last executing test programs: 2m38.655006431s ago: executing program 32 (id=222): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)="72303a02b359274cd33db065938f360af8a403afb98cf2c17307cec32413529bdf14f521d41b3aafd718087031eda6a898155603000000000000005eef2964a7e86c0fcf2edc44c1e0d2e693a6beb94294", 0x51, 0x1) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x50) r0 = socket$inet6(0xa, 0x80000, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xfffffffffffffc8e) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010003704feffffffffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="c30407001bca34262c0012800b000100697036746e6c00001c00028014000200fc0100000000000000000000000000042f92fefdd9cbc6dfea8a51f77eb0ae8a9b0fb85f1489014754f0c63e659be7baa271fb66e2c0397abfd4600f773193c1"], 0x4c}, 0x1, 0x0, 0x0, 0xa3786d35a20e39b}, 0x1000c014) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 2m20.877327828s ago: executing program 33 (id=252): setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000c00)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e24, 0x9, 0x4e23, 0x9, 0x2, 0x80, 0x80, 0x89}, {0x1, 0x98, 0x5, 0x9, 0x1, 0x8, 0x4, 0x5}, {0xffffffffffffff22, 0xe0, 0x823}, 0x68a4, 0x6e6bb9, 0x2, 0x1, 0x3, 0x1}, {{@in6=@mcast1, 0x4d3, 0x3c}, 0x2, @in=@loopback, 0x3501, 0x1, 0x2, 0x1, 0xffff7fff, 0x3}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000002000010028bd7000fcdbdf0100526f2748fddb611c1cbf1f25ec0000000000000317000000140002000000000000000000000000000000000014000100200100"], 0x44}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac00000000000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x1) r0 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='GPL\x00', 0x7}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000780)=[{&(0x7f0000000680)="ffdaeb1703c9e4506c2676db4f72cadaaa75a6babe492e357014dc17fdf7d29c6c3142fba74d0248edc19da807704cf8ee3fe4aacf995b01d674ac82d61b8f03ce600dcc3c47c7d594d245197694d5f9288d9af17c539bd6f3c4f9f26f27ac8e319b27327e6834405068032d1fbaf5b5ab1e72ed3a2525e6f0fa34174a69f1e0007b8eb41cb9dcf7966ef7be66bf80d3aad0ece9ecbbce47474abe65dbf3ac3bdff7e7668c843d381953f3ae2a469f3ec7176b1bb1569622a2fc601f3c7f7b948dff58046c8d339448b0608c2ebb94fa53f41e3ef18d498917"}, {&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}, {&(0x7f00000007c0)="45f25f0ec17ebfd221ed5fff7b177d70a64d615f6ff458ac3fe33d557a35fd81f1a50bad6ae9ece86e9bd0f1d8f59de47c9e38d876f9e579c52ec785436f633b51eb278dd78ce3de9b4b44f7e776c1ab14bafdb59ccde39581d506984f0b59837a2d0981ba814574c896aaaf5ffc84bcbba317449ec0f321a6578784b2077ee8fd508de8ae3672b1e10ef2d998e59ae025b8297401aa912e04ad49546f5f7c90ce4802c5db370569ace2b2fa30992256ad7230000e"}], 0x1, 0x0, 0x3c}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000400), 0x230500, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) accept4$nfc_llcp(r1, 0x0, 0x0, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000380)={{r0, &(0x7f00000000c0)='^\xa8\x00', 0x10401, &(0x7f0000000140)={@_ha_fsid={[0x7, 0x5db]}, {0x8, 0xff, 0x2fe, 0x8bc8}}, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x80}, 0x1, &(0x7f0000000340)=[{0x2, 0x1, &(0x7f0000000200)='\x00', &(0x7f0000000240)="d316835369b3de769f286d218d4a8f59b0119548c599e6e674fbf5915a0c755d74f542749282dee83acfe9242cbcda7c7348adcc27c7499bef9795d2bf53fc4a85da20a329fa7c0e0134c4dcfd3e0f18df8a6bdfe6b9d7e8537f2969e18b72c05d8b88bbe758b1260af4a81df1f5c94ef58e44ce85fe45526cad546e7b875f87fb38f3354f2de7baab04a41d91cf662280d3714586bcc2909a9d53436039d98341f7507aa6aa9eacf429d68d86c224086a0bed53fc607380d1743cd003b20a744ed52a2f7116c2f9c0b1eea001936c1dfa741c78dca3a92de0509ce86c169b1183e4c5825a05890152aab03f4c", 0xed, 0x8}]}) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/nullb1\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000001000)="53464f5a05abbf5900"/2040, 0x7f8, 0x0) close(r3) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, &(0x7f00000004c0)="66b88c008ed8b9800000c00f3235001000000f30b930080000b800000000ba000001000f30c4e123c2025666ba610066edb972090000b84a6d0000ba000000000f30640f070f20d835080000000f22d80fc77c786f0fae7f04", 0x59}], 0x1, 0x25, &(0x7f00000005c0)=[@flags={0x3, 0x1000}, @dstype3={0x7, 0xb}], 0x2) 2m17.099094754s ago: executing program 5 (id=437): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x8808) 2m17.093755566s ago: executing program 5 (id=438): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{0x0}], 0x1}, 0x48043) socket$nl_generic(0x10, 0x3, 0x10) socket(0x840000000002, 0x3, 0x9) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) socket$packet(0x11, 0x3, 0x300) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 2m16.178810212s ago: executing program 5 (id=453): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') read$char_usb(r0, &(0x7f0000019040)=""/10, 0xa) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x40, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x10, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x1c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40810}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2m15.920047578s ago: executing program 5 (id=456): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) fcntl$lock(r0, 0x6, 0x0) fcntl$lock(r0, 0x25, 0x0) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000240)={{0x2, 0x4e24, @remote}, {0x6, @multicast}, 0x40, {0x2, 0x4e20, @rand_addr=0x64010100}, 'lo\x00'}) write(0xffffffffffffffff, &(0x7f0000000040)="3c00000058001f000307f4f9002304000a04d649080001000201000204000380050000009ddb973b91aa05797251725df70067", 0x33) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socket$xdp(0x2c, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r3, 0xba87317d461c07c9, 0x70bd2a, 0x25dfdbdb}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40490c4) syz_genetlink_get_family_id$nfc(0x0, r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) rmdir(&(0x7f0000000080)='./dev/ttyUSB0\x00') chdir(&(0x7f0000000040)='./file0\x00') getresgid(&(0x7f0000002d40), &(0x7f0000002d80), &(0x7f0000002dc0)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002e80)={0x7, 0x9, {}, {0xee01}, 0x8000000000000001, 0x3}) fstat(r4, &(0x7f0000002ec0)) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f00000030c0)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448cb, 0x0) 2m15.819742827s ago: executing program 5 (id=457): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='comm\x00') prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10040}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x44, 0x18, 0x1, 0x70bdac, 0x25dfdbfc, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0xfffffffffffffe29, 0x3, 0x6}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44010}, 0x20040844) listns(&(0x7f00000010c0)={0x20, 0x0, 0x10001, 0x8000000, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/drivers/net2280/new_id\x00', 0x1, 0x0) write(r4, &(0x7f0000001100)='8086 29c0 ffffffff ffffffff 0 0 1', 0x21) mkdir(&(0x7f00000003c0)='./file0\x00', 0x18) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) sendmsg$kcm(r0, &(0x7f0000001dc0)={&(0x7f0000000200)=@isdn={0x22, 0x7, 0x10, 0x0, 0x8}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000280)="a1ac58f810606a1a65b8bcad70815c33fdce77aa010e65cfe34a15db9607ab2a6abaa7fbfec01a3a431d2b83f31f88ede946871fed404cf510faf0e712efed076e8619cd93ae5ec862d3db9ac0", 0x4d}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="9989a8056c999b164b1a61d49d5dfbaa2090c04768e50bbf06e0dfb8af5b67e3c84a7ab3cdc9400a9fb3f43af6745cdcdee9792e8f0a8e9ecfd319d5373f0855a99116fb4cf0c94edc", 0x49}, {&(0x7f0000001780)="8d336545b7bd6aa0fbffdb2f18b9592a2ecf1c2578ba15a9c430df7ebd9629d605a364436c1c91ac0ff8908145b0e4687dc136704ccfc5e15b43ff9be7ab8bd6bc7c45e06ab2e84321512caf97bd67a5dfd212c2e9fe75c4dd28c449df533fca9efd1e584a4def1db2853541f796d6e63eff7f8204c43bbf79b29f5c9cd9b61b089db96933d47db8619077c6cf10156a652c2dd83556b90ee20dd6465b34a7eab684c452e12eddb7d74aff102f24ed9c6dc10b4986c9b96ace7008f1fd5c8c3ad476c23665f6d092ee95206a1bdcdff281d853a07ae1b6721345fda9f8bb4b99f6c0d013365fb0", 0xe7}, {&(0x7f0000001880)="41e41b5e447daadc7ff48a25d98910c941cfc7e4d1fbd5004d0157a079c5d61bfbd21942edcea0091ad28b4d57391d0614fdb66d4802fbfe7335930cf36f5a8edd34fcf6c051574ab1309dff5660d36c6d4ad1bd510815c0313c6425b0e9fa897bdb4cd4900be8da4ee20e8cbd1bee5ef91d29aebb81ea2f68a6432803bd9d72cbaa00c2a683ceab31ace806f30cf6d5522c4a62884412ed7de65aa25bb3c3a68e997ea7fc0e5448d47e40ac5046d56c534d2761bc143daa093ca5964267abec551869e59f224a1bc174588800a123d900e612a58349e6ab827ac6b630b726e9c0fef68546", 0xe5}, {&(0x7f0000001980)="cae7b0a17a2fa88836260dd657e085310cee9a8790514af7d6df036e67b6c28843", 0x21}, {&(0x7f00000019c0)="3e0c1f923a31d38885c3989f4aa5335334645b9a7ddd842096a33bc849e68bffa5e55e723146ec7b168b2c9cb33b624b94c01f29c51ade9626f85e63e13b7f0ec0c0399a997de8f130b6c5b327901a172de56a620b3c1eea9388481d15dace7a21fddac4d75818e7bb1d3e4d2006a0792db81ac98e11d782d9ea500754e16159d2c8ee7df088402a99ac2732", 0x8c}, {&(0x7f0000001a80)="79b20205875697dc2fca0506495ecab61f83b7f6c3427545097db98a9a283f3028ef7298011beb0a8e079be64f6cf33a1a5a208f6f35346ca9af3d2069730cc148a6b226581bf77ce88cc248662d863f0175aa69c6455dd8aca04eaca98afebc2e5adbc01f4e05372341bc0cb20942445395735f203e3114aa581d3a87da2411f64416571fa26956c125f284a3e8d06eecbe03d4648c7a3a105b6a19fdfeaedd5c92937b7fdc4c23cc6d98647f3c2e1c18bda8051dd2bed62a2f1cb92f77189b2f6658a67b7fb4db2d", 0xc9}, {&(0x7f0000001b80)="45a8b2b6f3a03dafab31d221f0e66888951f6d7a473ff718d596f19a06b65c275820ab54f8b34abf2fc7457f2085d5e8c43ce7ed55c92c56ccb1ed7f017bf1f7d8638c9d20da856f72d228552e37dfc53785c2ef66097e40729e8e49d5146593d87d37ccee43ded0911f449ac610f2ca4ff6b01c3ed8f8935b1a35f7132c7ee952155b12b4549d8878856659042d9fb0c64c88", 0x93}], 0x9, &(0x7f0000001d00)=[{0xa8, 0x103, 0x0, "8127caab0c742f47136d7667f3377f6716eeafd987bb405fb439a716b3cda338fbfb33ad129767f05705b50fda0a0c9e071eae879fa3e4ec9563820080204a8ce4e5af50578b3b1cb1a6ea237bacf3ca716ed6b5ad6a079fdbfdd52c3de0f2a4fc1190a5d93c86eae0ac523d60f0067addeadb05ea57fcd82c89b6f3b8932130d17caa6c202d9e694a1c836db191e2f8da9382f6e8b8"}], 0xa8}, 0x4000) r5 = syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r5, r5, 0x9) r6 = fsopen(&(0x7f0000000300)='smb3\x00', 0x1) socket$unix(0x1, 0x5, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000001c0)='sec\x00', &(0x7f0000000200)='krb5i\x00', 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x1, r5}) write$binfmt_script(r0, 0x0, 0x0) 2m15.730193783s ago: executing program 5 (id=458): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000025c0)={@rand_addr, @empty, 0x0}, &(0x7f0000002600)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002700)={0x6, 0xa, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x2}, @exit, @jmp={0x5, 0x1, 0xc, 0x3, 0x4, 0x18, 0x8}]}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x1000, &(0x7f00000015c0)=""/4096, 0x0, 0x48, '\x00', r1, 0x25, r0, 0x8, &(0x7f0000002640)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000002680)={0x0, 0x10, 0x9, 0x5}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000026c0)=[{0x3, 0x5, 0xc, 0xc}], 0x10, 0xffffdde4}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) 2m5.880998397s ago: executing program 1 (id=548): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket(0x10, 0x803, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x41}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24008800}, 0x800) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r6, 0x100, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2090}, 0x805) accept4(r0, &(0x7f0000000000)=@rc={0x1f, @fixed}, &(0x7f0000000080)=0x80, 0x80000) 2m5.800312495s ago: executing program 1 (id=550): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000880), 0x280, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='X\x00', 0x2}], 0x1) ioprio_set$uid(0x3, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000880), 0x280, 0x0) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, 0x0) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='X\x00', 0x2}], 0x1) (async) 2m5.680883097s ago: executing program 1 (id=551): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x44, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x152ae}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="e8b0b6d3e64df1f1624f8ad0bc4e1a280012800a10010076786382ef0000001800028014", @ANYRES32=r3, @ANYBLOB="0010000000000000140003006272696467655f736c6176655f300000"], 0x5c}, 0x1, 0x0, 0x0, 0x20044010}, 0x4050) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'tunl0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0xc05, 0x70bd25, 0x25dfdbfd, {0xa, 0x1, 0x0, 0xfe, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000040) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r1, @ANYRES8=r5, @ANYRESOCT=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000c4000000c4000000080000000000000004000084010000000000000002000000080000000d000000000000000001000000000000040000000c60b57305000000010000000200009649f1e4ef7b000400000000000002040000000800000000000011010000000200000001000000000000100c0000000e00000007000005080000000500000000000000060000000c000000010000000a20000007000000020000004000000001000000010000000e0000001000000002000000090000000d00000003000000f50600000b0000000200000002000000002e"], &(0x7f0000000740)=""/170, 0xe4, 0xaa, 0x1, 0x6}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x8, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3, '\x00', r4, 0x0, r6}, 0x94) r8 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r8, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r12 = dup3(r11, r10, 0x0) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r13, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r13, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)="b318"}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000001780)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r9, 0x7c81, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', r3, 0x29, 0x22, 0x5, 0x59, 0x34, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, 0x20, 0x7800, 0x8, 0xff}}) 2m5.459192911s ago: executing program 1 (id=552): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x10000000001) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0xe7) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)) setns(0xc9, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x200000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20008800) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="68000000a6d2e317dd2717c9224d01cb26d3fec81198aaf76d7226af5c266590ab71022acc578830849fce2e07d9f3f31cf56905b4dadbb56044a865259c6cf4144fbc000078311319c4cd65e24a70e1e13da841ce1ca8f930d9be260f5b7aeaeee3c3c3bc1f169f62fa0637c98b34987c5124a9fc41736c2572c14422c730241e50126f1f35dd793230b0ceb006e15d08c78eb5c9660166d2edab458852bdbd831e41ab6669f4d364ebe78bc6f2b7401d765453caeea5803c1a6eea9140e8a47c83b18e23d5a6002f67d4b9314160b0a6660a18cbafac79c0092e7054b0475249f3afbfcfa62bef81", @ANYRES16=r5, @ANYBLOB="000225bd7000fbdbdf25020000000900010073797a3200000000140002000000000000000000000000000000000005000400010000000900030073797a320000000014000200766574683100000000000000000000000900030073797a3000000000"], 0x68}}, 0x40000) fcntl$notify(r3, 0x402, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r6, &(0x7f0000000040)=""/4109, 0x100d) mount(0x0, &(0x7f00000007c0)='sys\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setxattr$incfs_id(&(0x7f0000000000)='sys\x00', &(0x7f0000000080), &(0x7f00000000c0)={'0000000000000000000000000000000', 0x32}, 0x20, 0x1) socket$inet(0x2, 0x2, 0x0) 2m3.209887711s ago: executing program 1 (id=562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000000104010800000000000000000a00000808000440000000060500010004000000080005400000800008000540000000030500010001"], 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000040) mkdir(&(0x7f0000000080)='./bus\x00', 0x63) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143542, 0x160) write$P9_RREADDIR(r1, &(0x7f0000000200)={0xb, 0x29, 0x2, {0x7}}, 0xb) ioctl$KDSETLED(r1, 0x4b32, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@verity_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file2\x00', 0x42, 0x40) 2m2.819605021s ago: executing program 1 (id=565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getpgrp(0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r3) 2m2.732438937s ago: executing program 34 (id=565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getpgrp(0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r3) 2m0.039020531s ago: executing program 35 (id=458): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000025c0)={@rand_addr, @empty, 0x0}, &(0x7f0000002600)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002700)={0x6, 0xa, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x2}, @exit, @jmp={0x5, 0x1, 0xc, 0x3, 0x4, 0x18, 0x8}]}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x1000, &(0x7f00000015c0)=""/4096, 0x0, 0x48, '\x00', r1, 0x25, r0, 0x8, &(0x7f0000002640)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000002680)={0x0, 0x10, 0x9, 0x5}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000026c0)=[{0x3, 0x5, 0xc, 0xc}], 0x10, 0xffffdde4}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) 1m43.721611324s ago: executing program 6 (id=734): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}}, [0xfffffffffffffffa, 0x3, 0x7, 0x3, 0x4, 0x3, 0xc, 0x8, 0x3, 0x5, 0x7, 0x100000000, 0x6, 0x2, 0x6]}, &(0x7f00000007c0)=0x100) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000004540)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xd3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)=0x10) mount_setattr(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x9000, &(0x7f0000000200)={0xf4, 0x95, 0xc0000, {r8}}, 0x20) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000180)={0x90, 0x200, 0x0, 0x5, 0xf34}) 1m43.558448196s ago: executing program 6 (id=737): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) setfsgid(0xee00) r3 = userfaultfd(0x801) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) write$char_usb(r4, &(0x7f0000000300)="648d61", 0x3) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x17) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x400000, 0x3, 0x2}) r5 = socket(0x1e, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00000018002101fcffffff0000000023200000", @ANYRES32=0x0, @ANYBLOB="1400060000000000020009000100000003000000"], 0x2c}}, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r9, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x2060, 0x30, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{0x1a0, 0x1, [@m_simple={0xa0, 0x16, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xa, 0x3, 'vcan0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x7, 0x10000000, 0x7f, 0xe}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0xeb, 0x2, 0x401, 0xdd}}]}, {0x2d, 0x6, "6fa6f9ed095cb0677dcafb618347e2f4e0421953df3bc7fc96e095e0d16047b1e3e112809c1f0d81a7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0xf2f2a92e329a0d7c}}}}, @m_gact={0xfc, 0x8, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x200, 0x6, 0x20050000, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x450d, 0x5, 0x8, 0xd7, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x18fe, 0x10000000}}]}, {0x91, 0x6, "698e7a010b79116730d8ead20f176655a05772ed77e8ca5ae8aca49c2a1b0f841e6d024c7239dd357c869b7913596bf5685a4ceefce81575f5fffbd6a929d1eba23ab56f9b2f7ecfe4c21a9a7a73d5b81fc49ffb9370ac5fba9fa8988f053f00507456f6e5a9c83ec4c976be8556e5f04be5bdf8179063f70ec8adf4cedc37e6f8f85977d87f93e163ba78eaea"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x238, 0x1, [@m_connmark={0x110, 0x8, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x95, 0xd, 0x7, 0xe6, 0xe44}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x800006, 0x4, 0x0, 0x8, 0x5}, 0x8}}]}, {0xa5, 0x6, "89a9b793feacbc2070309386654ec1cd8d37a3299f1028d14b50ca4fcb3c6b184dbb3f2b19df93c02003ef1dc162fc673b31d78922c38e390209a4ced850ddff69e79b57d742bba23d9194ff25ac1b35e604092eeb3569d91200f2a547863e2010b8f9f8b2728de375eff6b819741e2fea21a4349474ddc7ce453a429fd16d01d9288f79077216c999cf69f8a74e8d2326a6664698038e4a282af1b62850ab93e8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mpls={0x124, 0xf, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6004}, @TCA_MPLS_PROTO={0x6, 0x4, 0x11}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_BOS={0x5}]}, {0xcd, 0x6, "6c99d4221692e8a7202f405bf29722ea60f4e9d05188599a33424034366972939a09e3cd1374ad30186d705c439a69120128c4936d693ec15cfb1ffe8d9fad26aff76b3a07d50778f0795592fcba74b509db13e1a5560fb8fe847414261cc09169c75720bb2fedf1203a3ba29debbf69e9ee9d84780248c0f36bba0b335cbd2853a5754a08b39d08befee2107ac84b3f0495498ae40c0f8598f0adeb0b087a5d741c29566421ef15c4407732a38c15157deadc117d9954db5cdf5fa6200aa0b45c9fc0945f450c6791"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}, {0x1c74, 0x1, [@m_pedit={0x1c70, 0x9, 0x0, 0x0, {{0xa}, {0x1c44, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7f, 0x8, 0x10000000, 0x2, 0x6}, 0x4, 0xc}, [{0x4, 0x0, 0x0, 0x9, 0x1, 0x7}, {0x1, 0x2, 0x9, 0x2, 0xe, 0x2}, {0x7, 0xbe4a, 0x5, 0x4, 0x297, 0x7}, {0xfffffff8, 0x8, 0x100, 0x5, 0x5, 0x5}, {0xe0, 0x8, 0x0, 0x3, 0x8, 0x10001}, {0x9, 0x4, 0xc8, 0x1, 0x47f1, 0x87}, {0xe, 0x2, 0xfffffff9, 0x8, 0x800, 0x5}, {0x5, 0x6, 0x1, 0x9, 0x10}, {0x2, 0x3, 0x5, 0xc, 0x6, 0x20}, {0x9, 0x3, 0xb8, 0x5, 0x7, 0x81}, {0x777, 0x9, 0x2, 0xc, 0x2, 0x3}, {0x9, 0x8, 0x0, 0x7, 0x28ae}, {0x1, 0x6, 0xffffffff, 0x1ff, 0x5b02dc02, 0x6}, {0x10001, 0x200, 0x1, 0x6c68, 0xb, 0x1000}, {0x2, 0x7, 0x5, 0x1c, 0x100, 0x10000}, {0x1, 0xc4c7, 0x58c5, 0x2, 0x9, 0x4}, {0x5, 0x8a0d, 0x3, 0x80, 0xffff, 0x800}, {0x1, 0x7, 0xde2, 0xf, 0x3, 0x80}, {0x3, 0xf, 0x7, 0xbd, 0xfff, 0x7}, {0x7f, 0x40, 0xe0000000, 0x8, 0xc, 0x10001}, {0x4, 0x77, 0x58e1, 0x31, 0x2, 0x4}, {0x0, 0xc, 0x7, 0x4, 0x800, 0x18}, {0x8000, 0x1, 0x1, 0x800, 0x9, 0x80}, {0xf67e, 0x3, 0x9, 0x76f, 0x0, 0x1}, {0x3, 0x4, 0x0, 0x1, 0xb, 0x8}, {0x7, 0xae1, 0x7ff, 0x61b, 0x63de, 0x29}, {0x9, 0x8000, 0x0, 0xa8, 0x1, 0x5}, {0xd0c5, 0x10004, 0x677, 0x7fffffff, 0x3, 0x1}, {0xa, 0xf, 0x8, 0x7, 0xff, 0x7fffffff}, {0x400, 0x0, 0x4, 0x7, 0xffffffff, 0x7}, {0xd, 0x8, 0x9, 0x282c, 0x6, 0x100}, {0x8, 0x6, 0xfffffffe, 0x5, 0x1, 0x5c}, {0x2, 0x7fff, 0x7, 0x7ff, 0x1, 0x7ff}, {0x40, 0x7, 0x6bc19791, 0x0, 0x3, 0x1}, {0xfffffffc, 0x3, 0x2, 0x6b, 0xe7, 0x1}, {0x1, 0x10, 0x6, 0xdf31, 0x7, 0xfffff148}, {0xdd47, 0x7fffffff, 0x6cd9, 0xfff, 0x3e1d, 0x1}, {0x10001, 0x0, 0x8, 0x7, 0x8b, 0x4}, {0x1, 0x3, 0x2, 0x0, 0x5, 0x5}, {0x8, 0x3, 0x2, 0x0, 0x5d97110b, 0x6}, {0x26, 0x1, 0x80000000, 0x3, 0x80000000}, {0x10, 0x7, 0x6, 0xc6, 0x3, 0x3}, {0x3ff, 0x80, 0x0, 0x100, 0xf85, 0x6}, {0x3, 0xffffffc0, 0x0, 0xff, 0x81}, {0xea, 0x10000, 0xfffffbff, 0x9, 0x4, 0x7}, {0x7ff, 0x1, 0x0, 0x9, 0xf, 0x9}, {0xfffffff8, 0x8, 0x9, 0x80, 0x2}, {0x0, 0x8, 0x0, 0x2, 0x1, 0x4886}, {0x8, 0x94, 0x2, 0x2361, 0x1}, {0x536, 0x6, 0xfffffff7, 0xfff, 0x9, 0x1}, {0x4, 0x8, 0x2b3, 0x7, 0x6, 0x9}, {0xe, 0x4, 0xfffffff1, 0xdea3, 0x1ff, 0x4ac65423}, {0xa, 0x8, 0x8001, 0x6, 0xfffffff7, 0x9}, {0x2000, 0x4, 0x0, 0x4, 0x9, 0xf3f5c6e}, {0x0, 0x81, 0x2, 0x40, 0xffffffff, 0x8}, {0x7, 0xd1d7, 0x7, 0x7ff, 0x3, 0x9}, {0xffffffff, 0x1, 0x7, 0x7, 0x0, 0x4}, {0xf, 0x80000000, 0x1, 0x3, 0x5, 0x8}, {0xd6, 0x5, 0x91, 0x3, 0x66, 0x4}, {0x5, 0xffffff80, 0x9, 0x1054, 0x7, 0x8}, {0x4, 0x7, 0x7, 0x1, 0xba67, 0x7fff}, {0x1, 0xc000000, 0x4, 0xfff, 0x4, 0x3}, {0x4, 0x2, 0x3, 0x2, 0xa, 0x8001}, {0x7fff, 0xb2b9, 0x1000, 0x9, 0x6ec00, 0x5}, {0xa, 0x7, 0x3, 0xffff62bd, 0x800, 0x4}, {0x3, 0xa, 0x6, 0x5, 0x7, 0x889}, {0x1, 0xe, 0x3, 0x945, 0x5, 0x3ff}, {0x400, 0x2, 0x1895, 0xe, 0x8, 0xfff}, {0x6, 0x99, 0x5, 0x4, 0x80, 0x5}, {0x9, 0xc, 0x2, 0x7, 0x8, 0xb245}, {0x73d, 0x10, 0x1, 0xb3, 0x5, 0x919}, {0xffffff35, 0x2, 0xfffffffc, 0x5, 0x1, 0x4945}, {0x6, 0x55, 0x967a, 0xe, 0x3, 0x4}, {0x0, 0x0, 0x75, 0x2, 0x8, 0x5}, {0x7, 0x5, 0x400c0000, 0xffffff81, 0x401, 0x8}, {0x922a, 0x9, 0x3, 0x0, 0x6, 0x81}, {0xf, 0x8, 0x1, 0x1, 0x7, 0x4}, {0x2, 0x4, 0x2, 0x4411, 0xffffffff, 0x5}, {0x0, 0xa9e, 0x5, 0x800, 0x4000000, 0x8}, {0xffffff80, 0x5, 0x2, 0x8000, 0x80000000, 0x3}, {0x8, 0x8, 0x4, 0x9, 0xfffffff8, 0x9}, {0x80000001, 0xfffffffe, 0x4, 0x4, 0x1, 0x3}, {0x8, 0x9, 0x8, 0x7, 0x2, 0x80}, {0x7f000000, 0x1, 0x2, 0x80, 0x5, 0x7fff}, {0x75, 0x36, 0x9, 0x4, 0xa1c, 0xb}, {0x3, 0x5a02, 0x4, 0x10001, 0x0, 0x3}, {0xfffff000, 0x6, 0x1, 0x5, 0x5, 0x4}, {0x9, 0x7fff, 0x9, 0x2, 0x6, 0xfffffffe}, {0x79e, 0x3, 0x5, 0x9, 0x1, 0x7fff}, {0x2, 0x8, 0x4, 0x2, 0x2, 0x4}, {0xc8, 0x3, 0x0, 0x5, 0x15, 0x5}, {0x3, 0x6, 0x5, 0x100, 0x5f25, 0x2}, {0x3ff, 0x5, 0x10001, 0x8, 0xd32, 0xf}, {0x9, 0x2, 0x2, 0x7, 0x8, 0x401}, {0x9, 0x6, 0x0, 0xb, 0xc70, 0x7}, {0x40, 0x1, 0x9b9a48e0, 0xc5, 0x2, 0x7fffffff}, {0x7, 0x101, 0xeb, 0x800, 0x1, 0xd2e}, {0x6, 0x7f, 0xffff, 0x9, 0x2, 0x5}, {0x7fffffff, 0x7, 0x6, 0x6, 0x8, 0x8}, {0x5, 0xfffffff9, 0x7, 0xffffffff, 0x7, 0xfff}, {0x1ff, 0x9, 0x9, 0x4, 0x0, 0x4}, {0x9, 0x2, 0x7, 0x400, 0x12, 0x6}, {0x4, 0x8d, 0x4, 0x0, 0x9, 0x9}, {0x5, 0x0, 0x4, 0xfffffff7, 0x7, 0x27}, {0x0, 0x10001, 0x1, 0x8, 0x3, 0xe1}, {0x661266f2, 0x6, 0x2, 0x2, 0x3, 0x9}, {0x9, 0x3, 0x40, 0x6, 0x38c8, 0x5}, {0xe5db, 0x7, 0xffffff01, 0x100, 0x1, 0x1000}, {0xf88, 0x5, 0x40, 0x94c, 0x4, 0x200}, {0x10000, 0x0, 0x6, 0x10001, 0x4}, {0x401, 0x4, 0x1, 0x3, 0x9, 0xffffffff}, {0xb702, 0x6, 0x3ff, 0x7, 0x16620000, 0x2}, {0x49, 0x9, 0xfff, 0x9, 0xffffffff, 0x5a}, {0xb, 0x7, 0x1, 0x5, 0xa6c, 0x8}, {0x8, 0x7, 0x6, 0x61e, 0x6ba, 0x4}, {0xd86, 0x800, 0x4, 0x6, 0x2, 0x1}, {0x4, 0x5, 0x9, 0x7, 0x1, 0x7}, {0x6, 0x7f, 0x2000000, 0x4, 0x4, 0x4}, {0x5, 0x7, 0x9e, 0x0, 0x3, 0xfffffffe}, {0x7, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x100, 0x2, 0x1bc, 0x5, 0x4}, {0x4, 0x8, 0x800, 0x8, 0x10000, 0xb6fa}, {0x8000000, 0xff, 0x6, 0x6, 0x5, 0x9}, {0x89f, 0x0, 0x100, 0x5, 0x3, 0xaa30}, {0x2, 0x1, 0x7fffffff, 0x6, 0x10000, 0x2}, {0x0, 0xb, 0x8001, 0x4, 0x8, 0xe0}, {0x4, 0x36, 0x7, 0xb456, 0x4, 0xc0}, {0x7, 0xd, 0xb3, 0x9, 0x3ff, 0xffff}], [{0x3, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x5}, {0x4, 0x1}, {0x4}, {0x2}, {0x167297199c82e075, 0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x6}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x9, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x6}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x22d443be4ca0236f}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x4, 0x1}, {}, {}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3}, {0x4}, {0x7}, {0x3, 0x1}, {0x3, 0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x3}, {0x6, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x7}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x2}], 0x1}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x6c, 0x5, 0x8, 0x4c}, 0x5, 0xfb}, [{0x5, 0x6, 0xc, 0x47bf, 0x8, 0x4}, {0x6d, 0x80000000, 0x3, 0x2000, 0x8, 0x7}, {0xa7, 0x200, 0x3, 0xffffffc0, 0x5, 0x7}, {0xfffffffb, 0x7, 0x4, 0x6e, 0x200, 0x1}, {0xe9, 0x9, 0x80000001, 0x1, 0x40, 0x6}, {0x5, 0x9, 0x3, 0x3b1b, 0x9d, 0xbac}, {0xffff, 0xfffffff9, 0x800, 0x1, 0x8000, 0x9}, {0x605d, 0x10, 0x1000, 0x5, 0x3, 0xc}, {0x7, 0x3, 0x9, 0x180000, 0x3, 0x4}, {0xd, 0x2, 0x2, 0x3, 0x3ff, 0x4}, {0x0, 0x74c, 0x5c, 0x8, 0x3ff, 0x7fffffff}, {0x10, 0x3, 0x1, 0x6, 0x6, 0x40}, {0x3, 0x5, 0x4, 0xf, 0x3, 0x100}, {0x3, 0x6f6, 0xdd0d, 0x7, 0x2, 0x9}, {0xffffffff, 0x5, 0x4, 0x4, 0x9, 0xc}, {0x8, 0x3, 0x4, 0x5, 0x2, 0x67}, {0x3, 0x0, 0x800, 0x9, 0xbb, 0x7}, {0xfffffffa, 0x401, 0x80000001, 0x1, 0x8, 0xc}, {0x7, 0x4, 0xffff8000, 0x0, 0x0, 0x2}, {0x2, 0x1, 0x10001, 0x7, 0xe, 0xe}, {0x8, 0xd4, 0xffffff81, 0x1ff, 0x4, 0xafa}, {0x9, 0x8, 0x85, 0x10001, 0x1, 0xe}, {0x9, 0x80000000, 0xfff, 0xfffffffb, 0x1, 0x2}, {0xdb, 0x10, 0x3, 0x6, 0x9, 0x1}, {0x3, 0x6, 0x5, 0x6, 0x5, 0x6}, {0x79, 0x2, 0xa362, 0x10000, 0x6, 0x400}, {0x8, 0x5, 0xf, 0x4, 0x2, 0x2}, {0x401, 0x0, 0xf, 0xb022, 0x9, 0xfffff800}, {0x8, 0x7, 0x7, 0x9, 0xc, 0x9}, {0xffff, 0x9e6, 0xd99, 0x7, 0x3, 0x7}, {0x9a, 0x4, 0x1, 0xc, 0x31e0, 0x5ad}, {0x3, 0x0, 0x5, 0x95, 0xb}, {0xfffffffd, 0x9, 0xbf, 0x5, 0x823, 0x401}, {0x7f, 0x6, 0x40, 0xffffd6e2, 0x8, 0x80000001}, {0x80, 0x3, 0x14, 0x4, 0x9, 0x8}, {0x20c, 0x403, 0x7, 0xfffffff8, 0xd51, 0x9}, {0x9, 0x1, 0x7938, 0xb, 0x6, 0x6da4}, {0x6, 0x0, 0x1, 0xff, 0x9788, 0xfffffff9}, {0x2, 0x2, 0x5, 0x81, 0x64, 0xb8c}, {0x800, 0xfffffff9, 0x4, 0x10000, 0x8, 0x1}, {0x7, 0x4, 0x6, 0x9, 0xfffffffc, 0x7fffffff}, {0x5, 0x1, 0x4c7, 0x4, 0xc62, 0x6}, {0x9, 0xb7, 0x1, 0xffffffff, 0x8, 0x8}, {0x396d, 0xffff, 0x10, 0x6, 0xbc3, 0x32}, {0x3, 0x540, 0x0, 0x9, 0x2, 0x9f}, {0x6, 0x0, 0xb, 0x80000000, 0x4b, 0x7}, {0x4, 0x82, 0x7, 0x195d8d70, 0x81, 0x40000}, {0x3, 0x5, 0x3, 0x1ff, 0x0, 0x1ff}, {0x8001, 0x400, 0xfffffbff, 0xfffffffc, 0x3, 0xfffffff7}, {0xc0, 0x6, 0x1, 0xfffffeff, 0x121, 0x1}, {0xf, 0x0, 0x5, 0x1, 0x9, 0x10}, {0x4, 0x9, 0xfffffeff, 0x9, 0x7, 0x4}, {0x1, 0x735, 0x3, 0xb, 0x84, 0xfffffff5}, {0x8001, 0x6, 0x8, 0xf31, 0x7f, 0x6}, {0x9, 0x0, 0x80000000, 0x10000, 0x2}, {0x1, 0x7, 0x1, 0xd6, 0x3, 0x7}, {0x8, 0xfffffffa, 0x0, 0x4, 0x7ff, 0x32e3}, {0x7, 0x7, 0x2, 0x7ff, 0x5, 0x80000001}, {0x2, 0x7, 0x3, 0xddf, 0x5, 0x4}, {0xfffffffb, 0x3, 0x7, 0xb, 0xfffffff8, 0x79c}, {0x2, 0x5, 0x9, 0x7f, 0x4, 0x7}, {0x200, 0x6, 0x2, 0x3, 0x6, 0x8}, {0x3, 0x1, 0xffff, 0x100, 0x2}, {0x800, 0xc7b, 0x7, 0x7, 0x7, 0x5}, {0x3, 0x8, 0x8000, 0xffffffff, 0x6, 0x7}, {0xf95, 0x6, 0xfffeffff, 0x4, 0x2}, {0xa56, 0x9, 0xf5, 0x7, 0xac0, 0x6}, {0x800, 0x2, 0x159, 0x80000000, 0x5, 0x8ad}, {0x8, 0xbb, 0x8000, 0x0, 0x4, 0x2}, {0x81, 0xfffffffb, 0xe, 0x4, 0x4, 0x4008}, {0x4c, 0x4, 0x2, 0x1ff, 0x2b8a0150, 0x3}, {0x3, 0x0, 0x9, 0x4, 0xfffffff7, 0x3}, {0x100, 0x3, 0x0, 0x779278c8, 0x2, 0x6}, {0x0, 0x1, 0x3, 0x2, 0x42b, 0x1}, {0x9, 0xe75, 0x5, 0x5, 0x401, 0x3ff}, {0x8, 0x400, 0x0, 0x0, 0xf743c78a, 0x1}, {0x1, 0x8, 0x200, 0x9, 0x5, 0x3}, {0x1, 0x7, 0x74eebe, 0x1000, 0xe3, 0x8}, {0x1, 0x7, 0x10001, 0x5, 0x1000, 0x7}, {0x7, 0x0, 0x2, 0x7, 0xd2c, 0x1}, {0x0, 0xb, 0x5, 0x4, 0x3, 0x8}, {0x8, 0xe21, 0x7, 0x7, 0x101, 0xb}, {0x1ff, 0xffff8001, 0x10, 0x7, 0x401, 0x40}, {0x5, 0x1000, 0x0, 0x5, 0x6, 0x6d0}, {0x4, 0x9, 0xb, 0x1, 0x100, 0x3ff}, {0x9, 0x80000001, 0x0, 0x2, 0x7, 0xfffffff1}, {0x3, 0x8, 0x9, 0x0, 0x80000000, 0xff}, {0x0, 0x4, 0x1, 0x1c, 0x4, 0x3}, {0x7, 0x5, 0xb18, 0xa, 0x8f, 0x400000}, {0x5, 0x4, 0x7, 0x2, 0x6, 0x8115}, {0x4, 0x761b, 0x3, 0x4a8, 0x5, 0x7f}, {0xffffffff, 0x4, 0x8, 0x7, 0x4, 0x9}, {0xf, 0x3, 0x800, 0x9, 0xfffff738, 0x6}, {0x9, 0x0, 0x9, 0x3, 0x0, 0x9}, {0x4, 0xffff, 0xfffffffd, 0x9, 0x5, 0x9}, {0x9, 0x400, 0x6, 0x4, 0x5d0, 0xf5}, {0x4, 0x7, 0x3, 0xfffffff9, 0xf5, 0x6}, {0x5, 0x6, 0x2, 0x8, 0x9, 0xfffffffe}, {0x6, 0x6, 0x694f4cf9, 0x8, 0x80000000, 0x1}, {0xc2, 0x5, 0x0, 0x8, 0x1, 0xeba1}, {0x5, 0xfffffff2, 0x113, 0x6, 0x4, 0x54}, {0x2, 0x23a, 0x7, 0x6, 0x2, 0xfffffffe}, {0x6, 0x80, 0x1, 0x2e5c00, 0xc7f5, 0xed7}, {0x10001, 0x7, 0x16, 0xe57, 0x2592, 0x1ff}, {0x0, 0x1d5a8e2e, 0x1000, 0xb1, 0x3, 0x28000}, {0x6, 0xa, 0x1, 0x789, 0xd, 0x81d}, {0x7fffffff, 0x4, 0x2, 0x1, 0x6, 0x2}, {0xc, 0x800, 0x2, 0xf7d, 0xc1f, 0x3}, {0x1, 0x81, 0x3, 0x5, 0x3, 0x5}, {0x1, 0x7, 0xeb5a, 0x9, 0x8, 0xfffffff7}, {0x40, 0x8, 0xa, 0x61, 0x1, 0x8}, {0xf30, 0x0, 0x0, 0x4, 0x2, 0x2}, {0x7, 0x7503887d, 0x3, 0x200, 0x10000, 0x40}, {0x6, 0xf, 0x30, 0x3, 0x1a, 0x3}, {0x8, 0x7, 0x401, 0x0, 0x200, 0x8}, {0xb, 0x3, 0xdc4, 0x9, 0x5, 0x1}, {0x0, 0x8, 0x2000, 0x2, 0x2, 0xffffffff}, {0xfffff3ad, 0x5, 0x401, 0x9, 0x2000000, 0x400}, {0x6, 0x6, 0x8, 0x1, 0xed, 0x1}, {0x7ff, 0x9, 0x0, 0x6, 0x8, 0x7fff}, {0x8, 0xb, 0x0, 0x8, 0x1, 0x4}, {0x1, 0x2, 0xfffffffd, 0x6, 0xb83, 0x3}, {0x1, 0x2, 0xd24, 0x31, 0x6, 0x400}, {0x7, 0x100, 0x4d9, 0x80e, 0x1, 0xff}, {0xe6, 0x401, 0x5, 0x4, 0xba3, 0x4}, {0xfff, 0x1, 0x8, 0x6, 0x101, 0x1}, {0x9, 0x8, 0xffffffff, 0x0, 0x8}, {0xd, 0x100, 0x7ff, 0x366c, 0xffffffff, 0x100}], [{0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x6}, {0x5}, {0x1, 0x1}, {0x2}, {0x3}, {0x3}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {}, {}, {0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x6}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x7, 0x1}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0xf5f93952d36ccc42}, {0x3}, {0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x3}, {}, {0x2}, {0x1}, {}, {0x3}, {0x0, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0xb7ead1eeecda9167}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x3}, {}, {0x2}, {0x2}, {0x7, 0x1}, {0x7, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {0x4}, {0x0, 0x1}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x2060}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000100)={0x50, 0x0, r10, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x100, 0x7, 0xa18, 0x0, 0x0, 0x4}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000001580)='./file0/file0\x00', 0x1) syz_fuse_handle_req(r7, &(0x7f0000004200)="0aca6c6a1bafd2989666a6014bd5e9e63945bda64c1239d970f0d349110c18fe029ac3e29dc9ff9ead2ed3cef0fe77ef8348a82d3da186ce2140d53dfeb34dc1e128dca5a5225db8052bd348c2d1a3de224233032fff8b85c85885c90e9d0c205001db3dfc55d17a7dab1761c1733c465113c056d3bcbaf6a52dbda820a1db5e7d777f6c716e5f60b04cc1c6a362d891cb08fa109c5a00e427f8636059d934f255021cf13d2bc9cff93f049018b8e48f6480d324f08eb83655d3eb5a379ec18c861f596db17bcc23ada65f26a02c4c0c9e3167cc582e93661cdd0dc7581ac1958d9cd08104af251d87d8b5d82150b8cc4ca6d23475f259a8b7d69839cf728a6c478eec56135bdfc6428a318cf2b838d16984d0498d33ac41fe67361bdf5752db6a5ae32979463b60ad6b99527affdcb2b4a0f23b2f140c981b00c99cd25d563ff6c3308b048371eb2e599880a2b67ef9a2282947dbb23a3f1944193a801187f206587a52ee7a33032a842b31fcc0db079c554c97a09e3812aea45702099ab648888d08ae48a187a5acee7b9a2edbc320c64514554e540286053dd2acb9f9ec83435f43193b45b324c8406cdf976bc7607cf9385e99bf5f5205110d0c27abcac49e7ec7deef560f953d2c64bfd014ddcb1b2cbccbe401a312436799235807f4fdf52a9f894656fcbe1e971163e8d743450c49875379522df77d5e8910df837701d135f4589d4d15355e1638eff568a18a0d6217a11acf8fdf0fed0216635215d248aff37d85b62edbc989bc6d4757e6347ec971ae2b1e0d194e6c11dd8f7c108219569e157eceb7c14a288aad98a24de9a81f9ba1dd5271c17adfdf41f3393789c30f9345f6ad4ad1a6bf46640f69f7c038c4fec6652853a3f4fece3c3d15bfdea15f37e961a03de54181724801808a3a9030ba4650ce6fa9e6822c794d7b9da548a2eab977ab0c08b2d985957d5cd70ec677637219c6ca7c7c4d0a7a7ca38c1862583735b46b3addfd1c72cf7f63f11bd85ed59b9ba94db5c2fbd48461ab735b439a992e3a4462545e042e3c863199c006ef3a3be4473b24b782f86a3c1dca9848283bc47f4322273681efa1c8c413dc81a459e4e755846a094971708eb7f428aa67d0c81ce7f33d856e13a342b05eb403af7b4cab191c4ab9d650158808ec74d04f4b765e513b94f10345322e48485d29eb8b1408d7776f98e3625a20220e94789476affdbd19b44bac6bd2fa2b0ba10e93582178a3ef4938dcda25bc6245621b1ced780ca089010e8e51493c1ac7747e949b67fe6e3858e60a1e45a657c080fdc0bcbfcac2ba9d027f02ce30cc7440ce71eac66bb2eb264dcb1306a6054fde6640ca51ec4ccaf500a87f073b58ab286daeefd8d3ec7ee882551f7b6a36ab79a8e10d1d3c234ffaa33e95026025cc39a057efe7823dcb689131b1e83572b4dd1f49097580976c046424618fd6047d46928087d483df952738448d164c9288b15a4982493bf7ebc1976d0942846c8310556732b4cabff937a51e926caa37ae54dea339c2a2a8d73be2ca3a39edcb4ef8bd58a3c4c98c48b9f37a1424b6a54919921d4429611d0dd585d1d357c3c1ad1cf68f36907f8d9c28a14ec2cf2510fe54510111ddd7a67fb8d2f449227da397c32b8dca19971ab9d76e1f6ce0c54c9de1cb1daa1936b62f838170b8b6e7f34168a099619a113c83347ce2c0f6086855385062b6e074b68391e59430236f9ec687a265072f7a40efbef3cfe5bc1cfb364d87a597507811d2bf6af59e20fcf4703caa63285decabcc367ccfb8e27efecb14db8b1167938f457d4117c62f440d807b5482bb223b4b14e9526f9ede33631cdf9fcab53b3fbebc9344ab130d793dad610f2fe41ef388acaebd6cf26aedf7c7c6aaee956cf92c14583bd45b189d43f7b44419df1e0adecc8fbedb357656b7649721f81c2207ebb37e3ae21bdce8c982cbbdec012c7fe587161ff741610fb8ea5883c758527873ca2197b5f1058083c40203cc4dbdf7f4f1388f2309d22a6a1767137703296ad3aeabdbb3529a290da9c6cc5631b2f1ad25c766e3cbd8d9f588bafd17495f572bf1cfe1e8b5bb22130963cca8832f846300bb6dc0baec85b500e1a48fdd14cf0442fe4d441821d7e46fb5e2220c96bfb16ab8ca883a4477bc756dfc6622f320a648cfb57f9de9aef33f9986c6517d1a7eb59348541d6d3494ebe7bc1ed4a86f06411491d176da36de8c8a8d8ea28928bda63fe863277e4325b756421d4d2042428250ed526e538fb930671e9ad517aac494a58aecbc908b512016fe4d8f60b576e230b3206a0c7bd4fef717a8cda0029d13ecc3c8f8686f717adc1440353c236aa71f842839c5ce92c83fbfb57b221271aa6f4029219c3c2ed7a3a53d8ff065ce30d403c95cf69e7963d5bfb63bccb5b28ca125f0d7094072273ce3108093d0ff83ab98393b8e9a87117f4933a8c8ecf353931da3b8dacb20685a65dd865bd6031cd2b0b7e237901c782c6e6ea8742e89dbb01eb925dd6e74c53bd28d3c424cee35eb29823f2138b92516075e00342fa4dbc5b27675a651032c8ffb3da6c5349d0f9b2779778d0cfa1c8d4cc34d4fe95fc435e4768e93d56d2c142f25df1b9afa7d103486842372b36261b96b7b3acc0e78ff20a535ed515ace0cf3300168a7ef42d6bd511c019d0ccd7599ba70cbabc95f34a052fe9d6f97b49dc1cde40d5ebf305797d7d572a61cd38a0cf85f28c5d018648b769327bd9559722d5422754f26c9e5439b42bedf34e31bbc845b99ce315eeeb0383fb3ae021084cedcd843b86831c78441ccc0d2c23de528e53cff785816a3a3d99b4a4684df9546a285203bb615eb480fa8385e90226b27b39a7d50c83babf5ba890da1a8848ba372971347dc34b76370544feb183b9292043f2ef072b69bcff45b1917c073222d50bd585f2173bdae673198b95b67f8387f6d2b2934597c5ce165fd420ddcc01d29d71d532b5d127afc98657845230e363cbb9ecc05b247996ecbfce0e8215ec7dc5e9be115de2e7ebe8fe3e191f455d244ad1ce75c828a2adbbe509589f389936e62dfd1ecdef105162d357cfb22412b64570dcb04fe18bbbe5518985d7316a75a19a16a482105b7fac923e1eefd780d036ccc39e3cc53d2002ccd10004be1694be4110fb062110e1a44ba88acfa282d9c7cdae0cb55f48f7caa3c324d9f52265d21606a20779accdc9f69dd0fc49e4bc2c49891e526561569abe5673533c8a9b6a3004c809d3f7452b02787047d4442df3f4cc5d47e5aa73b7994c113541ea312970f2e741d4fd50a83f5a0293fbd56d619aa4bb3b491606642fcb922b5ccd6bedb442e450609343e18f61abb3a4b2fc69e06a72edc7bcba0da06da3e80f59b737f088d01f0dbcad89003b505fe29bdc8118e3fbcdb90a4f464e0e70d20f093790ae1b9f6f8a904a268cb4bb116404de1bd4c3f9522c36893a902a3a90f52670b7ff2074815329f3fe2c8ccfabe2d812394e6b0e34741abece71b7db0fbf0a80e6c13bc7bba89a4ee01cad9dd76e49cd91690db6fe402640db8b3523c49bcf611a9da991123edcb64ef505906d8ab4b8586e631828402105f045cff3681f2f36e3713be5bcb6af157278b194a51f04d04507231aa6f4d77b4065f2a97894c201b23f7b5f79b029c74fc4c57fff87c03e01210674417c1297155ca7a7fbe855fdcf65561619ffca0099fa08ddc8ddd7f713b2b0c6af0fcc4bd4cba9e9f47debdc6d9e6e2dce63fec20efc51e15d013fadba2707a449dbfd025f1a7c329282c797b2071afb37a89f8d58c1e3b4f06586f00a433161373548b699fabd92771346a25ff10789ca89cbf00f92248c6b8468f22aa4cf7ba90aea16a3cc2b1ee598609dfbe75fb8e11c5003ad0c9ac7205cd35552a53703f06e465633f9653cd670952feb9e77db960ea18914235af757e75204d1f74de9829dfac217d87aecc1c80066426f12e52883bfcd982e54bfdae8ef55f3b70f78bae9e6a1e24388c642cba3b3215602294bb7d68bb6f8e0b24c0b6e99df504c30beb2a7f47b02f9af6511eda25407c30dfdee39ec8db32d93e1e09472474883a87b7b4664bef06d5c0a43793237187acaaa9654f74e5d3bf1ce389befc139fba61378e7b66b4b0d87334732592ebd0e4989373ca541b92d003e67e0292256c256344dbf03ad24540f11cdc174b45d3781c1da793a460ba671373a0fa082ba63f5418733c9907d360c9bc54ba0e2b374de7965a87316df1c7af17164e1b6dfe32d71fb5ba641bb8d6cd6299473f37e44a69e90a87cd2f8a486a0db4eb104bf87d9f7cc87dc294e6debec7e5819f3f26bdf4cac91f8ee94a826df99da39a4bd6d476943428e3f5009546ee569d6273f7ecb115538c6ce8fe150249c89452c2f0cf0796208a216fc2cb55e1b6c892778f15e7f8b78e6e97093572a29ca3600c72feb4e1ef42a225da695b3111777f3833e306f2a90b8ed6095127b0f13be495a3321bf8201955d40f6b486904a4e1f4c9965563d30277b30cb0d1ef375338a25314fc5abce41f1e95118e89455af9e786cdc460e4e48fda5f21cece9b4e5276523d6919e165df5efe59aff13067d3ef0e82259305942b5f25e831dcb72f5c7fa67ceba7678078d8311aefdc91916f8c1db2ac61188b46825707dd26d29aec734df8bebd7474277908b2ba9e77daea20c395253b3cc876e5dcac960556072bec36e14da26c335b509a38dbf3037d620f4765e63b946ef8ada1729b1323acc8b5e436f3967ab7cc033ccb7d0c9cc74d3a3faa2ff2afb1cd571e3749cb0203e70756273fc6a4d80cf646d551f3a801ca513ac587f0ddc8c58870d817ea2671b2ef30be91a45dc730c6636e7de2ec235044b837ed9861dc89e4df342cff52a29ae6b8d5817fe31bb3a74d0202efca5d94b4d232f3dff885bf52f8d43097d069ce81220e8578c630d496b01fc60562bfbfda22fce6ce68564ab31d1a3d38af2d7b73a970b9b30f6c48dc38991da402491b2d643e0f5e71bb9c0aa834006ddf24b7dbb180f68751535d8cc34823ba3d1ddfbfeb6a15655118d4e1e11b255b998006906017ad9978d6cf4a45a669eabf653363391e77a82a9da14d184a50f1421eeb61411e859cf6f98ab0846ed5345b63e3ad004d1ffd1e48e6574ba7d832f7ad1345b8df27f7707245b335ddff2e4ca1430ec44af208e633c25678b3cfee96424ca026b159bb18c1bdc51db6c66e8788e5aadce1d3e531c9b02edc65b846763ee64113c0cd0d23824c4baf3516e2c8e5192afb9fcd390e51b3bcdcc0a49f932a6907b38713e2229aaa9abc5305420f50a2016429012e835407dee7d8d0b8404655620c3df407e7be2a5a1e668341dd91224509ffd48db6861f558d098954f83aeb6e426099cc4291da311c37bd46c8d80c3ea975e0db6ce12dbdae9116bf08909431fd5483f7cb3076d33a900d56c26d6f151386abb32ea335f5337683201a1ce5d9df25c5df29a375d2680827e182b1aa0813ee7f9d273d7ce1b86194a8cf48d630a5be0b947245c1ee0a0645500ce2ced6dade1b63c0e7572260cce25636778d79ef11ed5e3c42835c8e53a6d26cf85293050cedee2a116e5f38b9cae91a503ec9e0cf784d9cfdccedf95971540ec37926eb43b27cbff1d96b83f80018e6afec70523b6672111a47f9922db34da15d7ca3cc3a77f1abe7221b72d43d2cb4c23fd2bff6cd5ef6b31b6a4c65babcdc918b0d99fad656e471a20a8f4b66d6e37877da1a8b7fb7a8692d6d578ff953b18deebea1353f915102e4d2064dcf8eb0965a2f4c2eeda70b4177dedd7597797ec76bb72ee422ec4d16e494ed77c9bd843ee01885cc3aba1f77806e8f501b856935494918ef83379ac5ae1e06697606053a8c5c880975d1f085c93f2adb1bd2c6ae07c29bbb245cac4726a20a2f61ded013722eee8878933a90319cc8cab7a2bc69dbc79767ba18fcdd8f9ba7de44e9f0575994b28aa9e3e7b4c1f2ce0eee264dfefe3e1600cd969683551894d28b690122093105133b22ee04a50f4883274cb929beb1bb45444ca5d470c0ac611c4990eefea25526f590b269ad40d23842c5b5996c1cb393dbff28a7e2f7cf04ac30fbc2d29ece6708fad830bc523fa52d2ebbfda27379e8c48d085b260a2dfc2e8d7e1a94a245b518612bfc9ca0260c8fdede5298bf584e5d71fc131f5eb6ad2dd7bfd42a77f523eb0aaa787003fb71b9a64fa783e918595af0413fcc0d7818a514c055a48ba9b1bbc6c974f7cb55c3af3edf117835d169e5e2b31e4278d0419b23625ae004171eb2ef8c231a61331886234b402886b4993ca6376f8664134cead1bea142bbed5d46e3bb71b0f8a4cec0c79a9b5f6c823128d02063967a5363b6bd6e242fa3fd21953fdb57725f1eda22984bcff8e40f2076fc0a462706dc2bd95dc447a2aec2a8a4808f2930ff1353348942e28204af42141fa120c8e5fa9c225d16f3624deb2ce178fdf594db504159bbf475e8bee281e3c8ebb29b404b3fbd13dea76df5aee05ad6a85054b838e149d0ebfabe61dcbda6c3494e170e75633843a01e2458b526ac5424177d6bc4706a09694be1c372cc79cf7c4d82ff4e62489d1fc7819d749710035a6fac239d716b57a1af1346c1e8420dc8ae46fd18245160d43a40c564bf11f0232bfd1fed67ba1aebce120ee93a0a000570b808d9fcd60b622c59ad53ef535c1db7de15b52ed2540708eb5baa7195e1a86990b6611ad5c50127f7e876f8031856e9a2c0566f357d6c75e6ca5f217d428602fa7c8f7fb9f3abbefee76d88b3b08c3be2f0d093ce96c6a00f3a157dc0a05e1fc5d8de583c25e09c77348f5825fcd4631396f3e8c26f5c1432784eb8c377fb520d28aedcaa5addfda6eed11da4d2cc91c2e3c3728c763c9d58283af32d00aa1910011a552adabee99d1387d14e582cf68fea46b729eddd0d3ad8eb9125d5fb060f4d6f70a166cc3ce9b02a7bc65200399fc2a47b90039ac23afb853925195e8079da20cbffea72365158fbd94a6e0a654f6c09a8032fb26df99913c2300e03428ab3cd1b3f7aee15460732d445b4797673b47a93a325b2e5157106ade0959be9c4562d5a4292a9ac94940c66375e559f34e57a1158b5d77a5dc9515bdab63799627301f19398d84c7afde812100a65a1642e9515a30434d344b380a92eeb2013a0f63cba648c37095bfd985c607b120f1769a79f1fd7c03f09f966b72945606ade67f9aaa631948bb82f9ae3f89ecf6db12c02d174f62ad6e1b60f4819ae19f4979e0f9dcf51bedf4b1bd1de73bc2adb1923544ede6dbd40ed4c559cf1f079f5dc8986691540e13f5a2505cc0923ca8fe2608ec92b95dbb5facc320e43b2049b79eb02618f6fab08b7e9dbe00fcd69b338b1bb6a9beae531972e16a19d94bd2273c4d042eca34dd7c5aebfbf16552681ad4e243824a9c5d0d8b8d3aba4c102fb76c216c230c2ec34838a0817b03a04480c61c899b2e442bcf2567d4e73000d9c9d4d0acb712df0183fc288634cfde234b94fdbbc0b7e66ea5b6437f312167b1ea93e2a6b2105308d8198a2d4054ba2ff2855250e0e6c952364056e2d3d09e5a2c578837d6521ffb82780f169d07f2f032b34d62f2712a77a56175017257ea1caea41acbbc520b429bd4e3ec3f9a6eafce46731dd3396f1ce1a6198927fd2dbefb3f77c9173be0934747ca47b98c6548c8cd07249d9715414b8a8ddc8430575d8b8903d3923089282a3ccead6e11044c67f3d5d8ed8cc0c0331f2dc09e1bae77ab55307e6445ad382451eff64faca8a4c0cba7cfa2fc9b087afb040e594115c35ce1dbec69ef1e5af8003339afda5faa1be1a3da7c5cb84273009c32d300fba7d222d2dc783241a9414ee30c8bd7e655c09a7f50dfb249ae9b15284b971503f6ce8866a1b36f993acf28d387da88c8defd323d1cd91d4eb46ff87458269a134675556b067a1b71829b7706ba58c93a919884089dc333c9b5d8279dbcc20071991762d2569c8ff5f21783e2961228b2006f8805750c0f9f4f9dc3df86dae1ab98af22122966a6ba04ccbb2bdf90e91e1f2595b979b6934fe132eda34cec0f83132f3867a197a6dfd0d43528bd56613732704bb62b12f4ede7439b2150384fa04db658fda2ddf97ab571f02d150c50c95009d0aa2e553019ac1cf9bbaf15474bf66d69224913b11080badb47d4a085fa13e965de6e95b7aa6e07bb212774d0240738cc07ccc1670d33c100cead3fb99c3f32fdd97c9b16956b1c22a90cd5c7aa0d920dae9e2b149fb5f9870129a0e97d1edba0dbf8fc4fcca6c65c639dd3eaa8803b1e9e601907e086ed1079ff6bc6de941c91df0634ce3730b8035bfdfa699304666920bfb092354da1f0bdd28c9023bd2e152e931e82eeabb86b0323c789daac94422eb7855f18775917e12feb85019e2e017303002ff8e04513ae0fb03f334a76addd8fcbd69ed25931f44044eeffb5d66cab5a22b21e85324946ab15408dd5d68b17727d2e4779bc378750eaa6ef6e943966c0dc4d066c6b8b8945023a0fc49f81a9c15a35d350e3d741652b8a8014b3649dcfd028f25c0b38b7cc14f7e375acfd3960af2eefc49ac6589f38791c9c0b0ea4e55992274052eed15cb8de213794636c4db2385eb9bcfc28f8a97e7c7ac949cd519ab62d1ab10d855a7ac6acda00b78d35d80a9ab4b7099603782384c461dee90abcc14a539779435cf0677eb0b6ff7e47488667788f9b0fd7d5e0cf53aee5ca0071fa30c062da3c44e79096e24594c6e202b7cdbdc49be2ddac8058c7ded15f07d4c413886fdd7017b9fedb86e39917fd1e81b294675bde06c8fac0dbce7f4b90b3859c66f9f6fec640c6781728a8b347da28b4360924ef68c3c740ed5ddbf013720c6de54d9bce5232864f9e80a652cd778641c327876b2a3e1049355a58fb5054aa17064e97142d64be9daf5d1b162566a009c69133f60e3d4c2a53c153185c659d16236fcc1690eed8c6c2e4f8b172eec457a9407003ddad723e3b183e81b17ddbe46ba368ab3e3ff574d9e3fb82e102ab46d7f608e235d064ea963fdf1622ed7278a27fd8210ad39c3acd9069abba71ca051b64561683068ca6a1be906c196ddde1839b3897d5af8fee51614d73e51511b03a5763f3ed3e64bf7293118dc321cf5e940a2829c6b8550083d66d31680fb55af098d9ccebde9882f818c29f4cbb55c26a97c359d8606bff3744ff3efc22e8d34e67b7c97b567483963c574bd1dac8c46c911c48b6e29e73e52f8c9385729a73b70d2ebba9e744247d9003a962fd607686e6c5972b59616acfe327d8b736f38c703832d7690c6474641bf87538e785353c1fd7df1b5ecb1200eed8c5857abd16c26ae72d0147de475b0c4bc98dbff530b334c9c50607bd46ddbcb1ffebf7513cc842e4cdd6c8c00a284e81cb531a04f75210add4f73db3da9783694fc541cd470368c8776973f02835dc355ef54ca90a580a45a2df6137c43b151ade1e51bc879e7fb43141541bfab79b3eaf0eab323c7147ecce6eb3eb3eb02a204755cdcc7405ad903b91fa4d297262cf77fe395a18e269ec36bd534d4939e78719d7c312ce5205979b2fb92fbf9e1d1effb0f663b9361893fcb11bfd66c92af3394e899876990883e9f5374b5642c68e8468498612e3848d367598c2cb0806b7f0c7f4b004dde2b4cc50161a4d293f2ec89c4cd35a767736f9282f848b9d1cdf405f61abcb3e50ff4092d2afb86fdceeec4791d892546e29495f97876cd8015f193113f1b8584a9ff3f32650e29126b81254961e677b6f67023295567f574364b7320313db988616ac123368179beaabb5a56257f0b6df8f6956324ac31d3e8db83dc994425ad80e235051af62ec79a6dc4bfa36283af72af26136c8f5eeb32e1fa1b9e21a228a2a12aed39e717e8f404334d8367ef3edceab1f3e250ab9dc1e89f9b84e658d38806f4d4a09ff07ca539077a5a496699a9d7d4aafa78120eb90f404c2a6ae00aa1c813b25cb6ff9dab8b66b1dd83c80c1225aa24a47df3cbff7f6842d9486bbcd4179150e1bcad3caa604ac1db71aac913c9d3cbc154182187e2aeb852011b22e40b25f9cb31ab7f458a11b1836085c4a99a633215684e7fc70646ee2158faf8329c320a3bc050cdbbac216a18a88af2dd1bb4d648110c5c90f7f5948128eafbe36c01ea709ca8b5fb8ad9eb7384feb7055220aed45690664b0312052792a5b9dfc90a1248995cf68f80b7822fa577724ad143b1d987d2fae7992d3ad270e6b1fc4f1bb3130f134607e8129a6b1442ac05f114062be3604d7cf1595022f49e7cc55282f0f666ad6ff3b03d692c2a66fc2eb5fd0751e4514229861e2343d43162dcbdec156aa5f2c5f9aafaf470f17e5ed688b3516647b9a1a220e843791ddda20fcc444ef63ba31fc27e62fee4676f097f3fecc625755b26ad48dc7ceec1920443c6c466c7bb36e91082f115f4e563a562af1ce5cf37c45bb2da72ab39ecf00e0349eed7e87994b6670e8bde4f4f9142cb99f6bf36eb41bb4dc72b6c6a6686b63fa21c167b1ba5ff481abcc2ca29905d6b75eff932296d75a90080f3a727690eab0e804aa95b545f55107d308f4cd9884d75c28388151a72e82291f79eb52921718903a8bf029a3e7c0ce28f204926dc221f78711a08834a917a0843d8249ca317c7154b88a5a10a09d7477fcf2d6296725bb6a69c2739964a768cd6ae51d7e7de63bb17fe7fabebb0ee46c285c683a41203d059a5c89024a7f3c59915121921000075ed397d30ada6d56e6caa685cb98cc0bf279fa2d96408611ae7e43c3bf70f73148c6615f20060b5c337c6555a3bdb1870bededac9eff951cf1c7fd4f0046d7661789bcfd56fe6198b502e01f90333ad6e9354db449435d0506526bb0c65595dead87be428eb1b988906de152f9a7f126ede6b933c2de1f7d20ec3e64c7468906fba2bdea8b300bab203542dec13a90e4195b3f7da1b669bfe9e8989440b24807ffd44d9e3d61e098caaa029a7063d25604cbacc5f2b3671a163b80a440948230ae90dc3bd7fd46b667cc7d6dba2f53775e9a2180ced0e1cdc6e1275e741607d6dfe40f91ec81602f9bc7c26c322b82114949fd17a9284dd2918326b7880f42db6e468b80f980db98e31ad57be1f131407a0d099cbad9eff25916048e4210c0eb0b68d4d11cc1545cb46114b3969ad0d7a6570b7571c877ed8060cf8b736f8c82ddb64d19fc29af3453f0efe33c68c21c7c8c054707790cf5c056d0ba408d077fb65cef8fb071398ce35cc95c48ba546230f4dd60ad633f81478c87019736044783599a17d4dafd30cc6f4278cae2384763ff2ef395b8e7265ebf0453cef5c98e62a0e48ad422af17a4eee1acc10a51a3fb6e98594309e4976f71027dfe7a9593cdb6860cba745f2346c8d4868b07f381d3c137b396780545e0ea331e586b176821e45f67761fd8b4c6cbbecfd34b72201f6145a6b06eaa8fa9872a54734acbccad497390ff69f676c496258479aa06d9fd1ecec02a01216fd66554afbd5e728608f4572a4d485e57ff5bfc3df", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x80003, 0x0, 0x40000, 0xffffffff, 0x0, {0x4, 0x0, 0x8, 0x1, 0xe, 0xde, 0x1, 0x0, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1300", @ANYRES32=r11, @ANYBLOB="08000500020000000500530001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 1m42.471839439s ago: executing program 6 (id=745): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x161d43, 0x1a) prctl$PR_GET_THP_DISABLE(0x2a) (async) prctl$PR_GET_THP_DISABLE(0x2a) fcntl$setlease(r0, 0x400, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x44) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x44) 1m42.471233113s ago: executing program 6 (id=746): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) mount$cgroup2(0x0, &(0x7f0000002100)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003100), 0x8404, &(0x7f0000003140)={[{@memory_recursiveprot}, {@pids_localevents}, {@favordynmods}, {}, {@memory_recursiveprot}, {@memory_localevents}, {@memory_localevents}, {}], [{@appraise_type}]}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb41f, 0x2000, 0x3, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r5, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r10, &(0x7f0000000040)=ANY=[], 0xffffff6a) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001100), r10) r12 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x6c, r11, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r12}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv0\x00'}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xe02}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x404c001}, 0x4000081) splice(r9, 0x0, r0, 0x0, 0x40010003, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) 1m41.569966033s ago: executing program 6 (id=751): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000280)=@sack_info={0x0, 0xb, 0x1}, 0xc) listen(r0, 0x0) mount$cgroup2(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x80, &(0x7f0000000140)={[{@memory_hugetlb_accounting}, {@memory_recursiveprot}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x9a}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r2, 0xa}, &(0x7f00000002c0)=0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) statfs(&(0x7f0000000340)='./debug\x00', &(0x7f0000000580)=""/217) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="340100001700010029bd700000000000ac1414bb00000000000000000000000000000000000000002001000000000000000000000000000120010000000000000000000000000001e000000200000000000000000000000000000000000000000200008084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200002000000000", @ANYBLOB="482d643536f2a532de9f5683902de1a5b3200d4e6d6138449dc7a23585018b4cf6eb1eca33d99dde58c9f2bad9d004c5a1e7071c2e866f81bf85c6bea863000e667c0970ee7de7426ffcf5f8d0081a5439430fb6be1b3103c1180d", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000200000000400000000000060000000000000000000000000000000000000000000000000000000000000000000000000009000000ba6b6e000201000000000000000400000000000000000000000000000c000800080008000101"], 0x134}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/ieee80211/phy0/aql_enable\x00', 0x1, 0x4) write(r6, &(0x7f0000000200)='1', 0x1) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r7, 0x0, 0xee00}}}], 0x20, 0x40000}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) 1m41.502210581s ago: executing program 6 (id=753): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1801) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, 0x0, 0x41) close(0x3) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x80800, 0x0, 0xffffffffffffffff}) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) 1m26.091942179s ago: executing program 36 (id=753): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1801) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, 0x0, 0x41) close(0x3) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x80800, 0x0, 0xffffffffffffffff}) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) 1m5.501917574s ago: executing program 4 (id=1142): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841) (async) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) recvmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000000200)=""/247, 0xf7}], 0x1}, 0x40000000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r2, &(0x7f00000003c0)=ANY=[@ANYRES8, @ANYBLOB="7672762dca"], 0x10) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) (async) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r2) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000400)={0xac, &(0x7f0000000300)="6c361d138580d8262227685e916fd5e32af43cb3b0ba07e77c05e7f3b9ce5581909ff25143cca400d426959de0f31c377cc114318eb55aee6636c372dc02e576074f85c86740a3b8e52063e228bffe520bc8fb8e0d29b8b9aacc16eff4608f03e795dca633d66ebd09e15e114ad974477c34689eef8c1199b3081877d12f3f36128195c65e42680af39d3b03d4b8789a5560d43d24c1a8ed2a5b19819d1b9c9e48e091f2c2df00e8d79767de"}) (async) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) (async) r4 = eventfd2(0x7, 0x1) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000040)={0x0, r4}) (async) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000000)={0x0, r4}) (async) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000000), &(0x7f0000000040)={'L+', 0x6}, 0x16, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) (async) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002200), 0x800004, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2ac0b2, &(0x7f0000000200)=ANY=[@ANYBLOB='grpquota_inode_1,\x00']) 1m5.443284149s ago: executing program 4 (id=1143): pipe2(&(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) fcntl$setstatus(r1, 0x4, 0x2000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='iso9660\x00', 0x204001, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x1, 0x0, 0x2c00}, 0x30, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x884100, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000000)) read$dsp(r5, &(0x7f0000000280)=""/79, 0x4f) r6 = semget$private(0x0, 0x4, 0x29b) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x108}, 0x476d, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0xb}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000000)={0x2102, r3}, 0x1) r7 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) landlock_restrict_self(r4, 0x5) creat(&(0x7f0000000240)='./file0\x00', 0x125) write$binfmt_elf64(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/1184], 0x4a0) 1m5.342806496s ago: executing program 4 (id=1144): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2, 0x10, 0x80, 0x4, 0xfc, 0x2, 0xff, 0x3, 0x1e00}, [@RTA_PREFSRC={0x8, 0x7, @local}, @RTA_MARK={0x8, 0x10, 0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000104000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000041100001c00128009000100626f6e64000000000c00028008001400000000001642c1e0c0c6500a7322315482aacb4d5181984e202a49f5128f1e65e5ebca09c0073fb09988abe64e967265b12e02d99a29f89cedce0476ee454f53c06b7681102ffa192d66ec07982e6df5781b9bca0326721ca574729d495ad9ebe56a970f98cc8c2424018c70a39948f4ec2e26941e7541172989ac6438758ad2ad4ad342d5f355838560926c0b4defb089285548b4a7e50c29d3c444c8bf7ae74dd3d75a6f3368734dbaba8ce48886f1bdb2ad11c6a58bd74eee92532cd0726b63e6a920b3dac92b27f1e2edd3d384a7c3ea3e1311cd7045e92b6ecef3a052f698332080a29b56bf41e1a55c0cae636428"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1m3.381402992s ago: executing program 4 (id=1150): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x1bd, @loopback}, 0x10) (async, rerun: 32) listen(r0, 0x10) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cifs\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000200)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='vers=1.0,user=root,pass=root\x00') (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206010200000000000000003d0000080500040001000000050005000a000000100003c57d7cc96e6025318508b9006269746d61703a706f7274000900020073797a3000000000050001000700000013000300686173683a6e65742c69666163650000"], 0x5c}}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xe, 0x2, 0x0, 0x1, [@generic="07e4bbf18fb2341c756d"]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async) close_range(r1, 0xffffffffffffffff, 0x0) 1m3.322304883s ago: executing program 4 (id=1154): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0xa, 0x5, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r1) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x1, 0x0) write(r0, &(0x7f0000000180)="5c41afe82f065523d45df0ccae1b1da1a4d3b4b6265afd3b2da33459a4dbe47792d48f51c105c8c005c957f9b3813840ec3b929f46b724ca594c7431b474b5db3ff536bf7465ce55c92dd9ee3de6a7467a76c7b512e7d386b3a4c2baf687be553db5d571c1568588dc0d97eee86b37aa4e33c69f4b815b285a67cd7493273b7717ded5a2ff6d995c6e09a703ece6237c5b387d2cea0a", 0x96) 1m2.453774374s ago: executing program 4 (id=1167): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x2f) fadvise64(r2, 0x18, 0x0, 0x4) 47.524312697s ago: executing program 7 (id=1327): setns(0xc9, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x2841, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) (async) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) (async) sendmmsg$inet(r2, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)="0f2f", 0xffa6}], 0x1}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f00000000c0)='_', 0xfe3c}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000100)="19", 0x1}], 0x1}}, {{0x0, 0xfffffffffffffe7c, &(0x7f00000025c0), 0x1}}], 0x4, 0x608d850) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x10, 0x16c, 0x200, 0x2800, r1, 0x80000000, '\x00', 0x0, r3, 0x1, 0x0, 0x4, 0x9}, 0x50) fcntl$getownex(r4, 0x10, &(0x7f0000000000)) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r4}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r4, r5, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r4, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) write(r0, &(0x7f0000000700)='h', 0x1) 47.523968657s ago: executing program 7 (id=1328): r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000140)=@OVL_FILEID_V1={0x18, 0x300f8, {'\x00', {0x0, 0xfb, 0x15, 0x7, 0x5, "e837282efe0868327a31a705ec978547"}}}, 0x830600) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000001fc0)=ANY=[@ANYBLOB="180100002a00010029bd7000fddbdf250501"], 0x118}], 0x1}, 0x0) 47.394564477s ago: executing program 7 (id=1329): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x660, 0x1b8, 0x2e8, 0x1b8, 0x1b8, 0x418, 0x590, 0x590, 0x590, 0x590, 0x590, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x0, 0x24}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x100, 0x8, 0xb34f, 0x57c1, 0xffff, 0x6, 0xb561a16a5759827b}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@frag={{0x30}}, @common=@ah={{0x30}, {[0x4d2, 0x4d4], 0x6, 0x2, 0x2}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x67]}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c0) r1 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000580)={0x0, 0x9f03, 0x80, 0x6, 0x10001d8}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000380)='nfs\x00', 0x0, &(0x7f00000003c0)='vers=4.1,addr=127.0.0.1,clientaddr=127.0.0.1\x00') 47.393618644s ago: executing program 37 (id=1167): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x2f) fadvise64(r2, 0x18, 0x0, 0x4) 47.333626261s ago: executing program 7 (id=1331): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000000)={r6, 0x5f3f}, &(0x7f0000000080)=0x8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) prctl$PR_SET_DUMPABLE(0x4, 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_handle={0x77682a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000740)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 47.235054361s ago: executing program 7 (id=1332): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000480)={0x1, 0x0, [{0x400000f3, 0x0, 0xb}]}) socket(0x8, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xc, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x4, 0x8001, 0xfffffbff}, 0x80}}]}, {0x4}, {0x0, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) syslog(0x3, &(0x7f0000001e80)=""/181, 0xb5) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000080)={0x314, 0x12, 0x1, 0x70bd2d, 0x25dfdbfe, {0x1, 0x8, 0xb6, 0x9a, {0x4e24, 0x4e20, [0x3, 0x8, 0x9], [0x6, 0xe931, 0xf0ce, 0xfffffff9], r2, [0x7cd, 0x7]}, 0x3, 0x101}, [@INET_DIAG_REQ_BYTECODE={0x6e, 0x1, "c6575e78c05bcec1cade44c9abaa5940f212d3bbc1cbfaf70fee8c9ab8d36db7ad140478d1c0a9c1171f175a7bc15e50d113e602e5073e9a08a807d6eabaeeed0a7bfb90d4746de7b6c1969561c27ae3010eee66abffc01b32ad43a48bee5fbd46f7c3b4ad7d6f4c96a7"}, @INET_DIAG_REQ_BYTECODE={0xad, 0x1, "5b8e469406d77ac5e816140a5ed9e22c001a3f75f58d41e5b553f96586acb21fa0134701ea76003eb7c1bdeea0dfdaf2b07e3b331a4558a6279995eaf0a7a2aca84c16fdf5550b641ec3c933f6249699d45820388a27b54c363fac77b9f8fb5d46db60d8cc7cb09b1eecd4c3ca3a37ccabaf92f8f1b7f573fa084cf48c85cb56af53a3079cda87b19a6813c16c3dbefbad70a4848536b64ff45bc09b6dda0d5f8e5b7f0f5bb613a433"}, @INET_DIAG_REQ_BYTECODE={0x34, 0x1, "d346e79a015a519fcbc0f0e36036032218889985047e218428775b1a6057fa0f7655830642fa880d9ce307957c9a6d3e"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "21dc009601ccb529a79b2b676c1a061993c98e2b1323257965db0fe429bbe9e8b8b6a6cac405ee7efdc5cfbb6aa1523193250984959c3ea9a5fa3e775770d3edc5129d74963581efdadd2a99b5cf1ad99ac8499404d0a92695fbec2d8b680889d3c11464dfa1e9a131e296b73db84aedd355149bb53c5b5efe0727ca03030c505946e0fe54d6462c62975b3fb93e9f19ed87e6034be41fd70084d6aa2cddaa82fc118b272411af6541c1ff603f87b233d2f07bb271a1faab2021b3e2b53c946cacdf0b8040bfe045ca3766fff094a3acf099633eaaa9c63fc3f6f595abf8"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x8c, 0x1, "91204e3a1282a30421caf8ac0cf3992a806ecadec254933484ae15cdf614a2d70463fe9e504face2a7dfdaca775f82e78e3d3a28dbd1148bd87cb8aedcf9e61d8923e9a18ca99179cec5e11f81b0dd4d97e3a26d875a702d2db28c6b86f8979304ba73e845475bacc95e0b2c97446abede38871c7b199ab6faf6d7a85c98855242e3f0401686f81f"}]}, 0x314}, 0x1, 0x0, 0x0, 0x6008040}, 0x4000880) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x4c, 0x14, 0x511, 0x0, 0x0, {0x2b, 0x0, 0x0, 0x1, {0x4e22, 0x0, [], [0x0, 0x0, 0x0, 0x3]}, 0x4}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8004) 44.413690964s ago: executing program 7 (id=1338): r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f01390ff2f63e0fa10f01c966b80a00000066ba000000000f300f79d80f232d0f01c966b9024d564b0f32350280660f38dfec", 0x33}], 0x1, 0x1, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000001040)=@arm64={0xc0, 0xd, 0x7f, '\x00', 0xe}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r4, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async, rerun: 64) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) (rerun: 64) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (rerun: 32) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r6, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r10, r5, 0x4, r5}, 0x10) (async) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 44.344250413s ago: executing program 38 (id=1338): r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f01390ff2f63e0fa10f01c966b80a00000066ba000000000f300f79d80f232d0f01c966b9024d564b0f32350280660f38dfec", 0x33}], 0x1, 0x1, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000001040)=@arm64={0xc0, 0xd, 0x7f, '\x00', 0xe}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r4, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async, rerun: 64) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) (rerun: 64) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (rerun: 32) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r6, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r10, r5, 0x4, r5}, 0x10) (async) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 24.52066691s ago: executing program 8 (id=1389): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x102) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_null}, {@metacopy_on}]}) 24.520125952s ago: executing program 8 (id=1391): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008, 0xfff}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x64}}, 0x0) 24.518391255s ago: executing program 8 (id=1393): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r1, 0x0, 0xb, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280240003002001000000000000000000000000000114000200fc020000000000000000000000800002d285fe5f72cf84c851f7eb431900"], 0x5c}}, 0x4008000) 24.510031598s ago: executing program 8 (id=1395): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e6c2c6163638173733d616e792c63616368653d667363616368652c76657273696f6ebd397032"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$tun(r0, 0x0, 0x342) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/xfrm_stat\x00') read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x1062) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}, 0x94) r3 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x1, 0x0, r3}}, 0x40) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x109000, 0x180) open$dir(&(0x7f00000000c0)='./bus/file0\x00', 0xa4040, 0x100) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f000019c000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="36660f73f3000f200066b9220a000066b8c000000066ba000000000f30262e36660f3a0a85000000660fc7b37ecf0f21c30f01cf0f5aa50080b880018ec00fbe44ca", 0x42}], 0x1, 0xe, &(0x7f0000000180), 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 24.317891352s ago: executing program 8 (id=1399): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}]}]}, 0x24}}, 0x0) read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0900000000000001", @ANYRES64=0x3], 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x8080000, 0x58000, {}, 0x0, 0x7}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"}}) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e0000002ebe660f38049f9e0064f30fc7b000101f20f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f08b8f4008ee0", 0x5b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800080079000000000000000000000062000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x91, '\x00', r7, 0x8}, 0x94) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000240)={'wg0\x00', @local}) 22.06112203s ago: executing program 8 (id=1409): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb00000001090224"], 0x0) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) syz_open_dev$video(&(0x7f00000001c0), 0x7, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x8, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x6, 0x7, 0x89d2, 0x401, 0x4c74, 0x80000000, 0x40000, 0x2, 0xe, 0xfffffffc, 0x6, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x4f8f1592, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8008, 0x5, 0x9, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x30f, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x0, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0xdc9, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x7, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x45, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x7, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x6, 0x0, 0x3, 0x5, 0x1c, 0x124000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x4, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d694, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x2000, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0x10fff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000302000/0xc000)=nil, 0xc000}}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) socket(0xf, 0x6, 0xee) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 21.939246607s ago: executing program 39 (id=1409): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb00000001090224"], 0x0) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) syz_open_dev$video(&(0x7f00000001c0), 0x7, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x8, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x6, 0x7, 0x89d2, 0x401, 0x4c74, 0x80000000, 0x40000, 0x2, 0xe, 0xfffffffc, 0x6, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x4f8f1592, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8008, 0x5, 0x9, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x30f, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x0, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0xdc9, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x7, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x45, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x7, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x6, 0x0, 0x3, 0x5, 0x1c, 0x124000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x4, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d694, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x2000, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0x10fff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000302000/0xc000)=nil, 0xc000}}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) socket(0xf, 0x6, 0xee) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.864579305s ago: executing program 9 (id=1504): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x7, 0x1}, {0x16, 0x0, 0x0, 0x3fffffff}]}, 0x10) sendto$inet6(r1, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x408d6, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d65746100000000140002800800014000000001080002"], 0xdc}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdc02, {0x0, 0x0, 0x0, r2, 0x18, 0x37138}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6=r1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x45}, 0x40000) 5.79723529s ago: executing program 9 (id=1505): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001400090528bd7080fdffffff02186d00494c811ec0d5b0450fc90378a1784facdc35b3b2a579a1424a273bf7ecd2c448e5fcd34b3fe1d43ab141bf84257d602274f1bca60e01faf32db66797abc5d6156ab8ef527656fc6ae1de280570274b1abf4f912b70386cc252d67e93800c56346cae46b2951ed43646a73c8129da567cc219dcdd7c061ce556e76164916277cf5f8e60c186cfe025", @ANYRES32=r1, @ANYBLOB="08004939450200e0"], 0x20}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="4805000015", 0x5}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x3c}]}, 0x24}}, 0x48850) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0x35, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70ad2b, 0x25dfdbfa, {{}, {@val={0x8, 0x1, 0x79}, @void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048041}, 0x8040) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000040)="738affad44ca77b22d47e12bd7f7cbf2228b2fc222b7a279e8ddad6d734a", 0x1e, 0x800, 0x0, 0x0) 5.794528457s ago: executing program 9 (id=1507): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000200)=0x1) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x309302, 0x0) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f00000008c0)=0x5) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4e00, 0x0) ioctl$DVD_WRITE_STRUCT(r3, 0x5390, &(0x7f0000000040)=@copyright={0x1, 0xff, 0xb, 0x26}) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00670040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000010cc580a"], 0x80}}, 0x4000000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) mprotect(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x2000004) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="240000001a0001000000ff7f000000008094"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) socket$inet_icmp_raw(0x2, 0x3, 0x1) 5.745996781s ago: executing program 2 (id=1508): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') (async) r1 = memfd_create(&(0x7f0000000340)='v\xa6\xf5lj6,r\xaf\xcf\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xfb\xd6I\x1c\x7f\v/!\xf4C3\xc0a%\xda\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xa1\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+n\xa4N\a\xa7\x7fNup\xf8\xebQs\x02.@\xea\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bS\xdbU\xf80\xa88\tl\xb5b\x83\x97+o:\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cCZdO\x87K\xd6\x10\x86\xd1\xf4\xa3i\xa8\xb2\xc8\x9cJ3\xd8)\xc3\xc3\xe25j\xab\xd3\xd9\x97rK\x1bY\xa7\xe9+/l\xa2\xf0\x9e\xff\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\xac[\xd2]\x80P\xaf\xe4,\xb9\xb5J\xec(\x92H9+\x11\xc3\xd1\x13\x01\x00\x00\x00\x00\x00\x00\x00K\x1d\x1e\xf0\xb4\xd5\xaaM\xe3WU\xa3d\b\x92\xb78\xf3\xe5\xc1\x01\x8f\x02\xc5 \x93\a\xf0\x10\v\x94\xd8\xb2\xd2v%\xb20T\xa3\n\x876\xd8(\x1c\x8e\x93\xdf\xfe\x1f?\x91\xa2&\n\xc5\x0f\bhe\x9a\xe8=\xb7\xe5\xa2\xddD\x86\xf3\xc2\xf6\x06\xe7\xa9\xf7\xbc\xfaf\x8e\'\x9b\xc7\x86\x02\xad\x99k^3e\x9d\xebs\xea\xb2\x04\xde\xc7\x16|*\x97\xac\xa8W\xcc\xba\x14m\"D\'\xfa\x86x\x15\xc5\xd1a\x0e\\cOz\xee\xc7?\xf9;\x05oR\xfc\xe3=<\xf8;Mw\x0f+\xf8fx\x94\xfd\x11#m-\xbbL\x82r\xfah\xa0\xc3\x1d\x19\xf5', 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8, 0x11, r1, 0xff64000) (async) read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x5, 0x6, 0x30395056, 0x4, 0x7, 0x7fffffff, 0x2, 0x3, 0x1}}) (async) r5 = socket$tipc(0x1e, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) sendmsg$tipc(r5, &(0x7f00000004c0)={&(0x7f0000000280)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x1) 5.60575052s ago: executing program 9 (id=1511): mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000000)='mqueue\x00', 0x2200010, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040), &(0x7f0000000100), 0x2, 0x2) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x1c, 0x45, 0x1, 0x80002, 0x25dfdbfd, {0x5}, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x4008094) open(&(0x7f0000000140)='./cgroup\x00', 0x0, 0x80) 5.605386011s ago: executing program 2 (id=1512): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/first_group\x00', 0x1, 0x0) write(r0, &(0x7f0000000000)="857bb601c7", 0x5) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x110, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048084}, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r2) sendmsg$tipc(r2, &(0x7f0000000f40)={&(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x1, 0x1}}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000280)="f5df5bf7feb1cd6a39f88f510eb21c513b1abb94b617431c3043c85ada7ab4e3e0eb6b147d5b33512900304cbdd0dfee7ae5706de38ccea68d78cfb0714352866a255e74207241b129e1684a61ae956c1819d662ac1fa4ab07672edbb661adc623048ffef59914c56e4905d321860d4a491e5d6eb917560f33", 0x79}], 0x1, &(0x7f0000000e80)="14c494eff9649bd2d0e89fc7f4f7f91ec754d62d09f2c77764f1fac54d3d79e037d255e8020864dff01ae50af2220f38d951c4ec59ebbd1da7f58e44d5dd745de4257602861b1975d9326cdf8dfafe5e6db1f4d5babb453572db83b2f9c020cf37ec03e08859db0be63da69c7c05d7e441c9450a996a78799d6aed1d7405635b608f85d8cf0ad1478c", 0x89, 0x4000}, 0x2004c800) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000008600)=0x1, 0x4) recvmmsg(r2, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x8020, 0x0) sendmsg$802154_dgram(r2, &(0x7f000000b8c0)={&(0x7f000000b800)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f000000b880)={0x0}}, 0x0) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000200)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) 5.536876156s ago: executing program 9 (id=1513): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x4e1f, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x25, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3bd0345bce05c13ed90758fbdeb70322ea3188f81890e3db00"}, 0xd8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dbg\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dbg/failslab/ignore-gfp-wait\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') read$FUSE(r1, 0x0, 0x4a) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new '], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f0000000140)={0x21000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x8000}, 0x1c) listen(r0, 0x7be) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r5, @ANYRESHEX=r6], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x37}, 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa24bed62f487eb62b28400000001d06907800000000000000004e214e2210bbeefa77ec05580a26eb1e", @ANYRES32=0x41424344, @ANYRES16=r3, @ANYBLOB="501900c390780000"], 0x0) 5.46478533s ago: executing program 2 (id=1515): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async, rerun: 64) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000040)={0x21, &(0x7f0000000180)=[{0xa, '\x00', @data=0x80000001, 0x5}]}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 5.334197443s ago: executing program 9 (id=1516): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x8) (async) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async) rt_sigsuspend(&(0x7f00000000c0)={[0x7e44]}, 0x8) (async) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={'\x00', 0x4, 0x80000000, 0x229, 0x6, 0x1}) timer_create(0x4, &(0x7f0000000040)={0x0, 0xd, 0x1, @thr={&(0x7f00000003c0)="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", &(0x7f0000000380)="904e475d0433d75b73040075040010000000000035ca"}}, &(0x7f0000000180)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) 4.497052265s ago: executing program 2 (id=1517): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x204, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf255e00000008000300", @ANYRES32=r7, @ANYBLOB="038463c8b77b7fbc86c745f6f1e510ae73609d16c0bb1d4ef3a1623172e8316fd0bcf4de0c9918a60dc070be18097169580f60a1ba2e75c607bff06c3ae34df70954b203ccd249cadc5c0000938bcc5d04817d2bbc792ec51953610100000000000000f82a1856e7627099bccc82473d83314458925da8b47aa011118b2b255010e7d2189f4790503af6fa8f0d85f4d406a0f0dbae7d34468ff0ad167f9e2c38eb1b3b121b51b9b58d63d432ce166c890bedd065f4cc5e9332257caca771307fe73ee63beb410ce4a47570741369d1b23cb95f01821dd6c5de0d41f8867c59a6e381"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4008840) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x4, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x6, 0x6, 0x88, 0x1, 0x1, 0x0, 0x8, 0x1, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000040)={0x4a, "913db1048ba9847a83cabd03ea37930f864ab010dce6202cdf0b6a4c241c6077dbe5c1464cee4101d8a55462d8e2559fde6fde8b4050dbb11c3f7c34d711e6ba72e553ae8fbb990e7312"}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r6) sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000a00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x8c, r9, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$UFFDIO_WRITEPROTECT(r8, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000140)={0x10004, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil, 0xffffffffffffffff}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0xc0189436, &(0x7f0000000740)={0x0, 0x4, 0x3, 0x5f, 0x3}) r11 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000008c0)={0x0, &(0x7f0000000440)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_stgi={0x17e, 0x10}, @wr_crn={0x67, 0x20}, @nested_vmresume={0x130, 0x18, 0x1}, @wr_drn={0x68, 0x20, {0x5}}, @nested_amd_vmsave={0x183, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x1a, 0x6, 0x4, 0x2}}, @nested_create_vm={0x12d, 0x18}, @nested_amd_invlpga={0x17d, 0x20, {0xfec00000, 0x8a66}}, @wr_drn={0x68, 0x20, {0x4, 0x3}}, @nested_load_syzos={0x136, 0x58, {0x0, 0xec2, [@nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control64=0x201b, 0xc, 0x7fffffffffffffff}}]}}, @nested_load_syzos={0x136, 0xc0, {0x0, 0xffffffffffffffff, [@nested_amd_invlpga={0x17d, 0x20, {0xf000, 0xaad5}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0xb9, 0x1, 0x5}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest_nat=0x680c, 0x100, 0x7fffffffffffffff, 0xfa}}]}}, @nested_amd_invlpga={0x17d, 0x20, {0x8080000, 0x29e4}}, @wr_drn={0x68, 0x20, {0x3, 0x3}}, @nested_create_vm={0x12d, 0x18, 0x3}, @in_dx={0x69, 0x20, {0xee14, 0x6}}, @in_dx={0x69, 0x20, {0x6afc, 0x2}}, @nested_load_syzos={0x136, 0x38, {0x0, 0xff, [@nested_vmlaunch={0x12f, 0x18}]}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x1f, 0x389480a8, 0x5, 0xb}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x7, 0x7, 0x1}}, @cpuid={0x64, 0x18, {0x36, 0x3}}, @in_dx={0x69, 0x20, {0x4db6, 0x4}}, @nested_amd_invlpga={0x17d, 0x20, {0xb000, 0x71d}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @set_irq_handler={0xc8, 0x20, {0x9d}}, @nested_vmlaunch={0x12f, 0x18, 0x2}], 0x470}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 3.146808163s ago: executing program 2 (id=1518): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/kcm\x00') pread64(r0, &(0x7f0000001880)=""/4096, 0x1000, 0x7) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a0300eb18002533075c0165ff0ffc02802000040011010500e1000cee0202001a000000", 0x24) setns(0xc9, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x44, r2, 0x1, 0xfffffffc, 0x20000000, {{0xa}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xff, 0x1}}}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a0f500"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = syz_open_dev$video(&(0x7f0000000180), 0x1, 0x200000) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000240)={0xa20000, 0x1, 0x0, r0, 0x0, &(0x7f0000000200)={0x990a79, 0x5, '\x00', @p_u8=&(0x7f00000001c0)=0xff}}) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088db78c7f958dea4ee3f778f9ab81f08b71ee1e0009610092bd0000002d01011000000001000000000000000009cd8d1f00020000000905050200000000002000811e20"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b15, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000010bad1431b00"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}, 0x1, 0x0, 0x0, 0x2000}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8}, 0x10) 2.231322239s ago: executing program 0 (id=1537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x28, 0x19, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}}, 0x80) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) 2.16724872s ago: executing program 0 (id=1539): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x40, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x10, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x1c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40810}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.979242502s ago: executing program 0 (id=1542): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x20, r2, 0x0) r3 = dup(r1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) write$binfmt_elf64(r3, &(0x7f00000006c0)=ANY=[], 0x178) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.865127616s ago: executing program 3 (id=1543): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x1, 0x48, &(0x7f0000000700), 0x4) semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0x5, 0x800}, {0x4, 0x6}, {0x0, 0x0, 0x800}], 0x1f4, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/262, 0x37, 0x106, 0x1}, 0x20) r2 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="0400000004000000040000000740000000000000", @ANYRES32, @ANYBLOB="0000000000000000f6ffffff000000000000f2cd", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="f4edb0ff2100"], 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='fdinfo/4\x00') clock_nanosleep(0x7, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000001c0)=[{&(0x7f0000000280)="dc", 0x1}], 0x1, 0x3) close(r6) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) splice(r5, 0x0, r6, 0x0, 0x10500, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x5, 0x220, r2, 0xfffffff7, '\x00', r4, r6, 0x1, 0x4, 0x4, 0xe}, 0x50) socket$kcm(0x2, 0x5, 0x84) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x48, &(0x7f0000000700), 0x4) (async) semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0x5, 0x800}, {0x4, 0x6}, {0x0, 0x0, 0x800}], 0x1f4, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/262, 0x37, 0x106, 0x1}, 0x20) (async) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="0400000004000000040000000740000000000000", @ANYRES32, @ANYBLOB="0000000000000000f6ffffff000000000000f2cd", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="f4edb0ff2100"], 0x50) (async) syz_open_procfs(0x0, &(0x7f0000000440)='fdinfo/4\x00') (async) clock_nanosleep(0x7, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)) (async) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) (async) pipe(&(0x7f0000019480)) (async) vmsplice(r6, &(0x7f00000001c0)=[{&(0x7f0000000280)="dc", 0x1}], 0x1, 0x3) (async) close(r6) (async) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) (async) splice(r5, 0x0, r6, 0x0, 0x10500, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x5, 0x220, r2, 0xfffffff7, '\x00', r4, r6, 0x1, 0x4, 0x4, 0xe}, 0x50) (async) 1.862969736s ago: executing program 0 (id=1544): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x2001, 0xfffffffc}, 0x8) close_range(r3, r3, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x2) fchdir(r4) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000100)=0x4) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x800, &(0x7f00000003c0)=0x0) io_getevents(r8, 0x1, 0x1, &(0x7f0000000400)=[{}], 0x0) io_submit(r8, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x400, r7, 0x0, 0x0, 0x8000000000}]) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) io_submit(r8, 0x1, &(0x7f0000000680)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x3, r9, 0x0, 0x0, 0x8}]) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000900)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0], 0x9, 0x8, 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000ac0)={&(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440), &(0x7f0000000a40)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x7, 0x0, 0x2, 0x3}) r13 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r13, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r13, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r13, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r14], &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000000)=[0x2], 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000b40)={&(0x7f0000000b00)=[r6, r10, r11, r12, 0x0, r14, 0x0], 0x7, 0x80800}) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}]}) 1.75640893s ago: executing program 3 (id=1545): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e05816d0c"], 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x2, 0x5, 0x0, 0x3, 0x2, 0x2, 0xfffffffffffffffd], 0x10000, 0x202}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000340)={0x1c0003, 0x0, {[0x12, 0x78bad949, 0x8, 0x0, 0x6, 0x1, 0x8, 0xf4]}}) (rerun: 64) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x8080000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xb000, 0xc, 0x0, 0xfc, 0x1, 0x0, 0x0, 0x3, 0x7}, {0x2000, 0xe000, 0x1f, 0xff, 0x7, 0x4, 0x4, 0xfd, 0x3, 0x0, 0x0, 0xfc}, {0x10000, 0xd000, 0x4, 0x0, 0x0, 0xfe, 0xff, 0x0, 0x8, 0xfc, 0x2, 0x10}, {0xffff1000, 0x7000, 0x10, 0x0, 0x4, 0x8, 0x0, 0x3, 0xfc, 0x3c}, {0x0, 0x0, 0xf, 0xfd, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x13}, {0x0, 0x3000, 0x0, 0x0, 0x0, 0x7, 0x0, 0xca, 0x4, 0x0, 0x0, 0x3}, {0x80a0000}, {0xdddd1000}, 0xddf8fffb, 0x0, 0x10000, 0x50, 0x0, 0xf801, 0x0, [0x80000000, 0x0, 0x1]}) (async, rerun: 32) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async, rerun: 32) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000080) (async, rerun: 64) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[], 0x0) (async, rerun: 64) r3 = syz_usbip_server_init(0x1) syz_usb_connect(0x1, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) (async) write$usbip_server(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000300000001"], 0x35) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4) (async, rerun: 32) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond0\x00'}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x3, @loopback, 0x101}}, 0x0, 0x0, 0x48, 0x0, "8e4ed5b6cd6e3a3be2da5590ede383d2d7ac8deb4a44299f9f0cf768192aed7631289c5d29a3aa7c5c772f383a909e691eb2eddd4322253d1e303a96c995b3e2189cf625a0720ad0fdf0917e7d9e57d5"}, 0xd8) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async, rerun: 32) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) (async, rerun: 32) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) (async, rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000001840), 0x4) (rerun: 32) 1.597411246s ago: executing program 3 (id=1546): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r2, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_IOAS_UNMAP(r1, 0x3b86, &(0x7f0000000900)={0x18, r2, 0x1000, 0x1004000}) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000100)={0x53, 0xfffffffffffffffe, 0x6, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="a17ff507133d", 0x0, 0x2, 0x0, 0x3, 0x0}) r3 = syz_open_dev$loop(&(0x7f0000000a80), 0x1, 0x101000) ioctl$BLKGETZONESZ(r3, 0x80041284, &(0x7f0000000ac0)=0x7) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000380)) close(r0) 1.476294057s ago: executing program 3 (id=1547): syz_clone(0x111, 0x0, 0x9, 0x0, 0x0, 0x0) (async) r0 = socket$kcm(0x21, 0x2, 0xa) (async) r1 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f0000000700)={'#! ', './file1', [{}]}, 0xc) close(r2) (async) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r3 = getpgid(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) (async) r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) name_to_handle_at(r5, &(0x7f0000000040)='./file7/file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1200) (async) socket$kcm(0x21, 0x2, 0xa) r6 = fspick(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000100)='\x00', &(0x7f0000000140)="a9a4e0d2da2a3088e841e457ad41", 0xe) 1.417421259s ago: executing program 3 (id=1548): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f00000028c0)={0x18, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7d) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r2, 0x400454a4, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) 1.336556298s ago: executing program 3 (id=1549): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2001, {0x0, 0x0, 0x0, r6, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x8, r6, 0x29}, 0x80, &(0x7f0000000200)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c1020000ff841201000000f400930bf4533f00429c65112a", 0x26}], 0x1}, 0x4048845) 877.398491ms ago: executing program 0 (id=1550): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket(0x15, 0x5, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvfrom$inet6(r3, 0x0, 0x0, 0x100, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x5, 0x9, 0x6}, 0x0, 0xe57, &(0x7f00000021c0)={{0x6, 0x7fff, 0x7, 0x40}}, 0x3, 0x0, 0xc}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285629, &(0x7f0000000080)={0x0, @meta={0x54505356, 0xf4b83c9, 0xc4bb, 0xe663, 0xc55c324}}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0xfffffffffffffdf8) setsockopt$inet6_int(r4, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000001f000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000a6000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000498000/0x2000)=nil, &(0x7f000022f000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000667000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x56c5, &(0x7f0000000040)={0x0, 0xd5a5, 0x1, 0x84, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x7ffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x22) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) mount$nfs4(&(0x7f0000000300)='127.0.0.1:/\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='addr=127.0.0.1,port=20000,proto=tcp,vers=4.1,noresvport', @ANYRES8=r2]) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000300)="120983ff0000", 0x0, 0x4, 0x4, 0x0, 0x0}) 67.256962ms ago: executing program 2 (id=1551): mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./config/file0\x00', 0x175) r0 = open(&(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x241, 0x1ff) mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000100)=0x320120) r2 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_PEC(r2, 0x708, 0x10) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000000)={0x0, 0x4, 0x7, &(0x7f0000000700)={0x1b, "fd5a44512b7e1b0020ed2abb4301002700"}}) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0xa6f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) io_destroy(0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f00000000c0)=0x54) mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) r3 = open(0x0, 0x241, 0x1ff) write(r3, &(0x7f0000000540)='1', 0x1) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='omfs\x00', 0x208000, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x0) r6 = add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$unlink(0x9, r6, r4) write(0xffffffffffffffff, &(0x7f0000000600)='720', 0x3) r7 = open(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwMaxVideoFrameBufferSize\x00', 0x241, 0x1ff) write(r7, &(0x7f00000006c0)='1843', 0x4) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r8, 0xff, 0x1, 0x0, &(0x7f0000000200)) write(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 0 (id=1552): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf2501"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}], 0x1}, 0x4}], 0x1, 0x40000301, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x1c, r2, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r2, 0x1, 0x0, 0x25cfdbfc, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@verity_on}]}) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000002c0), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x58, r3, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file2\x00', 0x0, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r5, &(0x7f0000000a00)='7:0', 0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c0001000600060086dd0000100007"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) kernel console output (not intermixed with test programs): vmalloc_alloc+0x10/0x10 [ 164.463079][ T9782] __vb2_queue_alloc+0x8d5/0x1160 [ 164.463118][ T9782] vb2_core_create_bufs+0x5fa/0xa30 [ 164.463147][ T9782] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 164.463181][ T9782] ? __mutex_lock+0x26c/0x1bc0 [ 164.463202][ T9782] vb2_create_bufs+0x40c/0x830 [ 164.463232][ T9782] ? __pfx_vb2_create_bufs+0x10/0x10 [ 164.463259][ T9782] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 164.463290][ T9782] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 164.463323][ T9782] v4l_create_bufs+0x17d/0x270 [ 164.463369][ T9782] __video_do_ioctl+0xb2a/0xdf0 [ 164.463399][ T9782] ? __might_fault+0xc5/0x140 [ 164.463418][ T9782] ? __pfx___video_do_ioctl+0x10/0x10 [ 164.463449][ T9782] video_usercopy+0x47a/0x1730 [ 164.463473][ T9782] ? __pfx___video_do_ioctl+0x10/0x10 [ 164.463499][ T9782] ? __pfx_video_usercopy+0x10/0x10 [ 164.463545][ T9782] v4l2_ioctl+0x1bd/0x250 [ 164.463569][ T9782] ? __pfx_v4l2_ioctl+0x10/0x10 [ 164.463593][ T9782] __x64_sys_ioctl+0x18e/0x210 [ 164.463616][ T9782] do_syscall_64+0x123/0x790 [ 164.463638][ T9782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.463657][ T9782] RIP: 0033:0x7efcd5b9e0d9 [ 164.463674][ T9782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.463692][ T9782] RSP: 002b:00007efcd6b02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.463724][ T9782] RAX: ffffffffffffffda RBX: 00007efcd5e25fa0 RCX: 00007efcd5b9e0d9 [ 164.463736][ T9782] RDX: 0000200000001240 RSI: 00000000c100565c RDI: 0000000000000003 [ 164.463748][ T9782] RBP: 00007efcd5c35024 R08: 0000000000000000 R09: 0000000000000000 [ 164.463785][ T9782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.463799][ T9782] R13: 00007efcd5e26038 R14: 00007efcd5e25fa0 R15: 00007ffc0d427148 [ 164.463827][ T9782] [ 164.533691][ T8187] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 164.535838][ T9782] Mem-Info: [ 164.537414][ C0] gadgetfs: connected [ 164.539858][ T9782] active_anon:12030 inactive_anon:0 isolated_anon:0 [ 164.539858][ T9782] active_file:252 inactive_file:61610 isolated_file:0 [ 164.539858][ T9782] unevictable:1000 dirty:112 writeback:0 [ 164.539858][ T9782] slab_reclaimable:8283 slab_unreclaimable:75860 [ 164.539858][ T9782] mapped:25483 shmem:1562 pagetables:1646 [ 164.539858][ T9782] sec_pagetables:299 bounce:0 [ 164.539858][ T9782] kernel_misc_reclaimable:0 [ 164.539858][ T9782] free:383688 free_pcp:14348 free_cma:0 [ 164.542349][ T8187] gadgetfs: disconnected [ 164.544688][ T9782] Node 0 active_anon:47644kB inactive_anon:0kB active_file:1008kB inactive_file:246044kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:89580kB dirty:444kB writeback:0kB shmem:6244kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14816kB pagetables:6324kB sec_pagetables:1196kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 164.652826][ T9782] Node 1 active_anon:476kB inactive_anon:0kB active_file:0kB inactive_file:396kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12352kB dirty:4kB writeback:0kB shmem:4kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:260kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 164.667106][ T9782] Node 0 DMA free:6204kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:316kB local_pcp:8kB free_cma:0kB [ 164.681743][ T9782] lowmem_reserve[]: 0 1224 1224 1224 1224 [ 164.684406][ T9782] Node 0 DMA32 free:35280kB boost:0kB min:27364kB low:34204kB high:41044kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47328kB inactive_anon:0kB active_file:1008kB inactive_file:246044kB unevictable:4000kB writepending:444kB zspages:0kB present:2080628kB managed:1254228kB mlocked:0kB bounce:0kB free_pcp:27196kB local_pcp:4876kB free_cma:0kB [ 164.701968][ T9782] lowmem_reserve[]: 0 0 0 0 0 [ 164.703896][ C0] gadgetfs: connected [ 164.704312][ T9782] Node 1 Normal free:1493752kB boost:0kB min:39872kB low:49840kB high:59808kB reserved_highatomic:0KB free_highatomic:0KB active_anon:476kB inactive_anon:0kB active_file:0kB inactive_file:396kB unevictable:0kB writepending:4kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:30068kB local_pcp:2776kB free_cma:0kB [ 164.706254][ T8187] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 164.717577][ T9782] lowmem_reserve[]: 0 0 0 0 0 [ 164.722323][ T8187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.723235][ T9782] Node 0 DMA: 27*4kB (UM) 18*8kB (UM) 16*16kB (UM) 8*32kB (UM) 3*64kB (UM) 7*128kB (UM) 3*256kB (UM) 1*512kB (M) 1*1024kB (U) 1*2048kB (E) 0*4096kB = 6204kB [ 164.730554][ T9766] gadgetfs: suspended from state 3 [ 164.733572][ T9782] Node 0 DMA32: 333*4kB (UME) 254*8kB (UME) 106*16kB (UME) 105*32kB (UME) 61*64kB (UME) 27*128kB (ME) 20*256kB (UME) 10*512kB (UME) 3*1024kB (M) 1*2048kB (M) 1*4096kB (M) = 35236kB [ 164.741007][ T9766] gadgetfs: disconnected [ 164.742716][ T9782] Node 1 Normal: 112*4kB (UME) 73*8kB (UME) 83*16kB (UME) 48*32kB (UME) 45*64kB (UME) 21*128kB (UE) 6*256kB (UE) 24*512kB (ME) 10*1024kB (ME) 5*2048kB (UM) 354*4096kB (UM) = 1493752kB [ 164.748130][ T8187] usb 5-1: can't set config #1, error -71 [ 164.767031][ T8187] usb 5-1: USB disconnect, device number 5 [ 164.769611][ T9782] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 164.773237][ T9782] Node 0 hugepages_total=55 hugepages_free=54 hugepages_surp=0 hugepages_size=2048kB [ 164.777163][ T9782] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 164.780457][ T9782] Node 1 hugepages_total=54 hugepages_free=54 hugepages_surp=0 hugepages_size=2048kB [ 164.784136][ T9782] 63418 total pagecache pages [ 164.786116][ T9782] 0 pages in swap cache [ 164.788004][ T9782] Free swap = 124996kB [ 164.789689][ T9782] Total swap = 124996kB [ 164.791370][ T9782] 1048443 pages RAM [ 164.792867][ T9782] 0 pages HighMem/MovableOnly [ 164.794945][ T9782] 285575 pages reserved [ 164.796480][ T9782] 0 pages cma reserved [ 164.901174][ T9796] netlink: NAT attribute has 4 unknown bytes [ 164.905523][ T9796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.959694][ T9801] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1008'. [ 164.970082][ T9802] openvswitch: netlink: Flow key attr not present in new flow. [ 165.019812][ T9806] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1010'. [ 165.144033][ T5721] Bluetooth: hci3: command tx timeout [ 165.536688][ T9837] netlink: 'syz.7.1021': attribute type 1 has an invalid length. [ 165.543892][ T9837] jffs2: notice: (9837) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 1 orphan) found. [ 165.554353][ T40] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 165.637818][ T42] kauditd_printk_skb: 43 callbacks suppressed [ 165.637835][ T42] audit: type=1400 audit(2000000084.805:865): avc: denied { unlink } for pid=9836 comm="syz.7.1021" name="test" dev="jffs2" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 165.704679][ T5721] Bluetooth: hci1: command tx timeout [ 165.711984][ T42] audit: type=1400 audit(2000000084.875:866): avc: denied { read } for pid=9845 comm="syz.7.1024" lport=51400 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 165.714412][ T40] usb 13-1: Using ep0 maxpacket: 32 [ 165.724875][ T40] usb 13-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 165.729999][ T40] usb 13-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 165.734570][ T40] usb 13-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 165.739442][ T40] usb 13-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 165.744243][ T40] usb 13-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 165.751652][ T40] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.755416][ T40] usb 13-1: Product: syz [ 165.757256][ T40] usb 13-1: Manufacturer: syz [ 165.759307][ T40] usb 13-1: SerialNumber: syz [ 165.784519][ C3] imon 13-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 165.792594][ T40] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/input/input20 [ 165.932588][ T9857] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1027'. [ 166.007745][ T40] imon 13-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 166.011403][ T40] (id 0x00) [ 166.099690][ T40] rc_core: IR keymap rc-imon-pad not found [ 166.102297][ T40] Registered IR keymap rc-empty [ 166.104401][ T40] imon 13-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 166.108875][ T40] imon 13-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 166.194874][ T40] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0 [ 166.206331][ T40] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0/input21 [ 166.237340][ T40] imon 13-1:155.0: iMON device (15c2:ffdc, intf0) on usb<13:2> initialized [ 166.317335][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1032'. [ 166.383231][ T9873] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20004 [ 166.437800][ T9826] imon:send_packet: task interrupted [ 166.439588][ T9826] imon:send_packet: packet tx failed (-512) [ 166.441528][ T9826] imon:vfd_write: send packet #0 failed [ 166.451574][ T5804] usb 13-1: USB disconnect, device number 2 [ 166.675161][ T9888] fuse: Bad value for 'fd' [ 166.752236][ T9897] netlink: 'syz.7.1040': attribute type 11 has an invalid length. [ 166.757846][ T9897] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1040'. [ 166.826895][ T9902] binder_alloc: 9901: binder_alloc_buf size 1024 failed, no address space [ 166.833143][ T9902] binder_alloc: allocated: 12288 (num: 2 largest: 12280), free: 0 (num: 0 largest: 0) [ 166.839311][ T9902] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 166.844223][ T12] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.847054][ T12] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.850317][ T12] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.855939][ T12] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.928571][ T9910] tipc: Started in network mode [ 166.930834][ T9910] tipc: Node identity ac141441, cluster identity 4711 [ 166.939468][ T9910] tipc: Enabled bearer , priority 10 [ 167.000523][ T9917] ieee802154 phy0 wpan0: encryption failed: -22 [ 167.187796][ T9930] SELinux: context truncated [ 167.189420][ T9930] SELinux: invalid ocon [ 167.225740][ T9939] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 167.229532][ T9939] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 167.260380][ T9930] SELinux: failed to load policy [ 167.299069][ T9941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=9941 comm=syz.3.1051 [ 167.441197][ T9951] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 167.517292][ T42] audit: type=1326 audit(2000000086.685:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9961 comm="syz.8.1058" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f344f59e0d9 code=0x0 [ 167.576932][ T9966] usb usb9: check_ctrlrecip: process 9966 (syz.8.1058) requesting ep 01 but needs 81 [ 167.580890][ T9966] usb usb9: usbfs: process 9966 (syz.8.1058) did not claim interface 0 before use [ 167.880329][ T9983] loop0: detected capacity change from 0 to 3904 [ 167.884645][ T9983] fuse: Unknown parameter '0x0000000000000006' [ 168.016600][ T9990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1065'. [ 168.058439][ T9993] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1066'. [ 168.059465][ T8187] tipc: Node number set to 2886997057 [ 168.062264][ T9993] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1066'. [ 168.062554][ T9993] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1066'. [ 168.062569][ T9993] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1066'. [ 168.091112][ T9996] UBIFS error (pid: 9996): cannot open "ubi0_0", error -19 [ 168.200530][ T9998] bridge_slave_0: left allmulticast mode [ 168.206017][ T9998] bridge_slave_0: left promiscuous mode [ 168.210621][ T9998] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.262805][ T9998] bridge_slave_1: left allmulticast mode [ 168.265449][ T9998] bridge_slave_1: left promiscuous mode [ 168.272620][ T9998] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.284667][ T9998] bond0: (slave bond_slave_0): Releasing backup interface [ 168.294491][ T9998] bond0: (slave bond_slave_1): Releasing backup interface [ 168.312691][ T9998] team0: Port device team_slave_0 removed [ 168.322843][ T9998] team0: Port device team_slave_1 removed [ 168.331871][ T9998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.336606][ T9998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.371426][ T9998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.375098][ T9998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.413962][ T9998] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 168.507940][T10006] bond1: entered promiscuous mode [ 168.657732][ T42] audit: type=1400 audit(2000000087.825:868): avc: denied { remount } for pid=10008 comm="syz.8.1071" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 168.676189][T10011] netlink: 'syz.7.1072': attribute type 1 has an invalid length. [ 168.682697][ T42] audit: type=1400 audit(2000000087.845:869): avc: denied { name_connect } for pid=10008 comm="syz.8.1071" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 168.748226][T10016] 8021q: adding VLAN 0 to HW filter on device bond2 [ 168.756790][T10016] bond1: (slave bond2): making interface the new active one [ 168.762996][T10016] bond1: (slave bond2): Enslaving as an active interface with an up link [ 168.795032][T10011] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 168.802397][T10011] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1072'. [ 168.810609][T10011] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.999451][T10033] netlink: 620 bytes leftover after parsing attributes in process `syz.7.1080'. [ 169.003352][T10033] netlink: 124 bytes leftover after parsing attributes in process `syz.7.1080'. [ 169.123633][ T8187] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 169.273594][ T8187] usb 13-1: Using ep0 maxpacket: 32 [ 169.277596][ T8187] usb 13-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 169.282819][ T8187] usb 13-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 169.287786][ T8187] usb 13-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 169.292771][ T8187] usb 13-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 169.297892][ T8187] usb 13-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 169.308937][ T8187] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.312417][ T8187] usb 13-1: Product: syz [ 169.315242][ T8187] usb 13-1: Manufacturer: syz [ 169.317425][ T8187] usb 13-1: SerialNumber: syz [ 169.331176][ C0] imon 13-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 169.337381][ T8187] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/input/input22 [ 169.543668][ T8187] imon 13-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 169.548576][ T8187] (id 0x00) [ 169.600901][ T9996] Set syz1 is full, maxelem 65536 reached [ 169.604563][ T8187] rc_core: IR keymap rc-imon-pad not found [ 169.604579][ T8187] Registered IR keymap rc-empty [ 169.604649][ T8187] imon 13-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 169.604664][ T8187] imon 13-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 169.605087][ T8187] imon:send_packet: packet tx failed (-71) [ 169.622330][T10051] tmpfs: Unknown parameter 'usrquota_block¿Eèlimin' [ 169.628134][ T8187] imon 13-1:155.0: remote input dev register failed [ 169.631512][ T8187] imon 13-1:155.0: imon_init_intf0: rc device setup failed [ 169.675896][ T8187] imon 13-1:155.0: unable to initialize intf0, err 0 [ 169.684920][ T8187] imon:imon_probe: failed to initialize context! [ 169.689512][ T8187] imon 13-1:155.0: unable to register, err -19 [ 169.720162][ T8187] usb 13-1: USB disconnect, device number 3 [ 169.745671][T10064] tmpfs: Bad value for 'mpol' [ 169.869670][ T42] audit: type=1400 audit(2000000089.035:870): avc: denied { create } for pid=10076 comm="syz.7.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 170.091551][T10094] netlink: 'syz.7.1099': attribute type 1 has an invalid length. [ 170.108983][ T42] audit: type=1400 audit(2000000089.275:871): avc: denied { cmd } for pid=10093 comm="syz.7.1099" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 170.117959][T10094] Unsupported ieee802154 address type: 0 [ 170.214301][ T847] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 170.218610][T10098] netlink: 'syz.8.1100': attribute type 29 has an invalid length. [ 170.225955][T10098] netlink: 'syz.8.1100': attribute type 29 has an invalid length. [ 170.230711][T10098] netlink: 'syz.8.1100': attribute type 29 has an invalid length. [ 170.363391][ T847] usb 8-1: Using ep0 maxpacket: 8 [ 170.366416][ T847] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 170.371244][ T847] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 170.376205][ T847] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 170.382006][ T847] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 170.387913][ T847] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 170.392541][ T847] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 170.396944][ T847] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.402366][ T847] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.455763][T10105] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.459241][T10105] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.570175][T10105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.590089][T10105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.612444][ T847] usb 8-1: GET_CAPABILITIES returned 0 [ 170.616261][ T847] usbtmc 8-1:16.0: can't read capabilities [ 170.822385][T10105] bond1: left promiscuous mode [ 170.921179][T10088] bond0: entered promiscuous mode [ 170.923918][T10088] bond0: entered allmulticast mode [ 170.926558][T10088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.934290][ T5868] usb 8-1: USB disconnect, device number 13 [ 170.994880][T10118] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 171.033324][ T5768] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.037235][ T5768] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.040970][ T5768] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.045544][ T5768] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.084487][ T42] audit: type=1400 audit(2000000090.246:872): avc: denied { append } for pid=10124 comm="syz.4.1107" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 171.085733][T10123] team0: Port device xfrm0 added [ 171.453250][ T847] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 171.529356][T10131] syzkaller0: entered promiscuous mode [ 171.531723][T10131] syzkaller0: entered allmulticast mode [ 171.613352][ T847] usb 13-1: Using ep0 maxpacket: 32 [ 171.615681][ T847] usb 13-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 171.619809][ T847] usb 13-1: config 0 has an invalid interface number: 1 but max is 0 [ 171.622481][ T847] usb 13-1: config 0 has no interface number 0 [ 171.626530][ T847] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.629180][ T847] usb 13-1: Product: syz [ 171.630581][ T847] usb 13-1: Manufacturer: syz [ 171.632230][ T847] usb 13-1: SerialNumber: syz [ 171.636085][ T847] usb 13-1: config 0 descriptor?? [ 171.639787][ T847] usb 13-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 171.642957][ T847] usb 13-1: selecting invalid altsetting 1 [ 171.644976][ T847] usb 13-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 171.649333][ T847] usb 13-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 171.652811][ T847] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 171.656423][ T847] usb 13-1: media controller created [ 171.686535][ T847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 171.790806][T10118] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 171.953643][T10132] openvswitch: netlink: VLAN attribute unexpected. [ 172.837477][ T847] usb 13-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 172.861224][ T847] zl10353_read_register: readreg error (reg=127, ret==-110) [ 172.916887][T10129] usb 13-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 173.549032][T10123] tipc: Started in network mode [ 173.551385][T10123] tipc: Node identity 8a0a7322ac07, cluster identity 4711 [ 173.557313][T10123] tipc: Enabled bearer , priority 0 [ 173.671545][T10144] __nla_validate_parse: 2 callbacks suppressed [ 173.671563][T10144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1111'. [ 173.677381][T10142] vxcan0: tx address claim with dest, not broadcast [ 173.730281][ T42] audit: type=1400 audit(2000000092.896:873): avc: denied { setattr } for pid=10137 comm="syz.4.1111" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 173.808627][T10152] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size. [ 173.983407][ T5867] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 174.138296][ T5867] usb 8-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 174.142274][ T5867] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 174.145760][ T5867] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 174.150631][ T5867] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.153585][ T5867] usb 8-1: Product: syz [ 174.155078][ T5867] usb 8-1: Manufacturer: syz [ 174.156648][ T5867] usb 8-1: SerialNumber: syz [ 174.376726][ T5867] usblp 8-1:1.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 174.582129][ T42] audit: type=1400 audit(2000000093.746:874): avc: denied { read write } for pid=10147 comm="syz.3.1114" name="lp0" dev="devtmpfs" ino=3120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 174.601039][ T42] audit: type=1400 audit(2000000093.746:875): avc: denied { open } for pid=10147 comm="syz.3.1114" path="/dev/usb/lp0" dev="devtmpfs" ino=3120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 174.610663][ T847] usb 13-1: USB disconnect, device number 4 [ 174.684493][ T5867] tipc: Node number set to 638415650 [ 174.733111][ T10] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 174.792720][T10168] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 174.825924][ T8187] usb 8-1: USB disconnect, device number 14 [ 174.834159][ T8187] usblp0: removed [ 174.884159][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 174.888403][ T10] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 174.892436][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.898908][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.903921][ T10] usb 9-1: config 0 descriptor?? [ 174.913493][T10173] syzkaller0: entered promiscuous mode [ 174.915839][T10173] syzkaller0: entered allmulticast mode [ 175.117664][ T10] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 175.413407][ T42] audit: type=1400 audit(2000000094.586:876): avc: denied { write } for pid=10178 comm="syz.3.1123" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 175.571950][ T5867] usb 9-1: USB disconnect, device number 9 [ 177.024691][ T42] audit: type=1400 audit(2000000096.196:877): avc: denied { write } for pid=10204 comm="syz.7.1132" name="functions" dev="configfs" ino=11819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 177.036753][ T42] audit: type=1400 audit(2000000096.196:878): avc: denied { write } for pid=10204 comm="syz.7.1132" name="configs" dev="configfs" ino=11820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 177.052971][T10210] XFS (mtdblock0): Invalid superblock magic number [ 177.058965][ T42] audit: type=1400 audit(2000000096.206:879): avc: denied { mounton } for pid=10209 comm="syz.4.1130" path="/300/dev/mtdblock0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.131906][T10222] kernel profiling enabled (shift: 63) [ 177.138473][T10224] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 177.142275][T10224] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1136'. [ 177.160743][T10222] profiling shift: 63 too large [ 177.210701][T10231] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1139'. [ 177.227119][T10234] netlink: 'syz.3.1140': attribute type 39 has an invalid length. [ 177.286108][T10233] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 177.307474][T10239] syzkaller0: entered promiscuous mode [ 177.309303][T10239] syzkaller0: entered allmulticast mode [ 177.368600][T10247] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 177.512348][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1144'. [ 177.515662][T10255] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1144'. [ 179.007919][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1149'. [ 179.010855][T10272] netlink: 14 bytes leftover after parsing attributes in process `syz.8.1149'. [ 179.355851][T10253] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 179.392964][T10276] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 179.392964][T10276] [ 179.402348][T10277] netlink: 'syz.4.1150': attribute type 2 has an invalid length. [ 179.408311][T10276] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 179.418534][T10276] CIFS: Attempting to mount //127.0.0.1/share [ 179.425158][T10276] CIFS: VFS: Error connecting to socket. Aborting operation. [ 179.427667][T10276] CIFS: VFS: cifs_mount failed w/return code = -101 [ 179.444617][ T5721] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 179.456811][T10284] netlink: 'syz.3.1153': attribute type 11 has an invalid length. [ 179.544067][T10291] bond0: option arp_interval: invalid value (\A¯è/U#Ô]ðÌ®¡¤Ó´¶&Zý;-£4Y¤Ûäw’ÔQÁÈÀÉWù³8@ì;’ŸF·$ÊYLt1´tµÛ?õ6¿teÎUÉ-Ùî=æ§FzvǵçÓ†³¤Âºö‡¾U=µÕqÁV…ˆÜ—îèk7ªN3ÆŸK[(ZgÍt“';wÞÕ¢ÿm™\n §ìæ#|[8},ê) [ 179.552316][T10291] bond0: option arp_interval: allowed values 0 - 2147483647 [ 179.609286][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1155'. [ 179.686702][ T42] audit: type=1400 audit(2000000098.856:880): avc: denied { ioctl } for pid=10301 comm="syz.3.1159" path="socket:[41239]" dev="sockfs" ino=41239 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 179.868066][T10315] netlink: 'syz.7.1163': attribute type 18 has an invalid length. [ 179.871156][T10315] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1163'. [ 179.878658][T10315] netlink: 'syz.7.1163': attribute type 18 has an invalid length. [ 179.883164][T10315] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1163'. [ 180.012117][T10322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1165'. [ 180.017453][T10322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1165'. [ 180.392970][ T10] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 180.522739][ T10] usb 8-1: device descriptor read/64, error -71 [ 180.762721][ T10] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 180.902961][ T10] usb 8-1: device descriptor read/64, error -71 [ 180.964245][ T847] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 181.013100][ T10] usb usb8-port1: attempt power cycle [ 181.152977][ T847] usb 12-1: Using ep0 maxpacket: 8 [ 181.156621][ T847] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 181.163565][ T847] usb 12-1: config index 0 descriptor too short (expected 74, got 45) [ 181.172775][ T847] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 181.177703][ T847] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 181.182965][ T847] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 181.193679][ T847] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 181.198569][ T847] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.203979][ T847] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.383740][ T10] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 181.410961][ T847] usb 12-1: GET_CAPABILITIES returned 0 [ 181.413506][ T847] usbtmc 12-1:16.0: can't read capabilities [ 181.413559][ T10] usb 8-1: device descriptor read/8, error -71 [ 181.434097][ T8187] usb 12-1: USB disconnect, device number 6 [ 181.631935][T10355] xt_hashlimit: size too large, truncated to 1048576 [ 181.662713][ T10] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 181.683772][ T42] audit: type=1400 audit(2000000100.856:881): avc: denied { mount } for pid=10354 comm="syz.7.1177" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 181.684198][ T10] usb 8-1: device descriptor read/8, error -71 [ 181.813477][ T10] usb usb8-port1: unable to enumerate USB device [ 182.482168][ T42] audit: type=1400 audit(2000000101.646:882): avc: denied { unmount } for pid=9391 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 182.719604][T10374] 9pnet_virtio: no channels available for device 127.0.0.1 [ 182.769384][ T42] audit: type=1400 audit(2000000101.926:883): avc: denied { bind } for pid=10373 comm="syz.8.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 182.809113][ T5721] Bluetooth: Unexpected continuation frame (len 88) [ 182.864132][T10376] Can't find a SQUASHFS superblock on nullb0 [ 183.061390][T10393] team0: Device vlan0 is up. Set it down before adding it as a team port [ 183.172105][T10397] smpboot: CPU 1 is now offline [ 183.266878][ T42] audit: type=1400 audit(2000000102.426:884): avc: denied { read } for pid=10399 comm="syz.7.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 183.295530][T10402] netlink: 'syz.8.1191': attribute type 2 has an invalid length. [ 183.298119][T10402] netlink: 228 bytes leftover after parsing attributes in process `syz.8.1191'. [ 183.358093][ T42] audit: type=1400 audit(2000000102.516:885): avc: denied { map } for pid=10404 comm="syz.8.1192" path="/69/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 183.415801][T10408] netlink: 'syz.8.1193': attribute type 13 has an invalid length. [ 183.443367][T10407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.447562][T10407] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.459243][T10407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.491168][T10407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.495016][T10407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.503895][T10407] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 183.507274][T10407] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.517355][T10407] veth1_vlan: left promiscuous mode [ 183.520331][T10407] veth0_vlan: left promiscuous mode [ 183.523336][T10407] veth0_vlan: entered promiscuous mode [ 183.526320][T10407] veth1_vlan: entered promiscuous mode [ 183.531565][T10407] veth1_macvtap: left promiscuous mode [ 183.535654][T10407] veth0_macvtap: left promiscuous mode [ 183.538078][T10407] veth0_macvtap: entered promiscuous mode [ 183.541354][T10407] veth1_macvtap: entered promiscuous mode [ 183.547783][T10407] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 183.550974][T10407] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 183.555496][T10407] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 183.559806][T10407] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 183.594800][T10407] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.599081][T10407] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 183.642777][ T8686] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.645856][ T8686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.651654][ T8686] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.654780][ T8686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.678987][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1194'. [ 183.733024][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.736606][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.740380][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.746784][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.798923][ T42] audit: type=1400 audit(2000000102.956:886): avc: denied { mounton } for pid=10414 comm="syz.8.1195" path="/72/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 184.130946][T10422] openvswitch: netlink: Flow key attr not present in new flow. [ 184.367903][ T42] audit: type=1400 audit(2000000103.526:887): avc: denied { write } for pid=10439 comm="syz.3.1203" name="configs" dev="configfs" ino=11820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 184.386240][ T42] audit: type=1400 audit(2000000103.546:888): avc: denied { write } for pid=10439 comm="syz.3.1203" name="functions" dev="configfs" ino=11819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 184.405447][T10440] Config c1/1 of g1 needs at least one function. [ 184.408482][T10440] udc dummy_udc.0: failed to start g1: -22 [ 184.419444][T10440] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 184.437414][T10440] UDC core: g1: couldn't find an available UDC or it's busy [ 184.445241][ T42] audit: type=1400 audit(2000000103.606:889): avc: denied { ioctl } for pid=10439 comm="syz.3.1203" path="socket:[42190]" dev="sockfs" ino=42190 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 184.545280][ T5868] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 184.548174][T10444] team0: Cannot enslave team device to itself [ 184.554583][T10452] team0: Cannot enslave team device to itself [ 184.610334][ T42] audit: type=1400 audit(2000000103.766:890): avc: denied { write } for pid=10443 comm="syz.8.1205" name="/" dev="configfs" ino=1054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 184.706562][ T5868] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 184.713855][ T5868] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.717784][ T5868] usb 12-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 184.727664][ T5868] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.733075][ T5868] usb 12-1: Product: syz [ 184.734441][ T5868] usb 12-1: Manufacturer: syz [ 184.736216][ T5868] usb 12-1: SerialNumber: syz [ 184.747976][ T5868] cdc_mbim 12-1:1.0: skipping garbage [ 184.819566][ T42] audit: type=1400 audit(2000000103.976:891): avc: denied { setattr } for pid=10470 comm="syz.8.1212" name="/" dev="9p" ino=77361223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 184.952433][T10433] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 185.094610][T10478] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1213'. [ 185.243351][T10480] syzkaller0: entered promiscuous mode [ 185.250569][T10480] syzkaller0: entered allmulticast mode [ 185.642946][ T40] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 185.763817][T10488] CIFS mount error: No usable UNC path provided in device string! [ 185.763817][T10488] [ 185.767015][T10488] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 185.792558][ T40] usb 8-1: Using ep0 maxpacket: 8 [ 185.796526][ T40] usb 8-1: New USB device found, idVendor=ee8d, idProduct=001e, bcdDevice=61.00 [ 185.803635][ T40] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 185.808417][ T40] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 185.816508][ T40] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 185.819505][ T40] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 185.822761][ T40] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.826669][ T40] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.841710][T10490] loop5: detected capacity change from 0 to 7 [ 185.848505][T10490] Dev loop5: unable to read RDB block 7 [ 185.857840][T10490] loop5: AHDI p2 [ 185.859495][T10490] loop5: partition table partially beyond EOD, truncated [ 186.255967][T10499] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1220'. [ 186.346795][ T5868] cdc_mbim 12-1:1.0: bind() failure [ 186.367642][ T5868] cdc_ncm 12-1:1.1: CDC Union missing and no IAD found [ 186.371724][ T5868] cdc_ncm 12-1:1.1: bind() failure [ 186.381570][T10502] usb usb5: usbfs: interface 0 claimed by hub while 'syz.7.1221' sets config #1 [ 186.383833][ T5868] usb 12-1: USB disconnect, device number 7 [ 186.389293][T10502] netlink: 164 bytes leftover after parsing attributes in process `syz.7.1221'. [ 186.498122][T10506] tipc: Resetting bearer [ 186.605537][T10508] usbtmc 8-1:16.0: simple usb_control_msg failed -32 [ 186.617678][ T1358] usb 8-1: USB disconnect, device number 19 [ 186.625884][T10510] device-mapper: ioctl: Invalid ioctl structure: uuid ·, name , dev 30 [ 187.022495][T10522] tmpfs: Invalid uid '0x00000000ffffffff' [ 187.026612][T10523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.068661][T10526] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-1/1-0002' [ 187.071756][T10526] CPU: 0 UID: 0 PID: 10526 Comm: syz.7.1228 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.071776][T10526] Tainted: [L]=SOFTLOCKUP [ 187.071781][T10526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.071789][T10526] Call Trace: [ 187.071801][T10526] [ 187.071812][T10526] dump_stack_lvl+0x100/0x190 [ 187.071869][T10526] sysfs_warn_dup.cold+0x1c/0x28 [ 187.071896][T10526] sysfs_create_dir_ns+0x24b/0x2b0 [ 187.071923][T10526] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 187.071940][T10526] ? find_held_lock+0x2b/0x80 [ 187.071960][T10526] ? kobject_add_internal+0x25f/0x930 [ 187.072015][T10526] ? kobject_add_internal+0x25f/0x930 [ 187.072037][T10526] ? do_raw_spin_unlock+0x145/0x1e0 [ 187.072052][T10526] kobject_add_internal+0x2c8/0x930 [ 187.072071][T10526] kobject_add+0x16a/0x1e0 [ 187.072085][T10526] ? __pfx_kobject_add+0x10/0x10 [ 187.072100][T10526] ? __kasan_kmalloc+0xaa/0xb0 [ 187.072117][T10526] ? lockdep_init_map_type+0x5c/0x250 [ 187.072136][T10526] ? class_to_subsys+0x114/0x150 [ 187.072196][T10526] device_add+0x294/0x1970 [ 187.072213][T10526] ? lockdep_init_map_type+0x5c/0x250 [ 187.072231][T10526] ? __pfx_device_add+0x10/0x10 [ 187.072243][T10526] ? lockdep_init_map_type+0x5c/0x250 [ 187.072262][T10526] ? __init_waitqueue_head+0xca/0x150 [ 187.072279][T10526] i2c_new_client_device+0x660/0xd30 [ 187.072327][T10526] new_device_store+0x20f/0x420 [ 187.072346][T10526] ? __lock_acquire+0x4c5/0x1ec0 [ 187.072366][T10526] ? __pfx_new_device_store+0x10/0x10 [ 187.072389][T10526] ? find_held_lock+0x2b/0x80 [ 187.072403][T10526] ? sysfs_file_kobj+0xe4/0x290 [ 187.072417][T10526] ? sysfs_file_kobj+0xe4/0x290 [ 187.072433][T10526] ? __pfx_new_device_store+0x10/0x10 [ 187.072451][T10526] dev_attr_store+0x58/0x80 [ 187.072466][T10526] ? __pfx_dev_attr_store+0x10/0x10 [ 187.072481][T10526] sysfs_kf_write+0xf2/0x150 [ 187.072496][T10526] kernfs_fop_write_iter+0x3e0/0x5f0 [ 187.072506][T10526] ? __pfx_sysfs_kf_write+0x10/0x10 [ 187.072521][T10526] vfs_write+0x6af/0x1050 [ 187.072533][T10526] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 187.072546][T10526] ? __pfx_vfs_write+0x10/0x10 [ 187.072556][T10526] ? find_held_lock+0x2b/0x80 [ 187.072578][T10526] ksys_write+0x12a/0x250 [ 187.072589][T10526] ? __pfx_ksys_write+0x10/0x10 [ 187.072604][T10526] do_syscall_64+0x123/0x790 [ 187.072616][T10526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.072628][T10526] RIP: 0033:0x7f660fb9e0d9 [ 187.072639][T10526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.072650][T10526] RSP: 002b:00007f660ddf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 187.072670][T10526] RAX: ffffffffffffffda RBX: 00007f660fe25fa0 RCX: 00007f660fb9e0d9 [ 187.072679][T10526] RDX: 000000000000000b RSI: 0000200000000100 RDI: 0000000000000005 [ 187.072687][T10526] RBP: 00007f660fc35024 R08: 0000000000000000 R09: 0000000000000000 [ 187.072695][T10526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.072702][T10526] R13: 00007f660fe26038 R14: 00007f660fe25fa0 R15: 00007ffdc19a5868 [ 187.072717][T10526] [ 187.177452][T10526] kobject: kobject_add_internal failed for 1-0002 with -EEXIST, don't try to register things with the same name in the same directory. [ 187.181804][T10526] i2c i2c-1: Failed to register i2c client isp1301 at 0x02 (-17) [ 187.250747][T10531] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 187.422476][T10538] loop6: detected capacity change from 0 to 8 [ 187.433531][ T5867] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 187.576491][T10552] program syz.7.1236 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.592577][ T5867] usb 8-1: Using ep0 maxpacket: 8 [ 187.606532][ T5867] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 187.614698][T10538] loop6: detected capacity change from 8 to 7 [ 187.616934][ T5867] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 187.623563][ T5867] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 187.629749][ T5867] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 187.642258][ T5867] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 187.646203][ T5867] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.651227][ T5867] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.678594][T10556] team0: No ports can be present during mode change [ 187.774539][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1239'. [ 187.781982][T10563] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1239'. [ 187.853340][T10567] program syz.7.1240 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.874218][T10572] netlink: 'syz.8.1241': attribute type 3 has an invalid length. [ 187.929383][T10574] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 187.991792][T10578] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=10578 comm=syz.7.1243 [ 188.034343][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 188.034354][ T42] audit: type=1400 audit(2000000107.196:896): avc: denied { getopt } for pid=10582 comm="syz.7.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 188.157933][ T42] audit: type=1400 audit(2000000107.316:897): avc: denied { compute_member } for pid=10588 comm="syz.7.1247" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 188.167608][ T42] audit: type=1400 audit(2000000107.336:898): avc: denied { nlmsg_write } for pid=10588 comm="syz.7.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 188.441394][T10596] usbtmc 8-1:16.0: simple usb_control_msg returned 0 [ 188.455258][T10595] syzkaller0: entered promiscuous mode [ 188.457161][T10595] syzkaller0: entered allmulticast mode [ 188.653078][ T8187] usb 8-1: USB disconnect, device number 20 [ 189.112567][T10607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=10607 comm=syz.8.1253 [ 189.682449][T10621] binder: 10620:10621 ioctl c0306201 200000000680 returned -14 [ 190.664231][T10632] bridge0: port 3(veth0) entered blocking state [ 190.673006][T10632] bridge0: port 3(veth0) entered disabled state [ 190.681578][T10632] veth0: entered allmulticast mode [ 190.696299][T10632] veth0: entered promiscuous mode [ 190.703019][T10632] bridge0: port 3(veth0) entered blocking state [ 190.705818][T10632] bridge0: port 3(veth0) entered forwarding state [ 190.939539][T10653] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1267'. [ 190.942701][T10653] hsr_slave_0: left promiscuous mode [ 190.945013][T10653] hsr_slave_1: left promiscuous mode [ 190.974426][T10655] ./sys/bus/nd/drivers/nd_pmem/unbind: Can't lookup blockdev [ 191.041596][T10659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=10659 comm=syz.8.1269 [ 191.087078][ T42] audit: type=1400 audit(2000000110.247:899): avc: denied { read } for pid=10662 comm="syz.8.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 191.097560][T10661] netlink: 16054 bytes leftover after parsing attributes in process `syz.7.1270'. [ 191.103727][ T5867] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 191.135782][T10667] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1272'. [ 191.137183][T10665] syz.8.1271: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 191.141181][T10667] openvswitch: netlink: Flow actions attr not present in new flow. [ 191.144523][T10665] CPU: 0 UID: 0 PID: 10665 Comm: syz.8.1271 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.144539][T10665] Tainted: [L]=SOFTLOCKUP [ 191.144543][T10665] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.144550][T10665] Call Trace: [ 191.144560][T10665] [ 191.144569][T10665] dump_stack_lvl+0x100/0x190 [ 191.144600][T10665] warn_alloc.cold+0x94/0xa8 [ 191.144612][T10665] ? __pfx_warn_alloc+0x10/0x10 [ 191.144629][T10665] ? kasan_save_stack+0x30/0x50 [ 191.144643][T10665] ? __kmalloc_cache_noprof+0x2e7/0x6b0 [ 191.144653][T10665] ? xskq_create+0x52/0x290 [ 191.144703][T10665] ? __x64_sys_setsockopt+0xbd/0x160 [ 191.144751][T10665] ? do_syscall_64+0x123/0x790 [ 191.144767][T10665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.144782][T10665] ? xsk_setsockopt+0x743/0xab0 [ 191.144797][T10665] __vmalloc_node_range_noprof+0x136c/0x1630 [ 191.144818][T10665] ? xsk_setsockopt+0x743/0xab0 [ 191.144842][T10665] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 191.144859][T10665] ? kasan_save_track+0x14/0x30 [ 191.144872][T10665] ? __kasan_kmalloc+0xaa/0xb0 [ 191.144886][T10665] ? __kmalloc_cache_noprof+0x2e7/0x6b0 [ 191.144897][T10665] ? xskq_create+0x52/0x290 [ 191.144912][T10665] ? xsk_setsockopt+0x743/0xab0 [ 191.144926][T10665] xskq_create+0x18f/0x290 [ 191.144941][T10665] ? xsk_setsockopt+0x743/0xab0 [ 191.144956][T10665] xsk_setsockopt+0x743/0xab0 [ 191.144971][T10665] ? __pfx_xsk_setsockopt+0x10/0x10 [ 191.144985][T10665] ? find_held_lock+0x2b/0x80 [ 191.144998][T10665] ? __fget_files+0x215/0x3d0 [ 191.145013][T10665] ? selinux_socket_setsockopt+0x6a/0x80 [ 191.145037][T10665] ? __pfx_xsk_setsockopt+0x10/0x10 [ 191.145052][T10665] do_sock_setsockopt+0xf3/0x1d0 [ 191.145065][T10665] __sys_setsockopt+0x195/0x220 [ 191.145084][T10665] __x64_sys_setsockopt+0xbd/0x160 [ 191.145100][T10665] ? do_syscall_64+0xae/0x790 [ 191.145109][T10665] ? lockdep_hardirqs_on+0x7d/0x110 [ 191.145127][T10665] do_syscall_64+0x123/0x790 [ 191.145138][T10665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.145148][T10665] RIP: 0033:0x7f344f59e0d9 [ 191.145159][T10665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.145169][T10665] RSP: 002b:00007f34504de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 191.145185][T10665] RAX: ffffffffffffffda RBX: 00007f344f826180 RCX: 00007f344f59e0d9 [ 191.145192][T10665] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 191.145198][T10665] RBP: 00007f344f635024 R08: 0000000000000004 R09: 0000000000000000 [ 191.145204][T10665] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.145210][T10665] R13: 00007f344f826218 R14: 00007f344f826180 R15: 00007fff8e7eed68 [ 191.145223][T10665] [ 191.145227][T10665] Mem-Info: [ 191.239229][T10665] active_anon:12004 inactive_anon:0 isolated_anon:0 [ 191.239229][T10665] active_file:252 inactive_file:60742 isolated_file:0 [ 191.239229][T10665] unevictable:1000 dirty:70 writeback:0 [ 191.239229][T10665] slab_reclaimable:8226 slab_unreclaimable:76898 [ 191.239229][T10665] mapped:25440 shmem:1565 pagetables:1668 [ 191.239229][T10665] sec_pagetables:299 bounce:0 [ 191.239229][T10665] kernel_misc_reclaimable:0 [ 191.239229][T10665] free:381370 free_pcp:16619 free_cma:0 [ 191.253426][T10665] Node 0 active_anon:47532kB inactive_anon:0kB active_file:1008kB inactive_file:242380kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:89448kB dirty:280kB writeback:0kB shmem:6256kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14776kB pagetables:6412kB sec_pagetables:1196kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 191.264673][T10665] Node 1 active_anon:484kB inactive_anon:0kB active_file:0kB inactive_file:588kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12312kB dirty:0kB writeback:0kB shmem:4kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:260kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 191.269284][T10670] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1273'. [ 191.274681][T10665] Node 0 DMA free:5764kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:240kB local_pcp:80kB free_cma:0kB [ 191.274716][T10665] lowmem_reserve[]: 0 1224 1224 1224 1224 [ 191.289637][T10665] Node 0 DMA32 free:39636kB boost:0kB min:27364kB low:34204kB high:41044kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47528kB inactive_anon:0kB active_file:1008kB inactive_file:242380kB unevictable:4000kB writepending:280kB zspages:0kB present:2080628kB managed:1254228kB mlocked:0kB bounce:0kB free_pcp:26092kB local_pcp:5632kB free_cma:0kB [ 191.293032][ T5867] usb 8-1: New USB device found, idVendor=0eef, idProduct=722a, bcdDevice= 0.00 [ 191.299744][T10665] lowmem_reserve[]: 0 0 0 0 0 [ 191.299771][T10665] Node 1 Normal free:1480080kB boost:0kB min:39872kB low:49840kB high:59808kB reserved_highatomic:0KB free_highatomic:0KB active_anon:484kB inactive_anon:0kB active_file:0kB inactive_file:588kB unevictable:0kB writepending:0kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:40096kB local_pcp:14572kB free_cma:0kB [ 191.305323][ T5867] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.315134][T10665] lowmem_reserve[]: 0 0 0 0 0 [ 191.320545][T10665] Node 0 DMA: 21*4kB (UM) 18*8kB (UM) 12*16kB (UM) 13*32kB (UM) 5*64kB (UM) 2*128kB (UM) 1*256kB (M) 0*512kB 2*1024kB (UM) 1*2048kB (E) 0*4096kB = 5764kB [ 191.325851][T10665] Node 0 DMA32: 763*4kB (UME) 483*8kB (UME) 93*16kB (UME) 120*32kB (UME) 71*64kB (UME) 41*128kB (UME) 19*256kB (UME) 11*512kB (UME) 3*1024kB (M) 2*2048kB (M) 0*4096kB = 39700kB [ 191.331467][T10665] Node 1 Normal: 152*4kB (UME) 130*8kB (UME) 86*16kB (UME) 66*32kB (UME) 19*64kB (UME) 26*128kB (UME) 30*256kB (UME) 23*512kB (ME) 11*1024kB (ME) 7*2048kB (M) 348*4096kB (UM) = 1480144kB [ 191.337839][T10665] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 191.341200][T10665] Node 0 hugepages_total=55 hugepages_free=54 hugepages_surp=0 hugepages_size=2048kB [ 191.345735][T10665] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 191.345744][ T5867] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 191.349406][T10665] Node 1 hugepages_total=54 hugepages_free=54 hugepages_surp=0 hugepages_size=2048kB [ 191.360311][T10665] 62555 total pagecache pages [ 191.362602][T10665] 0 pages in swap cache [ 191.364312][T10665] Free swap = 124996kB [ 191.366123][T10665] Total swap = 124996kB [ 191.367900][T10665] 1048443 pages RAM [ 191.369551][T10665] 0 pages HighMem/MovableOnly [ 191.371501][T10665] 285575 pages reserved [ 191.374063][ T5867] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.374229][T10665] 0 pages cma reserved [ 191.381140][ T5867] usb 8-1: config 0 descriptor?? [ 191.396463][ T5867] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 191.469786][T10672] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 191.529910][T10676] netlink: 'syz.8.1276': attribute type 1 has an invalid length. [ 191.532974][T10674] qnx4: no qnx4 filesystem (no root dir). [ 191.549763][T10676] 8021q: adding VLAN 0 to HW filter on device bond3 [ 191.561037][T10676] bond3 (unregistering): Released all slaves [ 192.029988][ T42] audit: type=1400 audit(2000000111.187:900): avc: denied { bind } for pid=10694 comm="syz.7.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 192.280710][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1283'. [ 192.325816][T10705] ubi0: attaching mtd0 [ 192.355802][T10705] ubi0: scanning is finished [ 192.357338][T10705] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 192.385872][T10712] fuse: Unknown parameter 'ft' [ 192.402180][T10712] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 192.413277][ T42] audit: type=1400 audit(2000000111.567:901): avc: denied { connect } for pid=10711 comm="syz.7.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 192.436133][ T42] audit: type=1400 audit(2000000111.567:902): avc: denied { write } for pid=10711 comm="syz.7.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 192.542973][ T1127] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 192.545440][ T1127] ata1: failed to read log page 10h (errno=-5) [ 192.547372][ T1127] ata1.00: exception Emask 0x1 SAct 0x80000 SErr 0x0 action 0x0 [ 192.549838][ T1127] ata1.00: irq_stat 0x40000000 [ 192.551545][ T1127] ata1.00: failed command: READ FPDMA QUEUED [ 192.555881][ T1127] ata1.00: cmd 60/01:98:00:00:00/00:00:fd:00:00/c0 tag 19 ncq dma 512 in [ 192.555881][ T1127] res 41/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 192.560447][T10722] jffs2: notice: (10722) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (2 unchecked, 1 orphan) and 3 of xref (0 dead, 1 orphan) found. [ 192.561197][ T1127] ata1.00: status: { DRDY ERR } [ 192.561213][ T1127] ata1.00: error: { ABRT } [ 192.578002][ T1127] ata1.00: configured for UDMA/100 [ 192.594460][ T1127] ata1: EH complete [ 192.612475][ T42] audit: type=1400 audit(2000000111.767:903): avc: denied { execstack } for pid=10717 comm="syz.8.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 192.621809][T10705] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 192.906532][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.909290][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.062240][ T40] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 193.231949][ T40] usb 13-1: Using ep0 maxpacket: 16 [ 193.237107][ T40] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 193.244649][ T40] usb 13-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 8 [ 193.252584][ T40] usb 13-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 193.261957][ T40] usb 13-1: config 1 interface 0 has no altsetting 0 [ 193.268500][ T40] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.281978][ T40] usb 13-1: Product: п [ 193.283331][ T40] usb 13-1: Manufacturer: 鷦᰿쳎㓚⌇ቪ簓撿꬟摼äŒâ •æ–짊쾔氒민曶掗 [ 193.286420][ T40] usb 13-1: SerialNumber: Г [ 193.289964][T10732] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 193.293127][T10732] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 193.518743][ T40] usb 13-1: USB disconnect, device number 5 [ 193.676440][T10758] tipc: Resetting bearer [ 193.688645][T10758] tipc: Disabling bearer [ 193.708710][T10758] team0 (unregistering): Port device xfrm0 removed [ 193.786965][ T10] usb 8-1: USB disconnect, device number 21 [ 193.909937][T10764] ubi0: attaching mtd0 [ 193.914353][T10764] ubi0: scanning is finished [ 193.916044][T10764] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 194.071408][T10771] netlink: 1363 bytes leftover after parsing attributes in process `syz.8.1303'. [ 194.109505][T10764] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 194.126203][T10775] netlink: Conntrack attr has 8 unknown bytes [ 194.126240][T10774] netlink: Conntrack attr has 8 unknown bytes [ 194.128209][T10775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.130160][T10774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.147389][ T42] audit: type=1400 audit(2000000113.307:904): avc: denied { map } for pid=10773 comm="syz.8.1304" path="socket:[45150]" dev="sockfs" ino=45150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 194.314132][T10785] netlink: 'syz.8.1309': attribute type 10 has an invalid length. [ 194.326623][T10785] ipvlan0: entered allmulticast mode [ 194.328965][T10785] veth0_vlan: entered allmulticast mode [ 194.342999][T10785] team0: Device ipvlan0 failed to register rx_handler [ 194.350173][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1308'. [ 194.620619][T10814] device-mapper: ioctl: populate_table: target parameters not NUL-terminated [ 194.751695][T10833] netlink: 'syz.8.1320': attribute type 23 has an invalid length. [ 194.987534][ T1255] Bluetooth: hci4: Frame reassembly failed (-84) [ 194.995832][ T1255] Bluetooth: hci4: Frame reassembly failed (-84) [ 195.001375][ T1255] Bluetooth: hci4: Frame reassembly failed (-84) [ 195.110338][T10852] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1325'. [ 195.281892][ T55] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 195.330254][ T42] audit: type=1400 audit(2000000114.487:905): avc: denied { link } for pid=10865 comm="syz.7.1328" name="#17" dev="tmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 195.339003][ T42] audit: type=1400 audit(2000000114.497:906): avc: denied { rename } for pid=10865 comm="syz.7.1328" name="#18" dev="tmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 195.347693][T10866] netlink: 260 bytes leftover after parsing attributes in process `syz.7.1328'. [ 195.402095][T10869] xt_time: unknown flags 0x78 [ 195.450048][ T42] audit: type=1400 audit(2000000114.607:907): avc: denied { transfer } for pid=10871 comm="syz.7.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 195.456481][ T55] usb 8-1: Using ep0 maxpacket: 16 [ 195.458866][ T55] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 195.483282][ T5728] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 195.488082][ T5728] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 195.496607][ T5728] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 195.498974][ T55] usb 8-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 8 [ 195.503146][ T55] usb 8-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.507819][ T55] usb 8-1: config 1 interface 0 has no altsetting 0 [ 195.511587][ T55] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.514547][ T5728] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 195.517473][ T55] usb 8-1: Product: syz [ 195.518821][ T55] usb 8-1: Manufacturer: syz [ 195.520412][ T55] usb 8-1: SerialNumber: syz [ 195.521994][ T5728] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 195.527671][T10844] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 195.762689][T10873] xfrm0 speed is unknown, defaulting to 1000 [ 195.916148][T10873] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.919248][T10873] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.922156][T10873] bridge_slave_0: entered allmulticast mode [ 195.926004][T10873] bridge_slave_0: entered promiscuous mode [ 195.931388][T10873] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.935770][T10873] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.938892][T10873] bridge_slave_1: entered allmulticast mode [ 195.943031][T10873] bridge_slave_1: entered promiscuous mode [ 195.970817][ T12] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.997527][T10873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.002926][T10873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.024170][T10873] team0: Port device team_slave_0 added [ 196.028252][T10873] team0: Port device team_slave_1 added [ 196.053606][ T12] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.071476][T10873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.074661][T10873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.085711][T10873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.092893][T10873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.096298][T10873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.105984][T10873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.136988][T10873] hsr_slave_0: entered promiscuous mode [ 196.139449][T10873] hsr_slave_1: entered promiscuous mode [ 196.141859][T10873] debugfs: 'hsr0' already exists in 'hsr' [ 196.143767][T10873] Cannot create hsr debugfs directory [ 196.151823][ T12] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.206696][ T12] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.478093][ T12] bridge_slave_1: left promiscuous mode [ 196.480824][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.487201][ T12] bridge_slave_0: left allmulticast mode [ 196.489733][ T12] bridge_slave_0: left promiscuous mode [ 196.492750][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.525906][ T42] audit: type=1400 audit(2000000115.697:908): avc: denied { write } for pid=10891 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.597894][ T42] audit: type=1400 audit(2000000115.757:909): avc: denied { write } for pid=10894 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.765848][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.772446][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.780679][ T12] bond0 (unregistering): Released all slaves [ 196.800126][ T12] bond1 (unregistering): Released all slaves [ 196.813508][ T12] bond2 (unregistering): Released all slaves [ 196.825582][ T12] bond3 (unregistering): Released all slaves [ 196.837667][ T12] bond4 (unregistering): Released all slaves [ 196.853052][ T5432] 8021q: adding VLAN 0 to HW filter on device eth10 [ 196.887102][T10873] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 196.895522][T10873] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 196.904820][T10873] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 196.915610][T10873] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 196.919962][T10873] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 196.939929][T10873] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 196.948095][T10873] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 196.965649][T10873] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 196.991484][ T5722] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 196.992584][ T12] tipc: Left network mode [ 197.042125][ T42] audit: type=1400 audit(2000000116.207:910): avc: denied { write } for pid=10897 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.152435][ T42] audit: type=1400 audit(2000000116.287:911): avc: denied { write } for pid=10906 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.200292][ T5432] 8021q: adding VLAN 0 to HW filter on device eth11 [ 197.214244][T10873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.325021][T10908] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.335547][T10908] bridge_slave_0 (unregistering): left allmulticast mode [ 197.338466][T10908] bridge_slave_0 (unregistering): left promiscuous mode [ 197.341485][T10908] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.376828][T10873] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.435081][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.438190][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.457480][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.460654][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.494228][ T42] audit: type=1400 audit(2000000116.657:912): avc: denied { write } for pid=10914 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.536981][ T12] hsr_slave_0: left promiscuous mode [ 197.542773][ T12] hsr_slave_1: left promiscuous mode [ 197.553335][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.556551][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.561171][ T42] audit: type=1400 audit(2000000116.717:913): avc: denied { write } for pid=10917 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.570701][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.574283][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.593323][ T12] veth1_macvtap: left allmulticast mode [ 197.595636][ T12] veth1_macvtap: left promiscuous mode [ 197.597575][ T12] veth0_macvtap: left promiscuous mode [ 197.599399][ T12] veth1_vlan: left promiscuous mode [ 197.601255][ T12] veth0_vlan: left promiscuous mode [ 197.632118][ T5722] Bluetooth: hci5: command tx timeout [ 197.907917][ T12] team0 (unregistering): Port device team_slave_1 removed [ 197.926723][ T55] usb 8-1: USB disconnect, device number 22 [ 197.931456][ T12] team0 (unregistering): Port device team_slave_0 removed [ 198.059927][T10928] xt_CT: No such helper "netbios-ns" [ 198.168678][ T5432] 8021q: adding VLAN 0 to HW filter on device eth12 [ 198.215677][T10929] syzkaller0: entered promiscuous mode [ 198.217597][T10929] syzkaller0: entered allmulticast mode [ 198.226960][T10936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10936 comm=syz.3.1337 [ 198.696527][ T5722] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 198.745538][ T5722] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 198.762240][ T5722] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 198.768246][ T5722] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 198.772065][ T5722] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 199.701637][ T5721] Bluetooth: hci5: command tx timeout [ 200.556546][ T42] audit: type=1400 audit(2000000119.717:914): avc: denied { write } for pid=10950 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.695925][ T42] audit: type=1400 audit(2000000119.857:915): avc: denied { write } for pid=10960 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.720613][ T12] IPVS: stop unused estimator thread 0... [ 200.792706][T10940] xfrm0 speed is unknown, defaulting to 1000 [ 200.890236][ T5432] 8021q: adding VLAN 0 to HW filter on device eth13 [ 200.982703][ T5721] Bluetooth: hci1: command tx timeout [ 201.119195][ T42] audit: type=1326 audit(2000000120.277:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10986 comm="syz.3.1344" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd5b9e0d9 code=0x7ff00000 [ 201.144169][ T42] audit: type=1326 audit(2000000120.297:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10986 comm="syz.3.1344" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd5b9e0d9 code=0x7ff00000 [ 201.164704][ T42] audit: type=1326 audit(2000000120.297:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10986 comm="syz.3.1344" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd5b9e0d9 code=0x7ff00000 [ 201.177217][ T42] audit: type=1326 audit(2000000120.297:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10986 comm="syz.3.1344" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd5b9e0d9 code=0x7ff00000 [ 201.187179][ T42] audit: type=1326 audit(2000000120.297:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10986 comm="syz.3.1344" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd5b9e0d9 code=0x7ff00000 [ 201.197595][ T42] audit: type=1326 audit(2000000120.297:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10986 comm="syz.3.1344" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd5b9e0d9 code=0x7ff00000 [ 201.198714][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.207257][ T42] audit: type=1326 audit(2000000120.297:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10986 comm="syz.3.1344" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd5b9e0d9 code=0x7ff00000 [ 201.216162][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.220228][ T42] audit: type=1326 audit(2000000120.297:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10986 comm="syz.3.1344" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd5b9e0d9 code=0x7ff00000 [ 201.270115][T10873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.379590][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.384026][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.500670][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.503998][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.550295][T10940] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.553584][T10940] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.555898][T10940] bridge_slave_0: entered allmulticast mode [ 201.558458][T10940] bridge_slave_0: entered promiscuous mode [ 201.569589][T10940] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.572570][T10940] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.575537][T10940] bridge_slave_1: entered allmulticast mode [ 201.578245][T10940] bridge_slave_1: entered promiscuous mode [ 201.631113][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.634776][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.673451][T10940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.695928][T10940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.716132][T10873] veth0_vlan: entered promiscuous mode [ 201.754431][T10873] veth1_vlan: entered promiscuous mode [ 201.760404][T10940] team0: Port device team_slave_0 added [ 201.765857][T10940] team0: Port device team_slave_1 added [ 201.786809][ T5721] Bluetooth: hci5: command tx timeout [ 201.829070][T10940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.837637][T10940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.849555][T10940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.860556][T10940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.864608][T10940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.875835][T10940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.991102][T10873] veth0_macvtap: entered promiscuous mode [ 201.999719][T10873] veth1_macvtap: entered promiscuous mode [ 202.029745][T11025] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1350'. [ 202.074728][T10940] hsr_slave_0: entered promiscuous mode [ 202.078177][T10940] hsr_slave_1: entered promiscuous mode [ 202.136967][T10873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.155487][T11038] futex_wake_op: syz.8.1353 tries to shift op by -1; fix this program [ 203.061459][ T5721] Bluetooth: hci1: command tx timeout [ 203.092955][ T12] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 203.132608][ T12] bond0 (unregistering): Released all slaves [ 203.151440][ T12] bond1 (unregistering): (slave bond2): Releasing backup interface [ 203.155864][ T12] bond1 (unregistering): Released all slaves [ 203.163894][ T12] bond2 (unregistering): Released all slaves [ 203.275090][T10873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.314208][ T12] tipc: Left network mode [ 203.346467][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.354050][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.774216][ T5796] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.778209][ T5432] 8021q: adding VLAN 0 to HW filter on device eth18 [ 203.824472][ T12] veth1_macvtap: left promiscuous mode [ 203.826852][ T12] veth0_macvtap: left promiscuous mode [ 203.829190][ T12] veth1_vlan: left promiscuous mode [ 203.831851][ T12] veth0_vlan: left promiscuous mode [ 203.863637][ T5721] Bluetooth: hci5: command tx timeout [ 204.195560][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.204460][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.281446][ T5797] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.304813][ T8686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.308287][ T8686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.391102][T11086] KVM: debugfs: duplicate directory 11086-5 [ 204.395276][T11082] netlink: 'syz.3.1362': attribute type 4 has an invalid length. [ 204.589129][ T5432] 8021q: adding VLAN 0 to HW filter on device eth19 [ 204.624082][T11094] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 204.702937][ T12] IPVS: stop unused estimator thread 0... [ 204.875125][ T5432] 8021q: adding VLAN 0 to HW filter on device eth20 [ 204.926963][T10940] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 204.931077][T10940] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 204.934170][T10940] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 204.938244][T10940] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 204.941826][T10940] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 204.949916][T10940] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 204.953199][T10940] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 204.973300][T10940] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 204.995040][T11121] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1369'. [ 205.065250][T10940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.077912][T10940] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.084609][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.086913][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.096499][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.098852][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.141484][ T5721] Bluetooth: hci1: command tx timeout [ 205.261476][ T5432] 8021q: adding VLAN 0 to HW filter on device eth21 [ 205.301498][ T55] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 205.407100][T10940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.458640][T10940] veth0_vlan: entered promiscuous mode [ 205.462311][ T55] usb 13-1: Using ep0 maxpacket: 32 [ 205.467569][T10940] veth1_vlan: entered promiscuous mode [ 205.468138][ T55] usb 13-1: unable to get BOS descriptor or descriptor too short [ 205.476337][ T55] usb 13-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 205.483121][ T55] usb 13-1: string descriptor 0 read error: -22 [ 205.487429][ T55] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.499025][T10940] veth0_macvtap: entered promiscuous mode [ 205.507494][T10940] veth1_macvtap: entered promiscuous mode [ 205.512573][ T55] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 205.521429][ T55] dw2102: su3000_power_ctrl: 1, initialized 0 [ 205.528668][ T55] dvb-usb: bulk message failed: -22 (2/0) [ 205.533675][T10940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.553452][T10940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.562147][ T55] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 205.565855][ T55] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 205.568831][ T55] usb 13-1: media controller created [ 205.570786][ T55] dvb-usb: bulk message failed: -22 (6/0) [ 205.576347][ T55] dw2102: i2c transfer failed. [ 205.586292][ T5797] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.586460][ T55] dvb-usb: bulk message failed: -22 (6/0) [ 205.593074][ T55] dw2102: i2c transfer failed. [ 205.596348][ T55] dvb-usb: bulk message failed: -22 (6/0) [ 205.598677][ T55] dw2102: i2c transfer failed. [ 205.600593][ T55] dvb-usb: bulk message failed: -22 (6/0) [ 205.612304][ T55] dw2102: i2c transfer failed. [ 205.614221][ T55] dvb-usb: bulk message failed: -22 (6/0) [ 205.619198][ T55] dw2102: i2c transfer failed. [ 205.620846][ T55] dvb-usb: bulk message failed: -22 (6/0) [ 205.622808][ T55] dw2102: i2c transfer failed. [ 205.624407][ T55] dvb-usb: MAC address: 02:02:02:02:02:02 [ 205.631474][ T55] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 205.649282][ T55] dvb-usb: bulk message failed: -22 (3/0) [ 205.659010][ T55] dw2102: command 0x0e transfer failed. [ 205.662651][ T55] dvb-usb: bulk message failed: -22 (3/0) [ 205.664532][ T55] dw2102: command 0x0e transfer failed. [ 205.675851][ T42] kauditd_printk_skb: 3813 callbacks suppressed [ 205.675867][ T42] audit: type=1400 audit(2000000124.837:4737): avc: denied { write } for pid=11159 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.691504][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.747686][ T42] audit: type=1400 audit(2000000124.907:4738): avc: denied { write } for pid=11166 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.757388][T11163] openvswitch: netlink: Key 26 has unexpected len 4 expected 16 [ 205.761683][ T5797] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.777816][ T5797] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.883677][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.888386][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.912360][T11177] netlink: 'syz.9.1374': attribute type 1 has an invalid length. [ 205.928039][T11176] kvm: pic: level sensitive irq not supported [ 205.930436][ T42] audit: type=1400 audit(2000000125.087:4739): avc: denied { write } for pid=11170 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.981285][ T55] dvb-usb: bulk message failed: -22 (3/0) [ 205.983267][ T55] dw2102: command 0x0e transfer failed. [ 205.987203][ T42] audit: type=1400 audit(2000000125.147:4740): avc: denied { write } for pid=11181 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.997026][ T55] dvb-usb: bulk message failed: -22 (3/0) [ 205.998896][ T55] dw2102: command 0x0e transfer failed. [ 206.001765][ T55] dvb-usb: bulk message failed: -22 (1/0) [ 206.003616][ T55] dw2102: command 0x51 transfer failed. [ 206.013510][T11177] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1374'. [ 206.016574][T11130] dvb-usb: bulk message failed: -22 (5/0) [ 206.031256][ T8686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.031778][T11130] dw2102: i2c transfer failed. [ 206.038356][ T8686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.048841][T11177] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1374'. [ 206.055264][ T55] DVB: Unable to find symbol ds3000_attach() [ 206.057202][ T55] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 206.112812][ T55] rc_core: IR keymap rc-su3000 not found [ 206.114672][ T55] Registered IR keymap rc-empty [ 206.118161][ T42] audit: type=1400 audit(2000000125.277:4741): avc: denied { write } for pid=11185 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.126290][ T55] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0 [ 206.145890][ T55] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0/input24 [ 206.159407][ T55] dvb-usb: schedule remote query interval to 150 msecs. [ 206.166868][ T55] dw2102: su3000_power_ctrl: 0, initialized 1 [ 206.174446][ T55] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 206.177386][ T42] audit: type=1400 audit(2000000125.337:4742): avc: denied { accept } for pid=11190 comm="syz.9.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 206.194729][ T55] usb 13-1: USB disconnect, device number 6 [ 206.206955][ T42] audit: type=1400 audit(2000000125.367:4743): avc: denied { getopt } for pid=11193 comm="syz.2.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 206.252998][T11194] CIFS: Invalid mount helper version specified [ 206.267481][ T42] audit: type=1400 audit(2000000125.428:4744): avc: denied { write } for pid=11197 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.291616][ T55] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 206.357757][ T42] audit: type=1400 audit(2000000125.518:4745): avc: denied { write } for pid=11203 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.406752][T11207] pimreg: entered allmulticast mode [ 206.408897][ T42] audit: type=1400 audit(2000000125.568:4746): avc: denied { write } for pid=11208 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.513605][ T40] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 206.576406][T11227] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 206.587232][T11227] qnx6: wrong signature (magic) in superblock #1. [ 206.589935][T11227] qnx6: unable to read the first superblock [ 206.651269][ T40] usb 14-1: device descriptor read/64, error -71 [ 206.783498][T11249] netlink: 'syz.3.1388': attribute type 178 has an invalid length. [ 206.786249][T11250] netlink: 'syz.3.1388': attribute type 178 has an invalid length. [ 206.818212][T11249] loop5: detected capacity change from 0 to 7 [ 206.830357][T11249] Dev loop5: unable to read RDB block 7 [ 206.837243][T11249] loop5: AHDI p1 p3 p4 [ 206.838627][T11249] loop5: partition table partially beyond EOD, truncated [ 206.846103][T11249] loop5: p1 size 100663296 extends beyond EOD, truncated [ 206.876138][T11249] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 206.889854][T11256] netlink: 'syz.2.1387': attribute type 5 has an invalid length. [ 206.892271][ T40] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 206.916168][T11256] overlayfs: failed to resolve './file1/file0': -20 [ 206.936133][T11266] overlayfs: missing 'workdir' [ 206.969378][ T5729] udevd[5729]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 206.973909][ T6154] udevd[6154]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 207.033037][ T40] usb 14-1: device descriptor read/64, error -71 [ 207.091544][T11277] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1393'. [ 207.143959][ T40] usb usb14-port1: attempt power cycle [ 207.501470][ T40] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 207.521782][ T40] usb 14-1: device descriptor read/8, error -71 [ 207.781334][ T40] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 207.801799][ T40] usb 14-1: device descriptor read/8, error -71 [ 207.921688][ T40] usb usb14-port1: unable to enumerate USB device [ 208.937921][ T5796] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.344425][ T5796] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.429872][ T5796] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.504226][ T5796] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.710998][ T5796] bridge_slave_1: left allmulticast mode [ 209.713528][ T5796] bridge_slave_1: left promiscuous mode [ 209.717001][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.727313][ T5796] bridge_slave_0: left allmulticast mode [ 209.729730][ T5796] bridge_slave_0: left promiscuous mode [ 209.733466][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.740910][ T5796] pimreg: left allmulticast mode [ 209.881831][ T5796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.886201][ T5796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.889843][ T5796] bond0 (unregistering): Released all slaves [ 209.895171][ T5432] 8021q: adding VLAN 0 to HW filter on device eth2 [ 210.104037][ T5432] 8021q: adding VLAN 0 to HW filter on device eth3 [ 210.149464][ T5796] hsr_slave_0: left promiscuous mode [ 210.161433][ T5796] hsr_slave_1: left promiscuous mode [ 210.164522][ T5796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.167634][ T5796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.175616][ T5796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.178707][ T5796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.190758][ T5796] veth1_macvtap: left promiscuous mode [ 210.204199][ T5796] veth0_macvtap: left promiscuous mode [ 210.206705][ T5796] veth1_vlan: left promiscuous mode [ 210.209063][ T5796] veth0_vlan: left promiscuous mode [ 210.390621][ T5796] team0 (unregistering): Port device team_slave_1 removed [ 210.403220][ T5796] team0 (unregistering): Port device team_slave_0 removed [ 210.457252][ T5432] 8021q: adding VLAN 0 to HW filter on device eth4 [ 210.666009][ T5432] 8021q: adding VLAN 0 to HW filter on device eth5 [ 211.312709][ T42] kauditd_printk_skb: 30 callbacks suppressed [ 211.312726][ T42] audit: type=1400 audit(2000000130.478:4777): avc: denied { write } for pid=11324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.354358][ T42] audit: type=1400 audit(2000000130.518:4778): avc: denied { write } for pid=11327 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.655790][ T42] audit: type=1400 audit(2000000130.818:4779): avc: denied { write } for pid=11330 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.722470][ T42] audit: type=1400 audit(2000000130.888:4780): avc: denied { write } for pid=11333 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.276754][ T42] audit: type=1400 audit(2000000132.438:4781): avc: denied { write } for pid=11336 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.338236][ T42] audit: type=1400 audit(2000000132.498:4782): avc: denied { write } for pid=11339 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.353050][ T42] audit: type=1400 audit(2000000133.518:4783): avc: denied { write } for pid=11342 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.422717][ T42] audit: type=1400 audit(2000000133.588:4784): avc: denied { write } for pid=11345 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.928706][ T42] audit: type=1400 audit(2000000136.088:4785): avc: denied { write } for pid=11348 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.968244][ T42] audit: type=1400 audit(2000000136.128:4786): avc: denied { write } for pid=11351 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.325654][ T42] audit: type=1400 audit(2000000137.488:4787): avc: denied { write } for pid=11355 comm="syz.8.1395" name="/" dev="9p" ino=77361223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 218.382622][T11362] ieee802154 phy0 wpan0: encryption failed: -22 [ 218.444496][ T5722] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.453387][ T5722] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.458420][ T5722] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.463155][ T5722] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.472880][ T5722] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 218.475819][T11360] syzkaller0: entered promiscuous mode [ 218.480714][T11360] syzkaller0: entered allmulticast mode [ 218.541468][T11376] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1400'. [ 218.582038][ T42] audit: type=1400 audit(2000000137.738:4788): avc: denied { write } for pid=11379 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.670015][ T42] audit: type=1400 audit(2000000137.838:4789): avc: denied { write } for pid=11385 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.738931][T11390] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1403'. [ 218.762174][ T42] audit: type=1400 audit(2000000137.928:4790): avc: denied { setopt } for pid=11389 comm="syz.9.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 218.811163][T11394] netlink: 'syz.9.1404': attribute type 1 has an invalid length. [ 220.505285][ T5721] Bluetooth: hci1: command tx timeout [ 220.514307][T11394] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 220.522653][T11395] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 220.608354][ T42] audit: type=1400 audit(2000000139.768:4791): avc: denied { write } for pid=11403 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.666893][ T42] audit: type=1400 audit(2000000139.828:4792): avc: denied { write } for pid=11416 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.716046][T11369] xfrm0 speed is unknown, defaulting to 1000 [ 220.724002][T11421] xt_hl: Unknown TTL match mode: 255 [ 220.845170][ T42] audit: type=1400 audit(2000000140.008:4793): avc: denied { write } for pid=11423 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.961619][ T42] audit: type=1400 audit(2000000140.118:4794): avc: denied { write } for pid=11434 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.042209][ T5722] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 221.052771][T11441] binder: 11440:11441 ioctl 4018620d 0 returned -22 [ 221.055720][ T5722] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 221.060110][ T5722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 221.064149][T11441] binder_alloc: binder_alloc_mmap_handler: 11440 200000fff000-200001000000 already mapped failed -16 [ 221.071718][ T5722] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 221.074594][ T5722] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 221.139637][T11369] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.142043][T11369] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.144994][T11369] bridge_slave_0: entered allmulticast mode [ 221.153739][T11369] bridge_slave_0: entered promiscuous mode [ 221.196929][T11369] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.199204][T11369] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.205644][T11369] bridge_slave_1: entered allmulticast mode [ 221.214386][T11369] bridge_slave_1: entered promiscuous mode [ 221.234187][T11369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.238554][T11369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.266702][T11369] team0: Port device team_slave_0 added [ 221.269853][T11369] team0: Port device team_slave_1 added [ 221.285638][T11369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.287931][T11369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.296377][T11369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.301214][T11369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.303445][T11369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.312369][T11369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.413473][T11369] hsr_slave_0: entered promiscuous mode [ 221.418823][T11369] hsr_slave_1: entered promiscuous mode [ 221.444714][T11442] xfrm0 speed is unknown, defaulting to 1000 [ 221.571850][T11475] xt_hashlimit: size too large, truncated to 1048576 [ 221.806764][T11442] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.809130][T11442] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.811720][T11442] bridge_slave_0: entered allmulticast mode [ 221.814415][T11442] bridge_slave_0: entered promiscuous mode [ 221.817844][T11442] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.820138][T11442] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.822441][T11442] bridge_slave_1: entered allmulticast mode [ 221.825071][T11442] bridge_slave_1: entered promiscuous mode [ 221.846214][T11490] EXT4-fs (nbd3): unable to read superblock [ 221.956166][T11442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.963037][T11442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.969230][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 221.969247][ T42] audit: type=1400 audit(2000000141.128:4806): avc: denied { write } for pid=11504 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.986718][T11442] team0: Port device team_slave_0 added [ 221.995518][T11442] team0: Port device team_slave_1 added [ 222.019094][ T42] audit: type=1400 audit(2000000141.178:4807): avc: denied { write } for pid=11507 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.033736][T11442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.039460][T11442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.048991][T11442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.054197][T11442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.056944][T11442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.065481][T11442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.074142][T11492] SELinux: context truncated [ 222.075799][T11492] SELinux: invalid ocon [ 222.098719][ T42] audit: type=1400 audit(2000000141.258:4808): avc: denied { write } for pid=11509 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.146741][ T42] audit: type=1400 audit(2000000141.308:4809): avc: denied { write } for pid=11514 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.166410][T11442] hsr_slave_0: entered promiscuous mode [ 222.168741][T11442] hsr_slave_1: entered promiscuous mode [ 222.171619][T11442] debugfs: 'hsr0' already exists in 'hsr' [ 222.175693][T11442] Cannot create hsr debugfs directory [ 222.197121][T11492] SELinux: failed to load policy [ 222.244247][ T42] audit: type=1400 audit(2000000141.408:4810): avc: denied { write } for pid=11516 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.294339][ T42] audit: type=1400 audit(2000000141.458:4811): avc: denied { write } for pid=11526 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.401163][ T42] audit: type=1400 audit(2000000141.558:4812): avc: denied { write } for pid=11533 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.497548][ T42] audit: type=1400 audit(2000000141.658:4813): avc: denied { write } for pid=11539 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.562187][T11369] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 222.569538][T11369] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 222.575526][T11369] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 222.583513][ T5721] Bluetooth: hci1: command tx timeout [ 222.585983][T11369] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 222.610051][ T42] audit: type=1400 audit(2000000141.768:4814): avc: denied { write } for pid=11548 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.622876][T11369] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 222.630365][T11369] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 222.740507][ T42] audit: type=1400 audit(2000000141.898:4815): avc: denied { write } for pid=11551 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.798403][T11369] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 222.811965][T11369] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 222.956015][T11567] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1432'. [ 222.997695][T11369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.019251][T11369] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.061050][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.063734][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.076538][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.078842][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.145076][ T5721] Bluetooth: hci2: command tx timeout [ 223.499293][T11597] syzkaller0: entered promiscuous mode [ 223.503421][T11597] syzkaller0: entered allmulticast mode [ 223.514003][T11442] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 223.543966][T11442] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 224.660332][ T5721] Bluetooth: hci1: command tx timeout [ 225.223340][ T5721] Bluetooth: hci2: command tx timeout [ 225.408601][T11442] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 225.417727][T11442] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 225.421575][T11442] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 225.427041][T11442] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 225.438660][T11442] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 225.446117][T11442] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 225.453203][T11369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.568306][T11369] veth0_vlan: entered promiscuous mode [ 225.626338][T11369] veth1_vlan: entered promiscuous mode [ 225.702578][T11369] veth0_macvtap: entered promiscuous mode [ 225.709034][T11369] veth1_macvtap: entered promiscuous mode [ 225.719637][T11442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.727816][T11369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.742400][T11369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.758523][T11442] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.767408][ T5797] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.785792][ T1255] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.788533][ T1255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.819417][ T1255] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.822314][ T1255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.830425][ T5797] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.850849][T11641] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input26 [ 225.851038][ T5797] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.920122][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.994731][T11442] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 226.000592][T11442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 226.047621][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.059375][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.093974][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.102418][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.244596][T11669] syzkaller0: entered promiscuous mode [ 226.246379][T11669] syzkaller0: entered allmulticast mode [ 226.577319][T11694] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1449'. [ 226.750659][ T5721] Bluetooth: hci1: command tx timeout [ 227.300542][ T5721] Bluetooth: hci2: command tx timeout [ 228.278306][T11698] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1450'. [ 228.319826][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 228.319838][ T42] audit: type=1400 audit(2000000147.479:4834): avc: denied { write } for pid=11699 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.330953][T11703] Failed to get privilege flags for destination (handle=0x2:0x1) [ 228.379972][ T42] audit: type=1400 audit(2000000147.539:4835): avc: denied { write } for pid=11709 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.402986][T11442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.480614][T11442] veth0_vlan: entered promiscuous mode [ 228.483221][ T42] audit: type=1400 audit(2000000147.639:4836): avc: denied { ioctl } for pid=11721 comm="syz.9.1456" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 228.498496][T11442] veth1_vlan: entered promiscuous mode [ 228.526558][ T42] audit: type=1400 audit(2000000147.689:4837): avc: denied { write } for pid=11720 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.528571][T11722] syzkaller0: entered promiscuous mode [ 228.540235][T11722] syzkaller0: entered allmulticast mode [ 228.588397][ T42] audit: type=1400 audit(2000000147.749:4838): avc: denied { write } for pid=11728 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.687299][ T42] audit: type=1400 audit(2000000147.849:4839): avc: denied { write } for pid=11732 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.739936][ T42] audit: type=1400 audit(2000000147.899:4840): avc: denied { write } for pid=11737 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.792350][ T3261] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 228.942355][ T3261] usb 8-1: Using ep0 maxpacket: 8 [ 228.945074][ T3261] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 228.971218][ T3261] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 228.975441][ T3261] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.991437][ T3261] usb 8-1: config 0 descriptor?? [ 229.214278][ T3261] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 229.234544][ T3261] usb 8-1: USB disconnect, device number 23 [ 229.381364][ T5721] Bluetooth: hci2: command tx timeout [ 230.566766][T11744] netlink: 'syz.3.1459': attribute type 12 has an invalid length. [ 230.571057][T11744] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1459'. [ 230.627901][ T42] audit: type=1400 audit(2000000149.789:4841): avc: denied { write } for pid=11747 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.672390][T11442] veth0_macvtap: entered promiscuous mode [ 230.689277][T11442] veth1_macvtap: entered promiscuous mode [ 230.721780][T11442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.736710][T11442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.772125][ T42] audit: type=1400 audit(2000000149.939:4842): avc: denied { write } for pid=11758 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.828552][T11771] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 230.828552][T11771] Please contact the netfilter-devel mailing list or update your nftables rules. [ 230.891904][ T5796] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.895431][ T5796] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.898914][ T5796] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.902504][ T5796] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.913006][ T42] audit: type=1400 audit(2000000150.079:4843): avc: denied { setopt } for pid=11774 comm="syz.9.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 231.020700][ T8686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.025269][ T8686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.071569][T11787] netlink: 'syz.9.1468': attribute type 1 has an invalid length. [ 231.100003][T11787] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.118028][T11787] bond1: (slave gretap1): making interface the new active one [ 231.123072][T11787] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 231.153494][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.168442][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.415289][T11798] binder: BC_ACQUIRE_RESULT not supported [ 231.419796][T11798] binder: 11797:11798 ioctl c0306201 2000000003c0 returned -22 [ 231.556953][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1470'. [ 231.586963][T11805] syzkaller0: entered promiscuous mode [ 231.588824][T11805] syzkaller0: entered allmulticast mode [ 231.602851][T11765] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 232.006034][T11820] ima: policy update failed [ 232.347637][T11829] openvswitch: netlink: Actions may not be safe on all matching packets [ 233.716011][T11839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1480'. [ 233.737306][T11838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1480'. [ 233.794629][T11845] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1483'. [ 233.814471][T11853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.862418][T11859] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 233.866965][T11859] ref_ctr increment failed for inode: 0x8f9 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88801c0c8000 [ 233.882227][T11859] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 233.888506][T11859] ref_ctr decrement failed for inode: 0x8f9 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88801c0c8000 [ 233.894271][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 233.894286][ T42] audit: type=1400 audit(2000000153.059:4850): avc: denied { create } for pid=11856 comm="syz.9.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 233.900278][T11859] uprobe: syz.3.1485:11859 failed to unregister, leaking uprobe [ 234.053666][T11873] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 234.082465][T11857] syz.9.1486 (11857): drop_caches: 2 [ 234.114715][T11870] lo: entered allmulticast mode [ 234.168973][T11878] usb 1-1: USB disconnect, device number 2 [ 234.503353][T11882] syzkaller0: entered promiscuous mode [ 234.505178][T11882] syzkaller0: entered allmulticast mode [ 234.526512][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1494'. [ 234.933852][T11876] orangefs_mount: mount request failed with -4 [ 235.001104][ T42] audit: type=1400 audit(2000000154.159:4851): avc: denied { read } for pid=11889 comm="syz.0.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 235.089086][T11894] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 5 [ 236.632660][T11897] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1497'. [ 236.776172][ T42] audit: type=1400 audit(2000000155.939:4852): avc: denied { audit_write } for pid=11911 comm="syz.3.1499" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 236.778099][T11907] can0: slcan on ttyS3. [ 236.890501][T11907] can0 (unregistered): slcan off ttyS3. [ 236.903578][ T42] audit: type=1400 audit(2000000156.069:4853): avc: denied { mounton } for pid=11919 comm="syz.9.1503" path="/50/bus" dev="tmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 236.909679][T11920] /dev/sg0: Can't lookup blockdev [ 236.914428][T11920] CacheFiles: Empty directory specified [ 236.981529][T11924] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1505'. [ 237.025431][T11926] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1506'. [ 237.035958][T11926] tipc: Started in network mode [ 237.037621][T11926] tipc: Node identity 1000001, cluster identity 4369 [ 237.040877][T11926] tipc: Node number set to 16777217 [ 237.043197][T11926] tipc: Cannot configure node identity twice [ 237.202877][T11933] syzkaller0: entered promiscuous mode [ 237.204691][T11933] syzkaller0: entered allmulticast mode [ 237.299596][T11943] trusted_key: encrypted_key: master key parameter '' is invalid [ 237.351948][T11943] 9p: Bad value for 'wfdno' [ 237.499636][T11951] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 239.819079][T11973] x_tables: duplicate underflow at hook 3 [ 239.901233][ T5868] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 240.021711][T11983] trusted_key: encrypted_key: hex blob is missing [ 240.049391][ T5868] usb 7-1: Using ep0 maxpacket: 8 [ 240.053497][ T5868] usb 7-1: New USB device found, idVendor=b78d, idProduct=7f8c, bcdDevice=8d.95 [ 240.059176][ T5868] usb 7-1: too many configurations: 247, using maximum allowed: 8 [ 240.073399][ T5868] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 240.078636][ T5868] usb 7-1: can't read configurations, error -61 [ 240.133108][ T5796] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x69 [ 240.142190][T11983] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1525'. [ 240.181529][T11999] EXT4-fs (nbd0): unable to read superblock [ 240.211466][ T5868] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 240.328228][ T42] audit: type=1400 audit(2000000003.140:4854): avc: denied { accept } for pid=12000 comm="syz.0.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 240.337411][ T42] audit: type=1400 audit(2000000003.140:4855): avc: denied { read } for pid=12000 comm="syz.0.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 240.369564][ T5868] usb 7-1: Using ep0 maxpacket: 8 [ 240.374126][ T5868] usb 7-1: New USB device found, idVendor=b78d, idProduct=7f8c, bcdDevice=8d.95 [ 240.377797][ T5868] usb 7-1: too many configurations: 247, using maximum allowed: 8 [ 240.381988][ T5868] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 240.384530][ T5868] usb 7-1: can't read configurations, error -61 [ 240.386818][ T5868] usb usb7-port1: attempt power cycle [ 240.492582][T12025] binfmt_misc: register: failed to install interpreter ./file0 [ 240.614806][ T3261] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 240.642409][T12034] ceph: No mds server is up or the cluster is laggy [ 240.719379][ T5868] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 240.728815][T12043] binder: 12042:12043 ioctl 125e 200000000000 returned -22 [ 240.740951][ T5868] usb 7-1: Using ep0 maxpacket: 8 [ 240.743412][ T5868] usb 7-1: New USB device found, idVendor=b78d, idProduct=7f8c, bcdDevice=8d.95 [ 240.746391][ T5868] usb 7-1: too many configurations: 247, using maximum allowed: 8 [ 240.751117][ T5868] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 240.753805][ T5868] usb 7-1: can't read configurations, error -61 [ 240.778781][ T42] audit: type=1400 audit(2000000003.590:4856): avc: denied { ioctl } for pid=12047 comm="syz.3.1541" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 240.830371][T12048] e100 0000:00:03.0: PCI INT A: failed to register GSI [ 240.835190][T12048] 0000:00:03.0 (uninitialized): Cannot enable PCI device, aborting [ 240.849513][T12048] e100 0000:00:03.0: probe with driver e100 failed with error -16 [ 240.854896][ T42] audit: type=1400 audit(2000000003.670:4857): avc: denied { watch } for pid=12049 comm="syz.0.1542" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 240.879884][ T5868] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 240.900487][ T5868] usb 7-1: Using ep0 maxpacket: 8 [ 240.902569][ T5868] usb 7-1: New USB device found, idVendor=b78d, idProduct=7f8c, bcdDevice=8d.95 [ 240.905504][ T5868] usb 7-1: too many configurations: 247, using maximum allowed: 8 [ 240.909792][ T5868] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 240.912844][ T5868] usb 7-1: can't read configurations, error -61 [ 240.915408][ T5868] usb usb7-port1: unable to enumerate USB device [ 241.044729][T12061] overlay: filesystem on ./bus not supported [ 241.467492][T12081] syzkaller0: entered promiscuous mode [ 241.470032][T12081] syzkaller0: entered allmulticast mode [ 242.906280][T12089] netlink: NAT attribute has 8 unknown bytes [ 242.908264][T12089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.005785][T12089] md: loop0 has zero or unknown size, marking faulty! [ 243.010962][T12089] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1552'. [ 243.014354][T12089] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 243.028196][ T42] audit: type=1400 audit(2000000005.840:4858): avc: denied { create } for pid=12085 comm="syz.2.1551" name="dwMaxVideoFrameBufferSize" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 243.028907][T12086] [ 243.037228][T12086] ====================================================== [ 243.039454][T12086] WARNING: possible circular locking dependency detected [ 243.041644][T12086] syzkaller #0 Tainted: G L [ 243.043965][T12086] ------------------------------------------------------ [ 243.046157][T12086] syz.2.1551/12086 is trying to acquire lock: [ 243.048070][T12086] ffffffff903d98c8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_frame_dw_max_video_frame_buffer_size_store+0x12d/0x370 [ 243.052036][T12086] [ 243.052036][T12086] but task is already holding lock: [ 243.054333][T12086] ffff88803475a270 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 243.057242][T12086] [ 243.057242][T12086] which lock already depends on the new lock. [ 243.057242][T12086] [ 243.060673][T12086] [ 243.060673][T12086] the existing dependency chain (in reverse order) is: [ 243.063526][T12086] [ 243.063526][T12086] -> #3 (&p->frag_sem){++++}-{4:4}: [ 243.065865][T12086] lock_acquire+0x1b9/0x370 [ 243.067533][T12086] down_write_killable+0x93/0x240 [ 243.069336][T12086] configfs_rmdir+0x3fa/0x950 [ 243.071306][T12086] vfs_rmdir+0x328/0x8a0 [ 243.073178][T12086] filename_rmdir+0x31a/0x5c0 [ 243.074983][T12086] __x64_sys_unlinkat+0xf5/0x130 [ 243.076686][T12086] do_syscall_64+0x123/0x790 [ 243.078283][T12086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.080289][T12086] [ 243.080289][T12086] -> #2 (&sb->s_type->i_mutex_key#27){++++}-{4:4}: [ 243.082942][T12086] lock_acquire+0x1b9/0x370 [ 243.084546][T12086] down_write+0x8b/0x1f0 [ 243.086033][T12086] configfs_depend_item_unlocked+0xf3/0x6a0 [ 243.088022][T12086] usbg_make_tpg+0x261/0x620 [ 243.089606][T12086] target_fabric_make_tpg+0xab/0x8c0 [ 243.091463][T12086] configfs_mkdir+0x51e/0xb70 [ 243.093066][T12086] vfs_mkdir+0x364/0x850 [ 243.094566][T12086] filename_mkdirat+0x48b/0x5e0 [ 243.096250][T12086] __x64_sys_mkdir+0x6b/0x90 [ 243.097852][T12086] do_syscall_64+0x123/0x790 [ 243.099462][T12086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.101448][T12086] [ 243.101448][T12086] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 243.103806][T12086] lock_acquire+0x1b9/0x370 [ 243.105558][T12086] __mutex_lock+0x1a4/0x1bc0 [ 243.107381][T12086] tcm_set_name+0x29/0xb0 [ 243.109130][T12086] function_make+0x21c/0x3f0 [ 243.111100][T12086] configfs_mkdir+0x51e/0xb70 [ 243.112950][T12086] vfs_mkdir+0x364/0x850 [ 243.114481][T12086] filename_mkdirat+0x48b/0x5e0 [ 243.116200][T12086] __x64_sys_mkdir+0x6b/0x90 [ 243.118097][T12086] do_syscall_64+0x123/0x790 [ 243.119946][T12086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.122221][T12086] [ 243.122221][T12086] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 243.124776][T12086] check_prev_add+0xeb/0xe60 [ 243.126386][T12086] __lock_acquire+0x1492/0x1ec0 [ 243.128064][T12086] lock_acquire+0x1b9/0x370 [ 243.129440][ T42] audit: type=1400 audit(2000000005.840:4859): avc: denied { write } for pid=5705 comm="syz-executor" path="pipe:[7245]" dev="pipefs" ino=7245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 243.129633][T12086] __mutex_lock+0x1a4/0x1bc0 [ 243.138475][T12086] uvcg_frame_dw_max_video_frame_buffer_size_store+0x12d/0x370 [ 243.140907][T12086] configfs_write_iter+0x302/0x4e0 [ 243.142684][T12086] vfs_write+0x6af/0x1050 [ 243.144223][T12086] ksys_write+0x12a/0x250 [ 243.145745][T12086] do_syscall_64+0x123/0x790 [ 243.147348][T12086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.149363][T12086] [ 243.149363][T12086] other info that might help us debug this: [ 243.149363][T12086] [ 243.152535][T12086] Chain exists of: [ 243.152535][T12086] gadget_subsys.su_mutex --> &sb->s_type->i_mutex_key#27 --> &p->frag_sem [ 243.152535][T12086] [ 243.156953][T12086] Possible unsafe locking scenario: [ 243.156953][T12086] [ 243.159280][T12086] CPU0 CPU1 [ 243.160894][T12086] ---- ---- [ 243.162512][T12086] rlock(&p->frag_sem); [ 243.163855][T12086] lock(&sb->s_type->i_mutex_key#27); [ 243.166323][T12086] lock(&p->frag_sem); [ 243.168395][T12086] lock(gadget_subsys.su_mutex); [ 243.169969][T12086] [ 243.169969][T12086] *** DEADLOCK *** [ 243.169969][T12086] [ 243.172483][T12086] locks held by syz.2.1551/12086: 4, last CPU#3: [ 243.174894][T12086] #0: ffff8880137f7b30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 243.178007][T12086] #1: ffff888023fc6460 (sb_writers#15){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 243.180801][T12086] #2: ffff88804a958880 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 243.183837][T12086] #3: ffff88803475a270 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 243.186826][T12086] [ 243.186826][T12086] stack backtrace: [ 243.188689][T12086] CPU: 3 UID: 0 PID: 12086 Comm: syz.2.1551 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.188705][T12086] Tainted: [L]=SOFTLOCKUP [ 243.188710][T12086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 243.188716][T12086] Call Trace: [ 243.188728][T12086] [ 243.188737][T12086] dump_stack_lvl+0x100/0x190 [ 243.188763][T12086] print_circular_bug.cold+0x178/0x1be [ 243.188782][T12086] check_noncircular+0x146/0x160 [ 243.188799][T12086] check_prev_add+0xeb/0xe60 [ 243.188815][T12086] __lock_acquire+0x1492/0x1ec0 [ 243.188834][T12086] lock_acquire+0x1b9/0x370 [ 243.188849][T12086] ? uvcg_frame_dw_max_video_frame_buffer_size_store+0x12d/0x370 [ 243.188871][T12086] ? __pfx___might_resched+0x10/0x10 [ 243.188887][T12086] __mutex_lock+0x1a4/0x1bc0 [ 243.188899][T12086] ? uvcg_frame_dw_max_video_frame_buffer_size_store+0x12d/0x370 [ 243.188918][T12086] ? uvcg_frame_dw_max_video_frame_buffer_size_store+0x12d/0x370 [ 243.188938][T12086] ? _kstrtoull+0x13c/0x1f0 [ 243.188959][T12086] ? __pfx__kstrtoull+0x10/0x10 [ 243.188971][T12086] ? __pfx___mutex_lock+0x10/0x10 [ 243.188981][T12086] ? __might_fault+0xc5/0x140 [ 243.188994][T12086] ? __pfx_kstrtouint+0x10/0x10 [ 243.189007][T12086] ? __pfx___might_resched+0x10/0x10 [ 243.189022][T12086] ? uvcg_frame_dw_max_video_frame_buffer_size_store+0x12d/0x370 [ 243.189042][T12086] uvcg_frame_dw_max_video_frame_buffer_size_store+0x12d/0x370 [ 243.189062][T12086] ? __pfx_uvcg_frame_dw_max_video_frame_buffer_size_store+0x10/0x10 [ 243.189083][T12086] ? configfs_write_iter+0x388/0x4e0 [ 243.189099][T12086] configfs_write_iter+0x302/0x4e0 [ 243.189116][T12086] vfs_write+0x6af/0x1050 [ 243.189131][T12086] ? __pfx_configfs_write_iter+0x10/0x10 [ 243.189147][T12086] ? __pfx_vfs_write+0x10/0x10 [ 243.189156][T12086] ? find_held_lock+0x2b/0x80 [ 243.189172][T12086] ksys_write+0x12a/0x250 [ 243.189181][T12086] ? __pfx_ksys_write+0x10/0x10 [ 243.189193][T12086] do_syscall_64+0x123/0x790 [ 243.189204][T12086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.189215][T12086] RIP: 0033:0x7f2fd859e0d9 [ 243.189225][T12086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.189237][T12086] RSP: 002b:00007f2fd9537028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 243.189255][T12086] RAX: ffffffffffffffda RBX: 00007f2fd8825fa0 RCX: 00007f2fd859e0d9 [ 243.189262][T12086] RDX: 0000000000000004 RSI: 00002000000006c0 RDI: 0000000000000007 [ 243.189268][T12086] RBP: 00007f2fd8635024 R08: 0000000000000000 R09: 0000000000000000 [ 243.189275][T12086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.189281][T12086] R13: 00007f2fd8826038 R14: 00007f2fd8825fa0 R15: 00007fffce6dbe28 [ 243.189291][T12086] [ 243.307542][ T5717] process 6418 (syz.3.191) no longer affine to cpu1 [ 243.926239][T12088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1552'. [ 243.954211][ T42] audit: type=1400 audit(2000000006.770:4860): avc: denied { write } for pid=12091 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.005135][ T42] audit: type=1400 audit(2000000006.820:4861): avc: denied { write } for pid=12094 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.076409][ T42] audit: type=1400 audit(2000000006.890:4862): avc: denied { write } for pid=12096 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.114056][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.279303][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.341892][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.422579][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.497301][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.555519][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.615167][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.646618][ T5432] 8021q: adding VLAN 0 to HW filter on device eth2 [ 244.662847][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.735289][ T12] bridge_slave_1: left allmulticast mode [ 244.737201][ T12] bridge_slave_1: left promiscuous mode [ 244.741453][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.745337][ T12] bridge_slave_0: left allmulticast mode [ 244.747213][ T12] bridge_slave_0: left promiscuous mode [ 244.749311][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.754265][ T12] bridge_slave_1: left allmulticast mode [ 244.756168][ T12] bridge_slave_1: left promiscuous mode [ 244.758089][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.761384][ T12] bridge_slave_0: left allmulticast mode [ 244.763245][ T12] bridge_slave_0: left promiscuous mode [ 244.765163][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.826305][ T12] bond1 (unregistering): (slave gretap1): Releasing active interface [ 244.838329][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.843932][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.848492][ T12] bond0 (unregistering): Released all slaves [ 244.860666][ T12] bond1 (unregistering): Released all slaves [ 244.894285][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.898087][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.903164][ T12] bond0 (unregistering): Released all slaves [ 244.906600][ T5432] 8021q: adding VLAN 0 to HW filter on device eth4 [ 245.061426][ T5432] 8021q: adding VLAN 0 to HW filter on device eth3 [ 245.211773][ T5432] 8021q: adding VLAN 0 to HW filter on device eth5 [ 245.300954][ T12] hsr_slave_0: left promiscuous mode [ 245.304394][ T12] hsr_slave_1: left promiscuous mode [ 245.307489][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.312784][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.316990][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.320643][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.328357][ T12] hsr_slave_0: left promiscuous mode [ 245.331638][ T12] hsr_slave_1: left promiscuous mode [ 245.334626][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.338113][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.344072][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.348287][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.360189][ T12] veth1_macvtap: left promiscuous mode [ 245.362906][ T12] veth0_macvtap: left promiscuous mode [ 245.365553][ T12] veth1_vlan: left promiscuous mode [ 245.367967][ T12] veth0_vlan: left promiscuous mode [ 245.372670][ T12] veth1_macvtap: left promiscuous mode [ 245.375281][ T12] veth0_macvtap: left promiscuous mode [ 245.377819][ T12] veth1_vlan: left promiscuous mode [ 245.381523][ T12] veth0_vlan: left promiscuous mode [ 245.475082][ T12] team0 (unregistering): Port device team_slave_1 removed [ 245.482502][ T12] team0 (unregistering): Port device team_slave_0 removed [ 245.553550][ T12] team0 (unregistering): Port device team_slave_1 removed [ 245.560791][ T12] team0 (unregistering): Port device team_slave_0 removed [ 245.602417][ T5432] 8021q: adding VLAN 0 to HW filter on device eth6 [ 245.689009][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 245.689022][ T42] audit: type=1400 audit(2000000008.490:4876): avc: denied { write } for pid=12138 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.731994][ T42] audit: type=1400 audit(2000000008.550:4877): avc: denied { write } for pid=12141 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.784316][ T5432] 8021q: adding VLAN 0 to HW filter on device eth7 [ 245.840228][ T42] audit: type=1400 audit(2000000008.660:4878): avc: denied { write } for pid=12144 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.877463][ T42] audit: type=1400 audit(2000000008.690:4879): avc: denied { write } for pid=12147 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.906656][ T5432] 8021q: adding VLAN 0 to HW filter on device eth8 [ 245.981217][ T42] audit: type=1400 audit(2000000008.800:4880): avc: denied { write } for pid=12150 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.026390][ T42] audit: type=1400 audit(2000000008.840:4881): avc: denied { write } for pid=12153 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.061369][ T5432] 8021q: adding VLAN 0 to HW filter on device eth9