:16.0: can't read capabilities [ 99.021368][ T44] audit: type=1400 audit(355.006:699): avc: denied { connect } for pid=7919 comm="syz.4.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.366614][ T7925] overlay: ./file0 is not a directory [ 99.389644][ C0] net_ratelimit: 252 callbacks suppressed [ 99.389666][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.389915][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.390037][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.392134][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.392241][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.392627][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.393486][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.393578][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.395917][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.418615][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.448087][ T7933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7933 comm=syz.1.517 [ 99.448690][ T7933] 0x000000000000-0x000000000008 : "" [ 99.458209][ T7933] ftl_cs: FTL header corrupt! [ 99.529041][ T7944] tmpfs: Group quota inode hardlimit too large. [ 99.579505][ T7939] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 99.583622][ T7951] /dev/sg0: Can't lookup blockdev [ 99.722428][ T62] usb 8-1: USB disconnect, device number 8 [ 99.919383][ T67] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 100.222467][ T7975] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 100.264499][ T7977] x_tables: duplicate underflow at hook 2 [ 100.270909][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.530'. [ 100.403346][ T7993] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 100.405552][ T7993] bond2 (unregistering): Released all slaves [ 100.488607][ T7993] xt_SECMARK: invalid mode: 2 [ 100.562542][ T8001] gfs2: error -5 reading superblock [ 100.619449][ T62] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 100.789378][ T62] usb 8-1: Using ep0 maxpacket: 32 [ 100.792141][ T62] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 100.792948][ T62] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 100.792970][ T62] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 100.792983][ T62] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 100.792996][ T62] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 100.794614][ T62] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.794626][ T62] usb 8-1: Product: syz [ 100.794634][ T62] usb 8-1: Manufacturer: syz [ 100.794641][ T62] usb 8-1: SerialNumber: syz [ 100.800904][ C1] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 100.802892][ T62] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input11 [ 101.003735][ T8009] netlink: 32 bytes leftover after parsing attributes in process `syz.3.533'. [ 101.021518][ T62] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 101.021568][ T62] (id 0x00) [ 101.079568][ T62] rc_core: IR keymap rc-imon-pad not found [ 101.079588][ T62] Registered IR keymap rc-empty [ 101.079648][ T62] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 101.079664][ T62] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 101.102097][ T62] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 101.103543][ T62] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input12 [ 101.107836][ T62] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:9> initialized [ 101.146280][ T8018] io-wq is not configured for unbound workers [ 101.596714][ T44] kauditd_printk_skb: 14 callbacks suppressed [ 101.596733][ T44] audit: type=1400 audit(357.576:714): avc: denied { setattr } for pid=8038 comm="syz.2.543" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 101.622196][ T8053] overlayfs: failed to resolve 'lower2': -2 [ 101.676394][ T8057] netlink: 24 bytes leftover after parsing attributes in process `syz.4.546'. [ 101.997850][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.551'. [ 102.054281][ T8078] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 102.089712][ T8080] gadgetfs: bound to dummy_udc driver [ 102.344467][ T65] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 102.345680][ C1] gadgetfs: connected [ 102.347510][ T65] gadgetfs: disconnected [ 102.368222][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.554'. [ 102.368546][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.554'. [ 102.368705][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.554'. [ 102.368831][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.554'. [ 102.387640][ T8093] 8021q: adding VLAN 0 to HW filter on device eth0 [ 102.388536][ T8093] 8021q: adding VLAN 0 to HW filter on device eth1 [ 102.389951][ T8093] 8021q: adding VLAN 0 to HW filter on device eth2 [ 102.390840][ T8093] 8021q: adding VLAN 0 to HW filter on device eth3 [ 102.391617][ T8093] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.489771][ C1] gadgetfs: connected [ 102.490535][ T65] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 102.491089][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.493437][ C1] gadgetfs: configuration #1 [ 102.500728][ T65] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/input/input13 [ 102.827691][ T8068] gadgetfs: suspended from state 3 [ 102.831065][ T8068] gadgetfs: disconnected [ 102.842850][ T65] usb 5-1: USB disconnect, device number 2 [ 103.366097][ T1713] usb 8-1: USB disconnect, device number 9 [ 103.432254][ T8099] syzkaller1: entered promiscuous mode [ 103.432270][ T8099] syzkaller1: entered allmulticast mode [ 103.705332][ T8104] syz.3.558 (8104): drop_caches: 2 [ 104.720015][ T37] wlan1: Trigger new scan to find an IBSS to join [ 104.998182][ T8073] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 105.001423][ T8095] __nla_validate_parse: 72 callbacks suppressed [ 105.001437][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.555'. [ 105.018147][ T5717] net_ratelimit: 162 callbacks suppressed [ 105.018163][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.053648][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.560'. [ 105.056485][ T8111] ipvlan1: entered promiscuous mode [ 105.057103][ T8111] ipvlan1: left promiscuous mode [ 105.069335][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.069515][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.069580][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.071784][ T8107] netlink: 20 bytes leftover after parsing attributes in process `syz.4.559'. [ 105.071815][ T8107] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 105.072006][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.072141][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.087699][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.087852][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.104697][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.105568][ T44] audit: type=1400 audit(361.086:715): avc: denied { unmount } for pid=6323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 105.116744][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.560'. [ 105.120219][ T8111] ipvlan1: entered promiscuous mode [ 105.120733][ T8111] ipvlan1: left promiscuous mode [ 105.134011][ T8119] 9pnet_fd: Insufficient options for proto=fd [ 105.177258][ T8121] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 105.250028][ T8133] fuse: Unknown parameter 'user_i00000000000000000000' [ 105.250527][ T44] audit: type=1400 audit(361.236:716): avc: denied { read write } for pid=8132 comm="syz.4.565" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 105.250573][ T44] audit: type=1400 audit(361.236:717): avc: denied { open } for pid=8132 comm="syz.4.565" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 105.286711][ T8130] netlink: 36 bytes leftover after parsing attributes in process `syz.1.561'. [ 105.705838][ T44] audit: type=1400 audit(361.686:718): avc: denied { name_bind } for pid=8146 comm="syz.2.568" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 105.706480][ T8147] l2tp_ppp: sess 2/0: no socket in recv [ 105.710855][ T44] audit: type=1400 audit(361.696:719): avc: denied { associate } for pid=8146 comm="syz.2.568" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 106.009539][ T1713] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 106.170081][ T1713] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 106.171291][ T1713] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 106.171313][ T1713] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.171327][ T1713] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 106.171358][ T1713] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.172705][ T1713] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 106.172718][ T1713] usb 7-1: Product: syz [ 106.172725][ T1713] usb 7-1: Manufacturer: syz [ 106.179882][ T1713] cdc_wdm 7-1:1.0: skipping garbage [ 106.179897][ T1713] cdc_wdm 7-1:1.0: skipping garbage [ 106.180060][ T44] audit: type=1326 audit(362.166:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8158 comm="syz.4.573" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf0979e159 code=0x0 [ 106.191952][ T1713] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 106.191971][ T1713] cdc_wdm 7-1:1.0: Unknown control protocol [ 106.234412][ T44] audit: type=1400 audit(362.216:721): avc: denied { create } for pid=8158 comm="syz.4.573" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 106.354122][ T8176] netlink: 'syz.1.577': attribute type 1 has an invalid length. [ 106.382255][ T9] usb 7-1: USB disconnect, device number 8 [ 106.435507][ T44] audit: type=1400 audit(362.416:722): avc: denied { ioctl } for pid=8179 comm="syz.1.579" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=24851 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 106.598120][ T44] audit: type=1326 audit(362.576:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8181 comm="syz.1.580" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3b7899e159 code=0x0 [ 106.829702][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 107.017550][ T9] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 107.018927][ T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 107.018943][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.018953][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 107.018974][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.020995][ T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 107.021009][ T9] usb 7-1: Product: syz [ 107.021017][ T9] usb 7-1: Manufacturer: syz [ 107.027161][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 107.027173][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 107.031918][ T9] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 107.031930][ T9] cdc_wdm 7-1:1.0: Unknown control protocol [ 107.441454][ T44] audit: type=1400 audit(363.426:724): avc: denied { accept } for pid=8184 comm="syz.1.581" lport=60354 faddr=::ffff:172.30.0.2 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 107.441937][ T44] audit: type=1400 audit(363.426:725): avc: denied { setopt } for pid=8184 comm="syz.1.581" lport=60354 faddr=::ffff:172.30.0.2 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 107.503177][ T8188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.582'. [ 107.503249][ T8188] bridge_slave_1: left allmulticast mode [ 107.503268][ T8188] bridge_slave_1: left promiscuous mode [ 107.504014][ T8188] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.506185][ T8188] bridge_slave_0: left allmulticast mode [ 107.506200][ T8188] bridge_slave_0: left promiscuous mode [ 107.506319][ T8188] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.562278][ T8193] netlink: 236 bytes leftover after parsing attributes in process `syz.3.583'. [ 107.562300][ T8193] netlink: 'syz.3.583': attribute type 1 has an invalid length. [ 107.564799][ T8193] jffs2: notice: (8193) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 107.568086][ T44] audit: type=1400 audit(363.546:726): avc: denied { write } for pid=8192 comm="syz.3.583" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.572614][ T44] audit: type=1400 audit(363.556:727): avc: denied { set_context_mgr } for pid=8195 comm="syz.1.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 107.572645][ T44] audit: type=1400 audit(363.556:728): avc: denied { create } for pid=8192 comm="syz.3.583" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 107.574758][ T8197] binder: 8195:8197 ioctl c0306201 200000000640 returned -22 [ 107.583122][ T44] audit: type=1400 audit(363.566:729): avc: denied { write } for pid=8192 comm="syz.3.583" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.584576][ T44] audit: type=1400 audit(363.566:730): avc: denied { map } for pid=8195 comm="syz.1.584" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=24868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 107.584606][ T44] audit: type=1400 audit(363.566:731): avc: denied { read } for pid=8195 comm="syz.1.584" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=24868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 107.586018][ T44] audit: type=1400 audit(363.566:732): avc: denied { write } for pid=8192 comm="syz.3.583" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.586045][ T44] audit: type=1400 audit(363.566:733): avc: denied { remove_name } for pid=8192 comm="syz.3.583" name="file0" dev="jffs2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.611485][ T8203] netlink: 64 bytes leftover after parsing attributes in process `syz.4.585'. [ 107.611506][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.585'. [ 107.611521][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.585'. [ 107.770579][ T7563] wlan1: Trigger new scan to find an IBSS to join [ 107.785742][ T8216] gadgetfs: bound to dummy_udc driver [ 107.896870][ T8228] fuse: Unknown parameter 'user_id00000000000000000000' [ 107.992823][ T8216] gadgetfs: suspended from state 2 [ 108.011464][ T8235] xt_TPROXY: Can be used only with -p tcp or -p udp [ 108.025116][ T8229] kvm: pic: non byte read [ 108.039528][ T62] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 108.619558][ T8244] 9pnet_virtio: no channels available for device 127.0.0.1 [ 108.679197][ T8248] netlink: 'syz.1.602': attribute type 1 has an invalid length. [ 108.691614][ T8248] bond2: entered promiscuous mode [ 108.691822][ T8248] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.706122][ T8248] bond2 (unregistering): Released all slaves [ 108.710860][ T8251] binder: BINDER_SET_CONTEXT_MGR already set [ 108.710870][ T8251] binder: 8250:8251 ioctl 4018620d 200000000340 returned -16 [ 108.711330][ T8251] binder: 8250:8251 ioctl c0306201 200000000040 returned -14 [ 108.857389][ T8261] xt_CT: No such helper "pptp" [ 108.953620][ T8275] fuse: Unknown parameter 'user_id00000000000000000000' [ 109.010077][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.010107][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.010126][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.010144][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.052956][ T8280] Need at least one configuration in g1. [ 109.053130][ T8280] udc dummy_udc.0: failed to start g1: -22 [ 109.053145][ T8280] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 109.058046][ T8280] UDC core: g1: couldn't find an available UDC or it's busy [ 109.294878][ T8293] netlink: 'syz.4.618': attribute type 10 has an invalid length. [ 110.033431][ T5717] net_ratelimit: 226 callbacks suppressed [ 110.033451][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.089380][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.089647][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.089749][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.092679][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.092840][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.100996][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.106695][ T8309] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 110.128771][ T8311] syz.2.624 (8311): drop_caches: 2 [ 110.147450][ T8311] __nla_validate_parse: 10 callbacks suppressed [ 110.147462][ T8311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.624'. [ 110.148017][ T8311] netlink: 'syz.2.624': attribute type 21 has an invalid length. [ 110.148065][ T8311] netlink: 152 bytes leftover after parsing attributes in process `syz.2.624'. [ 110.159339][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.160846][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.160966][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.209367][ T1713] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 110.325385][ T8335] netlink: 'syz.2.631': attribute type 4 has an invalid length. [ 110.372577][ T8337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.372790][ T8337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.399943][ T1713] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 110.400848][ T1713] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.400869][ T1713] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.400899][ T1713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.575203][ T8337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.575408][ T8337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.582764][ T8337] netlink: 'syz.2.632': attribute type 29 has an invalid length. [ 110.618438][ T1713] usb 6-1: usb_control_msg returned -32 [ 110.618475][ T1713] usbtmc 6-1:16.0: can't read capabilities [ 110.720315][ T37] wlan1: Creating new IBSS network, BSSID d2:2d:b7:72:c2:a6 [ 112.763533][ T8415] netlink: 'syz.2.654': attribute type 4 has an invalid length. [ 112.764494][ T8415] netlink: 'syz.2.654': attribute type 4 has an invalid length. [ 112.951875][ T65] usb 6-1: USB disconnect, device number 5 [ 113.034405][ T44] kauditd_printk_skb: 29 callbacks suppressed [ 113.034428][ T44] audit: type=1400 audit(369.016:763): avc: denied { setopt } for pid=8434 comm="syz.4.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 113.353455][ T8447] usb usb4: usbfs: process 8447 (syz.4.664) did not claim interface 0 before use [ 113.589863][ T44] audit: type=1400 audit(369.566:764): avc: denied { create } for pid=8455 comm="syz.4.667" name="#19" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 113.589908][ T44] audit: type=1400 audit(369.576:765): avc: denied { link } for pid=8455 comm="syz.4.667" name="#19" dev="tmpfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 113.590390][ T44] audit: type=1400 audit(369.576:766): avc: denied { rename } for pid=8455 comm="syz.4.667" name="#1a" dev="tmpfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 113.660956][ T8461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8461 comm=syz.4.668 [ 113.663191][ T8464] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8464 comm=syz.4.668 [ 113.875709][ T8476] netlink: 44 bytes leftover after parsing attributes in process `syz.4.670'. [ 113.876020][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.670'. [ 113.942491][ T8479] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [100] [ 113.942507][ T8479] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 113.942516][ T8479] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 113.942545][ T8479] One or more global auth toks could not properly register; rc = [-22] [ 113.942570][ T8479] Error validating options; rc = [-22] [ 113.957578][ T44] audit: type=1400 audit(369.936:767): avc: denied { write } for pid=8478 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.004594][ T44] audit: type=1400 audit(369.986:768): avc: denied { write } for pid=8482 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.108245][ T44] audit: type=1400 audit(370.086:769): avc: denied { write } for pid=8487 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.167215][ T44] audit: type=1400 audit(370.146:770): avc: denied { write } for pid=8495 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.176983][ T8498] netlink: 32 bytes leftover after parsing attributes in process `syz.2.673'. [ 114.222272][ T8502] netlink: 64 bytes leftover after parsing attributes in process `syz.2.675'. [ 114.242757][ T44] audit: type=1400 audit(370.226:771): avc: denied { write } for pid=8500 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.289934][ T44] audit: type=1400 audit(370.266:772): avc: denied { write } for pid=8510 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.297217][ T8513] overlayfs: failed to resolve 'dont_hash': -2 [ 114.298373][ T8513] overlayfs: failed to resolve './debug/ieee80211/phy0/aql_enable': -2 [ 114.313701][ T8513] syzkaller0: left promiscuous mode [ 114.313723][ T8513] syzkaller0: left allmulticast mode [ 114.315321][ T8513] fuse: Bad value for 'fd' [ 114.332569][ T8515] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 115.123893][ T5717] net_ratelimit: 226 callbacks suppressed [ 115.123915][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.169483][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.169789][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.169916][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.176477][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.176614][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.222680][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.269561][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.269771][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.269889][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.297356][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.685'. [ 116.572434][ T8621] FAULT_INJECTION: forcing a failure. [ 116.572434][ T8621] name failslab, interval 1, probability 0, space 0, times 0 [ 116.572459][ T8621] CPU: 1 UID: 0 PID: 8621 Comm: syz.4.697 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.572477][ T8621] Tainted: [L]=SOFTLOCKUP [ 116.572483][ T8621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.572493][ T8621] Call Trace: [ 116.572498][ T8621] [ 116.572504][ T8621] dump_stack_lvl+0x100/0x190 [ 116.572538][ T8621] should_fail_ex.cold+0x5/0xa [ 116.572558][ T8621] should_failslab+0xc2/0x120 [ 116.572579][ T8621] kmem_cache_alloc_noprof+0x92/0x6a0 [ 116.572594][ T8621] ? __mt_dup+0x61e/0xce0 [ 116.572616][ T8621] __mt_dup+0x61e/0xce0 [ 116.572632][ T8621] ? __pfx___mt_dup+0x10/0x10 [ 116.572650][ T8621] ? lock_acquire+0x1d1/0x380 [ 116.572663][ T8621] ? get_mm_exe_file+0x25/0x1a0 [ 116.572687][ T8621] dup_mmap+0x3d0/0x2370 [ 116.572708][ T8621] ? do_raw_spin_lock+0x128/0x260 [ 116.572732][ T8621] ? __pfx_dup_mmap+0x10/0x10 [ 116.572748][ T8621] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 116.572769][ T8621] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 116.572789][ T8621] ? __lock_acquire+0x5c0/0x1f40 [ 116.572809][ T8621] ? lock_acquire+0x1d1/0x380 [ 116.572822][ T8621] ? copy_process+0x4816/0x8380 [ 116.572841][ T8621] copy_process+0x4821/0x8380 [ 116.572863][ T8621] ? __pfx_copy_process+0x10/0x10 [ 116.572877][ T8621] ? futex_wake+0x4ea/0x5e0 [ 116.572894][ T8621] kernel_clone+0x176/0x9d0 [ 116.572909][ T8621] ? __pfx_kernel_clone+0x10/0x10 [ 116.572931][ T8621] __do_sys_clone+0xd9/0x120 [ 116.572945][ T8621] ? __pfx___do_sys_clone+0x10/0x10 [ 116.572997][ T8621] do_syscall_64+0x123/0x790 [ 116.573019][ T8621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.573038][ T8621] RIP: 0033:0x7fcf0979e159 [ 116.573056][ T8621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.573076][ T8621] RSP: 002b:00007fcf0a695fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 116.573097][ T8621] RAX: ffffffffffffffda RBX: 00007fcf09a25fa0 RCX: 00007fcf0979e159 [ 116.573105][ T8621] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020100000 [ 116.573132][ T8621] RBP: 00007fcf0983506b R08: 0000000000000000 R09: 0000000000000000 [ 116.573141][ T8621] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 116.573149][ T8621] R13: 00007fcf09a26038 R14: 00007fcf09a25fa0 R15: 00007ffdb156fb58 [ 116.573167][ T8621] [ 116.695047][ T8627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.700'. [ 117.131625][ T8629] i2c-slave-eeprom 0-0001: i2c_slave_register: client slave flag not set. You might see address collisions [ 117.131650][ T8629] i2c-slave-eeprom 0-0001: i2c_slave_register: invalid address [ 117.132600][ T8629] i2c-slave-eeprom 0-0001: probe with driver i2c-slave-eeprom failed with error -22 [ 117.134893][ T8629] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x01 [ 117.156871][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.709'. [ 117.328909][ T8638] x_tables: duplicate underflow at hook 1 [ 117.579395][ T25] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 117.660759][ T8650] Cannot find del_set index 2 as target [ 117.729646][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 117.730449][ T25] usb 6-1: New USB device found, idVendor=0499, idProduct=5009, bcdDevice= 0.40 [ 117.734185][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.734217][ T25] usb 6-1: Product: Ð’ [ 117.734232][ T25] usb 6-1: Manufacturer: Ð [ 117.734247][ T25] usb 6-1: SerialNumber: п鳀䷌톀䩫㼼ꪥﯡȲꟶ饧ﶦ᜛紉盜郣犷嗌ퟬ舀ん蟚來勘맨᭫⓱솾﹡ᕑ휔矦乳۟懢í‘麉ﮘ⪊ꙗ¤䠮贮ä±ê·¸ä‡ƒé’Šê¤¤çµ­èš—ᄧëžã¼’⽽梦ã„쿓轢젮ꘆæžê•‘ę쥰䡞骬骽팽ᎀ뫑端ë£ä¥ºå´ªé…·êœ§ [ 117.854594][ T8653] No such timeout policy "syz1" [ 117.960190][ T25] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 117.960833][ T25] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 117.962886][ T25] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 117.966416][ T25] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 117.968745][ T25] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 118.013034][ T25] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 118.018325][ T25] usb 6-1: USB disconnect, device number 6 [ 118.038690][ T5739] udevd[5739]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.426551][ T8670] ptrace attach of "/syz-executor exec"[5729] was attempted by " ¥(vƒ\x0a"[8670] [ 118.461193][ T8670] ptrace attach of ""[8671] was attempted by ""[8670] [ 118.501352][ T44] kauditd_printk_skb: 9 callbacks suppressed [ 118.501372][ T44] audit: type=1400 audit(374.486:782): avc: denied { shutdown } for pid=8672 comm="syz.1.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 118.554530][ T8675] netlink: 'syz.1.720': attribute type 33 has an invalid length. [ 118.554548][ T8675] netlink: 152 bytes leftover after parsing attributes in process `syz.1.720'. [ 118.621612][ T8675] hub 1-0:1.0: USB hub found [ 118.621973][ T8675] hub 1-0:1.0: 2 ports detected [ 119.015604][ T8681] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 119.062593][ T8685] fuse: Unknown parameter '0x0000000000000003' [ 119.131164][ T44] audit: type=1800 audit(375.116:783): pid=8688 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.715" name="nullb0" dev="tmpfs" ino=1037 res=0 errno=0 [ 119.367397][ T8697] netlink: 48 bytes leftover after parsing attributes in process `syz.4.719'. [ 119.463115][ T8700] netlink: 28 bytes leftover after parsing attributes in process `syz.2.721'. [ 119.492672][ T44] audit: type=1400 audit(375.476:784): avc: denied { read } for pid=8702 comm="syz.4.723" name="trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 119.493390][ T44] audit: type=1400 audit(375.476:785): avc: denied { open } for pid=8702 comm="syz.4.723" path="/193/trace/events/sched/sched_switch/trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 119.496886][ T8704] overlayfs: failed to resolve '/Ä A~[¿‹þçUóhl7u•–tï;¤C¼(Vc!aÁã9Æb5øÉ@hõˈß9¯5Èa': -2 [ 119.526498][ T44] audit: type=1400 audit(375.506:786): avc: denied { unmount } for pid=6323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 119.530188][ T8706] fuse: fd is not a fuse device [ 119.556920][ T8709] batman_adv: batadv0: Adding interface: dummy0 [ 119.556932][ T8709] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.556948][ T8709] batman_adv: batadv0: Interface activated: dummy0 [ 119.589124][ T8708] netlink: 'syz.4.726': attribute type 10 has an invalid length. [ 119.589141][ T8708] netlink: 40 bytes leftover after parsing attributes in process `syz.4.726'. [ 119.589158][ T8708] batadv0: entered promiscuous mode [ 119.589167][ T8708] batadv0: entered allmulticast mode [ 119.591891][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.726'. [ 120.075536][ T8735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.075798][ T8735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.084333][ T44] audit: type=1400 audit(376.066:787): avc: denied { ioctl } for pid=8733 comm="syz.1.735" path="socket:[28725]" dev="sockfs" ino=28725 ioctlcmd=0x6153 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 120.108306][ T8740] fuse: Unknown parameter '0x0000000000000003' [ 120.139605][ C0] net_ratelimit: 254 callbacks suppressed [ 120.139625][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.140152][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.140401][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.142428][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.143627][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.143799][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.147332][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.196150][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.196281][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.196403][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.329781][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 120.469505][ T1713] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 120.480320][ T10] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 120.481275][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.481313][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 120.481334][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 120.481365][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.620197][ T1713] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 120.621946][ T1713] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.621965][ T1713] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.621977][ T1713] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 120.621997][ T1713] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.623663][ T1713] usb 9-1: config 0 descriptor?? [ 120.700527][ T10] cxacru 6-1:1.0: send of cm 0x90 failed (-71) [ 120.704750][ T8749] cxacru 6-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 120.704940][ T8749] cxacru 6-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 120.704947][ T44] audit: type=1400 audit(376.686:788): avc: denied { firmware_load } for pid=8749 comm="cxacru" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 120.706132][ T10] usb 6-1: USB disconnect, device number 7 [ 121.034807][ T1713] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 121.034836][ T1713] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 121.034855][ T1713] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 121.034867][ T1713] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 121.034879][ T1713] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 121.034891][ T1713] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 121.034903][ T1713] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 121.034915][ T1713] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 121.034927][ T1713] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 121.034939][ T1713] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 121.059793][ T1713] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 121.297074][ T5740] syz_tun (unregistering): left allmulticast mode [ 121.514224][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.586031][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.701971][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.718072][ T8765] netlink: 56 bytes leftover after parsing attributes in process `syz.2.745'. [ 121.718959][ T8765] netlink: 'syz.2.745': attribute type 2 has an invalid length. [ 121.765408][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.856419][ T8772] fuse: Unknown parameter '0x0000000000000003' [ 121.883581][ T5734] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 121.884220][ T5734] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 121.887923][ T5734] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 121.888716][ T5734] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 121.889208][ T5734] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 121.918634][ T12] bridge_slave_1: left promiscuous mode [ 121.918837][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.921773][ T12] bridge_slave_0: left allmulticast mode [ 121.921786][ T12] bridge_slave_0: left promiscuous mode [ 121.921931][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.999652][ T44] audit: type=1400 audit(377.976:789): avc: denied { write } for pid=8779 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.072506][ T44] audit: type=1400 audit(378.056:790): avc: denied { write } for pid=8782 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.080871][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.094922][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.096052][ T12] bond0 (unregistering): Released all slaves [ 122.098923][ T12] bond1 (unregistering): Released all slaves [ 122.135311][ T5444] 8021q: adding VLAN 0 to HW filter on device eth6 [ 122.330094][ T12] tipc: Disabling bearer [ 122.334201][ T12] tipc: Left network mode [ 122.337481][ T12] rxrpc: Leaked peer 125 {1} 127.0.0.1:7003 [ 122.411504][ T5444] 8021q: adding VLAN 0 to HW filter on device eth7 [ 122.585747][ T12] hsr_slave_0: left promiscuous mode [ 122.586556][ T12] hsr_slave_1: left promiscuous mode [ 122.587188][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.587206][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.588219][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.588235][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.602938][ T12] veth1_macvtap: left promiscuous mode [ 122.602963][ T12] veth0_macvtap: left promiscuous mode [ 122.603008][ T12] veth1_vlan: left promiscuous mode [ 122.603039][ T12] veth0_vlan: left promiscuous mode [ 122.765000][ T12] team0 (unregistering): Port device team_slave_1 removed [ 122.776678][ T12] team0 (unregistering): Port device team_slave_0 removed [ 122.856955][ T5444] 8021q: adding VLAN 0 to HW filter on device eth8 [ 122.943589][ T8773] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.943676][ T8773] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.943737][ T8773] bridge_slave_0: entered allmulticast mode [ 122.944572][ T8773] bridge_slave_0: entered promiscuous mode [ 122.947124][ T8773] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.947208][ T8773] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.947266][ T8773] bridge_slave_1: entered allmulticast mode [ 122.948079][ T8773] bridge_slave_1: entered promiscuous mode [ 122.965102][ T8773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.966843][ T8773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.984516][ T8773] team0: Port device team_slave_0 added [ 122.986090][ T8773] team0: Port device team_slave_1 added [ 122.997717][ T8773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.997730][ T8773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.997749][ T8773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.998614][ T8773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.998627][ T8773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.998650][ T8773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.020456][ T8773] hsr_slave_0: entered promiscuous mode [ 123.020951][ T8773] hsr_slave_1: entered promiscuous mode [ 123.021331][ T8773] debugfs: 'hsr0' already exists in 'hsr' [ 123.021344][ T8773] Cannot create hsr debugfs directory [ 123.069839][ T8829] netlink: 68 bytes leftover after parsing attributes in process `syz.2.753'. [ 123.136815][ T12] IPVS: stop unused estimator thread 0... [ 123.171299][ T8773] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 123.178557][ T8773] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 123.184795][ T5444] 8021q: adding VLAN 0 to HW filter on device eth9 [ 123.184954][ T8773] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 123.194751][ T8773] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 123.195277][ T8773] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 123.197824][ T8773] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 123.198454][ T8773] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 123.201761][ T8773] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 123.230041][ T8773] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.230095][ T8773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.230208][ T8773] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.230257][ T8773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.256482][ T30] usb 9-1: USB disconnect, device number 7 [ 123.261105][ T5734] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 123.273134][ T5734] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 123.275313][ T8773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.275400][ T5734] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 123.276144][ T5734] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 123.277249][ T5734] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 123.301943][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.312702][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.324904][ T8849] fuse: Unknown parameter '0x0000000000000003' [ 123.346947][ T8773] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.374815][ T6974] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.374899][ T6974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.379924][ T6974] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.379970][ T6974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.677975][ T44] kauditd_printk_skb: 8 callbacks suppressed [ 123.677988][ T44] audit: type=1400 audit(379.656:799): avc: denied { getopt } for pid=8871 comm="syz.2.757" lport=33102 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 123.690071][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.701735][ T8773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.718992][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.758'. [ 123.813230][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.825511][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.758'. [ 123.904780][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.758'. [ 123.905970][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.919615][ T67] Bluetooth: hci3: command tx timeout [ 124.010985][ T8843] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.011059][ T8843] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.011123][ T8843] bridge_slave_0: entered allmulticast mode [ 124.011937][ T8843] bridge_slave_0: entered promiscuous mode [ 124.038260][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.044915][ T8843] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.044991][ T8843] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.045071][ T8843] bridge_slave_1: entered allmulticast mode [ 124.045833][ T8843] bridge_slave_1: entered promiscuous mode [ 124.073181][ T8843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.085596][ T8843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.121975][ T8843] team0: Port device team_slave_0 added [ 124.124385][ T8843] team0: Port device team_slave_1 added [ 124.144294][ T44] audit: type=1400 audit(380.126:800): avc: denied { watch watch_reads } for pid=8888 comm="syz.2.760" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 124.150524][ T8843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.150541][ T8843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.150564][ T8843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.152025][ T8843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.152035][ T8843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.152057][ T8843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.237566][ T8891] can: request_module (can-proto-0) failed. [ 124.244639][ T44] audit: type=1326 audit(380.226:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8893 comm="syz.2.762" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9b9f9e159 code=0x0 [ 124.264781][ T8773] veth0_vlan: entered promiscuous mode [ 124.278255][ T8896] netlink: 'syz.4.763': attribute type 21 has an invalid length. [ 124.278270][ T8896] netlink: 128 bytes leftover after parsing attributes in process `syz.4.763'. [ 124.285644][ T8843] hsr_slave_0: entered promiscuous mode [ 124.286096][ T8843] hsr_slave_1: entered promiscuous mode [ 124.286444][ T8843] debugfs: 'hsr0' already exists in 'hsr' [ 124.286456][ T8843] Cannot create hsr debugfs directory [ 124.291881][ T8896] netlink: 'syz.4.763': attribute type 4 has an invalid length. [ 124.291895][ T8896] netlink: 'syz.4.763': attribute type 5 has an invalid length. [ 124.291902][ T8896] netlink: 3 bytes leftover after parsing attributes in process `syz.4.763'. [ 124.300938][ T8896] jffs2: notice: (8896) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 124.314133][ T13] bridge_slave_1: left allmulticast mode [ 124.314160][ T13] bridge_slave_1: left promiscuous mode [ 124.314345][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.316224][ T13] bridge_slave_0: left allmulticast mode [ 124.316238][ T13] bridge_slave_0: left promiscuous mode [ 124.316335][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.423031][ T13] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 124.431032][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.433255][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.434288][ T13] bond0 (unregistering): Released all slaves [ 124.437275][ T13] bond1 (unregistering): Released all slaves [ 124.460622][ T8773] veth1_vlan: entered promiscuous mode [ 124.521708][ T13] tipc: Left network mode [ 124.614508][ T8773] veth0_macvtap: entered promiscuous mode [ 124.617050][ T8773] veth1_macvtap: entered promiscuous mode [ 124.625512][ T8773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.637003][ T8773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.682108][ T44] audit: type=1400 audit(380.666:802): avc: denied { write } for pid=8908 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.727613][ T44] audit: type=1400 audit(380.706:803): avc: denied { mounton } for pid=8911 comm="syz.4.766" path="/proc/618/task" dev="proc" ino=29104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 124.753372][ T44] audit: type=1400 audit(380.736:804): avc: denied { write } for pid=8914 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.784821][ T8843] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 124.788476][ T8843] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 124.796543][ T8843] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 124.822953][ T8843] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 124.823823][ T8843] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 124.828661][ T8843] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 124.835592][ T8843] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 124.849714][ T8843] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 124.852086][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.853289][ T5444] 8021q: adding VLAN 0 to HW filter on device eth10 [ 124.907047][ T13] hsr_slave_0: left promiscuous mode [ 124.908763][ T13] hsr_slave_1: left promiscuous mode [ 124.910237][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.910250][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.911565][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.911575][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.912257][ T8931] fuse: Unknown parameter 'fd0x0000000000000003' [ 124.915661][ T13] veth1_macvtap: left promiscuous mode [ 124.915687][ T13] veth0_macvtap: left promiscuous mode [ 124.915738][ T13] veth1_vlan: left promiscuous mode [ 124.915753][ T13] veth0_vlan: left promiscuous mode [ 125.042358][ T13] team0 (unregistering): Port device team_slave_1 removed [ 125.054182][ T13] team0 (unregistering): Port device team_slave_0 removed [ 125.190409][ T5780] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.204079][ T7562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.204100][ T7562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.238792][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.238808][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.246133][ T44] audit: type=1400 audit(381.226:805): avc: denied { mounton } for pid=8773 comm="syz-executor" path="/syzkaller.vKMCRI/syz-tmp" dev="sda1" ino=2040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 125.270567][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.273685][ T44] audit: type=1400 audit(381.256:806): avc: denied { mounton } for pid=8773 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 125.297418][ T8843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.300749][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.309815][ T8843] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.313758][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.313808][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.318900][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.318948][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.330658][ T44] audit: type=1400 audit(381.316:807): avc: denied { write } for pid=8946 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.361932][ T67] Bluetooth: hci4: command tx timeout [ 125.363820][ T5717] net_ratelimit: 131 callbacks suppressed [ 125.363834][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.366413][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.366621][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.395445][ T8950] syzkaller1: entered promiscuous mode [ 125.395460][ T8950] syzkaller1: entered allmulticast mode [ 125.395823][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.395964][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.396107][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.438099][ T44] audit: type=1400 audit(381.416:808): avc: denied { write } for pid=8951 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.472983][ T13] IPVS: stop unused estimator thread 0... [ 125.497697][ T5444] 8021q: adding VLAN 0 to HW filter on device eth11 [ 125.653280][ T5444] 8021q: adding VLAN 0 to HW filter on device eth12 [ 125.659774][ T8843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.763135][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.809389][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.809701][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.809816][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.817478][ T8843] veth0_vlan: entered promiscuous mode [ 125.827261][ T8843] veth1_vlan: entered promiscuous mode [ 125.845358][ T8843] veth0_macvtap: entered promiscuous mode [ 125.847566][ T8843] veth1_macvtap: entered promiscuous mode [ 125.856150][ T8843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.860662][ T8843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.872330][ T5444] 8021q: adding VLAN 0 to HW filter on device eth13 [ 125.899793][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.899840][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.899867][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.899892][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.943334][ T6981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.943355][ T6981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.970449][ T6966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.970471][ T6966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.002457][ T67] Bluetooth: hci3: command tx timeout [ 126.099594][ T8996] netlink: 48 bytes leftover after parsing attributes in process `syz.6.755'. [ 126.286836][ T9019] FAULT_INJECTION: forcing a failure. [ 126.286836][ T9019] name failslab, interval 1, probability 0, space 0, times 0 [ 126.286868][ T9019] CPU: 0 UID: 0 PID: 9019 Comm: syz.5.778 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.286893][ T9019] Tainted: [L]=SOFTLOCKUP [ 126.286900][ T9019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.286911][ T9019] Call Trace: [ 126.286919][ T9019] [ 126.286927][ T9019] dump_stack_lvl+0x100/0x190 [ 126.286974][ T9019] should_fail_ex.cold+0x5/0xa [ 126.287002][ T9019] should_failslab+0xc2/0x120 [ 126.287033][ T9019] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 126.287056][ T9019] ? sidtab_sid2str_get+0x84/0x670 [ 126.287084][ T9019] ? sidtab_sid2str_get+0x17a/0x670 [ 126.287114][ T9019] kmemdup_noprof+0x29/0x60 [ 126.287133][ T9019] sidtab_sid2str_get+0x17a/0x670 [ 126.287162][ T9019] security_sid_to_context_core+0x373/0x700 [ 126.287192][ T9019] avc_audit_post_callback+0x109/0x910 [ 126.287222][ T9019] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 126.287248][ T9019] ? skb_put+0x138/0x180 [ 126.287288][ T9019] ? audit_log_n_string+0x2a3/0x5a0 [ 126.287316][ T9019] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 126.287342][ T9019] common_lsm_audit+0x23f/0x2b0 [ 126.287368][ T9019] ? __pfx_common_lsm_audit+0x10/0x10 [ 126.287391][ T9019] ? find_held_lock+0x2b/0x80 [ 126.287421][ T9019] ? rcu_is_watching+0x13/0xc0 [ 126.287448][ T9019] slow_avc_audit+0x186/0x210 [ 126.287477][ T9019] ? __pfx_slow_avc_audit+0x10/0x10 [ 126.287510][ T9019] ? find_held_lock+0x2b/0x80 [ 126.287535][ T9019] ? avc_has_extended_perms+0x33a/0x1080 [ 126.287561][ T9019] ? avc_has_extended_perms+0x33a/0x1080 [ 126.287592][ T9019] avc_has_extended_perms+0x9b7/0x1080 [ 126.287629][ T9019] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 126.287660][ T9019] ? kasan_quarantine_put+0x104/0x240 [ 126.287685][ T9019] ? find_held_lock+0x2b/0x80 [ 126.287716][ T9019] ? tomoyo_path_number_perm+0x28f/0x580 [ 126.287744][ T9019] ? tomoyo_path_number_perm+0x188/0x580 [ 126.287770][ T9019] ? __pfx_futex_wait+0x10/0x10 [ 126.287797][ T9019] ? __lock_acquire+0x5c0/0x1f40 [ 126.287822][ T9019] ioctl_has_perm.constprop.0.isra.0+0x376/0x540 [ 126.287853][ T9019] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 126.287881][ T9019] ? __fget_files+0x34/0x3d0 [ 126.287916][ T9019] ? selinux_file_ioctl+0x13b/0x290 [ 126.287938][ T9019] selinux_file_ioctl+0x13b/0x290 [ 126.287964][ T9019] security_file_ioctl+0xfb/0x230 [ 126.287989][ T9019] __x64_sys_ioctl+0xb7/0x210 [ 126.288012][ T9019] do_syscall_64+0x123/0x790 [ 126.288041][ T9019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.288060][ T9019] RIP: 0033:0x7f8d5119e159 [ 126.288076][ T9019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.288093][ T9019] RSP: 002b:00007f8d5207c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.288113][ T9019] RAX: ffffffffffffffda RBX: 00007f8d51425fa0 RCX: 00007f8d5119e159 [ 126.288126][ T9019] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000005 [ 126.288137][ T9019] RBP: 00007f8d5123506b R08: 0000000000000000 R09: 0000000000000000 [ 126.288148][ T9019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.288159][ T9019] R13: 00007f8d51426038 R14: 00007f8d51425fa0 R15: 00007fff50976208 [ 126.288183][ T9019] [ 126.289378][ T9019] netlink: 20 bytes leftover after parsing attributes in process `syz.5.778'. [ 126.307651][ T9021] netlink: 20 bytes leftover after parsing attributes in process `syz.5.778'. [ 126.408647][ T9026] netlink: 'syz.4.779': attribute type 29 has an invalid length. [ 126.630406][ T30] e1000 0000:00:06.0 eth0: Reset adapter [ 126.635778][ T9048] 9pnet_fd: Insufficient options for proto=fd [ 126.929695][ T30] e1000 0000:00:06.0 eth0: Reset adapter [ 126.969088][ T9063] fuse: fd is not a fuse device [ 127.084106][ T9077] netlink: 32 bytes leftover after parsing attributes in process `syz.2.788'. [ 127.089961][ T30] e1000 0000:00:06.0 eth0: Reset adapter [ 127.223137][ T30] e1000 0000:00:06.0 eth0: Reset adapter [ 127.238367][ T5809] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 127.253197][ T9047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.420205][ C3] vcan0: j1939_tp_rxtimer: 0xffff88804b787c00: rx timeout, send abort [ 127.423388][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff88804b787c00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 127.428762][ C3] vcan0: j1939_tp_rxtimer: 0xffff888055f74000: rx timeout, send abort [ 127.428955][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff888055f74000: 0x2f002: (3) A timeout occurred and this is the connection abort to close the session. [ 127.449735][ T67] Bluetooth: hci4: command tx timeout [ 128.079521][ T67] Bluetooth: hci3: command tx timeout [ 129.370920][ T65] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 129.520031][ T67] Bluetooth: hci4: command tx timeout [ 130.160027][ T67] Bluetooth: hci3: command tx timeout [ 131.609463][ T67] Bluetooth: hci4: command tx timeout [ 132.801431][ T1441] net_ratelimit: 81 callbacks suppressed [ 132.801446][ T1441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.801872][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.801900][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.233583][ T44] kauditd_printk_skb: 35 callbacks suppressed [ 133.233599][ T44] audit: type=1400 audit(389.216:844): avc: denied { write } for pid=9114 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.282020][ T44] audit: type=1400 audit(389.266:845): avc: denied { write } for pid=9117 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.344782][ T44] audit: type=1400 audit(390.326:846): avc: denied { write } for pid=9120 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.394453][ T44] audit: type=1400 audit(390.376:847): avc: denied { write } for pid=9123 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.574705][ T44] audit: type=1400 audit(390.556:848): avc: denied { write } for pid=9126 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.640599][ T44] audit: type=1400 audit(390.626:849): avc: denied { write } for pid=9129 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.900286][ T44] audit: type=1400 audit(390.886:850): avc: denied { write } for pid=9132 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.971634][ T44] audit: type=1400 audit(390.956:851): avc: denied { write } for pid=9135 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.060159][ T44] audit: type=1400 audit(391.046:852): avc: denied { write } for pid=9138 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.109800][ T44] audit: type=1400 audit(391.096:853): avc: denied { write } for pid=9141 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.144698][ T44] kauditd_printk_skb: 10 callbacks suppressed [ 139.144718][ T44] audit: type=1400 audit(395.126:864): avc: denied { write } for pid=9174 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.204308][ T44] audit: type=1400 audit(395.186:865): avc: denied { write } for pid=9177 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.164197][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.164513][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.164593][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.168984][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.169116][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.181953][ T9182] JFS: discard option not supported on device [ 141.182754][ T9182] Mount JFS Failure: -5 [ 141.182766][ T9182] jfs_mount failed w/return code = -5 [ 141.203994][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.204103][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.204175][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.204260][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.204408][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.049609][ T7562] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 154.573122][ T5716] net_ratelimit: 7 callbacks suppressed [ 154.573139][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.573323][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.573416][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.573719][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.574035][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.576730][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.576880][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.577293][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.577446][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.598903][ T44] audit: type=1400 audit(410.576:866): avc: denied { map } for pid=9190 comm="syz.6.796" path="socket:[29373]" dev="sockfs" ino=29373 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 154.600016][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.600713][ T44] audit: type=1400 audit(410.576:867): avc: denied { read accept } for pid=9190 comm="syz.6.796" path="socket:[29373]" dev="sockfs" ino=29373 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 154.608920][ T9196] ªªªªª): renamed from hsr0 (while UP) [ 154.634044][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.5.794'. [ 154.646794][ T44] audit: type=1400 audit(410.626:868): avc: denied { mounton } for pid=9193 comm="syz.5.794" path="/11/sys/devices/platform/vhci_hcd.0/attach" dev="sysfs" ino=36471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 154.683833][ T44] audit: type=1400 audit(410.666:869): avc: denied { append } for pid=9204 comm="syz.4.801" name="loop5" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.730404][ T9203] 9p: Bad value for 'msize' [ 154.803223][ T9210] netlink: 'syz.2.799': attribute type 4 has an invalid length. [ 154.993780][ T9239] netlink: 28 bytes leftover after parsing attributes in process `syz.2.808'. [ 155.152683][ T9254] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 155.308220][ T9263] veth1_macvtap: left promiscuous mode [ 155.308241][ T9263] macsec0: entered promiscuous mode [ 155.308248][ T9263] macsec0: entered allmulticast mode [ 155.314511][ T9263] FAULT_INJECTION: forcing a failure. [ 155.314511][ T9263] name failslab, interval 1, probability 0, space 0, times 0 [ 155.314545][ T9263] CPU: 2 UID: 0 PID: 9263 Comm: syz.5.814 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.314571][ T9263] Tainted: [L]=SOFTLOCKUP [ 155.314579][ T9263] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.314591][ T9263] Call Trace: [ 155.314605][ T9263] [ 155.314613][ T9263] dump_stack_lvl+0x100/0x190 [ 155.314646][ T9263] should_fail_ex.cold+0x5/0xa [ 155.314674][ T9263] should_failslab+0xc2/0x120 [ 155.314702][ T9263] kmem_cache_alloc_noprof+0x92/0x6a0 [ 155.314726][ T9263] ? security_file_alloc+0x34/0x2c0 [ 155.314758][ T9263] security_file_alloc+0x34/0x2c0 [ 155.314783][ T9263] init_file+0x95/0x480 [ 155.314811][ T9263] alloc_empty_file+0x79/0x1c0 [ 155.314840][ T9263] alloc_file_pseudo+0x183/0x290 [ 155.314870][ T9263] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 155.314900][ T9263] ? alloc_fd+0x471/0x7a0 [ 155.314931][ T9263] sock_alloc_file+0x50/0x210 [ 155.314961][ T9263] __sys_socket+0x1c0/0x260 [ 155.314983][ T9263] ? __pfx___sys_socket+0x10/0x10 [ 155.315011][ T9263] __x64_sys_socket+0x72/0xb0 [ 155.315031][ T9263] ? lockdep_hardirqs_on+0x7d/0x110 [ 155.315052][ T9263] do_syscall_64+0x123/0x790 [ 155.315075][ T9263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.315095][ T9263] RIP: 0033:0x7f8d5119e159 [ 155.315111][ T9263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.315130][ T9263] RSP: 002b:00007f8d5207c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 155.315151][ T9263] RAX: ffffffffffffffda RBX: 00007f8d51425fa0 RCX: 00007f8d5119e159 [ 155.315164][ T9263] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 155.315175][ T9263] RBP: 00007f8d5123506b R08: 0000000000000000 R09: 0000000000000000 [ 155.315187][ T9263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.315199][ T9263] R13: 00007f8d51426038 R14: 00007f8d51425fa0 R15: 00007fff50976208 [ 155.315225][ T9263] [ 155.316336][ T9263] netlink: 'syz.5.814': attribute type 49 has an invalid length. [ 155.316336][ T9264] netlink: 'syz.5.814': attribute type 49 has an invalid length. [ 155.316735][ T9263] veth1_macvtap: entered promiscuous mode [ 155.316747][ T9263] veth1_macvtap: entered allmulticast mode [ 155.317101][ T9263] macsec0: left promiscuous mode [ 155.317253][ T9263] macsec0: left allmulticast mode [ 155.317266][ T9263] veth1_macvtap: left allmulticast mode [ 155.368756][ T9266] tipc: Started in network mode [ 155.368774][ T9266] tipc: Node identity 5af567bacd52, cluster identity 4711 [ 155.368923][ T9266] tipc: Enabled bearer , priority 0 [ 155.370043][ T9266] syzkaller0: entered promiscuous mode [ 155.370056][ T9266] syzkaller0: entered allmulticast mode [ 155.373539][ T9266] tipc: Resetting bearer [ 155.384023][ T9265] tipc: Resetting bearer [ 155.401096][ T9265] tipc: Disabling bearer [ 155.548895][ T44] audit: type=1400 audit(411.526:870): avc: denied { mounton } for pid=9267 comm="syz.5.816" path="/16/nfsd" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 155.816917][ T9299] fuse: fd is not a fuse device [ 155.873985][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.821'. [ 155.951638][ T9308] overlayfs: failed to clone upperpath [ 156.464846][ T44] audit: type=1326 audit(412.446:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9313 comm="syz.2.827" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa9b9f9e159 code=0x0 [ 156.481453][ T9312] netlink: 1700 bytes leftover after parsing attributes in process `syz.5.826'. [ 156.481469][ T9312] netlink: 1700 bytes leftover after parsing attributes in process `syz.5.826'. [ 156.517875][ T9319] netlink: 20 bytes leftover after parsing attributes in process `syz.2.827'. [ 156.739427][ T5876] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 156.902352][ T5876] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.903154][ T5876] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.903178][ T5876] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.905172][ T5876] usb 10-1: config 0 descriptor?? [ 156.954758][ T44] audit: type=1400 audit(412.936:872): avc: denied { write } for pid=9322 comm="syz.4.829" name="/" dev="9p" ino=72095537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.968340][ T44] audit: type=1400 audit(412.946:873): avc: denied { write } for pid=9322 comm="syz.4.829" name="/" dev="9p" ino=72095537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.968371][ T44] audit: type=1400 audit(412.946:874): avc: denied { associate } for pid=9322 comm="syz.4.829" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 157.227773][ T9327] block nbd0: server does not support multiple connections per device. [ 157.234007][ T9327] block nbd0: shutting down sockets [ 157.350326][ T9334] FAULT_INJECTION: forcing a failure. [ 157.350326][ T9334] name failslab, interval 1, probability 0, space 0, times 0 [ 157.350349][ T9334] CPU: 0 UID: 0 PID: 9334 Comm: syz.4.840 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.350365][ T9334] Tainted: [L]=SOFTLOCKUP [ 157.350370][ T9334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 157.350376][ T9334] Call Trace: [ 157.350380][ T9334] [ 157.350385][ T9334] dump_stack_lvl+0x100/0x190 [ 157.350406][ T9334] should_fail_ex.cold+0x5/0xa [ 157.350423][ T9334] should_failslab+0xc2/0x120 [ 157.350439][ T9334] __kmalloc_noprof+0xfc/0x840 [ 157.350453][ T9334] ? sk_prot_alloc+0x10b/0x2a0 [ 157.350467][ T9334] sk_prot_alloc+0x10b/0x2a0 [ 157.350478][ T9334] sk_alloc+0x36/0xe80 [ 157.350494][ T9334] bt_sock_alloc+0x3b/0x3c0 [ 157.350510][ T9334] hci_sock_create+0xbc/0x1c0 [ 157.350528][ T9334] bt_sock_create+0x185/0x350 [ 157.350543][ T9334] __sock_create+0x339/0x860 [ 157.350557][ T9334] __sys_socket+0x14d/0x260 [ 157.350570][ T9334] ? __pfx___sys_socket+0x10/0x10 [ 157.350586][ T9334] __x64_sys_socket+0x72/0xb0 [ 157.350598][ T9334] ? lockdep_hardirqs_on+0x7d/0x110 [ 157.350610][ T9334] do_syscall_64+0x123/0x790 [ 157.350623][ T9334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.350635][ T9334] RIP: 0033:0x7fcf0979e159 [ 157.350644][ T9334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.350657][ T9334] RSP: 002b:00007fcf0a632fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 157.350670][ T9334] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fcf0979e159 [ 157.350677][ T9334] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001f [ 157.350684][ T9334] RBP: 00007fcf0983506b R08: 0000000000000000 R09: 0000000000000000 [ 157.350691][ T9334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.350697][ T9334] R13: 00007fcf09a26308 R14: 00007fcf09a26270 R15: 00007ffdb156fb58 [ 157.350712][ T9334] [ 157.351242][ T9329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.832'. [ 157.516952][ T5876] usbhid 10-1:0.0: can't add hid device: -71 [ 157.517010][ T5876] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 157.521151][ T5876] usb 10-1: USB disconnect, device number 2 [ 157.659666][ T1713] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 157.819393][ T1713] usb 9-1: Using ep0 maxpacket: 32 [ 157.819850][ T1713] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 157.820684][ T1713] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 157.822213][ T1713] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 157.822226][ T1713] usb 9-1: Product: syz [ 157.822233][ T1713] usb 9-1: Manufacturer: syz [ 157.822241][ T1713] usb 9-1: SerialNumber: syz [ 157.823726][ T1713] usb 9-1: config 0 descriptor?? [ 157.824251][ T9339] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 158.141200][ T9351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.141406][ T9351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.163536][ T9353] netlink: 60 bytes leftover after parsing attributes in process `syz.2.836'. [ 158.163752][ T9347] netlink: 60 bytes leftover after parsing attributes in process `syz.2.836'. [ 158.233781][ T9364] netlink: 36 bytes leftover after parsing attributes in process `syz.2.841'. [ 158.376856][ T9370] fuse: fd is not a fuse device [ 158.408451][ T9374] syzkaller1: entered promiscuous mode [ 158.408467][ T9374] syzkaller1: entered allmulticast mode [ 158.856406][ T9396] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 158.971244][ T44] audit: type=1400 audit(414.956:875): avc: denied { write } for pid=9397 comm="syz.6.850" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 158.982111][ T9398] netlink: 'syz.6.850': attribute type 30 has an invalid length. [ 158.991605][ T9398] bond1: option arp_missed_max: invalid value (0) [ 158.991622][ T9398] bond1: option arp_missed_max: allowed values 1 - 255 [ 158.992464][ T9398] bond1 (unregistering): Released all slaves [ 159.186617][ T9409] loop7: detected capacity change from 0 to 16384 [ 159.412214][ T9409] loop7: detected capacity change from 16384 to 0 [ 159.412520][ C0] I/O error, dev loop7, sector 13568 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 159.519035][ T9424] pvfs2: Unknown parameter ')+)' [ 159.522343][ T9424] netlink: 'syz.5.858': attribute type 1 has an invalid length. [ 159.522366][ T9424] netlink: 'syz.5.858': attribute type 1 has an invalid length. [ 159.598640][ T9424] Console: switching to colour dummy device 80x25 [ 159.604223][ T5717] net_ratelimit: 376 callbacks suppressed [ 159.604237][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.649868][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.650080][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.650217][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.651921][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.653461][ T44] kauditd_printk_skb: 6 callbacks suppressed [ 159.653473][ T44] audit: type=1400 audit(415.636:882): avc: denied { setattr } for pid=9430 comm="syz.6.860" path="/dev/mixer" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 159.663640][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.709393][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.709671][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.709824][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.713247][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.929476][ T5822] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 160.089680][ T5822] usb 11-1: Using ep0 maxpacket: 8 [ 160.090172][ T5822] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 160.091051][ T5822] usb 11-1: config index 0 descriptor too short (expected 74, got 45) [ 160.091093][ T5822] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 160.091109][ T5822] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 160.091124][ T5822] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 160.091138][ T5822] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.091161][ T5822] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.297118][ T5822] usb 11-1: GET_CAPABILITIES returned 0 [ 160.297142][ T5822] usbtmc 11-1:16.0: can't read capabilities [ 160.501336][ T5876] usb 11-1: USB disconnect, device number 2 [ 160.553917][ T2338] usb 9-1: USB disconnect, device number 8 [ 160.612749][ T9463] __nla_validate_parse: 3 callbacks suppressed [ 160.612772][ T9463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.867'. [ 160.674319][ T9477] netlink: 36 bytes leftover after parsing attributes in process `syz.2.871'. [ 160.723993][ T9481] xt_policy: output policy not valid in PREROUTING and INPUT [ 160.850538][ T9486] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 160.850569][ T9486] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 160.854510][ T9486] vhci_hcd vhci_hcd.0: Device attached [ 160.858244][ T9487] vhci_hcd: connection closed [ 160.862517][ T12] vhci_hcd vhci_hcd.4: stop threads [ 160.863118][ T12] vhci_hcd vhci_hcd.4: release socket [ 160.863152][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 167.865501][ T5716] net_ratelimit: 65 callbacks suppressed [ 167.865523][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.865690][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.865931][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.866022][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.866155][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.866248][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.866312][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.866399][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.866513][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.866591][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.881390][ T9491] Bluetooth: MGMT ver 1.23 [ 167.883365][ T9494] 9pnet_virtio: no channels available for device ./file0 [ 167.883565][ T9494] 9pnet_virtio: no channels available for device ./file0 [ 167.883746][ T9494] 9pnet_virtio: no channels available for device ./file0 [ 167.883922][ T9494] 9pnet_virtio: no channels available for device ./file0 [ 167.884136][ T9494] 9pnet_virtio: no channels available for device ./file0 [ 167.884447][ T9494] 9pnet_virtio: no channels available for device ./file0 [ 167.884907][ T9494] 9pnet_virtio: no channels available for device ./file0 [ 167.893941][ T9499] netlink: 72 bytes leftover after parsing attributes in process `syz.5.876'. [ 167.898938][ T6966] IPVS: starting estimator thread 0... [ 167.900894][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 167.919657][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 167.930035][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 167.934198][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 167.937824][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 167.938066][ T9507] FAULT_INJECTION: forcing a failure. [ 167.938066][ T9507] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 167.938088][ T9507] CPU: 0 UID: 0 PID: 9507 Comm: syz.5.879 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.938104][ T9507] Tainted: [L]=SOFTLOCKUP [ 167.938109][ T9507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 167.938116][ T9507] Call Trace: [ 167.938120][ T9507] [ 167.938125][ T9507] dump_stack_lvl+0x100/0x190 [ 167.938161][ T9507] should_fail_ex.cold+0x5/0xa [ 167.938179][ T9507] _copy_to_user+0x32/0xd0 [ 167.938197][ T9507] put_timespec64+0xb5/0x130 [ 167.938212][ T9507] ? __pfx_put_timespec64+0x10/0x10 [ 167.938227][ T9507] ? __x64_sys_futex+0x358/0x4d0 [ 167.938247][ T9507] __x64_sys_clock_gettime+0x1d3/0x270 [ 167.938261][ T9507] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 167.938279][ T9507] do_syscall_64+0x123/0x790 [ 167.938296][ T9507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.938308][ T9507] RIP: 0033:0x7f8d5119e159 [ 167.938318][ T9507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.938329][ T9507] RSP: 002b:00007f8d5207c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 167.938342][ T9507] RAX: ffffffffffffffda RBX: 00007f8d51425fa0 RCX: 00007f8d5119e159 [ 167.938350][ T9507] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 167.938357][ T9507] RBP: 00007f8d5123506b R08: 0000000000000000 R09: 0000000000000000 [ 167.938366][ T9507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.938374][ T9507] R13: 00007f8d51426038 R14: 00007f8d51425fa0 R15: 00007fff50976208 [ 167.938389][ T9507] [ 167.945070][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 167.952610][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 167.960347][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 167.967750][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 167.975176][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 167.980113][ T9501] IPVS: using max 42 ests per chain, 100800 per kthread [ 167.981249][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 167.982636][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 167.993789][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 168.000983][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 168.006271][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 168.014067][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 168.022991][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 168.030312][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 168.031770][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 168.035011][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 168.037586][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 168.043109][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 168.047158][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 168.054295][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 168.060144][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 168.066804][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 168.081003][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 168.085914][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 168.087195][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 168.097270][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 168.102234][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 168.107196][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 168.110852][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 168.883972][ T44] audit: type=1400 audit(424.866:883): avc: denied { mounton } for pid=9536 comm="syz.6.888" path="/30/file0/file0" dev="9p" ino=72095749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 168.884040][ T9537] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000003' [ 168.884937][ T44] audit: type=1326 audit(424.866:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9536 comm="syz.6.888" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0021d9e159 code=0x0 [ 168.891837][ T44] audit: type=1400 audit(424.866:885): avc: denied { write } for pid=9536 comm="syz.6.888" name="/" dev="9p" ino=72095537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.923851][ T44] audit: type=1400 audit(424.906:886): avc: denied { read append open } for pid=9536 comm="syz.6.888" path="/30/file0/blkio.bfq.io_merged_recursive" dev="9p" ino=72095751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 168.925910][ T44] audit: type=1400 audit(424.906:887): avc: denied { map } for pid=9536 comm="syz.6.888" path="/30/file0/blkio.bfq.io_merged_recursive" dev="9p" ino=72095751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 168.925961][ T44] audit: type=1400 audit(424.906:888): avc: denied { write } for pid=9536 comm="syz.6.888" path="/30/file0/blkio.bfq.io_merged_recursive" dev="9p" ino=72095751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 169.139377][ T1713] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 170.222222][ T44] audit: type=1400 audit(426.206:889): avc: denied { append } for pid=9550 comm="syz.4.891" name="uprobe_events" dev="tracefs" ino=1049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 170.264633][ T9553] tmpfs: Bad value for 'mpol' [ 170.266984][ T9553] tmpfs: Bad value for 'mpol' [ 170.489150][ T44] audit: type=1400 audit(426.466:890): avc: denied { read } for pid=9560 comm="syz.4.894" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 170.490352][ T44] audit: type=1400 audit(426.466:891): avc: denied { open } for pid=9560 comm="syz.4.894" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 170.562442][ T9569] x_tables: duplicate underflow at hook 1 [ 170.577867][ T9569] bond4: entered allmulticast mode [ 170.578143][ T9569] 8021q: adding VLAN 0 to HW filter on device bond4 [ 170.588423][ T9569] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 170.589345][ T9569] macvlan2: entered allmulticast mode [ 170.589358][ T9569] bond0: entered allmulticast mode [ 170.589368][ T9569] bond_slave_0: entered allmulticast mode [ 170.589379][ T9569] bond_slave_1: entered allmulticast mode [ 170.589411][ T9569] bond_slave_0: entered promiscuous mode [ 170.589429][ T9569] bond_slave_1: entered promiscuous mode [ 170.589965][ T9569] bond4: (slave macvlan2): Enslaving as an active interface with an up link [ 170.600375][ T9569] ip6gretap0: entered allmulticast mode [ 170.600642][ T9569] bond4: (slave ip6gretap0): Enslaving as an active interface with an up link [ 170.601705][ T9569] netlink: 14 bytes leftover after parsing attributes in process `syz.4.896'. [ 170.603383][ T9569] bond_slave_0: left promiscuous mode [ 170.604991][ T9569] bond_slave_1: left promiscuous mode [ 170.616931][ T9569] bond0 (unregistering): left allmulticast mode [ 170.616951][ T9569] bond_slave_0: left allmulticast mode [ 170.616967][ T9569] bond_slave_1: left allmulticast mode [ 170.630368][ T9569] bond4: (slave macvlan2): Releasing backup interface [ 170.630390][ T9569] bond4: (slave macvlan2): the permanent HWaddr of slave - b6:77:cd:dd:1f:70 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 170.631153][ T9569] macvlan2 (unregistering): left allmulticast mode [ 170.653178][ T9569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.659126][ T9569] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.666537][ T9569] bond0 (unregistering): Released all slaves [ 170.897522][ T9574] mmap: syz.4.897 (9574) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 171.267739][ T9585] 9pnet_virtio: no channels available for device syz [ 171.433447][ T44] audit: type=1400 audit(427.416:892): avc: denied { read append } for pid=9592 comm="syz.4.902" name="btrfs-control" dev="devtmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 171.498499][ T9598] netlink: 32 bytes leftover after parsing attributes in process `syz.4.904'. [ 171.906299][ T9614] netlink: 36 bytes leftover after parsing attributes in process `syz.5.909'. [ 171.906350][ T9614] macvlan0: entered promiscuous mode [ 172.870421][ T5717] net_ratelimit: 274 callbacks suppressed [ 172.870437][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.919392][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.919702][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.920960][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.923117][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.923257][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.953456][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.983343][ T9662] bridge0: port 3(syzkaller0) entered blocking state [ 172.983427][ T9662] bridge0: port 3(syzkaller0) entered disabled state [ 172.983490][ T9662] syzkaller0: entered allmulticast mode [ 172.984392][ T9662] syzkaller0: entered promiscuous mode [ 172.984712][ T9662] bridge0: port 3(syzkaller0) entered blocking state [ 172.984761][ T9662] bridge0: port 3(syzkaller0) entered forwarding state [ 172.999378][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.000300][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.000488][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.818137][ T9661] bridge0: port 3(syzkaller0) entered disabled state [ 173.831650][ T9661] syzkaller0 (unregistering): left allmulticast mode [ 173.831677][ T9661] syzkaller0 (unregistering): left promiscuous mode [ 173.831774][ T9661] bridge0: port 3(syzkaller0) entered disabled state [ 173.975284][ T9667] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 174.274592][ T9670] fuse: Bad value for 'fd' [ 174.274808][ T9671] fuse: Bad value for 'fd' [ 174.399855][ T6974] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 174.418000][ T6323] cgroup: fork rejected by pids controller in /syz4 [ 174.823375][ T7844] ------------[ cut here ]------------ [ 174.823392][ T7844] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 174.823398][ T7844] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x944/0x1bd0, CPU#0: syz.4.484/7844 [ 174.831312][ T7844] Modules linked in: [ 174.832716][ T7844] CPU: 0 UID: 0 PID: 7844 Comm: syz.4.484 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.836234][ T7844] Tainted: [L]=SOFTLOCKUP [ 174.837672][ T7844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.841106][ T7844] RIP: 0010:__mutex_lock+0x94b/0x1bd0 [ 174.842896][ T7844] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 c0 10 00 00 44 8b 05 e8 43 71 05 45 85 c0 75 13 48 8d 3d ec 4f 74 05 48 c7 c6 c0 f6 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 174.850564][ T7844] RSP: 0018:ffffc90007e1f800 EFLAGS: 00010246 [ 174.852832][ T7844] RAX: 0000000000000003 RBX: ffff8881001751c0 RCX: 1ffffffff228b140 [ 174.855491][ T7844] RDX: 0000000000000000 RSI: ffffffff8beff6c0 RDI: ffffffff91489610 [ 174.858016][ T7844] RBP: ffffc90007e1f970 R08: 0000000000000000 R09: 0000000000000000 [ 174.861564][ T7844] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 174.864595][ T7844] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888027922b60 [ 174.867673][ T7844] FS: 0000000000000000(0000) GS:ffff8880d5b4f000(0000) knlGS:0000000000000000 [ 174.871964][ T7844] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 174.874993][ T7844] CR2: 00007fcf0a653ff8 CR3: 000000003d60c000 CR4: 0000000000352ef0 [ 174.877735][ T7844] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 174.880295][ T7844] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 174.883004][ T7844] Call Trace: [ 174.884058][ T7844] [ 174.884985][ T7844] ? virtio_gpu_free_object+0xec/0x280 [ 174.886652][ T7844] ? drm_gem_fb_destroy+0x1a1/0x210 [ 174.888255][ T7844] ? __pfx_drm_framebuffer_free+0x10/0x10 [ 174.890412][ T7844] ? __pfx___mutex_lock+0x10/0x10 [ 174.892666][ T7844] ? drm_mode_object_put+0x41/0x50 [ 174.894892][ T7844] ? drm_mode_rmfb.part.0+0x2cd/0x500 [ 174.896765][ T7844] ? __pfx_drm_mode_rmfb.part.0+0x10/0x10 [ 174.898645][ T7844] ? __pfx_drm_fbdev_shmem_fb_release+0x10/0x10 [ 174.901082][ T7844] ? virtio_gpu_free_object+0xec/0x280 [ 174.903346][ T7844] virtio_gpu_free_object+0xec/0x280 [ 174.905125][ T7844] ? __pfx_virtio_gpu_free_object+0x10/0x10 [ 174.906985][ T7844] ? __pfx_drm_fbdev_shmem_fb_release+0x10/0x10 [ 174.909427][ T7844] drm_gem_object_free+0x60/0xa0 [ 174.911629][ T7844] drm_client_buffer_delete+0x1d8/0x270 [ 174.914066][ T7844] drm_fbdev_shmem_fb_destroy+0xc5/0x110 [ 174.916769][ T7844] ? __pfx_drm_fbdev_shmem_fb_destroy+0x10/0x10 [ 174.920041][ T7844] put_fb_info+0xb8/0xf0 [ 174.921854][ T7844] fb_release+0x13e/0x190 [ 174.923692][ T7844] ? __pfx_fb_release+0x10/0x10 [ 174.925751][ T7844] __fput+0x3ff/0xb50 [ 174.927553][ T7844] task_work_run+0x150/0x240 [ 174.929727][ T7844] ? __pfx_task_work_run+0x10/0x10 [ 174.931994][ T7844] ? free_uts_ns+0x16e/0x330 [ 174.934050][ T7844] do_exit+0x8da/0x2a50 [ 174.935850][ T7844] ? __pfx_do_exit+0x10/0x10 [ 174.937883][ T7844] ? cgroup_update_frozen_flag+0x125/0x240 [ 174.940470][ T7844] ? find_held_lock+0x2b/0x80 [ 174.942563][ T7844] ? get_signal+0x184f/0x21e0 [ 174.944596][ T7844] do_group_exit+0xd5/0x2a0 [ 174.946625][ T7844] get_signal+0x1ec7/0x21e0 [ 174.948762][ T7844] ? __pfx_get_signal+0x10/0x10 [ 174.951442][ T7844] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 174.953986][ T7844] arch_do_signal_or_restart+0x91/0x7e0 [ 174.956399][ T7844] ? get_timespec64+0x147/0x240 [ 174.958500][ T7844] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 174.961314][ T7844] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 174.963864][ T7844] exit_to_user_mode_loop+0x139/0x700 [ 174.966130][ T7844] ? rcu_is_watching+0x13/0xc0 [ 174.968298][ T7844] do_syscall_64+0x661/0x790 [ 174.969988][ T7844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.972258][ T7844] RIP: 0033:0x7fcf0975e98e [ 174.974174][ T7844] Code: Unable to access opcode bytes at 0x7fcf0975e964. [ 174.976373][ T7844] RSP: 002b:00007fcf0a653f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 174.978991][ T7844] RAX: fffffffffffffdfc RBX: 00007fcf0a6546c0 RCX: 00007fcf0975e98e [ 174.982773][ T7844] RDX: 00007fcf0a653fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 174.986306][ T7844] RBP: 00007fcf0983506b R08: 0000000000000000 R09: 0000000000000000 [ 174.989767][ T7844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.993099][ T7844] R13: 00007fcf09a26218 R14: 00007fcf09a26180 R15: 00007ffdb156fb58 [ 174.996501][ T7844] [ 174.997929][ T7844] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 175.001357][ T7844] CPU: 0 UID: 0 PID: 7844 Comm: syz.4.484 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.005820][ T7844] Tainted: [L]=SOFTLOCKUP [ 175.007674][ T7844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 175.011733][ T7844] Call Trace: [ 175.013213][ T7844] [ 175.014453][ T7844] dump_stack_lvl+0x100/0x190 [ 175.016578][ T7844] vpanic+0x553/0x970 [ 175.018343][ T7844] ? __pfx_vpanic+0x10/0x10 [ 175.020169][ T7844] ? lock_release+0x24d/0x310 [ 175.022192][ T7844] panic+0xd1/0xe0 [ 175.023792][ T7844] ? __pfx_panic+0x10/0x10 [ 175.025697][ T7844] check_panic_on_warn.cold+0x19/0x34 [ 175.027957][ T7844] ? __mutex_lock+0x944/0x1bd0 [ 175.029942][ T7844] __warn.cold+0x191/0x318 [ 175.031810][ T7844] __report_bug+0x30f/0x440 [ 175.033740][ T7844] ? __mutex_lock+0x944/0x1bd0 [ 175.035765][ T7844] ? __pfx___report_bug+0x10/0x10 [ 175.038060][ T7844] ? fb_release+0x13e/0x190 [ 175.040077][ T7844] ? __fput+0x3ff/0xb50 [ 175.041897][ T7844] ? task_work_run+0x150/0x240 [ 175.043952][ T7844] report_bug_entry+0xe2/0x290 [ 175.045953][ T7844] ? __mutex_lock+0x94b/0x1bd0 [ 175.047948][ T7844] handle_bug+0x1cd/0x2a0 [ 175.049697][ T7844] exc_invalid_op+0x17/0x50 [ 175.051563][ T7844] asm_exc_invalid_op+0x1a/0x20 [ 175.053639][ T7844] RIP: 0010:__mutex_lock+0x94b/0x1bd0 [ 175.055839][ T7844] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 c0 10 00 00 44 8b 05 e8 43 71 05 45 85 c0 75 13 48 8d 3d ec 4f 74 05 48 c7 c6 c0 f6 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 175.063812][ T7844] RSP: 0018:ffffc90007e1f800 EFLAGS: 00010246 [ 175.066676][ T7844] RAX: 0000000000000003 RBX: ffff8881001751c0 RCX: 1ffffffff228b140 [ 175.069878][ T7844] RDX: 0000000000000000 RSI: ffffffff8beff6c0 RDI: ffffffff91489610 [ 175.073552][ T7844] RBP: ffffc90007e1f970 R08: 0000000000000000 R09: 0000000000000000 [ 175.077451][ T7844] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 175.080522][ T7844] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888027922b60 [ 175.083815][ T7844] ? virtio_gpu_free_object+0xec/0x280 [ 175.086214][ T7844] ? drm_gem_fb_destroy+0x1a1/0x210 [ 175.088422][ T7844] ? __pfx_drm_framebuffer_free+0x10/0x10 [ 175.090892][ T7844] ? __pfx___mutex_lock+0x10/0x10 [ 175.093247][ T7844] ? drm_mode_object_put+0x41/0x50 [ 175.095871][ T7844] ? drm_mode_rmfb.part.0+0x2cd/0x500 [ 175.098432][ T7844] ? __pfx_drm_mode_rmfb.part.0+0x10/0x10 [ 175.100493][ T7844] ? __pfx_drm_fbdev_shmem_fb_release+0x10/0x10 [ 175.103050][ T7844] ? virtio_gpu_free_object+0xec/0x280 [ 175.105234][ T7844] virtio_gpu_free_object+0xec/0x280 [ 175.107403][ T7844] ? __pfx_virtio_gpu_free_object+0x10/0x10 [ 175.109908][ T7844] ? __pfx_drm_fbdev_shmem_fb_release+0x10/0x10 [ 175.113128][ T7844] drm_gem_object_free+0x60/0xa0 [ 175.115961][ T7844] drm_client_buffer_delete+0x1d8/0x270 [ 175.118032][ T7844] drm_fbdev_shmem_fb_destroy+0xc5/0x110 [ 175.119867][ T7844] ? __pfx_drm_fbdev_shmem_fb_destroy+0x10/0x10 [ 175.122390][ T7844] put_fb_info+0xb8/0xf0 [ 175.124137][ T7844] fb_release+0x13e/0x190 [ 175.125883][ T7844] ? __pfx_fb_release+0x10/0x10 [ 175.127910][ T7844] __fput+0x3ff/0xb50 [ 175.129902][ T7844] task_work_run+0x150/0x240 [ 175.132041][ T7844] ? __pfx_task_work_run+0x10/0x10 [ 175.134450][ T7844] ? free_uts_ns+0x16e/0x330 [ 175.136652][ T7844] do_exit+0x8da/0x2a50 [ 175.138435][ T7844] ? __pfx_do_exit+0x10/0x10 [ 175.140272][ T7844] ? cgroup_update_frozen_flag+0x125/0x240 [ 175.142578][ T7844] ? find_held_lock+0x2b/0x80 [ 175.144425][ T7844] ? get_signal+0x184f/0x21e0 [ 175.146269][ T7844] do_group_exit+0xd5/0x2a0 [ 175.148088][ T7844] get_signal+0x1ec7/0x21e0 [ 175.149913][ T7844] ? __pfx_get_signal+0x10/0x10 [ 175.151998][ T7844] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 175.154581][ T7844] arch_do_signal_or_restart+0x91/0x7e0 [ 175.156972][ T7844] ? get_timespec64+0x147/0x240 [ 175.158851][ T7844] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 175.161218][ T7844] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 175.163475][ T7844] exit_to_user_mode_loop+0x139/0x700 [ 175.165632][ T7844] ? rcu_is_watching+0x13/0xc0 [ 175.167615][ T7844] do_syscall_64+0x661/0x790 [ 175.169654][ T7844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.172415][ T7844] RIP: 0033:0x7fcf0975e98e [ 175.174378][ T7844] Code: Unable to access opcode bytes at 0x7fcf0975e964. [ 175.177183][ T7844] RSP: 002b:00007fcf0a653f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 175.180481][ T7844] RAX: fffffffffffffdfc RBX: 00007fcf0a6546c0 RCX: 00007fcf0975e98e [ 175.183618][ T7844] RDX: 00007fcf0a653fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 175.186631][ T7844] RBP: 00007fcf0983506b R08: 0000000000000000 R09: 0000000000000000 [ 175.189839][ T7844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.193314][ T7844] R13: 00007fcf09a26218 R14: 00007fcf09a26180 R15: 00007ffdb156fb58 [ 175.196770][ T7844] [ 175.198681][ T7844] Kernel Offset: disabled [ 175.200382][ T7844] Rebooting in 86400 seconds..