last executing test programs: 2m35.751271579s ago: executing program 1 (id=2): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x40d000, 0x0) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001640)={&(0x7f0000000380)={0x12b4, 0x0, 0x5, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x2}, 0x4, 0x6, 0x1, 0xfff, 0x1e, 'syz1\x00', "e0477736eb187eb1d2862838da048dbb005ae6b928215bbbd7218e69a276000b", "f1d100b4cdf1ed4e240b81fd43c75d488d01e3b3eca8d26687e42ee83ba1d246", [{0x2, 0x2, {0x0, 0x6}}, {0xd, 0x800, {0x0, 0xfffffbff}}, {0x7, 0x0, {0x2, 0x2}}, {0xb, 0x0, {0x0, 0xe}}, {0x1, 0x81, {0x2, 0x3}}, {0xfab1, 0x2, {0x0, 0x9}}, {0x3, 0x7, {0x1, 0x6}}, {0x1, 0xa, {0x0, 0xe}}, {0x4, 0xdce, {0x3, 0x9}}, {0xfff, 0x0, {0x3, 0x6}}, {0x7, 0x100, {0x1, 0x5}}, {0x8, 0x2, {0x2, 0xa}}, {0x4, 0x200, {0x3, 0x3}}, {0x40, 0x4, {0x3, 0xed5c}}, {0x5, 0x1, {0x2, 0x8f1}}, {0x573, 0x1, {0x2, 0x5}}, {0x6, 0x5, {0x0, 0xdbce}}, {0x5c, 0xff, {0x1, 0x8}}, {0xf77, 0x7, {0x1, 0x4}}, {0x0, 0x0, {0x0, 0x1000}}, {0xd99, 0x7}, {0xe, 0x2, {0x1, 0x5a}}, {0xfff, 0x1, {0x2, 0x3e3d}}, {0x6, 0x6, {0x3, 0xf8}}, {0x3, 0xf000, {0x3, 0x100}}, {0x1, 0x3, {0x0, 0x200}}, {0x1, 0x2, {0x1, 0xee}}, {0x81, 0xf, {0x3, 0x5}}, {0x401, 0x42d, {0x2}}, {0x72, 0x2, {0x1, 0x210}}, {0x900, 0x2, {0x2, 0x9}}, {0x401, 0x101, {0x3, 0xbba0}}, {0x688, 0x50f5, {0x1, 0x9}}, {0x2, 0x2, {0x3, 0x1f}}, {0x5, 0xffff, {0x0, 0x98ea}}, {0x555f, 0xfffe, {0x1, 0x1000}}, {0x1, 0x8, {0x3, 0x3}}, {0x7f, 0xf, {0x1, 0x3}}, {0x61a, 0xc, {0x1, 0x7ff}}, {0x9, 0x4, {0x2, 0x6}}]}}}, {{0x254, 0x1, {{0x0, 0x6}, 0x8, 0x9, 0x3092, 0x6, 0xb, 'syz0\x00', "c5bd80c7fc1761f298bb2782b5ea36e80404d933d616395839c4cd1c613c010e", "883033b804230478b6337a926d3111ad9710fb32c9056f29df53fdadd8f351c9", [{0x100, 0x6, {0x2, 0x3b8}}, {0x7, 0x9, {0x1, 0x7f}}, {0xcad, 0x572, {0x0, 0xd8c0}}, {0x5, 0x5, {0x3, 0x1ad}}, {0x3, 0x7d, {0x3, 0x6}}, {0x9, 0x2, {0x0, 0x6}}, {0x3, 0x2, {0x1, 0x3}}, {0x6, 0x1, {0x3, 0x7}}, {0xa1, 0x2, {0x1, 0xc}}, {0x5, 0x0, {0x3, 0x8}}, {0xf, 0xca0, {0x3, 0x6}}, {0x0, 0x9, {0x2, 0xc74d}}, {0x9, 0x2, {0x0, 0x10}}, {0xd, 0x79, {0x1, 0xa}}, {0x3, 0x5, {0x2, 0x7}}, {0x9fc, 0x1, {0x1, 0x3ff}}, {0xc, 0xf536, {0x1, 0x1}}, {0x3, 0xc24, {0x2, 0x7}}, {0x3ff, 0x7ff, {0x3, 0x80}}, {0x8, 0x2000, {0x0, 0x6}}, {0x0, 0x1, {0x3, 0x6}}, {0xcb, 0x8800, {0x0, 0x3}}, {0xffff, 0x3, {0x0, 0x4}}, {0x2, 0x9, {0x3, 0x1ff}}, {0x4, 0x451, {0x3, 0x8}}, {0xff, 0x6, {0x2}}, {0x3ff, 0x7ff, {0x2, 0xca}}, {0x9, 0x6, {0x1, 0x7}}, {0x0, 0x8, {0x2, 0x5a9}}, {0x4, 0x9, {0x0, 0x9548}}, {0xf4, 0x7, {0x0, 0x2}}, {0xd9e3, 0x6, {0x0, 0x4}}, {0x0, 0x3, {0x1, 0x9}}, {0x5, 0x7, {0x1, 0x7}}, {0x3, 0x2, {0x2, 0x58fc}}, {0x3, 0x32, {0x3, 0x9}}, {0x101, 0xff8, {0x0, 0xc276}}, {0x8, 0x9, {0x2, 0x6e}}, {0x7, 0x1, {0x3, 0xc219}}, {0x101, 0x8000, {0x3, 0xc00000}}]}}}, {{0x254, 0x1, {{0x2, 0x5}, 0x55, 0x4d, 0x800, 0x9, 0x10, 'syz1\x00', "2d8143fd8d7a8c3718deaf3e350008a7a4d2e23a6fba957dfc9630681b07d1a7", "df546960eb68320fbd04b401c1545277ccad89b9b0c6e1fa05ef33b5fdb37095", [{0x5, 0x3, {0x2, 0x2}}, {0xa1, 0x9, {0x3, 0x5}}, {0xe, 0x101, {0x0, 0x7}}, {0x9, 0x7fff, {0x0, 0x2}}, {0xfffd, 0x8000, {0x0, 0x5}}, {0xffff, 0x2, {0x1, 0xb107}}, {0xff2a, 0x5, {0x1, 0x8}}, {0x134, 0x4, {0x3}}, {0x3, 0xfff, {0x2, 0x9}}, {0x1, 0x6, {0x3, 0xf2be}}, {0x2, 0x100, {0x0, 0x2d2}}, {0xf964, 0x23e2, {0x2, 0x8001}}, {0x1a, 0xffff, {0x3, 0x7}}, {0x10, 0x9, {0x0, 0x3}}, {0x3, 0x2, {0x2, 0x8}}, {0x1ff, 0x90e, {0x1, 0x1ff}}, {0x4, 0x7f, {0x3, 0x1}}, {0x5, 0x0, {0x2, 0xf0a}}, {0x7, 0x8, {0x0, 0xb3}}, {0xff14, 0x81, {0x2, 0x5}}, {0x3, 0xc, {0x1, 0x9}}, {0x101, 0x3ff, {0x2}}, {0x38, 0x468e, {0x2, 0x5}}, {0xc, 0x6, {0x2, 0x2}}, {0x4, 0x0, {0x2, 0xe95}}, {0x4, 0x5cb1, {0x0, 0x4862}}, {0xfff, 0x0, {0x1, 0x10000}}, {0x6, 0x1, {0x2, 0x4}}, {0x1, 0x80, {0x1, 0x7}}, {0x3ff, 0x1, {0x0, 0x3}}, {0x3, 0x41d7, {0x0, 0x4}}, {0xc0c3, 0x5, {0x1, 0xfffffffe}}, {0x4, 0x6, {0x1}}, {0x1, 0xc, {0x0, 0x10001}}, {0xc, 0x8, {0x2, 0x8000}}, {0x2, 0x6, {0x2, 0x2}}, {0x8, 0xffc0, {0x1, 0x400}}, {0xff1a, 0x7, {0x2, 0x10001}}, {0xfff9, 0x1b20, {0x0, 0x6}}, {0xfff, 0x5, {0x1, 0xb}}]}}}, {{0x254, 0x1, {{0x1, 0x5}, 0x6, 0x5, 0xb5, 0x0, 0x8, 'syz0\x00', "990cfcea798b65f491b7ed54f2915209d2664b74b2c245dcae79e7d5a71e5039", "92ba8b96184138f6d944bda9d93df5fd724ce386b1d36e4db0193403250574a7", [{0x9, 0x80, {0x0, 0x1}}, {0xf2, 0x7, {0x0, 0x24e}}, {0x4, 0xa, {0x1, 0x2}}, {0x1, 0x1ff, {0x0, 0x9}}, {0x7, 0x8000, {0x0, 0xc6}}, {0x9, 0x8, {0x0, 0x9}}, {0x800, 0xc3ad, {0x3, 0xff}}, {0x3, 0xb, {0x0, 0x10001}}, {0x6, 0x3, {0x0, 0x9}}, {0x4, 0x2b01, {0x3, 0x5}}, {0x9, 0x9, {0x2, 0x4}}, {0x6, 0x589, {0x0, 0x40}}, {0x3, 0x5, {0x2, 0x6}}, {0x1, 0x1, {0x0, 0xff}}, {0x9, 0x400, {0x1, 0x7fffffff}}, {0xfffa, 0x1, {0x1, 0x2}}, {0x1, 0xb5, {0x3, 0x8}}, {0x9, 0x29, {0x0, 0x8}}, {0x4, 0x4, {0x2, 0x6}}, {0xa56, 0x7fff, {0x2, 0x1}}, {0x0, 0x4, {0x3, 0x2}}, {0x40, 0x1, {0x1}}, {0x3ff, 0x1, {0x3, 0x1}}, {0x5, 0x5, {0x3, 0x80000001}}, {0x81, 0x27, {0x3, 0x800}}, {0x6, 0x5, {0x2, 0x5}}, {0xfffd, 0x9, {0x1, 0x3ebe}}, {0x4, 0x7, {0x0, 0x48000000}}, {0x5, 0x1, {0x3, 0x400}}, {0x48a, 0x8000, {0x2, 0x890e}}, {0x3, 0x1, {0x0, 0x2}}, {0xb566, 0x6, {0x1, 0x1ff}}, {0xf7, 0x7, {0x0, 0x4}}, {0xd1d, 0x7f, {0x0, 0x1ff}}, {0x1, 0x7f, {0x3, 0x9bf}}, {0x0, 0x6, {0x0, 0x910}}, {0x9, 0xff, {0x1, 0x6}}, {0x1, 0x9, {0x2, 0x2}}, {0x5, 0xadeb, {0x1, 0x9}}, {0x496a, 0x41, {0x2, 0xffff}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x6, 0x5, 0x8, 0xb55, 0x6, 'syz1\x00', "269578b42736520cceea1a9ce5a865ac646bd6905460adc1460f93c808bf8b5b", "ecdb79d92187c7237fc79ce72a455974c42be0f99ec011bd4b49e2027270db01", [{0xfffc, 0xc5e9, {0x1}}, {0x3, 0xe, {0x1, 0x6}}, {0x7, 0x9, {0x2, 0xe}}, {0x4, 0xfff9, {0x1, 0xb}}, {0x8, 0x8, {0x3, 0x8}}, {0x53, 0xe99e, {0x3, 0xfffffffd}}, {0x7, 0x4, {0x1, 0x80000001}}, {0x81, 0x2659, {0x3, 0x10}}, {0x7, 0x7, {0x2, 0x7}}, {0x8, 0x3, {0x0, 0x17e}}, {0xd, 0x1ff, {0x2, 0x7}}, {0x401, 0x7e2f, {0x0, 0x6}}, {0x7, 0x5, {0x2}}, {0x1ff, 0x0, {0x2, 0x5}}, {0x8, 0x8, {0x1, 0x60000}}, {0x6, 0xa, {0x1, 0x1000}}, {0xff, 0x0, {0x0, 0x3}}, {0x3cb9, 0xea0, {0x1, 0x8}}, {0x8000, 0x800, {0x2, 0xfffffff7}}, {0x7fff, 0x2, {0x0, 0xb}}, {0x1, 0x0, {0x2, 0x1ff}}, {0x0, 0x4, {0x0, 0x8}}, {0x1c00, 0x1, {0x1, 0x3}}, {0x6, 0x7, {0x2, 0xb}}, {0x6, 0x6, {0x1, 0x5}}, {0x4, 0x0, {0x0, 0xa2}}, {0xda6d, 0x2, {0x3, 0xac0}}, {0x0, 0x80, {0x0, 0x2}}, {0x3, 0x68, {0x3, 0x9}}, {0x800, 0x2, {0x1, 0xfff}}, {0x81, 0x10, {0x3, 0x7}}, {0x7, 0x0, {0x2, 0x3}}, {0x0, 0x3, {0x2, 0x4}}, {0xa, 0x6, {0x0, 0x5}}, {0x1ff, 0x1e, {0x3, 0xd}}, {0x9, 0x3, {0x0, 0x3}}, {0x1, 0x9, {0x1, 0x8}}, {0x2, 0x9, {0x1, 0x401}}, {0x5, 0x74fc, {0x3, 0x6}}, {0x9, 0x2, {0x2, 0x5}}]}}}, {{0x254, 0x1, {{0x1, 0x34}, 0x5, 0x1, 0x8, 0x8, 0x25, 'syz1\x00', "387baec4a21fdb31c4794999dfaea1e6ffc2010a542292130337ba968df4946c", "18905c86458b5dddeeff5bed12523235ffd82a03a4d717e37504fadce9e55e2f", [{0x9, 0x80}, {0xe467, 0xa, {0x1}}, {0x5, 0x3ff, {0x0, 0x10000}}, {0x4, 0x9, {0x0, 0x6d1}}, {0x4, 0x8, {0x1, 0x1000}}, {0x9, 0x8001, {0x3}}, {0x0, 0x6, {0x2, 0x81}}, {0x6, 0x6, {0x1, 0x8001}}, {0x3, 0x2, {0x1, 0x6}}, {0x1, 0xffff, {0x2, 0x4}}, {0x2, 0x66, {0x2, 0xffff}}, {0x4, 0x2, {0x2, 0x6}}, {0x9, 0x0, {0x3, 0x4}}, {0x48, 0xc9b8, {0x1, 0xfffffff6}}, {0x5, 0x5, {0x0, 0x100}}, {0x8, 0x100, {0xadeff532513e50b2, 0x2000}}, {0x4, 0x0, {0x3, 0x9}}, {0x6, 0x7, {0x0, 0x7}}, {0x3, 0x3, {0x2, 0x1}}, {0xffff, 0x8, {0x1, 0xb36}}, {0x2, 0x4c, {0x2, 0x80}}, {0x2, 0x7}, {0xfff7, 0xff, {0x2, 0xffff9a67}}, {0x6, 0x4, {0x1, 0x2ce}}, {0x6, 0x2, {0x1, 0x9}}, {0x3, 0x20, {0x3, 0x4}}, {0x200, 0x7e12, {0x1, 0xc00000}}, {0x32, 0x7a4, {0x2, 0xa93}}, {0xb, 0x7, {0x0, 0x8000}}, {0xfffb, 0x4, {0x4, 0x2}}, {0x8, 0x7, {0x2, 0x7}}, {0x10, 0x8, {0x3, 0xff}}, {0x5, 0x9, {0x2, 0xffff8001}}, {0x9, 0xd249, {0x3, 0x717d}}, {0x3, 0x9, {0x1, 0x9}}, {0x6, 0x0, {0x1, 0x6}}, {0x3, 0x1, {0x2, 0x3}}, {0x0, 0x6, {0x3, 0x5}}, {0x0, 0x7, {0x3, 0x45}}, {0x7, 0x400, {0x0, 0x40}}]}}}, {{0x254, 0x1, {{0x3, 0x76f}, 0x2, 0x2e, 0x7, 0x401, 0x8, 'syz1\x00', "6015a6e1a870e9784e463205645f2e07290ffc977bd64f881a58da3c29f03509", "30e4fe234fb226e0bf3b937258155f29fd2bfe2be3bb0af82701dd3c3a425b00", [{0xfffe, 0x101, {0x0, 0xffff}}, {0x8, 0x95, {0x2, 0x6}}, {0x1ff, 0x200, {0x3, 0x2}}, {0x6, 0x99d, {0x1, 0xfffff001}}, {0x9, 0xa22, {0x0, 0x5}}, {0x9, 0x7, {0x0, 0x8001}}, {0x4, 0x5156, {0x3, 0x1}}, {0x22a, 0x3, {0x2, 0x6}}, {0xffff, 0xc567, {0x1}}, {0xed4, 0xe6f, {0x3, 0x80000001}}, {0x1, 0x9, {0x1, 0x2}}, {0x8, 0x4, {0x1, 0xa11f}}, {0x2, 0x3, {0x1, 0xa7}}, {0x7ff, 0x1ff, {0x3, 0x3}}, {0x9, 0xf, {0x0, 0x44b}}, {0x5, 0xe, {0x0, 0x6}}, {0x0, 0x7f, {0x2, 0x401}}, {0x1, 0x7, {0x0, 0x1ff}}, {0x10, 0x8, {0x0, 0xa}}, {0xc304, 0x3ff, {0x0, 0x2}}, {0x6, 0x6, {0x2, 0x7}}, {0xfffc, 0x1, {0x3, 0x100}}, {0x0, 0x9, {0x2, 0x4}}, {0x5, 0x6, {0x2, 0xffff}}, {0x2, 0x7f, {0x3, 0x10000}}, {0x50fd, 0x4, {0x0, 0x800}}, {0x5, 0x0, {0x2, 0x3b31}}, {0x1, 0x91ce, {0x2, 0x80000001}}, {0x1a, 0x2, {0x3, 0xfff}}, {0x6651, 0x9, {0x1, 0xfff}}, {0x4, 0xfff4, {0x3, 0x3}}, {0x8, 0xffff, {0x0, 0x8001}}, {0x4, 0x7, {0x1, 0x100}}, {0x9, 0x2, {0x2, 0x9}}, {0x6, 0x0, {0x1, 0x80000000}}, {0x5, 0xd2d6, {0x3}}, {0x1, 0x4b, {0x3, 0x80}}, {0x9, 0x3, {0x2, 0x10}}, {0x25bf, 0x9, {0x3}}, {0x7, 0x7, {0x0, 0xacef}}]}}}, {{0x254, 0x1, {{0x2, 0x4}, 0x6, 0x5, 0x8ac, 0xfff9, 0x1a, 'syz1\x00', "0986216db11adfed4834358f3810d47d4adfec38e68e591017f191ad2b3d5ffa", "f73b92e6f1114783b8975698752e9fb5d4502bf9bc9aa74af2bbfa4709cfca9b", [{0x6, 0x7, {0x3, 0xdc05}}, {0xf0, 0x4, {0x2, 0x7fff}}, {0xfb6b, 0x9, {0x2, 0x5d76cce7}}, {0x6, 0x3, {0x2, 0x5}}, {0x80, 0xea9f, {0x2, 0x1}}, {0x5, 0xef, {0x3, 0x2}}, {0xf05e, 0x6, {0x3, 0x800}}, {0x1ff, 0xfffd, {0x2, 0x7}}, {0x7, 0x6, {0x2, 0x9}}, {0x100, 0x9, {0x3, 0x7}}, {0x8, 0x8a1, {0x2, 0x6}}, {0x4, 0x400, {0x1, 0xff}}, {0x800, 0x8, {0x0, 0x9}}, {0x0, 0x1, {0x4, 0x80000000}}, {0x6, 0x1, {0x3, 0x3}}, {0xd8, 0x85ff, {0x3, 0x4158}}, {0x6, 0x2000, {0x2, 0x9}}, {0x3, 0x2, {0x3, 0x2}}, {0x2, 0x7, {0x1, 0x1}}, {0x4, 0x200, {0x2, 0xb}}, {0xbf, 0x3a, {0x2, 0x5}}, {0x1000, 0x10, {0x0, 0x6}}, {0x2, 0x9, {0x3, 0x31b}}, {0x7, 0x4a, {0x3, 0x3}}, {0x8, 0x5, {0x3, 0x8}}, {0x9, 0xe000, {0x0, 0x185ebc54}}, {0x1, 0xf, {0x3, 0x1}}, {0x2, 0x502, {0x0, 0x9}}, {0x3, 0x4, {0x0, 0xa1b0}}, {0x5, 0x4, {0x3, 0x4}}, {0xc0, 0x3ff, {0x3, 0x6}}, {0xff2, 0x4, {0x1, 0xb}}, {0xfff8, 0x5e6a, {0x0, 0x28e8}}, {0x100, 0x2, {0x1, 0x5}}, {0x10, 0x6, {0x2, 0x80}}, {0x6, 0x1000, {0x2, 0x7}}, {0x6, 0xb968, {0x3, 0x7f}}, {0x6, 0x81, {0x0, 0x7}}, {0xfffd, 0x9, {0x3, 0x527}}, {0x8, 0x0, {0x0, 0x3}}]}}}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x20048010}, 0x4004040) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r1, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x181c42, 0x1f6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000da000000da000000030000000c0000000000000a0100000000000000010000840300000001000000050000000000e0ff030000000000001103000000070000000c00000000000012020000000600000007000085080000000a00000003000000030000000600000003000000000000000f00000003000000ccd900000400000002000000030000000900000001000000000000c00b0000000300000004000000020000000500000008000000000000000100000d000000000900000005000000070000000000000700000000100000000100000f0200000004000000ff030000f9ffffffab360000005f00e153"], &(0x7f0000000180)=""/159, 0xf7, 0x9f, 0x0, 0x1, 0x10000, @value=r2}, 0x28) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x40d000, 0x0) (async) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001640)={&(0x7f0000000380)={0x12b4, 0x0, 0x5, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x2}, 0x4, 0x6, 0x1, 0xfff, 0x1e, 'syz1\x00', "e0477736eb187eb1d2862838da048dbb005ae6b928215bbbd7218e69a276000b", "f1d100b4cdf1ed4e240b81fd43c75d488d01e3b3eca8d26687e42ee83ba1d246", [{0x2, 0x2, {0x0, 0x6}}, {0xd, 0x800, {0x0, 0xfffffbff}}, {0x7, 0x0, {0x2, 0x2}}, {0xb, 0x0, {0x0, 0xe}}, {0x1, 0x81, {0x2, 0x3}}, {0xfab1, 0x2, {0x0, 0x9}}, {0x3, 0x7, {0x1, 0x6}}, {0x1, 0xa, {0x0, 0xe}}, {0x4, 0xdce, {0x3, 0x9}}, {0xfff, 0x0, {0x3, 0x6}}, {0x7, 0x100, {0x1, 0x5}}, {0x8, 0x2, {0x2, 0xa}}, {0x4, 0x200, {0x3, 0x3}}, {0x40, 0x4, {0x3, 0xed5c}}, {0x5, 0x1, {0x2, 0x8f1}}, {0x573, 0x1, {0x2, 0x5}}, {0x6, 0x5, {0x0, 0xdbce}}, {0x5c, 0xff, {0x1, 0x8}}, {0xf77, 0x7, {0x1, 0x4}}, {0x0, 0x0, {0x0, 0x1000}}, {0xd99, 0x7}, {0xe, 0x2, {0x1, 0x5a}}, {0xfff, 0x1, {0x2, 0x3e3d}}, {0x6, 0x6, {0x3, 0xf8}}, {0x3, 0xf000, {0x3, 0x100}}, {0x1, 0x3, {0x0, 0x200}}, {0x1, 0x2, {0x1, 0xee}}, {0x81, 0xf, {0x3, 0x5}}, {0x401, 0x42d, {0x2}}, {0x72, 0x2, {0x1, 0x210}}, {0x900, 0x2, {0x2, 0x9}}, {0x401, 0x101, {0x3, 0xbba0}}, {0x688, 0x50f5, {0x1, 0x9}}, {0x2, 0x2, {0x3, 0x1f}}, {0x5, 0xffff, {0x0, 0x98ea}}, {0x555f, 0xfffe, {0x1, 0x1000}}, {0x1, 0x8, {0x3, 0x3}}, {0x7f, 0xf, {0x1, 0x3}}, {0x61a, 0xc, {0x1, 0x7ff}}, {0x9, 0x4, {0x2, 0x6}}]}}}, {{0x254, 0x1, {{0x0, 0x6}, 0x8, 0x9, 0x3092, 0x6, 0xb, 'syz0\x00', "c5bd80c7fc1761f298bb2782b5ea36e80404d933d616395839c4cd1c613c010e", "883033b804230478b6337a926d3111ad9710fb32c9056f29df53fdadd8f351c9", [{0x100, 0x6, {0x2, 0x3b8}}, {0x7, 0x9, {0x1, 0x7f}}, {0xcad, 0x572, {0x0, 0xd8c0}}, {0x5, 0x5, {0x3, 0x1ad}}, {0x3, 0x7d, {0x3, 0x6}}, {0x9, 0x2, {0x0, 0x6}}, {0x3, 0x2, {0x1, 0x3}}, {0x6, 0x1, {0x3, 0x7}}, {0xa1, 0x2, {0x1, 0xc}}, {0x5, 0x0, {0x3, 0x8}}, {0xf, 0xca0, {0x3, 0x6}}, {0x0, 0x9, {0x2, 0xc74d}}, {0x9, 0x2, {0x0, 0x10}}, {0xd, 0x79, {0x1, 0xa}}, {0x3, 0x5, {0x2, 0x7}}, {0x9fc, 0x1, {0x1, 0x3ff}}, {0xc, 0xf536, {0x1, 0x1}}, {0x3, 0xc24, {0x2, 0x7}}, {0x3ff, 0x7ff, {0x3, 0x80}}, {0x8, 0x2000, {0x0, 0x6}}, {0x0, 0x1, {0x3, 0x6}}, {0xcb, 0x8800, {0x0, 0x3}}, {0xffff, 0x3, {0x0, 0x4}}, {0x2, 0x9, {0x3, 0x1ff}}, {0x4, 0x451, {0x3, 0x8}}, {0xff, 0x6, {0x2}}, {0x3ff, 0x7ff, {0x2, 0xca}}, {0x9, 0x6, {0x1, 0x7}}, {0x0, 0x8, {0x2, 0x5a9}}, {0x4, 0x9, {0x0, 0x9548}}, {0xf4, 0x7, {0x0, 0x2}}, {0xd9e3, 0x6, {0x0, 0x4}}, {0x0, 0x3, {0x1, 0x9}}, {0x5, 0x7, {0x1, 0x7}}, {0x3, 0x2, {0x2, 0x58fc}}, {0x3, 0x32, {0x3, 0x9}}, {0x101, 0xff8, {0x0, 0xc276}}, {0x8, 0x9, {0x2, 0x6e}}, {0x7, 0x1, {0x3, 0xc219}}, {0x101, 0x8000, {0x3, 0xc00000}}]}}}, {{0x254, 0x1, {{0x2, 0x5}, 0x55, 0x4d, 0x800, 0x9, 0x10, 'syz1\x00', "2d8143fd8d7a8c3718deaf3e350008a7a4d2e23a6fba957dfc9630681b07d1a7", "df546960eb68320fbd04b401c1545277ccad89b9b0c6e1fa05ef33b5fdb37095", [{0x5, 0x3, {0x2, 0x2}}, {0xa1, 0x9, {0x3, 0x5}}, {0xe, 0x101, {0x0, 0x7}}, {0x9, 0x7fff, {0x0, 0x2}}, {0xfffd, 0x8000, {0x0, 0x5}}, {0xffff, 0x2, {0x1, 0xb107}}, {0xff2a, 0x5, {0x1, 0x8}}, {0x134, 0x4, {0x3}}, {0x3, 0xfff, {0x2, 0x9}}, {0x1, 0x6, {0x3, 0xf2be}}, {0x2, 0x100, {0x0, 0x2d2}}, {0xf964, 0x23e2, {0x2, 0x8001}}, {0x1a, 0xffff, {0x3, 0x7}}, {0x10, 0x9, {0x0, 0x3}}, {0x3, 0x2, {0x2, 0x8}}, {0x1ff, 0x90e, {0x1, 0x1ff}}, {0x4, 0x7f, {0x3, 0x1}}, {0x5, 0x0, {0x2, 0xf0a}}, {0x7, 0x8, {0x0, 0xb3}}, {0xff14, 0x81, {0x2, 0x5}}, {0x3, 0xc, {0x1, 0x9}}, {0x101, 0x3ff, {0x2}}, {0x38, 0x468e, {0x2, 0x5}}, {0xc, 0x6, {0x2, 0x2}}, {0x4, 0x0, {0x2, 0xe95}}, {0x4, 0x5cb1, {0x0, 0x4862}}, {0xfff, 0x0, {0x1, 0x10000}}, {0x6, 0x1, {0x2, 0x4}}, {0x1, 0x80, {0x1, 0x7}}, {0x3ff, 0x1, {0x0, 0x3}}, {0x3, 0x41d7, {0x0, 0x4}}, {0xc0c3, 0x5, {0x1, 0xfffffffe}}, {0x4, 0x6, {0x1}}, {0x1, 0xc, {0x0, 0x10001}}, {0xc, 0x8, {0x2, 0x8000}}, {0x2, 0x6, {0x2, 0x2}}, {0x8, 0xffc0, {0x1, 0x400}}, {0xff1a, 0x7, {0x2, 0x10001}}, {0xfff9, 0x1b20, {0x0, 0x6}}, {0xfff, 0x5, {0x1, 0xb}}]}}}, {{0x254, 0x1, {{0x1, 0x5}, 0x6, 0x5, 0xb5, 0x0, 0x8, 'syz0\x00', "990cfcea798b65f491b7ed54f2915209d2664b74b2c245dcae79e7d5a71e5039", "92ba8b96184138f6d944bda9d93df5fd724ce386b1d36e4db0193403250574a7", [{0x9, 0x80, {0x0, 0x1}}, {0xf2, 0x7, {0x0, 0x24e}}, {0x4, 0xa, {0x1, 0x2}}, {0x1, 0x1ff, {0x0, 0x9}}, {0x7, 0x8000, {0x0, 0xc6}}, {0x9, 0x8, {0x0, 0x9}}, {0x800, 0xc3ad, {0x3, 0xff}}, {0x3, 0xb, {0x0, 0x10001}}, {0x6, 0x3, {0x0, 0x9}}, {0x4, 0x2b01, {0x3, 0x5}}, {0x9, 0x9, {0x2, 0x4}}, {0x6, 0x589, {0x0, 0x40}}, {0x3, 0x5, {0x2, 0x6}}, {0x1, 0x1, {0x0, 0xff}}, {0x9, 0x400, {0x1, 0x7fffffff}}, {0xfffa, 0x1, {0x1, 0x2}}, {0x1, 0xb5, {0x3, 0x8}}, {0x9, 0x29, {0x0, 0x8}}, {0x4, 0x4, {0x2, 0x6}}, {0xa56, 0x7fff, {0x2, 0x1}}, {0x0, 0x4, {0x3, 0x2}}, {0x40, 0x1, {0x1}}, {0x3ff, 0x1, {0x3, 0x1}}, {0x5, 0x5, {0x3, 0x80000001}}, {0x81, 0x27, {0x3, 0x800}}, {0x6, 0x5, {0x2, 0x5}}, {0xfffd, 0x9, {0x1, 0x3ebe}}, {0x4, 0x7, {0x0, 0x48000000}}, {0x5, 0x1, {0x3, 0x400}}, {0x48a, 0x8000, {0x2, 0x890e}}, {0x3, 0x1, {0x0, 0x2}}, {0xb566, 0x6, {0x1, 0x1ff}}, {0xf7, 0x7, {0x0, 0x4}}, {0xd1d, 0x7f, {0x0, 0x1ff}}, {0x1, 0x7f, {0x3, 0x9bf}}, {0x0, 0x6, {0x0, 0x910}}, {0x9, 0xff, {0x1, 0x6}}, {0x1, 0x9, {0x2, 0x2}}, {0x5, 0xadeb, {0x1, 0x9}}, {0x496a, 0x41, {0x2, 0xffff}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x6, 0x5, 0x8, 0xb55, 0x6, 'syz1\x00', "269578b42736520cceea1a9ce5a865ac646bd6905460adc1460f93c808bf8b5b", "ecdb79d92187c7237fc79ce72a455974c42be0f99ec011bd4b49e2027270db01", [{0xfffc, 0xc5e9, {0x1}}, {0x3, 0xe, {0x1, 0x6}}, {0x7, 0x9, {0x2, 0xe}}, {0x4, 0xfff9, {0x1, 0xb}}, {0x8, 0x8, {0x3, 0x8}}, {0x53, 0xe99e, {0x3, 0xfffffffd}}, {0x7, 0x4, {0x1, 0x80000001}}, {0x81, 0x2659, {0x3, 0x10}}, {0x7, 0x7, {0x2, 0x7}}, {0x8, 0x3, {0x0, 0x17e}}, {0xd, 0x1ff, {0x2, 0x7}}, {0x401, 0x7e2f, {0x0, 0x6}}, {0x7, 0x5, {0x2}}, {0x1ff, 0x0, {0x2, 0x5}}, {0x8, 0x8, {0x1, 0x60000}}, {0x6, 0xa, {0x1, 0x1000}}, {0xff, 0x0, {0x0, 0x3}}, {0x3cb9, 0xea0, {0x1, 0x8}}, {0x8000, 0x800, {0x2, 0xfffffff7}}, {0x7fff, 0x2, {0x0, 0xb}}, {0x1, 0x0, {0x2, 0x1ff}}, {0x0, 0x4, {0x0, 0x8}}, {0x1c00, 0x1, {0x1, 0x3}}, {0x6, 0x7, {0x2, 0xb}}, {0x6, 0x6, {0x1, 0x5}}, {0x4, 0x0, {0x0, 0xa2}}, {0xda6d, 0x2, {0x3, 0xac0}}, {0x0, 0x80, {0x0, 0x2}}, {0x3, 0x68, {0x3, 0x9}}, {0x800, 0x2, {0x1, 0xfff}}, {0x81, 0x10, {0x3, 0x7}}, {0x7, 0x0, {0x2, 0x3}}, {0x0, 0x3, {0x2, 0x4}}, {0xa, 0x6, {0x0, 0x5}}, {0x1ff, 0x1e, {0x3, 0xd}}, {0x9, 0x3, {0x0, 0x3}}, {0x1, 0x9, {0x1, 0x8}}, {0x2, 0x9, {0x1, 0x401}}, {0x5, 0x74fc, {0x3, 0x6}}, {0x9, 0x2, {0x2, 0x5}}]}}}, {{0x254, 0x1, {{0x1, 0x34}, 0x5, 0x1, 0x8, 0x8, 0x25, 'syz1\x00', "387baec4a21fdb31c4794999dfaea1e6ffc2010a542292130337ba968df4946c", "18905c86458b5dddeeff5bed12523235ffd82a03a4d717e37504fadce9e55e2f", [{0x9, 0x80}, {0xe467, 0xa, {0x1}}, {0x5, 0x3ff, {0x0, 0x10000}}, {0x4, 0x9, {0x0, 0x6d1}}, {0x4, 0x8, {0x1, 0x1000}}, {0x9, 0x8001, {0x3}}, {0x0, 0x6, {0x2, 0x81}}, {0x6, 0x6, {0x1, 0x8001}}, {0x3, 0x2, {0x1, 0x6}}, {0x1, 0xffff, {0x2, 0x4}}, {0x2, 0x66, {0x2, 0xffff}}, {0x4, 0x2, {0x2, 0x6}}, {0x9, 0x0, {0x3, 0x4}}, {0x48, 0xc9b8, {0x1, 0xfffffff6}}, {0x5, 0x5, {0x0, 0x100}}, {0x8, 0x100, {0xadeff532513e50b2, 0x2000}}, {0x4, 0x0, {0x3, 0x9}}, {0x6, 0x7, {0x0, 0x7}}, {0x3, 0x3, {0x2, 0x1}}, {0xffff, 0x8, {0x1, 0xb36}}, {0x2, 0x4c, {0x2, 0x80}}, {0x2, 0x7}, {0xfff7, 0xff, {0x2, 0xffff9a67}}, {0x6, 0x4, {0x1, 0x2ce}}, {0x6, 0x2, {0x1, 0x9}}, {0x3, 0x20, {0x3, 0x4}}, {0x200, 0x7e12, {0x1, 0xc00000}}, {0x32, 0x7a4, {0x2, 0xa93}}, {0xb, 0x7, {0x0, 0x8000}}, {0xfffb, 0x4, {0x4, 0x2}}, {0x8, 0x7, {0x2, 0x7}}, {0x10, 0x8, {0x3, 0xff}}, {0x5, 0x9, {0x2, 0xffff8001}}, {0x9, 0xd249, {0x3, 0x717d}}, {0x3, 0x9, {0x1, 0x9}}, {0x6, 0x0, {0x1, 0x6}}, {0x3, 0x1, {0x2, 0x3}}, {0x0, 0x6, {0x3, 0x5}}, {0x0, 0x7, {0x3, 0x45}}, {0x7, 0x400, {0x0, 0x40}}]}}}, {{0x254, 0x1, {{0x3, 0x76f}, 0x2, 0x2e, 0x7, 0x401, 0x8, 'syz1\x00', "6015a6e1a870e9784e463205645f2e07290ffc977bd64f881a58da3c29f03509", "30e4fe234fb226e0bf3b937258155f29fd2bfe2be3bb0af82701dd3c3a425b00", [{0xfffe, 0x101, {0x0, 0xffff}}, {0x8, 0x95, {0x2, 0x6}}, {0x1ff, 0x200, {0x3, 0x2}}, {0x6, 0x99d, {0x1, 0xfffff001}}, {0x9, 0xa22, {0x0, 0x5}}, {0x9, 0x7, {0x0, 0x8001}}, {0x4, 0x5156, {0x3, 0x1}}, {0x22a, 0x3, {0x2, 0x6}}, {0xffff, 0xc567, {0x1}}, {0xed4, 0xe6f, {0x3, 0x80000001}}, {0x1, 0x9, {0x1, 0x2}}, {0x8, 0x4, {0x1, 0xa11f}}, {0x2, 0x3, {0x1, 0xa7}}, {0x7ff, 0x1ff, {0x3, 0x3}}, {0x9, 0xf, {0x0, 0x44b}}, {0x5, 0xe, {0x0, 0x6}}, {0x0, 0x7f, {0x2, 0x401}}, {0x1, 0x7, {0x0, 0x1ff}}, {0x10, 0x8, {0x0, 0xa}}, {0xc304, 0x3ff, {0x0, 0x2}}, {0x6, 0x6, {0x2, 0x7}}, {0xfffc, 0x1, {0x3, 0x100}}, {0x0, 0x9, {0x2, 0x4}}, {0x5, 0x6, {0x2, 0xffff}}, {0x2, 0x7f, {0x3, 0x10000}}, {0x50fd, 0x4, {0x0, 0x800}}, {0x5, 0x0, {0x2, 0x3b31}}, {0x1, 0x91ce, {0x2, 0x80000001}}, {0x1a, 0x2, {0x3, 0xfff}}, {0x6651, 0x9, {0x1, 0xfff}}, {0x4, 0xfff4, {0x3, 0x3}}, {0x8, 0xffff, {0x0, 0x8001}}, {0x4, 0x7, {0x1, 0x100}}, {0x9, 0x2, {0x2, 0x9}}, {0x6, 0x0, {0x1, 0x80000000}}, {0x5, 0xd2d6, {0x3}}, {0x1, 0x4b, {0x3, 0x80}}, {0x9, 0x3, {0x2, 0x10}}, {0x25bf, 0x9, {0x3}}, {0x7, 0x7, {0x0, 0xacef}}]}}}, {{0x254, 0x1, {{0x2, 0x4}, 0x6, 0x5, 0x8ac, 0xfff9, 0x1a, 'syz1\x00', "0986216db11adfed4834358f3810d47d4adfec38e68e591017f191ad2b3d5ffa", "f73b92e6f1114783b8975698752e9fb5d4502bf9bc9aa74af2bbfa4709cfca9b", [{0x6, 0x7, {0x3, 0xdc05}}, {0xf0, 0x4, {0x2, 0x7fff}}, {0xfb6b, 0x9, {0x2, 0x5d76cce7}}, {0x6, 0x3, {0x2, 0x5}}, {0x80, 0xea9f, {0x2, 0x1}}, {0x5, 0xef, {0x3, 0x2}}, {0xf05e, 0x6, {0x3, 0x800}}, {0x1ff, 0xfffd, {0x2, 0x7}}, {0x7, 0x6, {0x2, 0x9}}, {0x100, 0x9, {0x3, 0x7}}, {0x8, 0x8a1, {0x2, 0x6}}, {0x4, 0x400, {0x1, 0xff}}, {0x800, 0x8, {0x0, 0x9}}, {0x0, 0x1, {0x4, 0x80000000}}, {0x6, 0x1, {0x3, 0x3}}, {0xd8, 0x85ff, {0x3, 0x4158}}, {0x6, 0x2000, {0x2, 0x9}}, {0x3, 0x2, {0x3, 0x2}}, {0x2, 0x7, {0x1, 0x1}}, {0x4, 0x200, {0x2, 0xb}}, {0xbf, 0x3a, {0x2, 0x5}}, {0x1000, 0x10, {0x0, 0x6}}, {0x2, 0x9, {0x3, 0x31b}}, {0x7, 0x4a, {0x3, 0x3}}, {0x8, 0x5, {0x3, 0x8}}, {0x9, 0xe000, {0x0, 0x185ebc54}}, {0x1, 0xf, {0x3, 0x1}}, {0x2, 0x502, {0x0, 0x9}}, {0x3, 0x4, {0x0, 0xa1b0}}, {0x5, 0x4, {0x3, 0x4}}, {0xc0, 0x3ff, {0x3, 0x6}}, {0xff2, 0x4, {0x1, 0xb}}, {0xfff8, 0x5e6a, {0x0, 0x28e8}}, {0x100, 0x2, {0x1, 0x5}}, {0x10, 0x6, {0x2, 0x80}}, {0x6, 0x1000, {0x2, 0x7}}, {0x6, 0xb968, {0x3, 0x7f}}, {0x6, 0x81, {0x0, 0x7}}, {0xfffd, 0x9, {0x3, 0x527}}, {0x8, 0x0, {0x0, 0x3}}]}}}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x20048010}, 0x4004040) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) (async) read$rfkill(r1, &(0x7f0000000040), 0x8) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x181c42, 0x1f6) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000da000000da000000030000000c0000000000000a0100000000000000010000840300000001000000050000000000e0ff030000000000001103000000070000000c00000000000012020000000600000007000085080000000a00000003000000030000000600000003000000000000000f00000003000000ccd900000400000002000000030000000900000001000000000000c00b0000000300000004000000020000000500000008000000000000000100000d000000000900000005000000070000000000000700000000100000000100000f0200000004000000ff030000f9ffffffab360000005f00e153"], &(0x7f0000000180)=""/159, 0xf7, 0x9f, 0x0, 0x1, 0x10000, @value=r2}, 0x28) (async) 2m35.549481849s ago: executing program 1 (id=9): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x100400, 0x0, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x58) ioctl$EVIOCGMASK(r2, 0x5b15, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r3 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000100)={0x4, 0x0, 0xfa00, {0xffffffffffffffff, 0xc068}}, 0x10) write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) sched_getattr(r5, &(0x7f00000016c0)={0x38}, 0x38, 0x0) process_vm_readv(r5, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/166, 0xa6}, {&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f00000001c0)=""/53, 0x35}, {&(0x7f0000000200)=""/243, 0xf3}, {&(0x7f0000000300)=""/29, 0x1d}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000001340)=""/51, 0x33}, {&(0x7f0000001380)=""/26, 0x1a}, {&(0x7f00000013c0)=""/209, 0xd1}], 0xa, &(0x7f0000001680)=[{&(0x7f0000001580)=""/128, 0x80}, {&(0x7f0000001600)=""/87, 0x57}], 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) ptrace$ARCH_SET_GS(0x1e, r5, 0x0, 0x1001) unshare(0x28020480) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) 2m33.540168926s ago: executing program 1 (id=26): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi3\x00', 0x20200, 0x0) ioctl$COMEDI_LOCK(r0, 0x6405) (async) ioctl$COMEDI_UNLOCK(r0, 0x6406) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) 2m33.340306209s ago: executing program 1 (id=28): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="adcd", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x7fffffff, 0x18a02) mmap$snddsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x30110, r2, 0x4000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[]) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/mem_sleep', 0x101a02, 0x107) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x4000, 0x1000003, 0x14852, r3, 0x8000000) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000440)={0x1, 0x8, 0x4, 0x9, 0x6, 0x83d, 0x9, 0x2, 0x3, 0x3, 0x1, 0x4}) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r4, 0x2) r5 = gettid() ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r4, 0x40045730, &(0x7f0000000200)=0x40) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000100)={0x2, 0x2}) ioprio_get$pid(0x1, r5) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) process_madvise(r9, &(0x7f0000000140)=[{&(0x7f0000000000)='v', 0x1}], 0x1, 0x66, 0x0) syslog(0x2, &(0x7f00000001c0)=""/229, 0xe5) syz_clone(0x1000000, &(0x7f0000000280)="7c46f5287e054d0b38288e4a2f7c1e9a8781f01b9dc270f638d5aa9e5d1c5c26f963d96951a4b98f156047dd9914eb99b475ba61efaed9ea52b62efefa162b53bc7a539bd5df1dae48915ee71a440c47d02ee22cbe4f7d674491f2a717de1c7142dedd54da588582d02d766e5470b7885ee0bd471bc045c565ad8d056376396c4681be619cd1991c58d07e22dae003b041d2171b0170c5a6095180aba91e9863bbe7a8fccf17424915", 0xa9, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="717196e9a24d739c3bfffd47ce69524619ee08c1c99fed237543914e9f6ff7572ca8cb071e7816685f03eae8cc25a76990bd") ioctl$KVM_RUN(r7, 0xae80, 0x0) 2m32.981078211s ago: executing program 1 (id=30): creat(&(0x7f0000000300)='./file0\x00', 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={'L-', 0x4}, 0x16, 0x2) (async, rerun: 64) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='hugetlbfs\x00', 0xc00, 0x0) (rerun: 64) 2m32.620836083s ago: executing program 1 (id=34): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_buf(r0, 0x1, 0x3d, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) mount$cgroup2(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x80, &(0x7f0000000140)={[{@memory_hugetlb_accounting}, {@memory_recursiveprot}]}) socket$l2tp(0x2, 0x2, 0x73) 2m32.544416927s ago: executing program 32 (id=34): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_buf(r0, 0x1, 0x3d, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) mount$cgroup2(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x80, &(0x7f0000000140)={[{@memory_hugetlb_accounting}, {@memory_recursiveprot}]}) socket$l2tp(0x2, 0x2, 0x73) 1m54.46968942s ago: executing program 2 (id=499): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x0, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0), 0x0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m54.389760478s ago: executing program 2 (id=502): socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') preadv(r2, &(0x7f0000000840)=[{&(0x7f00000001c0)=""/168, 0xa8}], 0x1, 0x180, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x16, &(0x7f0000000640)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80000}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @jmp={0x5, 0x1, 0xa, 0xa, 0x8, 0x6, 0x8}, @jmp={0x5, 0x1, 0xd, 0x5, 0x0, 0x1, 0xffffffffffffffff}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}, @ldst={0x0, 0x3, 0x4, 0x4, 0xb, 0xffffffffffffffe0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc757, 0x0, 0x0, 0x0, 0x6}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @multicast}, 0x10) bind$packet(r5, &(0x7f0000000300)={0x11, 0x8, r6, 0x1, 0x7, 0x6, @multicast}, 0x14) r7 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_int(r7, 0x0, 0x13, 0x0, &(0x7f00000016c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x62}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x64000004) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9}, &(0x7f0000000240), &(0x7f0000000380)=r10}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 1m54.031858276s ago: executing program 2 (id=506): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x708}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) umount2(&(0x7f0000000340)='./file0\x00', 0x1) 1m54.031276657s ago: executing program 2 (id=508): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f00000004c0)=0x5, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000002c40)='./file0\x00', 0x80000) lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x1) openat(r1, &(0x7f0000000140)='./file1\x00', 0x408000, 0x116) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x3, 0x4, 0x7}) utime(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)) 1m53.951761241s ago: executing program 2 (id=510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x0, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0), 0x0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m53.744905445s ago: executing program 2 (id=515): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x11, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xff}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x2, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0x5}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x7, '\x00', 0xb}, {0xf, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m53.677190787s ago: executing program 33 (id=515): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x11, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xff}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x2, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0x5}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x7, '\x00', 0xb}, {0xf, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m12.871659281s ago: executing program 3 (id=1029): r0 = syz_open_dev$dri(&(0x7f0000000280), 0x200, 0x102) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000540)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0, '\x00', 0x5, 0x6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f00000002c0)={r2, 0x3, 0x8, 0x0, 0x2, [], [0x0, 0x1, 0x1000002, 0x10000], [0x0, 0x0, 0xfffffffc, 0x3], [0x1, 0x380000000000000]}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000100)={0x3, r1, 0x7ffffcd9, 0x7, 0x326, 0x89f, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x1, r1, 0x8, 0x59cc, 0x1, 0x8000, 0x0, 0x7fff, 0xfffffffc}) bpf$ITER_CREATE(0x21, &(0x7f00000010c0), 0x8) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r3, 0x28, 0x1, &(0x7f00000012c0)=""/4096, &(0x7f0000000000)=0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18, 0x8001}, 0x4044011) 1m12.870868965s ago: executing program 3 (id=1031): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) (async) socket(0x1, 0x803, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x37) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000100), 0x6) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xfff2, 0xe}, {}, {0xb, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x405}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x2008c010) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r8, &(0x7f0000000140)={0x0, 0x0}) (async) socket(0x9, 0x3, 0xe) 1m12.656748949s ago: executing program 3 (id=1036): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) 1m12.470044556s ago: executing program 3 (id=1039): r0 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89801) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(0x3) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r2 = accept$alg(r0, 0x0, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) connect$unix(r5, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$alg(r2, &(0x7f00000028c0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="ef819e3213aee1a1205204a1aa3e74fb65bd5363f2ce000abb19abb5a5aa7b1b366b57b8dd0410d16016a355555fed69a06ac08167fcd3e79ef0ab464d4ddb1b67679fb077eec1d6462020e47d10793b62d6e6d7329a37ae4e484d766101b4955d3d3f8ca9174481884cb564ff8d831572b73bb91c4cbe", 0x77}, {&(0x7f0000000180)="85850a10138592770d86841b7eb32cdf9d4fa8dec08ee5fbdae53fdb95a785d6f5e662ce92b7f05664b7c60479c21d612b184c6edd16d5466accff47ab45affd2b45a138c9675817818ff54759923c7e97240cb5dcda491a5d56f2c190244e5d5d93e29c4437847113c9fe177bf7d1c7081b3c1d617d856ad0417001170568a75cc421cdcd8c6e3b23de22ae56d58623b2eb6ef81472f712dca5d46416d9a1d9a879", 0xa2}, {&(0x7f0000000240)="4b8bb1f6f28d4005a344ceb087a7f3eeb3cb3f0b2332f6015cb77103a96b594c0fdb5a152cc704f7d6631a7ca3d90ae7b18cca6e645aa288caff7a61e42186a78a47f7ffe7794d374524caf5dc77e07981f36d7f4755c7987805fe14c0bf98e238bbaa1a1da9babfc900c519905e3758fe0033c507119b7ba198c038cc197e2d914d951c4f702d37b5ba2ac0f36eca59b3133264fa2b40c188d0c93c68026de6", 0xa0}, {&(0x7f0000000300)="a21d584374c5cff799bc881573715a74f2f12603c733bb1ea6b2b061b91b5532eaece2222a85848db3aa8bed9a04a7c2eabb84dd5dd8499832f4b54a8024d3aaf9a78e36140341dcaa7fa391fc7335ba3c9b30d34b518cfddf", 0x59}, {&(0x7f0000000380)="b422898d7595b34c2ff76118dd846559f5c2b512571c274936edd641837b675e8ee80a978b4bbbbf7303b0e8e159d6fcfa6136cc52d4d23d3d792183babf", 0x3e}, {&(0x7f00000003c0)="d7322afd81123c43a81d041b0b2295820d489a5bf1b57957f35fcf7f9a87f2fbafed4a265c4c6598f98fa853691fac0282a27c2b811a7da15eb9ab0c67dd3a53bf659fe43df6d271c1c2b8a4b5dc93ba8f68336c4fe9a8db86fd08a122f42260b7f152be0d1170c249d5852e3cf58582580f1612bf6a16249967547da3cc9c9a06", 0x81}], 0x6, &(0x7f0000000500)=[@assoc={0x18, 0x117, 0x4, 0xaef4}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}, @iv={0x38, 0x117, 0x2, 0x1e, "a48b5a0b79b0c0fe9f7b3a74b07e639361556a3d76f9ef397bc4006c224b"}, @assoc={0x18, 0x117, 0x4, 0xfffffffb}, @assoc={0x18, 0x117, 0x4, 0x2}, @iv={0x38, 0x117, 0x2, 0x23, "21eb87e118fd3de7e4675743717d55beabbf21a9907934c8dc5634a24107b4df5cbf99"}], 0x100, 0x40}, {0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="ab0dac0226a388699c5aab74832912c49cd46f29b85f9e79e90fd0d1e62915e581c57dc371c2e10dbe3e8de832bb1d9cc20f56278d75a5c6eff86e58534dc24f6a9252bfc36cbbdeddb8a8f38611530578354ee671c5ecdf89d3043fdf7f9d713b239cc53c841d0186681ae69c21eeff50f2e419026ea45325709a13d4a9e9c747e946edd4d8bd3e032a33bc7929e0245f81e5dbdb259a9b3aae700c1289464fb34b2686cebd023d33337f8857ff2c84db1c6de2e1d2d1b7bdbe05a5f181866f4576ddb3eb49eb3baf0d5acf3c64ff4abc9a29aa612cdf54c87da8", 0xdb}, {&(0x7f0000000700)="bd21a676d6d14c40fc6d3027d3c68a82c9f60b096837adbbad383b1e846133927b8a9fe6d3120919edaebf4c82673261d606b8558d50942317be23d9f5db47ce7a9ec17ca674676d8228065ea5831e152077fd5f49e31c67859720165bb43168a9f4dd458abe851c5eb05e7a442917c75173384bec28bcbecdf2ab2f8d7a30c48a758832f59913f39c1e0a8655167b2327ba75572fbf5bbe91659ce15ad060f4154dcfd08c6b0bfe1e91", 0xaa}, {&(0x7f00000007c0)="e6796da278709b53659ad75a60ba2fac4d391b8799cf6be8c3162ee5003a1feb67df834b080858000319884c6a70a08269303385298c7d3e6204418ac20a7ccc1716b3ca5cf573b2d3386ea2fb52c2ccc5e660fd669f393ef647fb33c8bdc3f4b614ed9dd07b13c566413cde139d47509b3d533225707f1fe15552460744b5cf445fd30db5fe506537a56a6f58ec364672a1ae26d773daa146bd8e77a2756c0bd865ad5749c2e3672e557f6bbf0febc6fcc78f937635a91f6b8cade0b960fc6c8f5672705ed3390524876031", 0xcc}], 0x3, &(0x7f0000000900)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18}], 0x48, 0x24008000}, {0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000980)="583c409108a97ff31ba1823dcc50a329c98c8c7d90d75c25f71ae1b1c50d8a0ca420333cbc0d0bc25a17d255b638196322335f8d2000cf1e525988020e6fd43e5ecbe67cf4872ca51e3d873689d3d28b871e8b1e33d61b719641d0a994b033a590a1c0007b11463b6187abf6aca526867f46efc6855ce88514191ce1966d772dd0063f5b3d511ba19a9324447912461dcfa89a69d70e41de6100b3270a03c5495bc1c5e542522bdc03518091a61e65470582d6a0f8e2719d8502729ce2401f1ddc418323cffdc098b4b36f52ed9be6e3b1507e90859f7f9ee0cd26", 0xdb}, {&(0x7f0000000a80)="d8e45da021d1fc1045a74c0e3e740ff0fe0e9ea8f3d2e35b520e35e3", 0x1c}, {&(0x7f0000000ac0)='KB', 0x2}], 0x3, &(0x7f0000000b40)=[@assoc={0x18, 0x117, 0x4, 0x1}, @iv={0xd8, 0x117, 0x2, 0xc3, "1c7bda73e5d35f775261080608c9d6380807d4ec66feddfbf535726e1de7e47c3740622388ce35bce784aff558f7ea16d69f476167a6de52f7ea02a932c5b7654c252119f62a55daee0e366adf5c6479fb199b25b42c5ce712a06b02a7a8dda240ee3a33fc008b090e6378ecac99a1fb5e065767d4d2d3b861766055c8d0482b4701e2d18c6395af898b6445a91ca4b31c71aeeab3c88700db2093648b804066413dea157f92617175904238c6ddaf3cbf238cf9e0320cebe3d307981baf93ccfea565"}, @assoc={0x18, 0x117, 0x4, 0x7ff}, @iv={0x28, 0x117, 0x2, 0x11, "86fff6f04e658be3377eeea4b1b5f51e9e"}, @assoc={0x18, 0x117, 0x4, 0x3}], 0x148, 0x80000}, {0x0, 0x0, &(0x7f0000002700), 0x0, &(0x7f0000002740)=[@assoc={0x18, 0x117, 0x4, 0x800}, @op={0x18}, @iv={0x38, 0x117, 0x2, 0x24, "9f1347acfe304650ee59ebcec999d629424083ce46ced015b7220cebe0584de5035ce80e"}, @assoc={0x18, 0x117, 0x4, 0xa6b}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x800000}, @iv={0x30, 0x117, 0x2, 0x1a, "3effb24c6dedfd1036ed517ab74b5ffabbac9eda305146824732"}, @iv={0xa0, 0x117, 0x2, 0x8b, "f96521087e968325a9e328ece70e92d1b43458d9661c66537fe0a3edc0a50963734c61e57d0a863221080bdc6165a75ec36ee4a99b1c2a2f79bb8386910e7eb251caf6e01d0cc7337bcc14ad359c3e8794fb391a73e7723ebaf60e35c924e67aec20683fd4fe4b2f358bf42034bd383dfefdda97c305b79c851f0f6b497b7470d67bb51bc7b08b4b2fc98f"}], 0x180, 0x40040}], 0x4, 0x4004000) accept$nfc_llcp(r1, &(0x7f0000000cc0), &(0x7f0000000d40)=0x60) recvmsg(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003f80)=""/4109, 0x100d}], 0x1}, 0x20f2) socket$alg(0x26, 0x5, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89801) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80000, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) close(0x3) (async) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) (async) accept$alg(r0, 0x0, 0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) (async) connect$unix(r5, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async) sendmmsg$alg(r2, &(0x7f00000028c0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="ef819e3213aee1a1205204a1aa3e74fb65bd5363f2ce000abb19abb5a5aa7b1b366b57b8dd0410d16016a355555fed69a06ac08167fcd3e79ef0ab464d4ddb1b67679fb077eec1d6462020e47d10793b62d6e6d7329a37ae4e484d766101b4955d3d3f8ca9174481884cb564ff8d831572b73bb91c4cbe", 0x77}, {&(0x7f0000000180)="85850a10138592770d86841b7eb32cdf9d4fa8dec08ee5fbdae53fdb95a785d6f5e662ce92b7f05664b7c60479c21d612b184c6edd16d5466accff47ab45affd2b45a138c9675817818ff54759923c7e97240cb5dcda491a5d56f2c190244e5d5d93e29c4437847113c9fe177bf7d1c7081b3c1d617d856ad0417001170568a75cc421cdcd8c6e3b23de22ae56d58623b2eb6ef81472f712dca5d46416d9a1d9a879", 0xa2}, {&(0x7f0000000240)="4b8bb1f6f28d4005a344ceb087a7f3eeb3cb3f0b2332f6015cb77103a96b594c0fdb5a152cc704f7d6631a7ca3d90ae7b18cca6e645aa288caff7a61e42186a78a47f7ffe7794d374524caf5dc77e07981f36d7f4755c7987805fe14c0bf98e238bbaa1a1da9babfc900c519905e3758fe0033c507119b7ba198c038cc197e2d914d951c4f702d37b5ba2ac0f36eca59b3133264fa2b40c188d0c93c68026de6", 0xa0}, {&(0x7f0000000300)="a21d584374c5cff799bc881573715a74f2f12603c733bb1ea6b2b061b91b5532eaece2222a85848db3aa8bed9a04a7c2eabb84dd5dd8499832f4b54a8024d3aaf9a78e36140341dcaa7fa391fc7335ba3c9b30d34b518cfddf", 0x59}, {&(0x7f0000000380)="b422898d7595b34c2ff76118dd846559f5c2b512571c274936edd641837b675e8ee80a978b4bbbbf7303b0e8e159d6fcfa6136cc52d4d23d3d792183babf", 0x3e}, {&(0x7f00000003c0)="d7322afd81123c43a81d041b0b2295820d489a5bf1b57957f35fcf7f9a87f2fbafed4a265c4c6598f98fa853691fac0282a27c2b811a7da15eb9ab0c67dd3a53bf659fe43df6d271c1c2b8a4b5dc93ba8f68336c4fe9a8db86fd08a122f42260b7f152be0d1170c249d5852e3cf58582580f1612bf6a16249967547da3cc9c9a06", 0x81}], 0x6, &(0x7f0000000500)=[@assoc={0x18, 0x117, 0x4, 0xaef4}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}, @iv={0x38, 0x117, 0x2, 0x1e, "a48b5a0b79b0c0fe9f7b3a74b07e639361556a3d76f9ef397bc4006c224b"}, @assoc={0x18, 0x117, 0x4, 0xfffffffb}, @assoc={0x18, 0x117, 0x4, 0x2}, @iv={0x38, 0x117, 0x2, 0x23, "21eb87e118fd3de7e4675743717d55beabbf21a9907934c8dc5634a24107b4df5cbf99"}], 0x100, 0x40}, {0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="ab0dac0226a388699c5aab74832912c49cd46f29b85f9e79e90fd0d1e62915e581c57dc371c2e10dbe3e8de832bb1d9cc20f56278d75a5c6eff86e58534dc24f6a9252bfc36cbbdeddb8a8f38611530578354ee671c5ecdf89d3043fdf7f9d713b239cc53c841d0186681ae69c21eeff50f2e419026ea45325709a13d4a9e9c747e946edd4d8bd3e032a33bc7929e0245f81e5dbdb259a9b3aae700c1289464fb34b2686cebd023d33337f8857ff2c84db1c6de2e1d2d1b7bdbe05a5f181866f4576ddb3eb49eb3baf0d5acf3c64ff4abc9a29aa612cdf54c87da8", 0xdb}, {&(0x7f0000000700)="bd21a676d6d14c40fc6d3027d3c68a82c9f60b096837adbbad383b1e846133927b8a9fe6d3120919edaebf4c82673261d606b8558d50942317be23d9f5db47ce7a9ec17ca674676d8228065ea5831e152077fd5f49e31c67859720165bb43168a9f4dd458abe851c5eb05e7a442917c75173384bec28bcbecdf2ab2f8d7a30c48a758832f59913f39c1e0a8655167b2327ba75572fbf5bbe91659ce15ad060f4154dcfd08c6b0bfe1e91", 0xaa}, {&(0x7f00000007c0)="e6796da278709b53659ad75a60ba2fac4d391b8799cf6be8c3162ee5003a1feb67df834b080858000319884c6a70a08269303385298c7d3e6204418ac20a7ccc1716b3ca5cf573b2d3386ea2fb52c2ccc5e660fd669f393ef647fb33c8bdc3f4b614ed9dd07b13c566413cde139d47509b3d533225707f1fe15552460744b5cf445fd30db5fe506537a56a6f58ec364672a1ae26d773daa146bd8e77a2756c0bd865ad5749c2e3672e557f6bbf0febc6fcc78f937635a91f6b8cade0b960fc6c8f5672705ed3390524876031", 0xcc}], 0x3, &(0x7f0000000900)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18}], 0x48, 0x24008000}, {0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000980)="583c409108a97ff31ba1823dcc50a329c98c8c7d90d75c25f71ae1b1c50d8a0ca420333cbc0d0bc25a17d255b638196322335f8d2000cf1e525988020e6fd43e5ecbe67cf4872ca51e3d873689d3d28b871e8b1e33d61b719641d0a994b033a590a1c0007b11463b6187abf6aca526867f46efc6855ce88514191ce1966d772dd0063f5b3d511ba19a9324447912461dcfa89a69d70e41de6100b3270a03c5495bc1c5e542522bdc03518091a61e65470582d6a0f8e2719d8502729ce2401f1ddc418323cffdc098b4b36f52ed9be6e3b1507e90859f7f9ee0cd26", 0xdb}, {&(0x7f0000000a80)="d8e45da021d1fc1045a74c0e3e740ff0fe0e9ea8f3d2e35b520e35e3", 0x1c}, {&(0x7f0000000ac0)='KB', 0x2}], 0x3, &(0x7f0000000b40)=[@assoc={0x18, 0x117, 0x4, 0x1}, @iv={0xd8, 0x117, 0x2, 0xc3, "1c7bda73e5d35f775261080608c9d6380807d4ec66feddfbf535726e1de7e47c3740622388ce35bce784aff558f7ea16d69f476167a6de52f7ea02a932c5b7654c252119f62a55daee0e366adf5c6479fb199b25b42c5ce712a06b02a7a8dda240ee3a33fc008b090e6378ecac99a1fb5e065767d4d2d3b861766055c8d0482b4701e2d18c6395af898b6445a91ca4b31c71aeeab3c88700db2093648b804066413dea157f92617175904238c6ddaf3cbf238cf9e0320cebe3d307981baf93ccfea565"}, @assoc={0x18, 0x117, 0x4, 0x7ff}, @iv={0x28, 0x117, 0x2, 0x11, "86fff6f04e658be3377eeea4b1b5f51e9e"}, @assoc={0x18, 0x117, 0x4, 0x3}], 0x148, 0x80000}, {0x0, 0x0, &(0x7f0000002700), 0x0, &(0x7f0000002740)=[@assoc={0x18, 0x117, 0x4, 0x800}, @op={0x18}, @iv={0x38, 0x117, 0x2, 0x24, "9f1347acfe304650ee59ebcec999d629424083ce46ced015b7220cebe0584de5035ce80e"}, @assoc={0x18, 0x117, 0x4, 0xa6b}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x800000}, @iv={0x30, 0x117, 0x2, 0x1a, "3effb24c6dedfd1036ed517ab74b5ffabbac9eda305146824732"}, @iv={0xa0, 0x117, 0x2, 0x8b, "f96521087e968325a9e328ece70e92d1b43458d9661c66537fe0a3edc0a50963734c61e57d0a863221080bdc6165a75ec36ee4a99b1c2a2f79bb8386910e7eb251caf6e01d0cc7337bcc14ad359c3e8794fb391a73e7723ebaf60e35c924e67aec20683fd4fe4b2f358bf42034bd383dfefdda97c305b79c851f0f6b497b7470d67bb51bc7b08b4b2fc98f"}], 0x180, 0x40040}], 0x4, 0x4004000) (async) accept$nfc_llcp(r1, &(0x7f0000000cc0), &(0x7f0000000d40)=0x60) (async) recvmsg(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003f80)=""/4109, 0x100d}], 0x1}, 0x20f2) (async) 1m12.400763836s ago: executing program 3 (id=1042): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000180)={'sit0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8008, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file2'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_off}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c0000000206010800000000000000000000fffd0c00078008001140000000080500010004000000050005000a00000005000400000000000900020073797a300000000015000300686173683a69702c706f72742c6e657400000000"], 0x5c}}, 0x80) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat(r2, &(0x7f0000000300)='./file1\x00', 0x189700, 0xb1) 1m11.939823411s ago: executing program 3 (id=1044): socket(0x840000000002, 0x3, 0xff) unlink(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"}) r1 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x101000) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000200)={0x9, @sdr={0x50424752, 0x8}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x820, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r6, r2}, 0xc) r7 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000006, 0x2010, r7, 0x26783000) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0) ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r9, 0x0) ioctl$KVM_TDX_INIT_MEM_REGION(r9, 0xc008aeba, &(0x7f00000003c0)={0x3, 0x0, &(0x7f00000001c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9}}) 1m11.885133077s ago: executing program 34 (id=1044): socket(0x840000000002, 0x3, 0xff) unlink(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"}) r1 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x101000) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000200)={0x9, @sdr={0x50424752, 0x8}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x820, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r6, r2}, 0xc) r7 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000006, 0x2010, r7, 0x26783000) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0) ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r9, 0x0) ioctl$KVM_TDX_INIT_MEM_REGION(r9, 0xc008aeba, &(0x7f00000003c0)={0x3, 0x0, &(0x7f00000001c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9}}) 27.040810553s ago: executing program 0 (id=1660): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat$incfs(0xffffffffffffffff, 0x0, 0x40000, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 26.901204977s ago: executing program 0 (id=1661): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@migrate={0xbc, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e24, 0x4e24, @in=@private=0xa010102}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000030000000000000080000000850000003900000095"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x15, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) 26.900133455s ago: executing program 0 (id=1662): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x16) write$P9_RLERRORu(r0, 0x0, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x9, &(0x7f0000000400)=[{0xfc, 0x1, 0xe9, 0x4}, {0x7, 0x0, 0x81, 0x8}, {0xd, 0xff, 0x9, 0x1}, {0x6, 0xe, 0xfe, 0x4}, {0x7fff, 0x6, 0xe0, 0x1}, {0x0, 0xfd, 0x0, 0x8}, {0x1, 0xd5, 0x9, 0x66}, {0x3, 0x6, 0x8, 0x3}, {0x1, 0x13, 0x1, 0x2}]}) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="07000000010003", 0x7) ioctl$sock_bt_hci(r1, 0x400448e2, &(0x7f0000000200)="9e3674f33e72cad7583637b15fc3ffee9ae37c19c7c553e850516b5bfc4fc5983cf319716b7ac330eb8ead938dd5963e4e7752b3934bdbcaebfd05cfab76263359d6a78438b6c63b584e03414e95f55068c62cbab66960b860ebce0acc39cebe3421ad2c16206eed8487563f98ea4ead48ee151e1f8fceba35049c8e8aadf453bf4356c38fb0b6efb5e1bce4b3649a1b78342bc43c59b50495e90be2ed1dd80d2769579dda949973f93083a2a4b42a8f1e748692cb7fe61dc44a65fae8cd719fc786a1250b799a9b7e742ccaa78d133689c770e7fb023590fa8fe60990edb3dbcf71a3149729a03164bc") bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x7fffffff, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x2, 0x4}, 0x10, r3}, 0x94) 26.828990168s ago: executing program 0 (id=1663): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0xdd) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0xcb) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sysfs$2(0x2, 0x800, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) 26.711184257s ago: executing program 0 (id=1664): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f00000004c0)={r2, &(0x7f0000000080)='#/\xc1\']}#\x00', 0x3053c0, &(0x7f00000000c0)={@align=0xffffffff, {0x10, 0x10, 0x0, 0x2000000}}, 0x6, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0xff87}) r4 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x3, &(0x7f0000000380)="e742a933f37ff726a51f1fb1010f93e96a837b8e11d417e6e3310bf49eea1fce838e98f50839bb743e63989194db03e84f2142edad4ac17451f607214b1f357bba9e2928cad039eb1deebd41e71d789bc1bac9e1f17d276ddd7fc1c9685ecee004c924c7df313107c7a2143cb413c0ecbbfe35daa22587eabc97d6548ba84ac5332650ca66edf4453b227ca7ff03de968b419779071b9fb5e2418fe35d3100149b") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x7c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x50, 0x3, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x40, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_FLAGS={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}}, 0x0) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r6, &(0x7f0000000000)="303132333a616263643a3010276b", 0xe) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r4}, 0x8) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000094000000940000000300000008000000000000090500000000000000000000030000000002000000040000000a0000000f0000000000000700000000060000000000000a050000000c0000000000000e0200000001000000050000000000020400000006000000060000060400000002000000400000000c0000000000000007000000010000000f0000000c00000005000000faffffff0400000008000000005f0079c5e8e2fd4c06ee7147969400ef47ee5626d022cb07c0b404aa7b5d1e2b613d8516560aa7f941d5cbdfb29ba9ca5e4a00ffb40b0bc1f200"/245], &(0x7f0000000200)=""/227, 0xaf, 0xe3, 0x1, 0x7fff, 0x10000, @value=r7}, 0x28) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), r0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="521a0000", @ANYRES16=r8, @ANYBLOB="0f002dbd7000fedbdf251c000000080004000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8804}, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f00000004c0)={r2, &(0x7f0000000080)='#/\xc1\']}#\x00', 0x3053c0, &(0x7f00000000c0)={@align=0xffffffff, {0x10, 0x10, 0x0, 0x2000000}}, 0x6, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0xff87}) (async) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) (async) ptrace(0x10, r1) (async) ptrace$setregs(0xd, r1, 0x3, &(0x7f0000000380)="e742a933f37ff726a51f1fb1010f93e96a837b8e11d417e6e3310bf49eea1fce838e98f50839bb743e63989194db03e84f2142edad4ac17451f607214b1f357bba9e2928cad039eb1deebd41e71d789bc1bac9e1f17d276ddd7fc1c9685ecee004c924c7df313107c7a2143cb413c0ecbbfe35daa22587eabc97d6548ba84ac5332650ca66edf4453b227ca7ff03de968b419779071b9fb5e2418fe35d3100149b") (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x7c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x50, 0x3, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x40, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_FLAGS={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}}, 0x0) (async) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) (async) write(r6, &(0x7f0000000000)="303132333a616263643a3010276b", 0xe) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r4}, 0x8) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000094000000940000000300000008000000000000090500000000000000000000030000000002000000040000000a0000000f0000000000000700000000060000000000000a050000000c0000000000000e0200000001000000050000000000020400000006000000060000060400000002000000400000000c0000000000000007000000010000000f0000000c00000005000000faffffff0400000008000000005f0079c5e8e2fd4c06ee7147969400ef47ee5626d022cb07c0b404aa7b5d1e2b613d8516560aa7f941d5cbdfb29ba9ca5e4a00ffb40b0bc1f200"/245], &(0x7f0000000200)=""/227, 0xaf, 0xe3, 0x1, 0x7fff, 0x10000, @value=r7}, 0x28) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), r0) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="521a0000", @ANYRES16=r8, @ANYBLOB="0f002dbd7000fedbdf251c000000080004000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8804}, 0x40000) (async) 26.660857357s ago: executing program 0 (id=1666): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88c0, 0x179) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x100) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) setxattr$trusted_overlay_redirect(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x8, 0x3) mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', 0x0, 0x28840c1, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = gettid() rt_tgsigqueueinfo(r0, r2, 0x1e, &(0x7f0000000080)={0x39, 0x4}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bfd000/0x400000)=nil) syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x40000103, 0x7fffffff}}], 0x20}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r6, r8, 0x25, 0x0, @void}, 0x10) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x3000)=nil) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x85c}) r10 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000480)={0x0, &(0x7f00000005c0)=[@nested_vmlaunch={0x12f, 0x18, 0x2}, @cpuid={0x64, 0x18, {0x2ed8, 0x403}}, @in_dx={0x69, 0x20, {0xa14a, 0x5}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x71, 0x10, 0x10, 0x9}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0xb6, 0x7, 0x3, 0x3}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x2e, 0x4, 0x8}}, @wr_crn={0x67, 0x20, {0x8, 0x3}}, @enable_nested={0x12c, 0x18}, @in_dx={0x69, 0x20, {0x7b4b, 0x2}}, @rdmsr={0x66, 0x18, {0xb2c}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_vmresume={0x130, 0x18, 0x1}, @enable_nested={0x12c, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x101, 0x5}}, @nested_amd_vmload={0x182, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x506, 0x2, 0x100, 0x3}}, @nested_amd_invlpga={0x17d, 0x20, {0x10000, 0xf4bf}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @in_dx={0x69, 0x20, {0xecb4, 0x3}}, @nested_amd_stgi={0x17e, 0x10}, @nested_vmresume={0x130, 0x18}, @cpuid={0x64, 0x18, {0x100000, 0x26}}, @set_irq_handler={0xc8, 0x20, {0xb6, 0x1}}, @nested_amd_clgi={0x17f, 0x10}], 0x2f8}) fcntl$lock(r10, 0x5, &(0x7f00000004c0)={0x1, 0x3, 0x4, 0xfffffffffffffffd, r0}) ioctl$EXT4_IOC_MIGRATE(r1, 0xff07) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x240) 11.634121469s ago: executing program 35 (id=1666): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88c0, 0x179) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x100) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) setxattr$trusted_overlay_redirect(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x8, 0x3) mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', 0x0, 0x28840c1, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = gettid() rt_tgsigqueueinfo(r0, r2, 0x1e, &(0x7f0000000080)={0x39, 0x4}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bfd000/0x400000)=nil) syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x40000103, 0x7fffffff}}], 0x20}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r6, r8, 0x25, 0x0, @void}, 0x10) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x3000)=nil) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x85c}) r10 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000480)={0x0, &(0x7f00000005c0)=[@nested_vmlaunch={0x12f, 0x18, 0x2}, @cpuid={0x64, 0x18, {0x2ed8, 0x403}}, @in_dx={0x69, 0x20, {0xa14a, 0x5}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x71, 0x10, 0x10, 0x9}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0xb6, 0x7, 0x3, 0x3}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x2e, 0x4, 0x8}}, @wr_crn={0x67, 0x20, {0x8, 0x3}}, @enable_nested={0x12c, 0x18}, @in_dx={0x69, 0x20, {0x7b4b, 0x2}}, @rdmsr={0x66, 0x18, {0xb2c}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_vmresume={0x130, 0x18, 0x1}, @enable_nested={0x12c, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x101, 0x5}}, @nested_amd_vmload={0x182, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x506, 0x2, 0x100, 0x3}}, @nested_amd_invlpga={0x17d, 0x20, {0x10000, 0xf4bf}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @in_dx={0x69, 0x20, {0xecb4, 0x3}}, @nested_amd_stgi={0x17e, 0x10}, @nested_vmresume={0x130, 0x18}, @cpuid={0x64, 0x18, {0x100000, 0x26}}, @set_irq_handler={0xc8, 0x20, {0xb6, 0x1}}, @nested_amd_clgi={0x17f, 0x10}], 0x2f8}) fcntl$lock(r10, 0x5, &(0x7f00000004c0)={0x1, 0x3, 0x4, 0xfffffffffffffffd, r0}) ioctl$EXT4_IOC_MIGRATE(r1, 0xff07) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x240) 2.849601214s ago: executing program 5 (id=1986): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x44, 0x41, 0x107, 0xfffffffa, 0x25dfdbfe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x28, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @nested={0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) eventfd(0xadb) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) write$UHID_CREATE(r0, &(0x7f0000000500)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/53, 0x35, 0x5, 0x400, 0x7040264b, 0x7}}, 0x120) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r4, 0xae80, 0x0) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) utime(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x0) 2.681133894s ago: executing program 5 (id=1987): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x29, 0x5, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newsa={0x154, 0x10, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000, 0x1fd}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x0, 0x0, 0x70bd28, 0xeaa}}]}, 0x154}}, 0x60) 2.560545948s ago: executing program 5 (id=1989): arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x0) (async) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x2) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x2) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0xc4abb2bad1f83e90) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x2) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) (async) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x0) (async) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) (async) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x2) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x2) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x2) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x7) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) (async) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x2) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x0) (async) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x0) (async) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x2) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) (async) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) (async) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) (async) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x573fb0b44e0104d5) 2.509461935s ago: executing program 5 (id=1991): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000040)={0x5, 0x5, 0x3}) r4 = socket$kcm(0x10, 0x2, 0x0) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) mlockall(0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@initr0, @alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000080)={0x6, 0x3, 0x40, "8069e21538d9fc7d2af5378e1849db0515106b5f167b48208626c85c00c326e9", 0x41414270}) sendmsg$kcm(r4, 0x0, 0x4048004) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) 2.009337693s ago: executing program 7 (id=1998): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000040)={0x0, 0x1, 0x8000, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000440)={r1, "6cd40f16b14b9c75f57b90bf88f91d26"}) ioctl$KVM_TDX_GET_CPUID(r0, 0xc008aeba, &(0x7f0000001480)={0x5, 0x0, &(0x7f0000001440)}) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000014c0)=0xe) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x8040) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000001640)) ioctl(r0, 0x29, &(0x7f0000001680)="f8ef9dc0f27b9d007f") r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000016c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001700)={{{@in6=@mcast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000001800)=0xe8) quotactl_fd$Q_GETFMT(r3, 0xffffffff80000402, r4, &(0x7f0000001840)) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000001b80)={{'\x00', 0x2}, {0x8001}, 0xd4, 0x0, 0x0, &(0x7f0000001880)='./file0\x00', &(0x7f00000018c0)='./file0\x00', &(0x7f0000001900)="0ff82564f5cd9139d63e0d2fbcd81b34f67fde78e9f2d7cf652997e2fef3bf1fdb2f0cd0acd0e49745e787569ece4779234a882f9c6144bd4f40b612a77f8fd125c31426", 0x44, 0x0, &(0x7f0000001980)={0x2, 0xf5, {0x1, 0xc, 0xae, "7ccd93d1fbfc4989af80df56c255ec997f3acda852e740f365e75983a4e8fbd3d23a670f865481aa6d0e429860354778e9169cc2edee7e0357ceeb3ee7b8a93d7d658b8e47b0b8f8ed3e63647b77cfa489d9177dd68a5bffd1d02ffbd3f790f49896eb82910161e3c424ecdd451fa405d79a4ee0d3cdc813e61b5850d1879ab37f589dae8ccb0d1bc04ee4143967a89354dc8cf599753c097aaf87ad6e6765f03dab76f1024ccb02335154856f15", 0x3a, "d4de7f4f9da750348bb301de8935bbe1a5fe3e4ab2417e7b212d7a226ce752ee81ced23c32b704f0c0bc2e670e63756d3bc1ff5a168377b8e6fb"}, 0xc5, "c0c6d0208f9486d0a0cdc84528a0d9aa0e277a629b1bf5aba9ff20ac81fb73c16ae43502a4f75d535af51a708b72b3513aca63776611795ac66c4cf67ecfed0e5bb34334f81fd2366fab5bceb72f26130ffb0595397f8d9a847c856540e29bc7f54b4b3fc5223cb670c3364ea10d8db168bc828bdaa670911fcb2a97e4a310f073100906bb5db4b8c2787d5948a645c4464d0d9ee9509b048ce5401a535dccb4724cc92bb7ecda9e38b73f6a942bfb8c5ddd47d80e1ffffdaa90ae55b6e5188a1868715edf"}, 0x1c6}) r5 = syz_open_dev$loop(&(0x7f0000001c00), 0x27f, 0x0) mount$fuse(0x0, &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), 0x84, &(0x7f0000001cc0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x508390970d73e347}}, {@blksize={'blksize', 0x3d, 0x2800}}, {@default_permissions}], [{@defcontext={'defcontext', 0x3d, 'root'}}]}}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001dc0)=""/147) stat(&(0x7f0000001ec0)='./file0\x00', &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001f80)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000002080)=0xe8) r8 = getegid() getgroups(0x9, &(0x7f00000020c0)=[0xee01, 0xee01, 0xee01, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xee00]) newfstatat(0xffffffffffffff9c, &(0x7f0000002100)='./file0\x00', &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresgid(&(0x7f00000021c0), &(0x7f0000002200)=0x0, &(0x7f0000002240)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000002280)={{0x1, 0x1, 0x18, r5, {r4, 0xee00}}, './file0\x00'}) getresgid(&(0x7f00000022c0), &(0x7f0000002300)=0x0, &(0x7f0000002340)) statx(r0, &(0x7f0000002380)='./file0\x00', 0x800, 0x8, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getegid() fsetxattr$system_posix_acl(r0, &(0x7f0000001e80)='system.posix_acl_access\x00', &(0x7f00000024c0)={{}, {0x1, 0x5}, [{0x2, 0x2, r6}, {0x2, 0x0, r4}, {0x2, 0x2, r4}, {0x2, 0x7, r4}, {0x2, 0x6, 0xffffffffffffffff}, {0x2, 0x7, r7}], {0x4, 0x2}, [{0x8, 0x0, r8}, {0x8, 0x5, 0xffffffffffffffff}, {0x8, 0x0, r9}, {0x8, 0x1, r10}, {0x8, 0x5, r11}, {0x8, 0x3, r12}, {0x8, 0x6, r13}, {0x8, 0x6, r14}, {0x8, 0x2, r15}], {0x10, 0x2}, {0x20, 0x2}}, 0x9c, 0x2) 1.960948256s ago: executing program 7 (id=2000): r0 = socket$packet(0x11, 0x2, 0x300) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r2 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000601, 0xee01, &(0x7f0000000080)={0xfffffffffffffffc, 0x5, 0x0, 0x5}) read$FUSE(r1, &(0x7f0000004100)={0x2020}, 0x2020) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000580)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180080000000000000000000000000001801000020786c250000000000202020c31ae04d45f8ff41000000a10000000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000da470010000077ebe00b63be914f2f97f5e63f4a11573f1e15d2f7a93fc7de8a9e30f6ef5d38"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.959431473s ago: executing program 7 (id=2001): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000075344a31853c55474fbb437edd7f33", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0x4, 0x4}, 0x6) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000200)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @val={0x10, 0x1, 0x21}}, 0x21) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0xa}, @void, @val={0xc, 0x99, {0x7, 0x79}}}}}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$OCFS2_IOC_INFO(r0, 0x80106f05, &(0x7f0000005ac0)={&(0x7f0000005900)=[&(0x7f0000000000)=@blocksize={{0x4f32494e, 0x2, 0x10}}, 0x0, &(0x7f0000000400)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0x9}, &(0x7f0000000540)=@label={{0x4f32494e, 0x4, 0x10}}, 0x0, &(0x7f0000000700)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000001}}, &(0x7f0000000740)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000002}, {}, 0x1}, &(0x7f0000000880)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f00000008c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000000900)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000001}}, &(0x7f0000000940)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000000}}, &(0x7f0000000980)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f00000009c0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000000}}, 0x0, &(0x7f0000000a40)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000001}}, &(0x7f0000000a80)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000000}}, &(0x7f0000000b00)=@freeinode={{0x4f32494e, 0x8, 0x10, 0xa0000000}, [{0x8, 0x8}, {0x1, 0x47}, {0xe, 0x84}, {0x8, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0xb01e, 0x8000000000000001}, {0x2, 0x192}, {0x100000000, 0x9}, {0x8, 0xb7c1}, {0xc, 0x6}, {0xfffffffffffffff9, 0xf}, {0xa4, 0x115}, {0x8, 0xd}, {0x0, 0x7fff}, {0x8dc, 0x8001}, {0x9f00, 0x1000000000000}, {0x7, 0x9}, {0x9ea, 0x8}, {0x9}, {0x9, 0x9}, {0x2, 0xc}, {0x6, 0x7fffffffffffffff}, {0x5, 0xaf3}, {0x6}, {0x8001, 0x3}, {0xffffffffffff8010, 0x6}, {0x3, 0x193a}, {0x31b, 0xc}, {0x3, 0x4}, {0x6e6, 0x41}, {0x6, 0xb}, {0x8}, {0x6, 0xffffffffffffffff}, {0x1, 0xffffffffffffff01}, {0x4, 0xfffffffffffffffd}, {0xffffffffffffff78, 0x6}, {0x3, 0x1}, {0x8, 0xfffffffffffffff8}, {0x6, 0x6f}, {0x7, 0xd4}, {0x3, 0xfffffffffffff587}, {0x1, 0x1}, {0x100000000, 0x400000000000000}, {0x1, 0x10000}, {0xffffffffffffffff, 0x6}, {0x3f9a, 0x1}, {0x7, 0xfff}, {0x2, 0x6}, {0x10001, 0x295}, {0x1ff, 0x97}, {0x3, 0x7}, {0xfffffffffffffff8, 0xf4}, {0x0, 0x1}, {0x2, 0xc}, {0xf3b8f95, 0x562}, {0x100000000000000, 0x8}, {0x4000000000000000, 0x9}, {0x3, 0xc8}, {0x1, 0x9}, {0x8, 0x8}, {0x76c4e104, 0xa9f}, {0x80000000, 0x200}, {0x40, 0x80}, {0x6, 0x4}, {0x6, 0x40}, {0x7, 0x80000000}, {0xfffffffffffffff2, 0x8000000000000001}, {0x17b6, 0x9e5}, {0x1000, 0x18}, {0x10, 0x1}, {0x939e, 0xad}, {0x2}, {0x6d1, 0x1}, {0xffff, 0x5}, {0xffffffffffffffff, 0x7fff}, {0x7d, 0x4}, {0x965, 0x800000000000000}, {0x6000000000, 0x400}, {0x4, 0xb}, {0x7, 0x7f}, {0x460, 0x6}, {0x8, 0x6}, {0x8000000000000000, 0xa0a}, {0x5, 0x100000000}, {0x3c0}, {0x100000001, 0x4}, {0x94b, 0x80}, {0x8, 0x4}, {0x40, 0x5}, {0xfffffffffffffff9, 0x80000001}, {0x6, 0x401}, {0x4, 0x6}, {0x8000, 0xc3}, {0x0, 0x100}, {0x9, 0x6e8}, {0xdde7, 0x8}, {0x100000001, 0x3}, {0x6, 0x200}, {0x18, 0x40}, {0x0, 0x4}, {0x8, 0x5}, {0x3, 0x3}, {0x0, 0x4e2ac117}, {0x5, 0x6}, {0x9, 0x200}, {0x26, 0x1}, {0x5, 0x362c}, {0x1, 0xfffffffffffffffa}, {0x7, 0x7}, {0x7, 0x8}, {0xf}, {0x100c000000, 0x401}, {0x1}, {0x5401, 0x7}, {0x8000000000000001}, {0xd, 0x3}, {0x8, 0x7}, {0x180000000, 0x8000000000000000}, {0x3ff, 0x99}, {0x6, 0x7}, {0xd9, 0x6}, {0x2, 0x3be}, {0x5, 0x1}, {0xb21, 0x1}, {0x6, 0x4}, {0x18b, 0x4}, {0x1, 0x81}, {0x7, 0x1d4780000000000}, {0x0, 0xffffffffffff0001}, {0x2, 0x4}, {0xbc7a, 0x48c6}, {0x6, 0x6}, {0x8, 0x7}, {0x7, 0x4}, {0x5fd, 0xffffffffffffff96}, {0xfffffffffffffffb, 0x6}, {0x1, 0x2}, {0x5, 0x10a}, {0x80, 0xcd}, {0x4, 0xd2}, {0x46b7, 0x9ad}, {0x12af, 0x7}, {0xfffffffffffffff8, 0x10001}, {0x1, 0xb}, {0x1, 0x4d1}, {0x4, 0x10001}, {0x1, 0x9}, {0x1, 0x100000000}, {0x0, 0x40}, {0x7fffffffffffffff, 0x7}, {0x4, 0x6}, {0x5, 0x4}, {0x4, 0xfff}, {0x1, 0x4}, {0x1, 0x1}, {0x5, 0x6}, {0x9, 0x9}, {0x0, 0x2}, {0x1, 0x6}, {0x46d7, 0x9}, {0xcff, 0x6}, {0x0, 0x3}, {0x2, 0x1e0}, {0x0, 0x8000}, {0x3, 0x6}, {0xe, 0x4c}, {0x800, 0x581}, {0x7fff, 0x6}, {0x3, 0x7}, {0x3, 0x1}, {0x8, 0x7}, {0xd, 0x9}, {0x5, 0x7}, {0xb, 0x2}, {0x8000000000000000, 0xdc80}, {0xcf, 0x4}, {0x6, 0x1ff}, {0xffffffff, 0x7}, {0x6, 0x101}, {}, {0x10001, 0x8}, {0x7, 0x9}, {0xffff, 0x5}, {0x43c, 0x1}, {0x3, 0x6}, {0x883c, 0x6}, {0xfff, 0xcf3}, {0x10001, 0x60f65796}, {0x3, 0x7}, {0x3, 0xfffffffffffffff9}, {0x1}, {0x0, 0x3}, {0x6, 0x7b}, {0x1, 0x6}, {0x4, 0x8}, {0x8, 0x20}, {0x180000, 0x101}, {0x0, 0xffffffffffffff77}, {0xff, 0x8}, {0x5}, {0x8, 0x7}, {0x40}, {0x7, 0xc}, {0x8, 0x7}, {0x4, 0x3}, {0x1, 0x7}, {0x2, 0xc}, {0x3}, {0x2, 0x9}, {0x9c4, 0x2}, {0x7, 0x1}, {0x9, 0x8}, {0x9, 0x4}, {0x9, 0x957}, {0xfff, 0xfff}, {0x8000}, {0x0, 0x9}, {0x7, 0x5}, {0x9, 0x1}, {0x5, 0xeaa}, {0x3, 0x5}, {0x6, 0x401}, {0x7, 0x13d8}, {0x200, 0x7}, {0x8e, 0x2}, {0x2800000, 0xd}, {0x9000000000000, 0x3}, {0x0, 0xd6a3}, {0x0, 0x9}, {0xfffffffffffffffe, 0x2}, {0xa13}, {0x300000000000, 0x9}, {0xb7}, {0x3ff}, {0xffff, 0x9}, {0x2}, {0x4, 0x1}, {0x2, 0x8}, {0x3, 0x376}, {0x9713, 0x8}, {0xb016, 0x3}, {0x5, 0xb4}, {0x5, 0xd}, {0x3, 0x4}, {0xffffffffffffffff, 0x70f}, {0x9, 0x8}, {0x3}, {0xd, 0x9}, {0x5, 0x5}, {0x2793, 0xfb}, {0x3, 0x4}, {0xffffffff, 0x51e}, {0xf, 0x1}, {0x1, 0x81}]}, &(0x7f0000001b40)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f0000001b80)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000001bc0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000001}}, 0x0, &(0x7f0000001c40)=@features={{0x4f32494e, 0x6, 0x10, 0x20000000}}, &(0x7f0000001c80)=@label={{0x4f32494e, 0x4, 0x10, 0x40000001}}, &(0x7f0000001d00)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0xa4}, &(0x7f0000001e40)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000000}}, &(0x7f0000001ec0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000001f00)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000001}}, &(0x7f0000001f40)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f0000001fc0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0x4, 0x7}, {0x2, 0x4}, {0xfffffffffffffffe, 0x80000000}, {0x81, 0x7d}, {0xfffffffffffffff3, 0x2}, {0x7, 0x3}, {0x8, 0x5}, {0x5, 0x6}, {0xb, 0x4}, {0x6, 0x7}, {0xb57, 0x29e}, {0x7ed, 0x8}, {0xd8d}, {0x0, 0x5}, {0x6, 0x4d96}, {0x5, 0xff}, {0x4, 0x2}, {0x80, 0x1}, {0xff2}, {0x3e2, 0x7}, {0x962, 0x5}, {0x1, 0x9}, {0x0, 0x1ce}, {0x9000000000000, 0x8}, {0x6, 0x7}, {0x1, 0x9}, {0x6, 0x3}, {0x7ff, 0x8}, {0xde, 0x8}, {0x4, 0x75}, {0x3, 0x8}, {0x0, 0x9}, {0x9, 0x722b}, {0x8000000000000000, 0x8000000000000000}, {0x7ff, 0x8000000000000000}, {0xffffffffffffffff, 0x9}, {0x400, 0x1}, {0x24a0, 0x2}, {0x4, 0x8000000000000000}, {0x9, 0xc000000000000}, {0x7, 0x5a}, {0x7fff80, 0x6}, {0xffffffff, 0x1}, {0x1, 0x2}, {0x3b86}, {0x80, 0x4c1f}, {0x2, 0xfffffffffffffffd}, {0x9, 0x80}, {0x1d2a}, {0xaf3e, 0x5}, {0xffffffffffff6a84, 0x5}, {0xffff, 0xf7}, {0xc, 0x6}, {0x2, 0x1}, {0x8000000000000000, 0x6}, {0x400000000}, {0xd, 0x47ff}, {0x137, 0x4}, {0x81, 0x3}, {0x2, 0x80}, {0x2, 0x100}, {0x7ff, 0x8}, {0xffffffffffff8001, 0x6}, {0x6}, {0x7, 0x9}, {0xb6a1, 0xffffffff}, {0x3, 0xac}, {0x5, 0x3}, {0x0, 0xdd}, {0x4, 0x400}, {0x0, 0x2}, {0x1, 0x3}, {0x8, 0x81}, {0xbedf, 0x8af}, {0x1000, 0x10001}, {0x4, 0x4}, {0x1ff, 0x59f83bd5}, {0x9, 0x68}, {0x2, 0x4}, {0x2, 0x1}, {0x3, 0x100000000}, {0x3, 0x45}, {0x10, 0x3}, {0x1, 0x2}, {0x2, 0x78c0}, {0x4, 0x2}, {0x1, 0x1}, {0x1a6, 0x8}, {0x1, 0x6}, {0x1ff, 0xff}, {0x4, 0x8}, {0x5, 0x8}, {0x7, 0xf487}, {0x9, 0x1}, {0x10000, 0xffffffffffffffff}, {0x0, 0x7}, {0x2, 0x8001}, {0xb, 0x24000}, {0x0, 0x6}, {0x5, 0x5}, {0x3ff, 0x3ff}, {0x1, 0xe6}, {0x74, 0x2}, {0x1, 0xa31}, {0x8, 0x5}, {0xfffffffffffffff8, 0x100000001}, {0x4, 0xf}, {0x23, 0x7}, {0x40000}, {0xffffffffffffffff, 0x1}, {0x13, 0x7}, {0x8000}, {0x100000001, 0x8000000000000000}, {0x8, 0x7}, {0x8}, {0x7, 0x7}, {0x2, 0x8}, {0xf30, 0xffffffff}, {0x0, 0x401}, {0x400, 0x7fffffffffffffff}, {0x8, 0xff}, {0x80}, {0x3038, 0x80000000}, {0x1, 0x189}, {0xf4, 0x80000001}, {0x3, 0x10}, {0x7fffffffffffffff, 0xfffffffffffffffe}, {0x8, 0x5}, {0xa179, 0xfff}, {0xf927, 0x6000}, {0x8}, {0x5, 0xfffffffffffffedf}, {0xf2a8, 0x8}, {0x3}, {0x400, 0x7}, {0x5, 0x2}, {0xffffffff80000000, 0x1000}, {0x7ff, 0x5}, {0xfffffffffffffffb, 0x2}, {0xffff, 0x5}, {0x0, 0x9}, {0x2, 0x9}, {0x9, 0x2}, {0x6, 0x3}, {0x4, 0x9}, {0x8}, {0x5, 0x31}, {0x0, 0x7ff}, {0x8, 0x5}, {0xff, 0x7}, {0x3, 0x7}, {0x3, 0x3}, {0x400, 0x35336528}, {0x1, 0x40}, {0x6, 0x9}, {0x0, 0x7}, {0x6, 0xfffffffffffffffa}, {0x3, 0x5}, {0x7, 0x1b}, {0x81, 0x8}, {0x1caa, 0x3}, {0x485a, 0x5d3}, {0x80, 0x9}, {0x0, 0x6}, {0x7}, {}, {0x741d, 0xffffffffffffffff}, {0x2, 0xfff00}, {0x9, 0xfffffffffffffff7}, {0x0, 0x4}, {0x7, 0x6}, {0x7, 0x63d}, {0x7, 0x5}, {0x5, 0xcfb}, {0x401, 0x5}, {0x6, 0x71c6}, {}, {0x5a, 0x7fff}, {0x40}, {0xffffffffffff9add, 0x80}, {0x4, 0x1}, {0x7, 0x354}, {0x3, 0xa}, {0x808000, 0x800}, {0xc0ef, 0x79cb}, {0x4, 0xdc}, {0x6, 0xee40}, {0xc91, 0x3}, {0x2, 0xb3e8}, {0x74dedf7b}, {0x6, 0xe6a}, {0x9, 0x6}, {0x200, 0x2}, {0x8, 0x8}, {0x2, 0xa}, {0x0, 0x100}, {0x8, 0x6}, {0x4, 0x800}, {0x1000, 0x5}, {0xf7, 0x7fffffff}, {0x0, 0x2}, {0x10000, 0x8}, {0x9, 0xfffffffffffff001}, {0x1, 0x7}, {}, {0x1, 0x6e54}, {0xff, 0x6}, {0x3}, {0x7fff, 0x99e}, {0x1000, 0x7fffffffffffffff}, {0x8, 0x4f}, {0x4, 0x8}, {0x9, 0x102}, {0x0, 0x3}, {0xfffffffffffffff9, 0x7}, {0x94, 0x7fff}, {0x80000001, 0x6}, {0x4, 0xd}, {0x9, 0x2}, {0x4}, {0x1, 0xfff}, {0x3f96}, {0x400, 0x100}, {0x9, 0xffffffff}, {0x4, 0xd9c}, {0x100000001, 0x6}, {0x61}, {0x2, 0xd0fd}, {0xc000000000, 0x8000000000000001}, {0x101, 0xa4}, {0x8a56, 0x3}, {0x100000000, 0x5}, {0x3}, {0x3, 0x8}, {0x8, 0x1ff}, {0xe0000000000, 0x8}, {0x6160, 0x874}, {0xfffffffffffffff1, 0x5}, {0x2, 0x8}, {0x8, 0x1}, {0x62, 0x100000000}, {0x426, 0x2000000000000}, {0x1, 0x100000001}, {0xe28, 0x3}, {0xffff, 0x5}, {0xfffffffffffffff9, 0xfffffffffffffff9}, {0x8, 0x8}, {0x3, 0x6}, {0x7, 0x9}, {0x5e, 0x7ff}, {0x200000000000000}, {0x335, 0xffffffff}, {0x800, 0x7f}, {0x5, 0x9}, {0x4, 0x4}]}, &(0x7f0000003000)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000000}}, 0x0, &(0x7f00000030c0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0x4}, &(0x7f0000003200)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000000}}, &(0x7f0000003280)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f00000032c0)=@label={{0x4f32494e, 0x4, 0x10}}, &(0x7f0000003340)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000001}}, &(0x7f0000003380)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f00000033c0)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000003400)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, &(0x7f0000003440)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f0000003480)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0x81}, &(0x7f00000035c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000001}, [{0x5, 0xc}, {0x2, 0x200}, {0x401, 0x7}, {0x0, 0x2}, {0x24000000000, 0x2f}, {0x8, 0x401}, {0x101}, {0x4, 0x8}, {0x2, 0x8}, {0x6, 0xb60}, {0x9, 0x1}, {0x7fffffff, 0x3}, {0x4, 0x4}, {0xffffffffffffffff, 0x7}, {0x2, 0xbf}, {0x8, 0x8000000000000000}, {0xfffffffffffffffe, 0x6}, {0x5, 0x9}, {0x5, 0x4}, {0x5, 0x307}, {0x8, 0x8}, {0x6}, {0x2, 0x3}, {0x2, 0x79}, {0x8000000000000001, 0x1}, {0x1ff, 0x5e}, {0x7ff, 0xf}, {0x8, 0x8000}, {0xe}, {0x131, 0x4}, {0x1, 0x2}, {0x7c6, 0x3}, {0x5ff, 0xff}, {0x1, 0x80}, {0x8, 0x1}, {0x0, 0xe}, {0x3, 0x5e71}, {0x1000, 0x9}, {0x0, 0x5}, {0x21a16357, 0x10000}, {0xc46d, 0x8}, {0x7, 0xfff}, {0x1, 0x5a4}, {0x73, 0xef4}, {0xfb4, 0x1000000b4b}, {0x1, 0x3}, {0xffffffffffffff7c, 0x5}, {0x7, 0x5}, {0x9}, {0x2, 0x401}, {0x2}, {0x100, 0x1000}, {0x5, 0x8000}, {0x8, 0x6}, {0x7, 0x7}, {}, {0x1cf6ef48, 0xa0000}, {0x6}, {0x3, 0x1741}, {0x6, 0x4}, {0x8, 0xcd}, {0x7, 0xffffffffffff12c9}, {0x8, 0x2}, {0x2, 0x7}, {0x1, 0x8000}, {0x8001, 0x1}, {0x9, 0x341}, {0x9, 0x2}, {0x0, 0x4}, {0xb1, 0x3}, {0x8, 0x3}, {0x5}, {0x0, 0x10000}, {0x8000000000000000, 0x2}, {0xb, 0xedff}, {0x3, 0x3}, {0x65bf0fa9}, {0x9, 0x2}, {0x4}, {0x400, 0xfffffffffffffffe}, {0x5, 0xb34c}, {0x6, 0x9}, {0x98, 0x2}, {0x6, 0x8f}, {0x6, 0xc9}, {0xfffffffffffff801, 0x5}, {0x8}, {0x3, 0x3}, {0x3, 0xf8}, {0x2219, 0x7a}, {0x1, 0x9}, {0x7fff, 0x1}, {0x6, 0x8}, {0x9, 0xfffffffffffffff8}, {0x4, 0xa216}, {0x9, 0x1}, {0xfff, 0xfff}, {0x1, 0x1ff}, {0x42, 0x7}, {0x5, 0x8}, {0x0, 0xfffffffffffffff1}, {0x5, 0xfffffffffffffff7}, {0x52a4, 0x1}, {0x4, 0xf3}, {0x401, 0x50000000000}, {0x6, 0x1}, {0x1ff, 0x5}, {0x6, 0xf16}, {0x1ff, 0x9}, {0x6, 0xfff}, {0x5, 0x7f}, {0xb, 0x8000}, {0x3, 0x5}, {0xfffffffffffffffc, 0x8}, {0x0, 0xab}, {0x53, 0x2}, {0x2, 0x7fff}, {0x100000000, 0x5}, {0x0, 0x5}, {0x59, 0x2}, {0xfffffffffffffffc, 0x5}, {0x8, 0x1}, {0x8000, 0x16}, {0x1, 0xe}, {0x4, 0x8}, {0xfffffffffffffffe, 0xffffffffffff59e3}, {0x7, 0x1}, {0x100000001, 0x7}, {0x0, 0x5}, {0x6, 0xdd8d}, {0x0, 0x80000001}, {0xc, 0x5}, {0x2, 0x2}, {0xfe30, 0xb946}, {0x5, 0x8000}, {0x2, 0x4}, {0xffffffffffffffff, 0x200}, {0x246c4f19, 0xcfd}, {0x9, 0xffffffff80000001}, {0x81, 0x2}, {0x6, 0x5}, {0x6, 0x7ff}, {0x2, 0x2}, {0xff, 0x9}, {0x9, 0x9}, {0x1, 0x800}, {0xffffffffffff514e, 0x1}, {0x9, 0x40000}, {0xfffffffffffffff8, 0x1ff}, {0x9, 0x200}, {0xff, 0x5}, {0xbc, 0x80000000}, {0xffffffffffffff80, 0x3}, {0x3, 0xb}, {0xcabd, 0x899}, {0x6698, 0x2}, {0x1, 0x401}, {0xffffffffffffffff, 0x4}, {0x4, 0xff}, {0x0, 0xee}, {0x2, 0x5}, {0x2, 0x7}, {0x7, 0x1}, {0x3ff, 0x4}, {0x5, 0x1c0000000}, {0x2, 0x5}, {0x5, 0xfffffffffffffffe}, {0x8, 0x4}, {0xfffffffffffffca9, 0xfffffffffffffff5}, {0x6, 0x9}, {0x3, 0x7}, {0x9, 0xfd}, {0x5f7, 0x7ff}, {0x3, 0x2}, {0x4, 0x6}, {0x5, 0x2}, {0x1, 0x8}, {0xaf36, 0x3}, {0x401, 0x5f}, {0x2, 0x8}, {0x8000000000000001, 0x7}, {0x229, 0x1}, {0x4f, 0x1}, {0x80000000, 0x2}, {0x2, 0x5}, {0xfffffffffffff000, 0x8}, {0x4b14, 0x8}, {0x8, 0xfffffffffffffffa}, {0xbd5}, {0x2, 0x8}, {0x7fff, 0x4}, {0x7fffffffffffffff, 0x39}, {0x0, 0xf2}, {0xfffffffffffffb1b, 0x6}, {0x80000000, 0x1}, {0x1, 0x9}, {0x1, 0xb}, {0x9, 0x7}, {0x7, 0x8001}, {0x4, 0x7c01b379}, {0x3, 0x3}, {0x6, 0x6}, {0x8000000000000000}, {0x37cd, 0x401}, {0x8, 0x3}, {0x7, 0x6}, {0x0, 0x2}, {0x80000000, 0x4a8c}, {0x100, 0xd15}, {0x442, 0x106}, {0x1, 0x6}, {0x0, 0x80000000}, {0x5, 0xd}, {0x7f1865f3, 0x50}, {0x5, 0xffffffffffffffff}, {0xa, 0x5}, {0x10000, 0xef4}, {0x9, 0x10000}, {0x4, 0x6}, {0x9, 0x3ff}, {0x1ff, 0x6}, {0x14, 0xb8}, {0x2, 0x3}, {0xf, 0x7}, {0x0, 0x8}, {0x2e5, 0x1}, {0x4, 0x6}, {0x3, 0x6}, {0xcc4d, 0x81}, {0x5, 0x8}, {0x7fff, 0xfad}, {0x6, 0x5}, {0x7, 0x70000}, {0x82f0, 0x7fffffffffffffff}, {0x1000, 0x7}, {0xd, 0x4}, {0x8, 0x7}, {0x4, 0x3e8}, {0x2, 0x7ff}, {0x9, 0x2}, {0x7fff}, {0xfffe00000000, 0x3}, {0x0, 0x115}, {0x5, 0x9}, {0x10001, 0x4}, {0x2, 0x7f}, {0x8, 0xffffffff}, {0xffffffffffffffff, 0x594f}, {0x9, 0x2}, {0x7, 0x7fffffff}, {0x4, 0x1ff}, {0x0, 0x3}, {0x498, 0x9}, {0x9, 0x1000}, {0x2, 0xffffffffffff8000}]}, 0x0, &(0x7f0000005640)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0xb}, &(0x7f0000005780)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f00000057c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f0000005800)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f0000005840)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f0000005880)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f00000058c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}], 0x32}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000009000000000000000300", @ANYRES32=r4, @ANYBLOB="18005e800c000100ffffffff000000000800020000000000"], 0x34}}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0xffffd000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='mysys/bus/usb/devices/usb2/bNumInterfaces\x00', 0x0, 0x0) read(r7, &(0x7f0000000700)=""/16, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @multicast2}, &(0x7f0000000080)=0xc) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653e00083a00fe800000000000000000000000000000fe8000000000000000000000000000aa80009078400000007a903faeedd3c7"], 0x0) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d38461", @ANYRESHEX]) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76", 0x92}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9c", 0x2d}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3", 0x1b}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a88", 0x15}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67", 0x8b}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r9 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r9, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) 1.88123588s ago: executing program 6 (id=2002): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)}], 0x2}], 0x1, 0x40800) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000140)={0x1, 0x6f7, 0x809d, 0xfff9}) (async) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) (async) getpriority(0x1, 0x0) (async) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) (async) write$vhost_msg_v2(r2, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000000400)=""/192, 0xffffffdc, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x3}}, 0x48) (async) ioctl$sock_netdev_private(r0, 0x8949, &(0x7f0000000000)) (async) r3 = syz_clone(0x40000, &(0x7f0000000380)="83f3e5e7bce3a1dc8069f8003b3f8596a44b9645338c89b051d0554ed0df6e3e5ee5e3332b6edd4c7cd423230de3f40591b7dc65059fe027826d8ff23a233ea2319a2d25a9aa", 0x46, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="d37b398758f5fd33cfb1efce2931747c8b9796705bfa88d410cb3f9d017bb5d2616a7d3d122abc4f26638bc46075e420a457ef9cbdb4b44d33fe620c1fc027dbcfb05e02e94ff168961e2859b2b156") rt_tgsigqueueinfo(r3, 0x0, 0x2, &(0x7f0000000500)={0x23, 0x4, 0x7}) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x800, 0x31, 0xffff1891, 0x0, 0xb23be0fbe66397b6, 0x9, 0x1b}, 0x9c) (async) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r5, 0xc0207511, &(0x7f0000000200)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000700)=r6) (async) r7 = socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e24, 0x4f0e, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff}}, [0x1, 0x0, 0xb, 0xfffffffffffffffb, 0x0, 0xd, 0x2, 0x100, 0x3, 0x100, 0x9, 0x7, 0x5f5e0, 0x4]}, &(0x7f00000006c0)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000340)={r8, 0x84, &(0x7f00000007c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, @in6={0xa, 0x4e23, 0x2, @private1, 0x1}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f00000000c0)={r10, @in6={{0xa, 0x4e21, 0x0, @empty, 0x4}}, 0x0, 0x4}, 0x90) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="4f1a000000000000240012800b00010067656e657665000014000280050008000100000005000c000100000008000a00", @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000580)=@assoc_id=r10, 0x4) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0xc0a3}, &(0x7f00000000c0)=0x8) 1.880933763s ago: executing program 6 (id=2003): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) (async, rerun: 64) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000, 0x4, &(0x7f00000f6000/0x3000)=nil) (async, rerun: 64) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3e) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000006000/0x400000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) 1.880571705s ago: executing program 6 (id=2004): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x3e, 0x1}) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x40000, 0x2, 0x1}, 0x18) syz_usb_connect(0x2, 0x3f, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x48, &(0x7f0000000500)={'trans=virtio,', {[{@dfltuid}]}}) 1.160374311s ago: executing program 7 (id=2005): r0 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000040)={0x30e32c1, 0x1, @qpsk={0x7, 0x1d}}) 1.160032374s ago: executing program 7 (id=2006): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, r1, 0x300, 0x70bc2d, 0x21dfdbff, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xc}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008850}, 0x40000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r5}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb4, 0x0, 0x200, 0x10e, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xd8}, {0x6, 0x11, 0xb}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xfffffea0}}, {0x8, 0xb, 0x2}, {0x6}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000100)) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r5, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000280)={0x28, r7, 0xff99, 0x8, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x11}, @void, @val={0xc, 0x99, {0xfffffffe, 0x1d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1c4}, 0x4) 1.081051193s ago: executing program 7 (id=2007): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) poll(&(0x7f00000000c0)=[{r3, 0x1a}], 0x1, 0x81) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000140)={0xfe, 0x7, 0x9, 0x7, 0x2, 0x7, 0x6, 0x4}, &(0x7f0000000180)={0x3, 0xc, 0x3, 0xffffffff, 0x1, 0x6, 0xffffffffffffffff, 0x4}, &(0x7f00000001c0)={0x7, 0x5, 0x14, 0x80, 0x4, 0xfffffffffffffffe, 0xe10, 0x8}, &(0x7f0000000280)={r5, r6+10000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) ppoll(&(0x7f0000000100)=[{r1, 0x4559}], 0x1, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.020702136s ago: executing program 4 (id=2008): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x150, 0x0, 0x3, [{{0x4, 0x3, 0x7ff, 0x7fffffffffffffff, 0xfff, 0x7ff, {0x7, 0x9, 0x3, 0x6, 0x7, 0x2, 0x2, 0x1, 0x7, 0xa000, 0x0, r4, r5, 0x1, 0x1}}, {0x0, 0x7, 0x1, 0x300, '\x00'}}, {{0x4, 0x3, 0x7fffffff, 0x3, 0x9, 0x10001, {0x6, 0x9, 0x4, 0x46a1, 0x6, 0x0, 0x6, 0x1, 0x100a, 0xa000, 0xde, 0x0, r5, 0x8001, 0x80000000}}, {0x1, 0x1, 0x1, 0x32540194, '\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r6, 0x0, 0x0) ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f0000000040)={0x0, {0x0, 0x0, @vsb}}) r7 = accept4(r0, 0x0, 0x0, 0x0) close_range(r7, r7, 0x0) sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x23) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f0000000140)=""/86, 0x56, 0x0, &(0x7f0000000440)=""/238, 0xee}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x1}, 0x10, r8}, 0x94) close(0xffffffffffffffff) 851.069693ms ago: executing program 4 (id=2009): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x183, 0x9}]}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) 801.137158ms ago: executing program 4 (id=2010): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105002, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x6, 0x0, 0x0, 0x0, 0x2, 0x3e, 0x9, 0x7c, 0xfffffffffffffcdb, 0x2, 0x7f, 0x6, 0x38, 0x1, 0xfffe, 0x3, 0x3}, [], "32f15810724bf6ff26a2c2263b000000010067419e000ceb84e452c759d366f6ec53177b90ed2e41ef688d82326b35d29916b0ebafdda8dd70"}, 0x78) r1 = socket(0x840000000002, 0x3, 0xff) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r2, &(0x7f0000001300)=ANY=[@ANYBLOB="10000000f1000300", @ANYRES8=r2], 0x0) sendmmsg$inet(r1, &(0x7f0000000580)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000300)="a905000000407464000100000000000000e5c0d8af7a6417e436a106993e1e5ad8311dab", 0x2c}], 0x1}}], 0x1, 0x800) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x1000) 750.85994ms ago: executing program 4 (id=2011): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x7000000) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x2, 0x4, 0x0, 0x20000, 0x4}) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x5e) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ZONE={0x6, 0x4, 0x2e4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000006c0)="e8710e444d50a969ff678371e3214aeee71dee3819271482a4975a52c18b9b8b4db3945d1032005eabe97b4dc33a47d3a158da98255ccdd4c15eb6c9857345444d8456d30026b433a2efdd5b00186f35cdcdb93a4722bf356a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e8927d2a8103ef2f4b93766b756b66f74f46cf801704d27a8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511ce678c0bb8e26d7b48241847bf9e343ef4e55d45e2a0000000000000000000", 0xd6}, {&(0x7f0000000400)="04c6a9c756754e10ed8d88c06d7a674db97cd0e21437530a3945ac896fa7f8e368f87de990e40a896805e49ce1e13103d82fffe82237f587e63d95e01ef451eaba2dd01c56e7f23c1fcccbea54dae8e295f2e533e4a34175026a9964eebc1aaae05e44a19a27bee2f591abe2f456448754670a7c3e2e4b47a71b", 0x7a}, {&(0x7f0000000300)}], 0x3}], 0x1, 0x40800) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000400)=""/138, 0x8a}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2}, 0x10040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 750.589051ms ago: executing program 4 (id=2012): ioprio_set$uid(0x3, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44b31e3a0ea28ea9}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc040005}, 0x4000000) 660.714516ms ago: executing program 4 (id=2013): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='0000:00:01.0\x00', 0xd) write(0xffffffffffffffff, &(0x7f0000000900), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000b00)='0000:00:03.0\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/bus/pci/devices/0000:00:04.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000d00)='0000:00:04.0\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/bus/pci/devices/0000:00:05.0/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000f00)='0000:00:05.0', 0xc) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@ipv6_newroute={0x1c, 0x18, 0x111, 0x0, 0x25dfdbfd, {0xa, 0x60, 0x0, 0x0, 0xff, 0x0, 0xfd, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x1810}, 0x8c854) 130.715335ms ago: executing program 6 (id=2014): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000040)={{}, {}, [], {0x4, 0x6}, [], {0x10, 0x6}}, 0x24, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x5}) (async) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x5}) ioctl(r0, 0x8b32, &(0x7f0000000040)) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, 0x0) lchown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x44014) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xb0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0xb0}}, 0x0) acct(&(0x7f0000000040)='./file0\x00') 129.493266ms ago: executing program 6 (id=2015): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) unshare(0x2c020400) flock(0xffffffffffffffff, 0xa422928b49da8f63) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="b4020000000000006118500000000000850000000700"/32], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1000}, 0x10}, 0x94) 129.20131ms ago: executing program 5 (id=2016): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x4048004) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) (fail_nth: 5) 353.44µs ago: executing program 6 (id=2017): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20c40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) (async) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x40000001, 0x5, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x6, 0x10000000000, 0x1005d, 0x8, 0x42, 0x400000000000004, 0x2, 0x10, 0x4, 0x8000000000000000, 0x1, 0xffffffffffff9867, 0xd, 0x6, 0x4, 0x8], 0x0, 0x310900}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x6, 0x10000000000, 0x1005d, 0x8, 0x42, 0x400000000000004, 0x2, 0x10, 0x4, 0x8000000000000000, 0x1, 0xffffffffffff9867, 0xd, 0x6, 0x4, 0x8], 0x0, 0x310900}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) (async) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newtaction={0x78, 0x30, 0xb, 0x100, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x2, 0x0, 0x800}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8890}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newtaction={0x78, 0x30, 0xb, 0x100, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x2, 0x0, 0x800}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8890}, 0x0) write$uinput_user_dev(r4, &(0x7f000001c340)={'syz0\x00', {0xc, 0x1, 0x3, 0xffff}, 0x3c, [0x6169, 0xad, 0x6, 0x9, 0x0, 0x10001, 0xffffff1f, 0x1, 0x8, 0x2, 0x5, 0x5, 0x3, 0x24, 0x9, 0x3, 0x59, 0x0, 0x7, 0xffffff00, 0x4, 0xff, 0x78ea, 0x8, 0x3, 0x1, 0x80000000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x400, 0xffffffff, 0x4, 0x2, 0x8, 0x5, 0x5, 0x1, 0x0, 0x3124, 0x10, 0x4, 0x1, 0xfb, 0x7a, 0xc, 0x2, 0x3ff, 0xffffffff, 0x10001, 0x200000, 0xff, 0xe24, 0x8, 0x0, 0x40000000, 0x4, 0x78, 0xa, 0x9, 0x3, 0x6], [0x2, 0x1, 0xa000, 0x0, 0x9, 0x10001, 0x997f, 0x8, 0x80000001, 0x7, 0x22, 0x9, 0xb1, 0xfffffff8, 0x0, 0x8, 0x4fef, 0xffff25a3, 0x7ff, 0x9, 0x3, 0x9, 0x1, 0x7, 0xee1, 0x7, 0x8001, 0x5, 0x7, 0x2, 0x200, 0x8d, 0x0, 0xa, 0x6, 0xfffffffc, 0x9, 0xfffffff9, 0xfff, 0x8, 0xdf, 0x1f3c, 0x3, 0x2, 0x1, 0x1, 0xfffffffb, 0xbbad, 0x0, 0x10000, 0x4, 0x7, 0xfffffe01, 0xbfe, 0x7fff, 0x9, 0x9, 0x4, 0x5b58, 0x5, 0x10, 0x4, 0x6, 0x5], [0x8, 0x5, 0x7, 0x530b93b0, 0x1000, 0x2, 0x6, 0x1ff, 0x0, 0x2, 0x8001, 0x6, 0xf, 0x6, 0x1, 0x1, 0x9e24, 0x3, 0x1, 0x9, 0x8, 0x100, 0x9, 0x7f, 0x7, 0x2, 0x1d6, 0x3, 0x8, 0x3, 0x0, 0x3, 0x9, 0x6, 0x5, 0x80000000, 0x2546, 0x0, 0x0, 0x0, 0x1, 0xfe1d, 0xd9, 0x5d1a, 0x101, 0x10000, 0xb, 0x4c6, 0x5, 0x0, 0x2, 0x3, 0x40, 0x2, 0x1, 0x3, 0xd73, 0x10000, 0x1000, 0xf, 0x7, 0xfffffffa, 0x5, 0x5], [0x8, 0x7c7, 0x4, 0x8, 0xea, 0xffffff7f, 0xa08, 0x3, 0x10, 0x7, 0x0, 0x7f, 0x2, 0x3, 0x5, 0x5, 0x3ff, 0x3af9, 0xe9bf, 0x81, 0x37, 0x1, 0x3, 0x2, 0x8, 0x7ff, 0x5, 0x7, 0xff, 0x3, 0x15e1, 0x7, 0x5, 0x0, 0x9, 0x6, 0x7, 0xdc, 0x0, 0x8, 0xc, 0x60, 0xb, 0x6, 0x81, 0x70, 0x2d79, 0x4, 0x6, 0x8001, 0xb, 0x0, 0x9, 0x5, 0x2, 0x6, 0x800, 0x4, 0x8, 0x9, 0x7, 0x2, 0x2, 0x5]}, 0x45c) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/address_bits', 0x80040, 0x2) ioctl$VHOST_VDPA_GET_VRING_NUM(r6, 0x8002af76, &(0x7f0000000240)) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140)) pwritev(r7, &(0x7f0000000100)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x0) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x16502, 0x0) ioctl$PTP_PEROUT_REQUEST(r8, 0x40383d03, &(0x7f0000000340)={{0x8000}, {0xa, 0x100}, 0xfffffffc}) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000100)='f2fs\x00', 0x0, &(0x7f0000000140)='grpquota') 0s ago: executing program 5 (id=2018): r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000140)) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) capset(&(0x7f0000000080)={0x19980330}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x40084146, &(0x7f0000000080)) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x80984120, &(0x7f00000001c0)) r2 = socket(0x27, 0x3, 0x4) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x310, 0x148, 0x0, 0x148, 0x148, 0x148, 0x278, 0x240, 0x240, 0x278, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@multiport={{0x50}, {0x0, 0x3, [0x4e20, 0x4e21, 0x4e23, 0x4e23, 0x4e20, 0x4e20, 0x4e20, 0x4e00, 0x4e21, 0x4e22, 0x4e23, 0x4e23, 0x4e21, 0x4e21, 0x4e24], [0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1], 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e22, 0x4e24, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4c, 0x100, 0x2}}}, {{@ip={@local, @remote, 0xff000000, 0xffffff00, 'geneve0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x1, 0x2}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x2, 0x3, 0x1, 0x7}}, @common=@ttl={{0x28}, {0x0, 0xa3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x15, 0x5, 0x7, 0x9, 'snmp\x00', 'syz0\x00', {0xf7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x310, 0x148, 0x0, 0x148, 0x148, 0x148, 0x278, 0x240, 0x240, 0x278, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@multiport={{0x50}, {0x0, 0x3, [0x4e20, 0x4e21, 0x4e23, 0x4e23, 0x4e20, 0x4e20, 0x4e20, 0x4e00, 0x4e21, 0x4e22, 0x4e23, 0x4e23, 0x4e21, 0x4e21, 0x4e24], [0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1], 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e22, 0x4e24, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4c, 0x100, 0x2}}}, {{@ip={@local, @remote, 0xff000000, 0xffffff00, 'geneve0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x1, 0x2}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x2, 0x3, 0x1, 0x7}}, @common=@ttl={{0x28}, {0x0, 0xa3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x15, 0x5, 0x7, 0x9, 'snmp\x00', 'syz0\x00', {0xf7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ] speed is unknown, defaulting to 1000 [ 136.951827][ T9831] speed is unknown, defaulting to 1000 [ 136.954413][ T9831] speed is unknown, defaulting to 1000 [ 136.957092][ T9831] speed is unknown, defaulting to 1000 [ 137.080829][ T5817] hsr_slave_0: left promiscuous mode [ 137.083172][ T5817] hsr_slave_1: left promiscuous mode [ 137.085387][ T5817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.087867][ T5817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.091184][ T5817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.093569][ T5817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.095959][ T9813] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 137.139420][ T5817] veth1_macvtap: left promiscuous mode [ 137.141882][ T5817] veth0_macvtap: left promiscuous mode [ 137.144301][ T5817] veth1_vlan: left promiscuous mode [ 137.146616][ T5817] veth0_vlan: left promiscuous mode [ 137.254925][ T9860] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1095'. [ 137.257685][ T9860] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1095'. [ 137.264917][ T9862] ip6t_REJECT: ECHOREPLY is not supported [ 137.266778][ T9863] IPVS: length: 227 != 8 [ 137.311777][ T5817] team0 (unregistering): Port device vlan0 removed [ 137.319955][ T5096] Bluetooth: hci1: unexpected event for opcode 0x080e [ 137.323260][ T42] audit: type=1400 audit(1784997350.921:1693): avc: denied { listen } for pid=9861 comm="syz.4.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 137.490878][ T9831] batadv_slave_1: left promiscuous mode [ 137.633208][ T5096] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 137.647087][ T9878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9878 comm=syz.5.1100 [ 137.684720][ T5450] 8021q: adding VLAN 0 to HW filter on device eth10 [ 137.738132][ T5096] Bluetooth: hci3: command tx timeout [ 137.764517][ T9873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1098'. [ 137.844495][ T5450] 8021q: adding VLAN 0 to HW filter on device eth11 [ 137.906105][ T9901] bond1 (unregistering): Released all slaves [ 137.971636][ T9905] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.1105'. [ 138.003962][ T5450] 8021q: adding VLAN 0 to HW filter on device eth12 [ 138.064190][ T9919] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1106'. [ 138.458300][ T5096] Bluetooth: hci2: command 0x0c1a tx timeout [ 138.545931][ T9940] : renamed from vlan0 (while UP) [ 138.798855][ T9951] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1115'. [ 138.844051][ T9955] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1117'. [ 139.050649][ T5838] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 139.199949][ T5838] usb 5-1: Using ep0 maxpacket: 8 [ 139.203520][ T5838] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 139.206170][ T5838] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.209819][ T5838] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 139.212843][ T5838] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 139.215864][ T5838] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.220053][ T5838] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 139.223049][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.297002][ T9969] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 139.334553][ T5818] bridge0: entered promiscuous mode [ 139.460985][ T9982] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1124'. [ 139.490076][ T9979] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.739360][ T9999] bpf: Bad value for 'uid' [ 139.742022][ T9999] overlayfs: failed to resolve './file0': -2 [ 139.818230][ T5096] Bluetooth: hci3: command tx timeout [ 139.951121][T10028] netlink: 'syz.6.1136': attribute type 12 has an invalid length. [ 139.992107][T10029] usbtmc 5-1:16.0: simple usb_control_msg failed -32 [ 139.996141][ T41] usb 5-1: USB disconnect, device number 17 [ 140.057696][T10036] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 140.616099][T10076] Invalid/unusable pipe [ 140.645632][ T41] IPVS: starting estimator thread 0... [ 140.721379][T10056] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.747084][T10080] IPVS: using max 44 ests per chain, 105600 per kthread [ 140.931763][T10056] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.969372][T10107] tipc: Started in network mode [ 140.971016][T10107] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 140.974713][T10107] tipc: Enabled bearer , priority 10 [ 141.058805][T10056] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.112338][T10119] wg0: entered allmulticast mode [ 141.144817][T10056] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.193632][T10121] geneve0: entered promiscuous mode [ 141.257341][ T5817] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.270962][ T5817] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.282722][ T5817] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.292579][ T5817] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.444039][T10127] SELinux: policydb magic number 0x207cff8c does not match expected magic number 0xf97cff8c [ 141.452062][T10127] SELinux: failed to load policy [ 141.497858][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 141.497874][ T42] audit: type=1400 audit(1784997355.091:1716): avc: denied { connect } for pid=10131 comm="syz.5.1169" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 141.602993][T10055] Set syz1 is full, maxelem 65536 reached [ 141.650888][ T42] audit: type=1400 audit(1784997355.251:1717): avc: denied { bind } for pid=10143 comm="syz.6.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 141.658705][ T42] audit: type=1400 audit(1784997355.251:1718): avc: denied { write } for pid=10143 comm="syz.6.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 141.662893][T10146] tmpfs: Unknown parameter 'm' [ 141.711424][T10144] vxcan3: entered promiscuous mode [ 141.765422][T10152] gadgetfs: bound to dummy_udc driver [ 141.837564][T10156] usb usb9: check_ctrlrecip: process 10156 (syz.0.1175) requesting ep 01 but needs 81 [ 141.840744][T10156] usb usb9: usbfs: process 10156 (syz.0.1175) did not claim interface 0 before use [ 141.863329][T10155] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 141.908332][ T5096] Bluetooth: hci3: command tx timeout [ 141.945657][T10163] syzkaller0: entered promiscuous mode [ 141.947629][T10167] netlink: 'syz.0.1177': attribute type 1 has an invalid length. [ 141.947725][T10163] syzkaller0: entered allmulticast mode [ 141.974270][T10169] __nla_validate_parse: 4 callbacks suppressed [ 141.974280][T10169] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1179'. [ 142.012519][ T5818] tipc: Node number set to 4269801492 [ 142.100760][ T42] audit: type=1400 audit(1784997355.701:1719): avc: denied { append } for pid=10177 comm="syz.4.1181" name="usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 142.103518][T10178] xt_hashlimit: size too large, truncated to 1048576 [ 142.155463][ T42] audit: type=1400 audit(1784997355.751:1720): avc: denied { map } for pid=10177 comm="syz.4.1181" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 142.211132][T10191] IPv6: NLM_F_CREATE should be specified when creating new route [ 142.256840][T10196] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.294407][T10200] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1189'. [ 142.520602][T10213] fuse: Unknown parameter 'rootmkre00000 ;g' [ 142.619412][T10217] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1194'. [ 142.623292][T10219] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1194'. [ 142.855516][ T42] audit: type=1400 audit(1784997356.451:1721): avc: denied { bind } for pid=10220 comm="syz.5.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.118234][ T5818] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 143.230957][T10228] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 143.235194][ T42] audit: type=1400 audit(1784997356.831:1722): avc: denied { bind } for pid=10225 comm="syz.0.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 143.268470][ T5818] usb 10-1: Using ep0 maxpacket: 32 [ 143.275080][ T5818] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 143.278471][ T5818] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.285579][ T5818] usb 10-1: config 0 descriptor?? [ 143.305615][ T5818] as10x_usb: device has been detected [ 143.310516][ T5818] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 143.347581][ T5818] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 143.380613][ T42] audit: type=1400 audit(1784997356.981:1723): avc: denied { firmware_load } for pid=5818 comm="kworker/3:4" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 143.396746][ T5818] as10x_usb: error during firmware upload part1 [ 143.397377][T10232] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 143.400130][ T5818] Registered device nBox DVB-T Dongle [ 143.492299][ T50] usb 10-1: USB disconnect, device number 6 [ 143.504865][ T50] Unregistered device nBox DVB-T Dongle [ 143.505720][ T50] as10x_usb: device has been disconnected [ 144.410217][ T42] audit: type=1400 audit(1784997358.001:1724): avc: denied { mount } for pid=10248 comm="syz.0.1204" name="/" dev="autofs" ino=42401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 144.437476][T10249] overlayfs: empty lowerdir [ 144.529435][ T42] audit: type=1400 audit(1784997358.131:1725): avc: denied { append } for pid=10257 comm="syz.0.1206" name="media4" dev="devtmpfs" ino=986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 144.677218][T10266] binder: 10265:10266 ioctl 40809440 2000000021c0 returned -22 [ 144.693564][T10266] binder: 10265:10266 ioctl 89f0 200000004b40 returned -22 [ 144.696406][T10266] binder: 10265:10266 ioctl 8933 200000004d40 returned -22 [ 144.747799][T10279] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1212'. [ 144.752119][T10269] macsec2: entered promiscuous mode [ 144.791615][T10285] syzkaller0: entered promiscuous mode [ 144.793953][T10285] syzkaller0: entered allmulticast mode [ 145.016179][T10290] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 145.049768][T10290] udc usbip-vudc.0: failed to start g1: -19 [ 145.059521][T10290] UDC core: g1: couldn't find an available UDC or it's busy [ 145.241282][T10304] netlink: 348 bytes leftover after parsing attributes in process `syz.6.1220'. [ 145.263042][T10308] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 145.265754][T10308] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 145.271390][T10308] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 145.479662][ T5888] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 145.577807][T10320] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 145.607713][T10324] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1227'. [ 145.642696][T10326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1228'. [ 145.648207][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 145.656068][ T5888] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 145.659878][ T5888] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 145.664537][ T5888] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 145.670161][ T5888] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 145.673649][ T5888] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 145.676798][ T5888] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.681270][ T5888] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 145.684075][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.788735][T10340] erspan2: entered promiscuous mode [ 145.897131][T10302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.902191][T10302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.905270][T10302] xt_cgroup: xt_cgroup: no path or classid specified [ 145.907808][ T5888] usb 5-1: GET_CAPABILITIES returned 0 [ 145.912352][ T5888] usbtmc 5-1:16.0: can't read capabilities [ 145.944749][T10344] netlink: 'syz.4.1234': attribute type 1 has an invalid length. [ 145.956459][T10344] 8021q: adding VLAN 0 to HW filter on device bond4 [ 145.970613][T10344] bond4: (slave geneve2): making interface the new active one [ 145.974550][T10344] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 145.983364][T10344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1234'. [ 145.987658][T10344] block nbd2: Unsupported socket: should be TCP or UNIX. [ 146.032136][T10347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1235'. [ 146.055147][T10347] veth1_to_batadv: entered promiscuous mode [ 146.058203][ T5838] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 146.059897][T10347] netlink: 'syz.4.1235': attribute type 12 has an invalid length. [ 146.064459][T10347] netlink: 'syz.4.1235': attribute type 29 has an invalid length. [ 146.068274][T10347] vivid-000: ================= START STATUS ================= [ 146.073274][T10347] vivid-000: Test Pattern: 75% Colorbar [ 146.075903][T10347] vivid-000: Fill Percentage of Frame: 100 [ 146.079920][T10347] vivid-000: Horizontal Movement: Move Left [ 146.081799][T10347] vivid-000: Vertical Movement: No Movement [ 146.083564][T10347] vivid-000: OSD Text Mode: All [ 146.085083][T10347] vivid-000: Show Border: false [ 146.086563][T10347] vivid-000: Show Square: false [ 146.092394][T10347] vivid-000: Sensor Flipped Horizontally: false [ 146.095081][T10347] vivid-000: Sensor Flipped Vertically: false [ 146.099125][T10347] vivid-000: Insert SAV Code in Image: false [ 146.101163][T10347] vivid-000: Insert EAV Code in Image: false [ 146.103541][T10347] vivid-000: Insert Video Guard Band: false [ 146.105623][T10347] vivid-000: Reduced Framerate: false [ 146.107391][T10347] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 146.110692][T10347] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 146.112622][ T41] usb 5-1: USB disconnect, device number 18 [ 146.113171][T10347] vivid-000: Enable Capture Cropping: true [ 146.116937][T10347] vivid-000: Enable Capture Composing: true [ 146.118963][T10347] vivid-000: Enable Capture Scaler: true [ 146.120735][T10347] vivid-000: Timestamp Source: End of Frame [ 146.122571][T10347] vivid-000: Colorspace: Rec. 709 [ 146.125084][T10347] vivid-000: Transfer Function: Default [ 146.127206][T10347] vivid-000: Y'CbCr Encoding: Default [ 146.131066][T10347] vivid-000: HSV Encoding: Hue 0-179 [ 146.131952][T10350] tmpfs: Unknown parameter ' -93F{ޠmpol' [ 146.132752][T10347] vivid-000: Quantization: Default [ 146.132784][T10347] vivid-000: Apply Alpha To Red Only: [ 146.135091][T10350] tmpfs: Unknown parameter ' -93F{ޠmpol' [ 146.136433][T10347] false [ 146.136443][T10347] vivid-000: Standard Aspect Ratio: 4x3 [ 146.136455][T10347] vivid-000: DV Timings Signal Mode: Current DV Timings [ 146.145075][T10347] vivid-000: DV Timings: 640x480p59 inactive [ 146.146967][T10347] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 146.149307][T10347] vivid-000: Maximum EDID Blocks: 2 [ 146.150923][T10347] vivid-000: Limited RGB Range (16-235): true [ 146.152746][T10347] vivid-000: Rx RGB Quantization Range: Automatic [ 146.154797][T10347] vivid-000: Power Present: 0x00000001 [ 146.156504][T10347] tpg source WxH: 1280x720 (Y'CbCr) [ 146.158301][T10347] tpg field: 1 [ 146.160064][T10347] tpg crop: (0,0)/1280x720 [ 146.161473][T10347] tpg compose: (0,0)/1280x180 [ 146.162941][T10347] tpg colorspace: 3 [ 146.164139][T10347] tpg transfer function: 0/0 [ 146.165677][T10347] tpg Y'CbCr encoding: 0/0 [ 146.167617][T10347] tpg quantization: 0/0 [ 146.169643][T10347] tpg RGB range: 0/1 [ 146.170901][T10347] vivid-000: ================== END STATUS ================== [ 146.176166][T10346] veth1_to_batadv: left promiscuous mode [ 146.204321][T10354] netlink: 'syz.4.1238': attribute type 1 has an invalid length. [ 146.206654][T10354] netlink: 'syz.4.1238': attribute type 4 has an invalid length. [ 146.210084][T10354] netlink: 'syz.4.1238': attribute type 1 has an invalid length. [ 146.212558][T10354] netlink: 'syz.4.1238': attribute type 4 has an invalid length. [ 146.218801][ T5838] usb 11-1: too many configurations: 9, using maximum allowed: 8 [ 146.223393][ T5838] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.232541][ T5838] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.240397][ T5838] usb 11-1: config 0 interface 0 has no altsetting 0 [ 146.244134][ T5838] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.247971][ T5838] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.255373][ T5838] usb 11-1: config 0 interface 0 has no altsetting 0 [ 146.259072][ T5838] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.262672][ T5838] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.266896][ T5838] usb 11-1: config 0 interface 0 has no altsetting 0 [ 146.270501][ T5838] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.275915][ T5838] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.281803][ T5838] usb 11-1: config 0 interface 0 has no altsetting 0 [ 146.284648][ T5838] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.288265][ T5838] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.295614][ T5838] usb 11-1: config 0 interface 0 has no altsetting 0 [ 146.298541][ T5838] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.301390][ T5838] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.304663][ T5838] usb 11-1: config 0 interface 0 has no altsetting 0 [ 146.307433][ T5838] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.311191][ T5838] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.314545][ T5838] usb 11-1: config 0 interface 0 has no altsetting 0 [ 146.317362][ T5838] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.320253][ T5838] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.323560][ T5838] usb 11-1: config 0 interface 0 has no altsetting 0 [ 146.327106][ T5838] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 146.330039][ T5838] usb 11-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 146.332796][ T5838] usb 11-1: Product: syz [ 146.334162][ T5838] usb 11-1: Manufacturer: syz [ 146.335843][ T5838] usb 11-1: SerialNumber: syz [ 146.338599][ T5838] usb 11-1: config 0 descriptor?? [ 146.346930][ T5838] yurex 11-1:0.0: USB YUREX device now attached to Yurex #0 [ 146.546793][ T34] usb 11-1: USB disconnect, device number 2 [ 146.556742][ T34] yurex 11-1:0.0: USB YUREX #0 now disconnected [ 146.732891][T10368] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 146.734894][T10368] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 146.740171][T10368] vhci_hcd vhci_hcd.0: Device attached [ 146.743781][T10369] vhci_hcd: cannot find the pending unlink 6 [ 146.755793][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 146.755805][ T42] audit: type=1400 audit(1784997360.351:1744): avc: denied { read write } for pid=10367 comm="syz.0.1243" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 146.770437][ T42] audit: type=1400 audit(1784997360.351:1745): avc: denied { open } for pid=10367 comm="syz.0.1243" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 146.788085][ T42] audit: type=1400 audit(1784997360.371:1746): avc: denied { ioctl } for pid=10367 comm="syz.0.1243" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 146.807709][T10368] netlink: 'syz.0.1243': attribute type 2 has an invalid length. [ 146.813223][T10369] vhci_hcd: connection closed [ 146.813446][ T5817] vhci_hcd vhci_hcd.0: stop threads [ 146.820587][ T5817] vhci_hcd vhci_hcd.0: release socket [ 146.822575][ T5817] vhci_hcd vhci_hcd.0: disconnect device [ 147.094455][T10372] __nla_validate_parse: 7 callbacks suppressed [ 147.094471][T10372] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1244'. [ 147.195084][T10373] vlan2: entered promiscuous mode [ 147.198970][T10373] bridge0: entered promiscuous mode [ 147.485104][ T41] speed is unknown, defaulting to 1000 [ 147.505819][ T42] audit: type=1400 audit(1784997361.101:1747): avc: denied { read } for pid=10379 comm="syz.0.1246" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 147.651130][T10386] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1248'. [ 147.802660][ T42] audit: type=1400 audit(1784997361.401:1748): avc: denied { write } for pid=10390 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.816027][T10362] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1240'. [ 147.828457][ T5743] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 147.853257][ T42] audit: type=1400 audit(1784997361.451:1749): avc: denied { write } for pid=10397 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.921008][T10401] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 147.938065][ T42] audit: type=1400 audit(1784997361.531:1750): avc: denied { write } for pid=10402 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.960570][T10406] binder: BC_ATTEMPT_ACQUIRE not supported [ 147.962488][T10406] binder: 10405:10406 ioctl c0306201 200000000000 returned -22 [ 147.968507][T10406] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1251'. [ 147.971392][T10406] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1251'. [ 147.983098][T10409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1253'. [ 147.992810][T10409] geneve1: entered promiscuous mode [ 147.994290][ T42] audit: type=1400 audit(1784997361.591:1751): avc: denied { write } for pid=10410 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.995742][T10409] batadv0: entered promiscuous mode [ 148.013082][T10409] geneve1: left promiscuous mode [ 148.015260][T10409] batadv0: left promiscuous mode [ 148.168952][T10426] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1257'. [ 148.252885][ T42] audit: type=1400 audit(1784997361.851:1752): avc: denied { read } for pid=10431 comm="syz.6.1258" path="socket:[44053]" dev="sockfs" ino=44053 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 148.297806][T10436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1260'. [ 148.310549][T10436] 8021q: adding VLAN 0 to HW filter on device bond5 [ 148.370582][T10440] speed is unknown, defaulting to 1000 [ 148.401386][ T42] audit: type=1400 audit(1784997362.001:1753): avc: denied { create } for pid=10439 comm="syz.4.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 148.434876][T10440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1261'. [ 148.440264][T10440] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1261'. [ 148.458530][ T41] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 148.588353][ T41] usb 5-1: device descriptor read/64, error -71 [ 148.688313][ T5852] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 148.815185][T10462] vivid-003: disconnect [ 148.819693][ T5852] usb 10-1: device descriptor read/64, error -71 [ 148.821784][T10461] vivid-003: reconnect [ 148.839597][ T41] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 148.978821][ T41] usb 5-1: device descriptor read/64, error -71 [ 149.040415][T10468] syzkaller1: entered promiscuous mode [ 149.042204][T10468] syzkaller1: entered allmulticast mode [ 149.088116][ T5852] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 149.099226][ T41] usb usb5-port1: attempt power cycle [ 149.228258][ T5852] usb 10-1: device descriptor read/64, error -71 [ 149.338924][ T5852] usb usb10-port1: attempt power cycle [ 149.432207][T10495] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 149.450666][T10494] batman_adv: batadv0: Adding interface: macvtap1 [ 149.452709][T10494] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.460969][ T41] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 149.463684][T10494] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 149.470750][T10494] x_tables: duplicate underflow at hook 1 [ 149.476974][T10497] syzkaller1: entered promiscuous mode [ 149.478582][ T41] usb 5-1: device descriptor read/8, error -71 [ 149.479418][T10497] syzkaller1: entered allmulticast mode [ 149.688118][ T5852] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 149.718213][ T41] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 149.719557][ T5852] usb 10-1: device descriptor read/8, error -71 [ 149.740884][ T41] usb 5-1: device descriptor read/8, error -71 [ 149.860392][ T41] usb usb5-port1: unable to enumerate USB device [ 149.959342][ T5852] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 149.988940][ T5852] usb 10-1: device descriptor read/8, error -71 [ 150.108277][ T5852] usb usb10-port1: unable to enumerate USB device [ 150.835631][T10523] program syz.4.1283 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.838862][T10523] ata1.00: invalid service action 3 [ 151.245316][T10541] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 151.249712][T10541] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 151.319607][T10517] 9pnet_fd: p9_fd_create_tcp (10517): problem connecting socket to 127.0.0.1 [ 151.453256][T10550] netlink: 'syz.6.1293': attribute type 4 has an invalid length. [ 151.808108][ T1048] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 151.938085][ T1048] usb 10-1: device descriptor read/64, error -71 [ 152.188159][ T1048] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 152.230806][T10566] KVM: debugfs: duplicate directory 10566-5 [ 152.318223][ T1048] usb 10-1: device descriptor read/64, error -71 [ 152.438304][ T1048] usb usb10-port1: attempt power cycle [ 152.513818][T10574] __nla_validate_parse: 5 callbacks suppressed [ 152.513830][T10574] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1301'. [ 152.574637][T10580] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10580 comm=syz.0.1303 [ 152.585439][T10582] misc userio: Begin command sent, but we're already running [ 152.591439][T10584] misc userio: Can't change port type on an already running userio instance [ 152.594641][T10585] misc userio: Begin command sent, but we're already running [ 152.662935][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 152.662948][ T42] audit: type=1400 audit(1784997366.261:1767): avc: denied { watch } for pid=10589 comm="syz.6.1306" path=2F6D656D66643A25202864656C6574656429 dev="tmpfs" ino=2077 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 152.667394][T10594] exFAT-fs (nullb0): invalid boot record signature [ 152.679274][T10594] exFAT-fs (nullb0): failed to read boot sector [ 152.682034][T10594] exFAT-fs (nullb0): failed to recognize exfat type [ 152.713520][T10597] speed is unknown, defaulting to 1000 [ 152.798148][ T1048] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 152.818504][ T1048] usb 10-1: device descriptor read/8, error -71 [ 152.836630][T10603] bond3: Unable to set up delay as MII monitoring is disabled [ 152.841779][T10603] bond3 (unregistering): Released all slaves [ 152.914992][T10597] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1308'. [ 152.937084][T10611] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1311'. [ 152.971175][T10613] fuse: Bad value for 'fd' [ 152.981304][T10613] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1312'. [ 152.997061][T10616] netlink: 232 bytes leftover after parsing attributes in process `syz.6.1313'. [ 153.058117][ T1048] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 153.088635][ T1048] usb 10-1: device descriptor read/8, error -71 [ 153.128517][ T42] audit: type=1400 audit(1784997366.721:1768): avc: denied { associate } for pid=10626 comm="syz.0.1316" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 153.134998][ T42] audit: type=1400 audit(1784997366.731:1769): avc: denied { append } for pid=10626 comm="syz.0.1316" name="pfkey" dev="proc" ino=4026533218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 153.145164][T10624] can: request_module (can-proto-0) failed. [ 153.147531][ T42] audit: type=1400 audit(1784997366.741:1770): avc: denied { append } for pid=10619 comm="syz.6.1314" name="ptp1" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 153.152205][T10624] xt_hashlimit: size too large, truncated to 1048576 [ 153.199088][ T1048] usb usb10-port1: unable to enumerate USB device [ 153.202928][T10638] input input22: cannot allocate more than FF_MAX_EFFECTS effects [ 153.223172][T10640] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1320'. [ 153.276393][ T42] audit: type=1400 audit(1784997366.871:1771): avc: denied { nlmsg_read } for pid=10646 comm="syz.0.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 153.277332][T10647] cgroup: No subsys list or none specified [ 153.318299][ T42] audit: type=1400 audit(1784997366.921:1772): avc: denied { ioctl } for pid=10651 comm="syz.0.1323" path="ipc:[4026532875]" dev="nsfs" ino=4026532875 ioctlcmd=0xb70d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 153.334956][T10652] fuse: Bad value for 'fd' [ 153.343534][ T42] audit: type=1400 audit(1784997366.941:1773): avc: denied { write } for pid=10651 comm="syz.0.1323" name="/" dev="9p" ino=80478281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 153.641422][T10664] openvswitch: netlink: Unknown nsh attribute 0 [ 153.648534][T10664] input: syz0 as /devices/virtual/input/input23 [ 153.704971][ T42] audit: type=1400 audit(1784997367.301:1774): avc: denied { getopt } for pid=10665 comm="syz.0.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 153.711737][ T42] audit: type=1400 audit(1784997367.301:1775): avc: denied { read } for pid=10665 comm="syz.0.1329" path="socket:[46123]" dev="sockfs" ino=46123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 153.719374][ T42] audit: type=1400 audit(1784997367.301:1776): avc: denied { ioctl } for pid=10665 comm="syz.0.1329" path="socket:[46128]" dev="sockfs" ino=46128 ioctlcmd=0x8947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 153.952454][T10682] gfs2: not a GFS2 filesystem [ 153.984974][T10684] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 153.997338][T10684] romfs: unable to set blocksize [ 153.997338][T10684] [ 154.004607][T10684] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 154.613299][T10705] netlink: 'syz.5.1340': attribute type 14 has an invalid length. [ 154.616767][T10705] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1340'. [ 154.646870][T10709] netlink: 'syz.4.1341': attribute type 1 has an invalid length. [ 154.663770][T10709] bond6: entered promiscuous mode [ 154.665718][T10709] 8021q: adding VLAN 0 to HW filter on device bond6 [ 154.673008][T10709] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1341'. [ 154.675893][T10709] bond6: entered allmulticast mode [ 154.688355][T10709] bond6: (slave bridge3): making interface the new active one [ 154.690831][T10709] bridge3: entered promiscuous mode [ 154.692496][T10709] bridge3: entered allmulticast mode [ 154.695186][T10709] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 155.038175][ T9] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 155.199293][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.202641][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.205626][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 155.209743][ T9] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 155.212569][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.216855][ T9] usb 10-1: config 0 descriptor?? [ 155.591485][ T9] usbhid 10-1:0.0: can't add hid device: -71 [ 155.593518][ T9] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 155.597132][ T9] usb 10-1: USB disconnect, device number 15 [ 156.048139][ T9] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 156.208137][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 156.212224][ T9] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 156.215111][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.220682][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 156.227240][ T9] pvrusb2: ********** [ 156.228658][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 156.231676][ T9] pvrusb2: Important functionality might not be entirely working. [ 156.233892][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 156.237153][ T9] pvrusb2: ********** [ 156.424121][ T2522] pvrusb2: Invalid write control endpoint [ 156.450021][ T2522] pvrusb2: Invalid write control endpoint [ 156.452279][ T2522] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 156.455635][ T2522] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 156.458974][ T2522] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 156.462957][ T2522] pvrusb2: Device being rendered inoperable [ 156.467961][ T2522] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 156.471353][ T2522] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 156.479058][ T2522] pvrusb2: Attached sub-driver cx25840 [ 156.480780][ T2522] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 156.483674][ T2522] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 156.714128][ T847] usb 10-1: USB disconnect, device number 16 [ 156.757705][T10670] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 156.832353][T10771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1359'. [ 156.913819][T10779] 8021q: VLANs not supported on ip6_vti0 [ 157.206021][T10799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.209672][T10799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.380786][T10812] lo: MTU too low for tipc bearer [ 157.382465][T10812] tipc: Enabling of bearer rejected, failed to enable media [ 157.721971][T10831] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 157.764393][T10834] loop5: detected capacity change from 0 to 7 [ 157.774068][T10834] Dev loop5: unable to read RDB block 7 [ 157.776156][T10834] loop5: AHDI p2 [ 157.777421][T10834] loop5: partition table partially beyond EOD, truncated [ 157.817551][T10836] gfs2: not a GFS2 filesystem [ 157.849437][T10838] loop8: detected capacity change from 0 to 4194304 [ 157.922463][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 157.922478][ T42] audit: type=1400 audit(1784997371.521:1784): avc: denied { write } for pid=10837 comm="syz.6.1378" name="/" dev="9p" ino=80478281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.943458][ T42] audit: type=1400 audit(1784997371.541:1785): avc: denied { write } for pid=10837 comm="syz.6.1378" name="/" dev="9p" ino=80478281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.952501][ T42] audit: type=1400 audit(1784997371.551:1786): avc: denied { write } for pid=10837 comm="syz.6.1378" name="/" dev="9p" ino=80478281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.960965][T10838] netfs: Duplicate cookie detected [ 157.963508][T10838] netfs: O-cookie c=00000007 [fl=4000 na=0 nA=0 s=-] [ 157.966867][T10838] netfs: O-cookie V=00000006 [9p,syz,] [ 157.968973][T10838] netfs: O-key=[8] 'a300cc0400000000' [ 157.970972][T10838] netfs: N-cookie c=00000008 [fl=0 na=0 nA=0 s=-] [ 157.973044][T10838] netfs: N-cookie V=00000006 [9p,syz,] [ 157.974807][T10838] netfs: N-key=[8] 'a300cc0400000000' [ 157.994837][T10840] hfs: can't find a HFS filesystem on dev sr0 [ 158.090694][T10856] kernel profiling enabled (shift: 63) [ 158.093998][T10856] profiling shift: 63 too large [ 158.132218][ T847] IPVS: starting estimator thread 0... [ 158.235633][ T42] audit: type=1326 audit(1784997371.831:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10875 comm="syz.6.1389" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1ba59de99 code=0x0 [ 158.248190][T10866] IPVS: using max 45 ests per chain, 108000 per kthread [ 158.367156][T10884] Option '_n'tr1ZQ3-ֵkXv~' to dns_resolver key: bad/missing value [ 158.426256][ T42] audit: type=1400 audit(1784997372.021:1788): avc: denied { ioctl } for pid=10883 comm="syz.0.1391" path="socket:[46540]" dev="sockfs" ino=46540 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 158.501564][T10882] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1389'. [ 158.541801][T10888] ocfs2: Unknown parameter 'usrquota0' [ 159.132423][ T42] audit: type=1400 audit(1784997372.731:1789): avc: denied { lock } for pid=10891 comm="syz.6.1394" path="/dev/vhost-vsock" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 159.250062][T10896] ieee802154 phy1 wpan1: encryption failed: -22 [ 159.883320][T10913] netlink: 'syz.0.1399': attribute type 4 has an invalid length. [ 159.891052][ T34] speed is unknown, defaulting to 1000 [ 159.892867][ T34] sy2: Port: 1 Link DOWN [ 159.895535][T10913] netlink: 'syz.0.1399': attribute type 4 has an invalid length. [ 159.899673][ T34] speed is unknown, defaulting to 1000 [ 159.903156][ T34] sy2: Port: 1 Link ACTIVE [ 160.228951][ T42] audit: type=1400 audit(1784997373.831:1790): avc: denied { read } for pid=10926 comm="syz.0.1403" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 160.274096][T10935] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 160.274118][T10935] overlayfs: overlapping lowerdir path [ 160.313324][T10932] unsupported nla_type 4111 [ 160.445077][T10944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1409'. [ 160.628877][T10955] tipc: Started in network mode [ 160.630653][T10955] tipc: Node identity 080211000001, cluster identity 4711 [ 160.635010][T10955] tipc: Enabled bearer , priority 0 [ 160.637949][T10955] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 160.644339][T10955] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 160.654338][T10955] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 160.664868][T10955] tipc: Resetting bearer [ 160.752619][T10964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1415'. [ 160.759578][ T42] audit: type=1400 audit(1784997374.351:1791): avc: denied { mounton } for pid=10958 comm="syz.0.1414" path="/file0" dev="autofs" ino=45483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 160.772056][T10960] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1414'. [ 161.027039][T10991] program syz.0.1423 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.032292][ T42] audit: type=1400 audit(1784997374.631:1792): avc: denied { map } for pid=10908 comm="syz.6.1398" path="socket:[45504]" dev="sockfs" ino=45504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 161.279469][T11009] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1429'. [ 161.303589][T11012] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1427'. [ 161.306456][T11002] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1427'. [ 161.459678][T11017] Cannot find del_set index 1 as target [ 161.459844][ T42] audit: type=1400 audit(1784997375.061:1793): avc: denied { setopt } for pid=11016 comm="syz.0.1431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 161.615151][T11025] xt_cgroup: xt_cgroup: no path or classid specified [ 161.620976][T11025] No control pipe specified [ 161.648312][ T5852] tipc: Node number set to 134418688 [ 161.750449][T11031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16152 sclass=netlink_route_socket pid=11031 comm=syz.5.1438 [ 161.869352][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1440'. [ 161.874989][T11037] erspan0: entered promiscuous mode [ 161.878357][T11037] macvlan2: entered allmulticast mode [ 161.880264][T11037] erspan0: entered allmulticast mode [ 161.994285][T11045] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1444'. [ 162.426236][T11072] xt_hashlimit: size too large, truncated to 1048576 [ 162.495899][ T73] Bluetooth: hci4: Frame reassembly failed (-84) [ 162.498070][ T1167] Bluetooth: hci4: Frame reassembly failed (-84) [ 162.565822][T11084] netlink: 'syz.6.1456': attribute type 21 has an invalid length. [ 162.569531][T11084] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1456'. [ 162.839329][ T5818] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 162.988219][ T5818] usb 10-1: Using ep0 maxpacket: 32 [ 162.991153][ T5818] usb 10-1: config 0 has an invalid interface number: 119 but max is 0 [ 162.993721][ T5818] usb 10-1: config 0 has no interface number 0 [ 162.995614][ T5818] usb 10-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 162.998874][ T5818] usb 10-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 163.002336][ T5818] usb 10-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 115, changing to 7 [ 163.005737][ T5818] usb 10-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 25972, setting to 1024 [ 163.009288][ T5818] usb 10-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.014889][ T5818] usb 10-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 163.017824][ T5818] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.020618][ T5818] usb 10-1: Product: syz [ 163.021997][ T5818] usb 10-1: Manufacturer: syz [ 163.023493][ T5818] usb 10-1: SerialNumber: syz [ 163.028550][ T5818] usb 10-1: config 0 descriptor?? [ 163.033527][ T5818] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.119/input/input25 [ 163.233233][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 163.233245][ T42] audit: type=1400 audit(1784997376.831:1805): avc: denied { append } for pid=11088 comm="syz.5.1457" name="event4" dev="devtmpfs" ino=3345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 163.249133][ T5518] usb 10-1: USB disconnect, device number 17 [ 163.519344][T11093] kvm: pic: single mode not supported [ 163.522191][T11093] kvm: pic: level sensitive irq not supported [ 163.526735][T11093] kvm: pic: level sensitive irq not supported [ 163.533936][T11093] kvm: pic: single mode not supported [ 163.539953][T11093] kvm: pic: single mode not supported [ 163.542691][T11093] kvm: pic: level sensitive irq not supported [ 163.670374][ T42] audit: type=1400 audit(1784997377.271:1806): avc: denied { setopt } for pid=11097 comm="syz.6.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 163.939767][ T42] audit: type=1400 audit(1784997377.541:1807): avc: denied { execute } for pid=11125 comm="syz.6.1469" path="/dev/dsp" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 163.982276][T11112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.987895][T11112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.018202][ T847] usb 10-1: new low-speed USB device number 18 using dummy_hcd [ 164.022018][T11130] kvm: kvm [11129]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 164.025354][T11130] kvm: kvm [11129]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 164.169783][ T847] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.174240][ T847] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 164.178170][ T847] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 164.183418][ T847] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 164.187016][ T847] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.193142][T11111] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 164.198349][ T847] hub 10-1:1.0: bad descriptor, ignoring hub [ 164.200970][ T847] hub 10-1:1.0: probe with driver hub failed with error -5 [ 164.204392][ T847] cdc_wdm 10-1:1.0: skipping garbage [ 164.206609][ T847] cdc_wdm 10-1:1.0: skipping garbage [ 164.208956][ T847] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 164.430019][ T42] audit: type=1400 audit(1784997378.031:1808): avc: denied { mounton } for pid=11144 comm="syz.6.1474" path="/107/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 164.437102][T11143] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 164.445402][ T42] audit: type=1400 audit(1784997378.041:1809): avc: denied { unmount } for pid=9645 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 164.496714][T11157] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1476'. [ 164.500579][T11157] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1476'. [ 164.503773][T11156] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1476'. [ 164.506532][T11156] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1476'. [ 164.508947][ T847] usb 10-1: USB disconnect, device number 18 [ 164.512769][T11156] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1476'. [ 164.518360][T11157] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1476'. [ 164.540544][ T5743] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 164.558781][ T42] audit: type=1800 audit(1784997378.161:1810): pid=11160 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.1477" name="bus" dev="overlay" ino=609 res=0 errno=0 [ 164.885447][T11169] macvlan2: entered promiscuous mode [ 165.044502][ T42] audit: type=1400 audit(1784997378.641:1811): avc: denied { watch_with_perm watch_reads } for pid=11182 comm="syz.5.1485" path="/231/bus" dev="tmpfs" ino=1247 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 165.158532][ T847] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 165.261152][T11194] input: syz1 as /devices/virtual/input/input26 [ 165.308284][ T847] usb 11-1: Using ep0 maxpacket: 8 [ 165.312284][ T847] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 165.315401][ T847] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 165.319252][ T847] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 165.322583][ T847] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.326613][ T847] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 165.329929][ T847] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.394117][ T42] audit: type=1400 audit(1784997378.991:1812): avc: denied { name_bind } for pid=11203 comm="syz.5.1491" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 165.429368][T11206] trusted_key: encrypted_key: insufficient parameters specified [ 165.442804][T11206] netlink: 'syz.5.1492': attribute type 1 has an invalid length. [ 165.457729][T11206] bond1: option mode: invalid value (8) [ 165.460871][T11206] bond1 (unregistering): Released all slaves [ 165.512239][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1493'. [ 165.530320][T11210] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 165.534744][T11210] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 165.536852][ T847] usb 11-1: GET_CAPABILITIES returned 0 [ 165.541737][ T847] usbtmc 11-1:16.0: can't read capabilities [ 165.550531][T11206] netlink: 'syz.5.1492': attribute type 10 has an invalid length. [ 165.552996][T11206] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1492'. [ 165.573226][ T42] audit: type=1400 audit(1784997379.171:1813): avc: denied { accept } for pid=11211 comm="syz.0.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 165.627492][T11214] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 165.930119][ T5846] usb 11-1: USB disconnect, device number 3 [ 166.147200][ T42] audit: type=1400 audit(1784997379.741:1814): avc: denied { mounton } for pid=11226 comm="syz.5.1499" path="/proc/733/cgroup" dev="proc" ino=48079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 166.192514][T11229] loop4: detected capacity change from 0 to 7 [ 166.203272][T11229] Dev loop4: unable to read RDB block 7 [ 166.205569][T11229] loop4: unable to read partition table [ 166.207980][T11229] loop4: partition table beyond EOD, truncated [ 166.211111][T11229] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 166.216864][T11229] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 166.460161][ T5096] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 166.460298][ T5743] Bluetooth: hci5: command 0x1003 tx timeout [ 166.461891][T11236] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=11236 comm=syz.0.1502 [ 166.579202][T11247] Unsupported ieee802154 address type: 0 [ 166.593683][T11247] syzkaller0: entered promiscuous mode [ 166.595521][T11247] syzkaller0: entered allmulticast mode [ 166.626069][T11251] tcpci 0-0050: Can't find connector node. [ 166.640663][T11255] usb usb9: check_ctrlrecip: process 11255 (syz.4.1511) requesting ep 01 but needs 81 [ 166.641686][T11251] tcpci 0-0050: probe with driver tcpci failed with error -22 [ 166.658115][T11251] i2c i2c-0: new_device: Instantiated device tcpci at 0x50 [ 166.661110][T11255] usb usb9: usbfs: process 11255 (syz.4.1511) did not claim interface 0 before use [ 166.666857][T11251] i2c i2c-0: Failed to register i2c client tcpci at 0x50 (-16) [ 166.760696][T11267] netlink: 'syz.6.1513': attribute type 3 has an invalid length. [ 166.763160][T11267] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1513'. [ 166.824374][T11272] xt_cluster: node mask cannot exceed total number of nodes [ 166.875074][T11281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=11281 comm=syz.0.1516 [ 166.879309][T11278] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=11278 comm=syz.0.1516 [ 166.970393][T11297] netlink: 'syz.4.1520': attribute type 21 has an invalid length. [ 166.972860][T11297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1520'. [ 166.982111][ T5816] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.982202][T11297] netlink: 'syz.4.1520': attribute type 21 has an invalid length. [ 166.985057][ T5816] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.993138][ T5816] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.999683][ T5816] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.011738][T11300] random: crng reseeded on system resumption [ 167.066070][T11306] fuse: Bad value for 'fd' [ 167.129665][T11253] cgroup: fork rejected by pids controller in /syz5 [ 167.306750][T11329] netlink: 'syz.0.1525': attribute type 1 has an invalid length. [ 167.326615][T11331] netlink: 'syz.5.1526': attribute type 5 has an invalid length. [ 167.640888][T11345] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 167.647651][T11345] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 167.650960][T11345] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 167.653335][T11345] UDF-fs: Scanning with blocksize 512 failed [ 167.656174][T11345] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 167.659771][T11345] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 167.662716][T11345] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 167.665006][T11345] UDF-fs: Scanning with blocksize 1024 failed [ 167.667252][T11345] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 167.670760][T11345] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 167.673659][T11345] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 167.676012][T11345] UDF-fs: Scanning with blocksize 2048 failed [ 167.678237][T11345] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 167.681142][T11345] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 167.683981][T11345] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 167.686853][T11345] UDF-fs: Scanning with blocksize 4096 failed [ 167.690160][T11345] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 167.853801][T11360] can0: slcan on ttyS3. [ 168.064973][T11372] loop5: detected capacity change from 0 to 2640 [ 168.068495][T11372] buffer_io_error: 27 callbacks suppressed [ 168.068506][T11372] Buffer I/O error on dev loop5, logical block 0, async page read [ 168.073726][T11372] Buffer I/O error on dev loop5, logical block 0, async page read [ 168.076175][T11372] Buffer I/O error on dev loop5, logical block 0, async page read [ 168.079548][T11372] Buffer I/O error on dev loop5, logical block 0, async page read [ 168.082006][T11372] Buffer I/O error on dev loop5, logical block 0, async page read [ 168.084508][T11372] Buffer I/O error on dev loop5, logical block 0, async page read [ 168.086960][T11372] Buffer I/O error on dev loop5, logical block 0, async page read [ 168.089468][T11372] Buffer I/O error on dev loop5, logical block 0, async page read [ 168.091855][T11372] ldm_validate_partition_table(): Disk read failed. [ 168.093909][T11372] Buffer I/O error on dev loop5, logical block 0, async page read [ 168.096386][T11372] Buffer I/O error on dev loop5, logical block 0, async page read [ 168.101238][T11372] Dev loop5: unable to read RDB block 0 [ 168.103349][T11372] loop5: unable to read partition table [ 168.105235][T11372] loop_reread_partitions: partition scan of loop5 (3 ) failed (rc=-5) [ 168.477600][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 168.477612][ T42] audit: type=1326 audit(1784997382.071:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11388 comm="syz.0.1542" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff71c59de99 code=0x0 [ 168.648716][T11391] speed is unknown, defaulting to 1000 [ 168.721111][ T42] audit: type=1400 audit(1784997382.321:1826): avc: denied { write } for pid=11392 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.739562][T11390] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 168.750873][T11359] can0 (unregistered): slcan off ttyS3. [ 168.772950][ T42] audit: type=1400 audit(1784997382.371:1827): avc: denied { write } for pid=11397 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.792735][T11400] sctp: [Deprecated]: syz.4.1543 (pid 11400) Use of int in max_burst socket option. [ 168.792735][T11400] Use struct sctp_assoc_value instead [ 168.842708][ T42] audit: type=1400 audit(1784997382.441:1828): avc: denied { write } for pid=11401 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.895258][ T42] audit: type=1400 audit(1784997382.491:1829): avc: denied { write } for pid=11408 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.001946][T11411] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 169.090019][T11416] uhci_hcd 0000:00:1d.0: remove, state 1 [ 169.093863][T11416] usb usb1: USB disconnect, device number 1 [ 169.138776][T11418] KVM: debugfs: duplicate directory 11418-8 [ 169.142441][ T42] audit: type=1400 audit(1784997382.741:1830): avc: denied { ioctl } for pid=11415 comm="syz.5.1547" path="socket:[48848]" dev="sockfs" ino=48848 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.219402][T11416] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 169.324464][T11423] loop5: detected capacity change from 0 to 18 [ 169.334089][T11423] loop5: unable to read partition table [ 169.335968][T11423] loop5: partition table beyond EOD, truncated [ 169.340840][T11423] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 169.520865][T11440] __nla_validate_parse: 8 callbacks suppressed [ 169.520883][T11440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1550'. [ 169.883971][T11442] overlayfs: upper fs does not support file handles, falling back to index=off. [ 170.100208][T11450] loop5: detected capacity change from 0 to 2640 [ 170.176983][T11429] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 170.255492][T11462] ipvlan2: entered allmulticast mode [ 170.257227][T11462] batadv_slave_1: entered allmulticast mode [ 170.263934][T11462] batman_adv: batadv0: Adding interface: ipvlan2 [ 170.266011][T11462] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.274254][T11462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.279664][T11462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.283233][T11462] batman_adv: batadv0: Interface activated: ipvlan2 [ 170.308185][ T42] audit: type=1400 audit(1784997383.901:1831): avc: denied { bind } for pid=11466 comm="syz.6.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 170.532107][ T42] audit: type=1400 audit(1784997384.131:1832): avc: denied { create } for pid=11485 comm="syz.6.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 170.539139][T11486] syzkaller0: entered promiscuous mode [ 170.540952][ T42] audit: type=1400 audit(1784997384.141:1833): avc: denied { ioctl } for pid=11485 comm="syz.6.1563" path="socket:[48868]" dev="sockfs" ino=48868 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 170.549428][T11486] syzkaller0: entered allmulticast mode [ 170.553680][ T42] audit: type=1800 audit(1784997384.151:1834): pid=11483 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1562" name="file1" dev="tmpfs" ino=1413 res=0 errno=0 [ 170.610815][T11487] tipc: Enabling of bearer rejected, failed to enable media [ 170.655635][T11490] overlayfs: failed to resolve './file0': -2 [ 170.655727][T11491] overlayfs: failed to resolve './file0': -2 [ 172.024319][T11521] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 172.026935][T11523] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 172.242385][T11535] netlink: 'syz.4.1577': attribute type 4 has an invalid length. [ 172.245295][T11535] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1577'. [ 172.253845][T11535] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 172.512402][T11552] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 172.544513][ T5096] Bluetooth: hci0: unexpected event for opcode 0x080e [ 172.585698][T11560] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 172.650458][T11569] geneve2: entered promiscuous mode [ 172.652993][T11569] geneve2: entered allmulticast mode [ 172.797811][T11574] bond3 (unregistering): Released all slaves [ 172.943141][T11590] overlayfs: failed to resolve 'subj_type=+Q'#^': -2 [ 173.030465][T11599] netlink: 'syz.0.1596': attribute type 1 has an invalid length. [ 174.094060][T11623] /dev/sg0: Can't lookup blockdev [ 174.100396][T11623] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1606'. [ 174.177528][T11624] vxcan3: entered promiscuous mode [ 174.353353][T11627] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1607'. [ 174.356788][T11627] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1607'. [ 174.630685][T11645] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 174.702288][T11647] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 174.740290][T11655] Invalid logical block size (2051) [ 174.750257][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 174.750269][ T42] audit: type=1400 audit(1784997388.351:1843): avc: denied { ioctl } for pid=11654 comm="syz.0.1615" path="socket:[49060]" dev="sockfs" ino=49060 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 174.915509][T11657] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1616'. [ 174.921333][T11657] bond0: entered promiscuous mode [ 174.922938][T11657] bond_slave_0: entered promiscuous mode [ 174.924772][T11657] bond_slave_1: entered promiscuous mode [ 174.927769][T11657] batadv_slave_0: entered promiscuous mode [ 174.929988][T11657] batadv_slave_0: left promiscuous mode [ 174.932130][T11657] bond0: left promiscuous mode [ 174.933632][T11657] bond_slave_0: left promiscuous mode [ 174.935405][T11657] bond_slave_1: left promiscuous mode [ 174.967822][T11658] IPv6: NLM_F_CREATE should be specified when creating new route [ 174.971849][T11658] netlink: 'syz.6.1616': attribute type 1 has an invalid length. [ 174.998146][ T41] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 175.168162][ T41] usb 5-1: Invalid ep0 maxpacket: 64 [ 175.298250][ T41] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 175.342622][T11665] speed is unknown, defaulting to 1000 [ 175.389948][T11670] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1621'. [ 175.396052][T11670] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1621'. [ 175.449245][ T41] usb 5-1: Invalid ep0 maxpacket: 64 [ 175.453354][ T41] usb usb5-port1: attempt power cycle [ 175.456143][T11678] loop6: detected capacity change from 0 to 7 [ 175.469949][T11678] Dev loop6: unable to read RDB block 7 [ 175.471879][T11678] loop6: unable to read partition table [ 175.473747][T11678] loop6: partition table beyond EOD, truncated [ 175.475663][T11678] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 175.482807][ C0] operation not supported error, dev loop6, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10800800 phys_seg 0 prio class 2 [ 175.518969][ T42] audit: type=1400 audit(1784997389.121:1844): avc: denied { write } for pid=11688 comm="syz.5.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 175.644457][T11695] xt_hashlimit: size too large, truncated to 1048576 [ 175.798123][ T41] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 175.828567][ T41] usb 5-1: Invalid ep0 maxpacket: 64 [ 175.968133][ T41] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 175.998830][ T41] usb 5-1: Invalid ep0 maxpacket: 64 [ 176.000911][ T41] usb usb5-port1: unable to enumerate USB device [ 176.172182][T11704] libceph: resolve '@e2OAqcz' (ret=-3): failed [ 176.346793][T11722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.351578][T11722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.562022][ T42] audit: type=1400 audit(1784997390.161:1845): avc: denied { write } for pid=11736 comm="syz.4.1637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 176.574755][T11738] netlink: 'syz.4.1637': attribute type 1 has an invalid length. [ 176.602471][T11738] 8021q: adding VLAN 0 to HW filter on device bond7 [ 176.650027][T11734] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1636'. [ 176.653693][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1636'. [ 176.845675][T11750] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 176.865917][T11750] pimreg: entered allmulticast mode [ 176.871082][T11749] pimreg: left allmulticast mode [ 176.918122][T11754] i2c i2c-1: dtv_property_process_set: SET cmd 0x6b81be6f undefined [ 176.921072][ T42] audit: type=1400 audit(1784997390.521:1846): avc: denied { module_load } for pid=11753 comm="syz.6.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 176.921133][T11754] Invalid ELF header type: 0 != 1 [ 177.060543][T11765] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1647'. [ 177.105078][T11768] block nbd5: NBD_DISCONNECT [ 177.179123][T11770] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 177.468119][ T50] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 177.630261][ T50] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 177.634410][ T50] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 177.637372][ T50] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 177.642704][ T50] usb 11-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 177.645740][ T50] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.648189][ T50] usb 11-1: Product: syz [ 177.649459][ T50] usb 11-1: Manufacturer: syz [ 177.650860][ T50] usb 11-1: SerialNumber: syz [ 177.653743][ T50] usb 11-1: config 0 descriptor?? [ 177.858620][ T50] adutux 11-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 177.968304][T11783] syz.5.1652: attempt to access beyond end of device [ 177.968304][T11783] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 177.973479][T11783] gfs2: error -5 reading superblock [ 178.011844][T11789] openvswitch: netlink: IP tunnel dst address not specified [ 178.095706][T11793] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 178.099306][T11793] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 178.105971][T11793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11793 comm=syz.5.1656 [ 178.115408][ T29] usb 11-1: USB disconnect, device number 4 [ 178.169671][T11796] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 178.322673][ T42] audit: type=1400 audit(1784997391.921:1847): avc: denied { read } for pid=11803 comm="syz.0.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 178.410049][ T41] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 178.416277][ T42] audit: type=1400 audit(1784997392.011:1848): avc: denied { ioctl } for pid=11797 comm="syz.5.1658" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.427711][ T42] audit: type=1400 audit(1784997392.011:1849): avc: denied { read write } for pid=5737 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 178.436534][ T42] audit: type=1400 audit(1784997392.011:1850): avc: denied { open } for pid=5737 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 178.446003][ T42] audit: type=1400 audit(1784997392.011:1851): avc: denied { ioctl } for pid=5737 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 178.456304][ T42] audit: type=1400 audit(1784997392.031:1852): avc: denied { create } for pid=11806 comm="syz.0.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 178.524999][T11811] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1663'. [ 178.580407][ T41] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 178.583750][ T41] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 178.589930][ T41] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 178.593447][ T41] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 178.597234][ T41] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 178.603055][ T41] usb 10-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 178.606302][ T41] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.608837][ T41] usb 10-1: Product: syz [ 178.610146][ T41] usb 10-1: Manufacturer: syz [ 178.611603][ T41] usb 10-1: SerialNumber: syz [ 178.615467][ T41] usb 10-1: config 0 descriptor?? [ 178.617591][T11798] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 178.622453][ T41] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input28 [ 178.909662][ T41] usb 10-1: USB disconnect, device number 19 [ 178.915405][T11829] tmpfs: Bad value for 'mpol' [ 178.917919][T11829] netlink: 'syz.6.1668': attribute type 1 has an invalid length. [ 178.921590][T11829] netlink: 7064 bytes leftover after parsing attributes in process `syz.6.1668'. [ 179.059169][T11841] netlink: 'syz.6.1671': attribute type 3 has an invalid length. [ 179.061773][T11842] netlink: 'syz.6.1671': attribute type 3 has an invalid length. [ 179.837888][ T42] kauditd_printk_skb: 69 callbacks suppressed [ 179.837902][ T42] audit: type=1400 audit(1784997393.431:1922): avc: denied { setopt } for pid=11859 comm="syz.6.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 179.923446][ T42] audit: type=1400 audit(1784997393.521:1923): avc: denied { module_request } for pid=11861 comm="syz.6.1678" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 179.978403][ T42] audit: type=1400 audit(1784997393.581:1924): avc: denied { getopt } for pid=11865 comm="syz.4.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 179.986204][T11866] netlink: 'syz.4.1679': attribute type 11 has an invalid length. [ 179.993779][ T42] audit: type=1400 audit(1784997393.581:1925): avc: denied { read write } for pid=11865 comm="syz.4.1679" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 180.012981][ T42] audit: type=1400 audit(1784997393.581:1926): avc: denied { open } for pid=11865 comm="syz.4.1679" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 180.026449][ T42] audit: type=1400 audit(1784997393.591:1927): avc: denied { sys_module } for pid=11861 comm="syz.6.1678" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 180.062557][ T42] audit: type=1400 audit(1784997393.661:1928): avc: denied { getopt } for pid=11874 comm="syz.5.1680" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 180.075001][ T42] audit: type=1400 audit(1784997393.671:1929): avc: denied { create } for pid=11874 comm="syz.5.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 180.176787][T11877] IPVS: ip_vs_edit_dest(): server weight less than zero [ 180.181451][ T42] audit: type=1400 audit(1784997393.781:1930): avc: denied { read } for pid=11876 comm="syz.4.1681" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 180.200509][ T42] audit: type=1400 audit(1784997393.781:1931): avc: denied { open } for pid=11876 comm="syz.4.1681" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 180.238637][T11883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.818113][T11900] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 181.213537][T11914] bridge_slave_1: left allmulticast mode [ 181.215372][T11914] bridge_slave_1: left promiscuous mode [ 181.217232][T11914] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.221799][T11914] bridge_slave_0: left allmulticast mode [ 181.223529][T11914] bridge_slave_0: left promiscuous mode [ 181.225503][T11914] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.816801][T11923] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1695'. [ 181.822376][T11922] Bluetooth: MGMT ver 1.23 [ 181.913750][T11930] x_tables: duplicate underflow at hook 2 [ 181.915908][T11928] xt_hashlimit: size too large, truncated to 1048576 [ 182.306316][T11954] can0: slcan on ptm0. [ 182.851554][T11953] can0 (unregistered): slcan off ptm0. [ 182.873142][T11977] 9p: Bad value for 'rfdno' [ 183.029019][T11997] netlink: 'syz.5.1712': attribute type 8 has an invalid length. [ 183.034229][T11997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=11997 comm=syz.5.1712 [ 183.138435][T12005] openvswitch: netlink: Actions may not be safe on all matching packets [ 183.241973][T12015] random: crng reseeded on system resumption [ 183.246504][T12015] Restarting kernel threads ... [ 183.252480][T12015] Done restarting kernel threads. [ 183.528276][ T5846] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 183.636673][ T5825] Process accounting resumed [ 183.678225][ T5846] usb 11-1: Using ep0 maxpacket: 16 [ 183.684238][ T5846] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.688343][ T5846] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.691548][ T5846] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 183.697551][ T5846] usb 11-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 183.700655][ T5846] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.705021][ T5846] usb 11-1: config 0 descriptor?? [ 183.850301][T12038] cgroup: Need name or subsystem set [ 183.964483][T12041] bridge_slave_0: left allmulticast mode [ 183.966726][T12041] bridge_slave_0: left promiscuous mode [ 183.971730][T12041] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.977674][T12041] bridge_slave_1: left allmulticast mode [ 183.981891][T12041] bridge_slave_1: left promiscuous mode [ 183.984312][T12041] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.993019][T12041] bond2: (slave veth0_to_bond): Releasing backup interface [ 184.001375][T12041] bond0: (slave bond_slave_0): Releasing backup interface [ 184.010473][T12041] bond0: (slave bond_slave_1): Releasing backup interface [ 184.027613][T12041] team0: Port device team_slave_0 removed [ 184.037774][T12041] team0: Port device team_slave_1 removed [ 184.042100][T12041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.045126][T12041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.049273][T12041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.052338][T12041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.057181][T12041] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 184.125000][ T5846] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:045E:07DA.0008/input/input29 [ 184.231530][ T5846] microsoft 0003:045E:07DA.0008: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 184.337260][ T5846] usb 11-1: USB disconnect, device number 5 [ 184.351860][T12049] fido_id[12049]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb11/11-1/report_descriptor': No such file or directory [ 184.427765][T12053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1730'. [ 184.456627][T12056] overlayfs: failed to resolve './bus': -2 [ 184.657478][T12069] fuse: Bad value for 'rootmode' [ 184.684623][T12072] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 184.692944][T12072] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 184.721454][T12072] pci 0000:00:1d.0: Adding to iommu group 7 [ 184.736068][T12072] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 184.791685][T12072] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 50182 usecs [ 184.832521][T12072] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 184.844419][T12072] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 184.847692][T12072] uhci_hcd 0000:00:1d.0: detected 2 ports [ 184.857448][T12072] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 184.876387][T12072] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 184.879283][T12072] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 184.881509][T12072] usb usb1: Product: UHCI Host Controller [ 184.882501][ T42] kauditd_printk_skb: 92 callbacks suppressed [ 184.882514][ T42] audit: type=1400 audit(1784997398.481:2024): avc: denied { mounton } for pid=12074 comm="syz.6.1737" path="/syzcgroup/unified/syz6" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 184.883545][T12072] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 184.883572][T12072] usb usb1: SerialNumber: 0000:00:1d.0 [ 184.922089][T12072] hub 1-0:1.0: USB hub found [ 184.929518][T12072] hub 1-0:1.0: 2 ports detected [ 184.930569][T12075] (syz.6.1737,12075,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 184.934341][T12075] (syz.6.1737,12075,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 185.019335][T12078] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 185.040846][T12081] netlink: 'syz.5.1739': attribute type 6 has an invalid length. [ 185.060082][T12081] netlink: 'syz.5.1739': attribute type 4 has an invalid length. [ 185.062469][T12081] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1739'. [ 185.069219][ T42] audit: type=1400 audit(1784997398.671:2025): avc: denied { create } for pid=12080 comm="syz.5.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 185.076308][ T42] audit: type=1400 audit(1784997398.671:2026): avc: denied { ioctl } for pid=12080 comm="syz.5.1739" path="socket:[55738]" dev="sockfs" ino=55738 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 185.081421][T12087] bond0: entered promiscuous mode [ 185.086420][T12087] bond_slave_0: entered promiscuous mode [ 185.088945][T12087] bond_slave_1: entered promiscuous mode [ 185.091538][T12087] batadv0: entered promiscuous mode [ 185.126667][ T42] audit: type=1400 audit(1784997398.721:2027): avc: denied { write } for pid=12091 comm="syz.6.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 185.127638][T12093] overlayfs: missing 'workdir' [ 185.174794][ T42] audit: type=1400 audit(1784997398.771:2028): avc: denied { bind } for pid=12095 comm="syz.6.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 185.181633][ T42] audit: type=1400 audit(1784997398.771:2029): avc: denied { setopt } for pid=12095 comm="syz.6.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 185.187597][ T42] audit: type=1400 audit(1784997398.771:2030): avc: denied { accept } for pid=12095 comm="syz.6.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 185.199934][ T42] audit: type=1400 audit(1784997398.791:2031): avc: denied { read } for pid=12100 comm="syz.5.1746" name="ptp1" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 185.207184][ T42] audit: type=1400 audit(1784997398.791:2032): avc: denied { open } for pid=12100 comm="syz.5.1746" path="/dev/ptp1" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 185.214749][ T42] audit: type=1400 audit(1784997398.791:2033): avc: denied { write } for pid=12100 comm="syz.5.1746" name="001" dev="devtmpfs" ino=2951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 185.250411][T12105] kvm: kvm [12104]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000074) [ 185.553542][T12114] netlink: 'syz.5.1751': attribute type 25 has an invalid length. [ 185.560484][T12116] netlink: 'syz.5.1751': attribute type 25 has an invalid length. [ 185.606135][T12119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.710556][T12127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1754'. [ 185.745913][T12135] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1756'. [ 185.790367][T12138] nbd: must specify an index to disconnect [ 185.792295][T12137] nbd: must specify an index to disconnect [ 185.843519][T12140] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1024 sclass=netlink_route_socket pid=12140 comm=syz.5.1758 [ 185.884014][T12143] netlink: 'syz.5.1759': attribute type 6 has an invalid length. [ 185.886713][T12142] netlink: 'syz.5.1759': attribute type 6 has an invalid length. [ 185.920293][T12146] netlink: 'syz.5.1760': attribute type 21 has an invalid length. [ 186.211520][T12168] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1764'. [ 186.224759][T12168] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1764'. [ 186.338131][ T50] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 186.499611][ T50] usb 10-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 186.503176][ T50] usb 10-1: too many endpoints for config 1 interface 0 altsetting 217: 150, using maximum allowed: 30 [ 186.507558][ T50] usb 10-1: config 1 interface 0 altsetting 217 has 0 endpoint descriptors, different from the interface descriptor's value: 150 [ 186.513137][ T50] usb 10-1: config 1 interface 0 has no altsetting 0 [ 186.517634][ T50] usb 10-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.44 [ 186.523971][ T50] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.529424][ T50] usb 10-1: Product: syz [ 186.531116][ T50] usb 10-1: Manufacturer: syz [ 186.535182][ T50] usb 10-1: SerialNumber: syz [ 186.594181][T12180] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 187.031903][T12197] openvswitch: netlink: Message has 8 unknown bytes. [ 187.070269][ T50] usb 10-1: USB disconnect, device number 20 [ 187.154923][T12202] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1776'. [ 187.157901][T12202] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1776'. [ 187.302366][T12215] netlink: 'syz.6.1781': attribute type 10 has an invalid length. [ 187.414746][T12226] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1784'. [ 187.417468][T12226] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1784'. [ 187.440212][T12229] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1785'. [ 187.444960][T12230] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1785'. [ 187.448609][T12229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12229 comm=syz.6.1785 [ 187.678593][T12242] futex_wake_op: syz.6.1790 tries to shift op by -1; fix this program [ 187.680916][T12240] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 187.714672][T12242] fuse: Bad value for 'fd' [ 188.138205][ T5838] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 188.191586][T12266] xt_hashlimit: size too large, truncated to 1048576 [ 188.268133][ T5838] usb 10-1: device descriptor read/64, error -71 [ 188.508171][ T5838] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 188.638159][ T5838] usb 10-1: device descriptor read/64, error -71 [ 188.748254][ T5838] usb usb10-port1: attempt power cycle [ 189.088141][ T5838] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 189.109809][ T5838] usb 10-1: device descriptor read/8, error -71 [ 189.143130][T12287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.348123][ T5838] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 189.368737][ T5838] usb 10-1: device descriptor read/8, error -71 [ 189.478541][ T5838] usb usb10-port1: unable to enumerate USB device [ 189.924550][T12302] 9pnet_virtio: no channels available for device syz [ 190.120681][ T42] kauditd_printk_skb: 87 callbacks suppressed [ 190.120692][ T42] audit: type=1400 audit(1784997403.721:2121): avc: denied { watch watch_reads } for pid=12309 comm="syz.6.1809" path="/230" dev="tmpfs" ino=1283 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 190.186152][T12311] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1809'. [ 190.190585][T12311] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1809'. [ 190.218579][ T42] audit: type=1326 audit(1784997403.821:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12309 comm="syz.6.1809" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ba59de99 code=0x7ffc0000 [ 190.218725][ T42] audit: type=1326 audit(1784997403.821:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12309 comm="syz.6.1809" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ba59de99 code=0x7ffc0000 [ 190.218824][ T42] audit: type=1326 audit(1784997403.821:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12309 comm="syz.6.1809" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ba59de99 code=0x7ffc0000 [ 190.218854][ T42] audit: type=1326 audit(1784997403.821:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12309 comm="syz.6.1809" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa1ba59de99 code=0x7ffc0000 [ 190.218943][ T42] audit: type=1326 audit(1784997403.821:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12309 comm="syz.6.1809" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ba59de99 code=0x7ffc0000 [ 190.219009][ T42] audit: type=1326 audit(1784997403.821:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12309 comm="syz.6.1809" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ba59de99 code=0x7ffc0000 [ 190.219061][ T42] audit: type=1326 audit(1784997403.821:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12309 comm="syz.6.1809" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ba59de99 code=0x7ffc0000 [ 190.219175][ T42] audit: type=1326 audit(1784997403.821:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12309 comm="syz.6.1809" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa1ba59de99 code=0x7ffc0000 [ 190.219785][ T42] audit: type=1326 audit(1784997403.821:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12309 comm="syz.6.1809" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa1ba59de99 code=0x7ffc0000 [ 190.848140][ T5838] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 190.917729][T12353] xt_TCPMSS: Only works on TCP SYN packets [ 191.028119][ T5838] usb 11-1: Using ep0 maxpacket: 8 [ 191.031368][ T5838] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 191.034141][ T5838] usb 11-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 191.037419][ T5838] usb 11-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.041928][ T5838] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 191.044797][ T5838] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.055652][ T5838] usbtmc 11-1:16.0: bulk endpoints not found [ 191.531603][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1828'. [ 192.073591][T12392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1832'. [ 192.092932][T12391] bond8: entered promiscuous mode [ 192.095146][T12391] bond8: entered allmulticast mode [ 192.126220][T12397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12397 comm=syz.4.1833 [ 192.470055][T12405] kvm: emulating exchange as write [ 192.916907][T12416] __nla_validate_parse: 1 callbacks suppressed [ 192.916924][T12416] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1839'. [ 193.243487][T12424] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 193.262062][T12424] romfs: unable to set blocksize [ 193.262062][T12424] [ 193.610852][ T29] usb 11-1: USB disconnect, device number 6 [ 193.668105][T12444] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1846'. [ 193.891587][ T5743] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 193.901099][ T5743] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 193.904961][ T5743] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 193.915813][ T5743] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 193.920194][ T5743] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 193.981841][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.034847][T12473] binder: 12472:12473 ioctl c0306201 200000000080 returned -14 [ 194.088278][T12474] binder: 12472:12474 ioctl c0306201 200000000240 returned -22 [ 194.149129][ T50] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 194.161949][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.165327][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.174492][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 194.203688][T12457] speed is unknown, defaulting to 1000 [ 194.221814][T12484] syzkaller0: entered promiscuous mode [ 194.223683][T12484] syzkaller0: entered allmulticast mode [ 194.270485][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.274380][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.277517][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 194.305269][ T50] usb 10-1: Using ep0 maxpacket: 8 [ 194.309009][ T50] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 194.311763][ T50] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 194.315971][ T50] usb 10-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.321294][ T50] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 194.324603][ T50] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.332116][ T50] usbtmc 10-1:16.0: bulk endpoints not found [ 194.373820][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.376897][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.380227][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 194.446997][T12457] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.449746][T12457] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.451940][T12457] bridge_slave_0: entered allmulticast mode [ 194.454444][T12457] bridge_slave_0: entered promiscuous mode [ 194.457774][T12457] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.459938][T12457] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.461957][T12457] bridge_slave_1: entered allmulticast mode [ 194.464489][T12457] bridge_slave_1: entered promiscuous mode [ 194.480965][T12457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.507058][T12457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.522365][T12457] team0: Port device team_slave_0 added [ 194.525566][T12457] team0: Port device team_slave_1 added [ 194.542000][T12457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.544188][T12457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.552319][T12457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.556829][T12457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.559181][T12457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.566806][T12457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.591370][T12457] hsr_slave_0: entered promiscuous mode [ 194.598564][T12457] hsr_slave_1: entered promiscuous mode [ 194.603723][T12457] debugfs: 'hsr0' already exists in 'hsr' [ 194.606266][T12457] Cannot create hsr debugfs directory [ 194.743119][ T13] bridge_slave_1: left promiscuous mode [ 194.746669][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.752486][ T13] bridge_slave_0: left allmulticast mode [ 194.754174][ T13] bridge_slave_0: left promiscuous mode [ 194.755837][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.829158][ T13] erspan0 (unregistering): left allmulticast mode [ 194.852256][T12508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pid=12508 comm=syz.6.1866 [ 194.874409][ T13] bond1 (unregistering): (slave geneve2): Releasing active interface [ 194.909863][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.914229][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.917812][ T13] bond0 (unregistering): Released all slaves [ 194.922661][ T13] bond1 (unregistering): Released all slaves [ 194.937249][ T13] bond2 (unregistering): Released all slaves [ 194.950359][ T5450] 8021q: adding VLAN 0 to HW filter on device eth13 [ 195.051849][ T13] tipc: Disabling bearer [ 195.073676][ T13] tipc: Left network mode [ 195.132422][ T5450] 8021q: adding VLAN 0 to HW filter on device eth14 [ 195.134759][T12457] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 195.139282][T12457] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 195.143870][T12457] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 195.148098][T12457] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 195.151335][T12457] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 195.155170][T12457] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 195.157821][T12457] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 195.163585][T12457] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 195.234190][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 195.234202][ T42] audit: type=1400 audit(1784997408.831:2157): avc: denied { write } for pid=12529 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.261305][T12457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.271820][T12457] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.276632][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.277036][ T42] audit: type=1400 audit(1784997408.871:2158): avc: denied { write } for pid=12533 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.278770][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.282438][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.289904][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.321379][ T5450] 8021q: adding VLAN 0 to HW filter on device eth15 [ 195.383788][ T42] audit: type=1400 audit(1784997408.981:2159): avc: denied { write } for pid=12538 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.424146][ T13] hsr_slave_0: left promiscuous mode [ 195.429083][ T13] hsr_slave_1: left promiscuous mode [ 195.431091][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.437869][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.441745][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.444045][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.450681][ T13] veth1_macvtap: left promiscuous mode [ 195.452312][ T13] veth0_macvtap: left promiscuous mode [ 195.454036][ T13] veth1_vlan: left promiscuous mode [ 195.455480][ T42] audit: type=1400 audit(1784997409.051:2160): avc: denied { write } for pid=12543 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.455685][ T13] veth0_vlan: left promiscuous mode [ 195.640477][ T13] team0 (unregistering): Port device team_slave_1 removed [ 195.657532][ T13] team0 (unregistering): Port device team_slave_0 removed [ 195.730813][ T5450] 8021q: adding VLAN 0 to HW filter on device eth16 [ 195.737820][ T5888] speed is unknown, defaulting to 1000 [ 195.745477][ T5888] sy2: Port: 1 Link DOWN [ 195.756997][ T73] smbdirect: ib_dev[sy2] removed [ 195.815790][ T42] audit: type=1400 audit(1784997409.411:2161): avc: denied { map } for pid=12556 comm="syz.6.1870" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 195.825791][ T42] audit: type=1400 audit(1784997409.411:2162): avc: denied { execute } for pid=12556 comm="syz.6.1870" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 195.942819][T12457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.981255][ T5743] Bluetooth: hci4: command tx timeout [ 196.081128][T12457] veth0_vlan: entered promiscuous mode [ 196.086457][T12457] veth1_vlan: entered promiscuous mode [ 196.107664][T12457] veth0_macvtap: entered promiscuous mode [ 196.113968][T12457] veth1_macvtap: entered promiscuous mode [ 196.124102][T12457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.131124][T12457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.137557][T12545] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.146678][T12545] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.152426][T12545] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.156899][T12545] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.254735][ T225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.260185][ T225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.293648][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.296517][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.305867][ T42] audit: type=1400 audit(1784997409.901:2163): avc: denied { mounton } for pid=12457 comm="syz-executor" path="/syzkaller.kHp2JO/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 196.317536][ T42] audit: type=1400 audit(1784997409.901:2164): avc: denied { mount } for pid=12457 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 196.326663][ T42] audit: type=1400 audit(1784997409.911:2165): avc: denied { mounton } for pid=12457 comm="syz-executor" path="/syzkaller.kHp2JO/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 196.348180][ T42] audit: type=1400 audit(1784997409.911:2166): avc: denied { mounton } for pid=12457 comm="syz-executor" path="/syzkaller.kHp2JO/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=58920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 196.479233][T12589] xt_CT: No such helper "pptp" [ 196.566120][T12596] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 196.783292][T12612] netlink: 'syz.6.1881': attribute type 13 has an invalid length. [ 196.917804][ T5838] usb 10-1: USB disconnect, device number 25 [ 196.983858][T12627] mmap: syz.4.1884 (12627) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 197.066885][T12636] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 197.181611][T12634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.191838][T12634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.340680][T12545] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.345606][T12545] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.352411][T12545] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.357018][T12545] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.628174][ T1007] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 197.788164][ T1007] usb 11-1: Using ep0 maxpacket: 8 [ 197.791682][ T1007] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 197.794141][ T1007] usb 11-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 197.797148][ T1007] usb 11-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.801324][ T1007] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 197.804155][ T1007] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.809490][ T1007] usbtmc 11-1:16.0: bulk endpoints not found [ 198.058163][ T5743] Bluetooth: hci4: command tx timeout [ 198.312863][T12681] i2c i2c-0: new_device: Missing parameters [ 198.538328][ T1007] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 198.544726][T12699] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1908'. [ 198.553772][T12691] tmpfs: Unknown parameter 'mpolEefault' [ 198.689995][ T1007] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 198.694410][ T1007] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 198.700219][ T1007] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 198.700243][ T1007] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.706710][T12679] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 198.713578][T12705] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1909'. [ 198.727180][ T1007] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 198.843315][T12711] comedi comedi4: bad chanlist[0]=0x0000ffff chan=65535 range length=2 [ 198.889934][T12713] autofs4:pid:12713:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 198.893957][T12713] autofs4:pid:12713:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 198.902920][ T1007] IPVS: starting estimator thread 0... [ 198.929596][ T34] usb 10-1: USB disconnect, device number 26 [ 199.018087][T12714] IPVS: using max 44 ests per chain, 105600 per kthread [ 199.052243][T12718] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1914'. [ 199.211651][T12720] misc userio: Begin command sent, but we're already running [ 199.215167][T12720] usb usb8: usbfs: interface 0 claimed by hub while 'syz.7.1915' resets device [ 199.273540][T12723] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1915'. [ 199.840764][T12743] netlink: 'syz.4.1928': attribute type 5 has an invalid length. [ 199.877082][T12747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1920'. [ 199.880302][T12747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1920'. [ 200.079070][T12759] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 200.149437][ T5743] Bluetooth: hci4: command tx timeout [ 200.202773][T12764] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1927'. [ 200.409413][ T29] usb 11-1: USB disconnect, device number 7 [ 200.436035][T12769] comedi comedi3: comedi_config --init_data is deprecated [ 200.489359][ T42] kauditd_printk_skb: 293 callbacks suppressed [ 200.489372][ T42] audit: type=1400 audit(1784997414.091:2460): avc: denied { connect } for pid=12777 comm="syz.6.1933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 200.524108][T12780] efs: cannot read volume header [ 200.540919][ T42] audit: type=1400 audit(1784997414.141:2461): avc: denied { shutdown } for pid=12777 comm="syz.6.1933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 200.608812][T12794] comedi comedi2: dmm32at: I/O port conflict (0x140,16) [ 200.726146][T12805] xt_l2tp: missing protocol rule (udp|l2tpip) [ 200.807495][ T42] audit: type=1400 audit(1784997414.401:2462): avc: denied { mount } for pid=12809 comm="syz.5.1941" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 200.818196][ T42] audit: type=1400 audit(1784997414.411:2463): avc: denied { bind } for pid=12804 comm="syz.4.1940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 200.844485][T12812] tmpfs: Bad value for 'mpol' [ 200.862326][T12818] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1943'. [ 200.865202][T12817] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1943'. [ 200.892922][T12818] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1943'. [ 200.895348][ T42] audit: type=1400 audit(1784997414.491:2464): avc: denied { nlmsg_read } for pid=12816 comm="syz.5.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 200.919298][T12817] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.926515][T12817] bond1: (slave bond2): Enslaving as an active interface with an up link [ 200.935460][T12817] bond1 (unregistering): (slave bond2): Releasing backup interface [ 200.943088][T12817] bond1 (unregistering): Released all slaves [ 200.944793][ T42] audit: type=1400 audit(1784997414.541:2465): avc: denied { shutdown } for pid=12820 comm="syz.4.1944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 201.050062][ T42] audit: type=1400 audit(1784997414.651:2466): avc: denied { remount } for pid=12823 comm="syz.7.1945" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 201.072647][T12826] netlink: 'syz.5.1946': attribute type 26 has an invalid length. [ 201.075621][T12826] netlink: 'syz.5.1946': attribute type 26 has an invalid length. [ 201.081540][ T42] audit: type=1400 audit(1784997414.681:2467): avc: denied { mounton } for pid=12825 comm="syz.5.1946" path="/proc/1112/cgroup" dev="proc" ino=61665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 201.133073][ T42] audit: type=1400 audit(1784997414.731:2468): avc: denied { write } for pid=12831 comm="syz.4.1949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 201.281054][T12853] openvswitch: netlink: Flow key attr not present in new flow. [ 201.315730][T12858] team0: No ports can be present during mode change [ 201.336766][ T42] audit: type=1400 audit(1784997414.931:2469): avc: denied { write } for pid=12859 comm="syz.7.1960" name="rtc0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 201.444729][T12868] overlayfs: failed to resolve './file1': -2 [ 201.483189][T12874] loop8: detected capacity change from 0 to 7 [ 201.487071][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 201.491192][ C0] buffer_io_error: 17 callbacks suppressed [ 201.491205][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 201.519839][T12875] Invalid logical block size (508) [ 201.525843][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 201.529610][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 201.533130][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 201.537665][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 201.542337][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 201.545288][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 201.547903][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 201.551998][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 201.554625][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 201.558106][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 201.561023][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 201.564223][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 201.566961][T12874] ldm_validate_partition_table(): Disk read failed. [ 201.569432][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 201.573056][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 201.580504][T12878] overlayfs: overlapping lowerdir path [ 201.583142][T12878] netlink: 'syz.5.1967': attribute type 11 has an invalid length. [ 201.584891][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 201.589669][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 201.589845][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 201.596190][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 201.600636][T12874] Dev loop8: unable to read RDB block 0 [ 201.610456][T12874] loop8: unable to read partition table [ 201.612596][T12874] loop8: partition table beyond EOD, truncated [ 201.618159][T12874] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 201.821065][T12891] block nbd5: NBD_DISCONNECT [ 201.824607][T12891] block nbd5: Disconnected due to user request. [ 201.827385][T12891] block nbd5: shutting down sockets [ 201.855371][T12876] qnx6: unable to read the first superblock [ 201.858634][T12876] qnx6: unable to read the first superblock [ 201.862273][T12876] qnx6: unable to read the first superblock [ 201.866379][T12893] hub 8-0:1.0: USB hub found [ 201.868096][T12893] hub 8-0:1.0: 1 port detected [ 202.236143][ T5743] Bluetooth: hci4: command tx timeout [ 202.319878][T12925] can0: slcan on ttyS3. [ 202.395582][T12925] can0 (unregistered): slcan off ttyS3. [ 202.442708][T12938] overlayfs: failed to resolve './bus': -2 [ 202.532030][T12950] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 202.796987][T12969] openvswitch: netlink: Actions may not be safe on all matching packets [ 203.077126][T12992] netlink: 'syz.7.1995': attribute type 1 has an invalid length. [ 203.330356][T12998] batadv_slave_1: Caught tx_queue_len zero misconfig [ 203.333747][T12998] lo: Caught tx_queue_len zero misconfig [ 203.482787][T13008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.222650][T13024] __nla_validate_parse: 11 callbacks suppressed [ 204.222661][T13024] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2006'. [ 204.230950][T13024] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 204.508142][ T29] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 204.633209][T13037] loop2: detected capacity change from 0 to 7 [ 204.639340][T13037] Dev loop2: unable to read RDB block 7 [ 204.641157][T13037] loop2: AHDI p1 p2 p3 [ 204.642472][T13037] loop2: partition table partially beyond EOD, truncated [ 204.644927][T13037] loop2: p1 start 1601398130 is beyond EOD, truncated [ 204.647003][T13037] loop2: p2 start 1702059890 is beyond EOD, truncated [ 204.668147][ T29] usb 12-1: Using ep0 maxpacket: 8 [ 204.671439][ T29] usb 12-1: config 0 has an invalid interface number: 55 but max is 0 [ 204.674136][ T29] usb 12-1: config 0 has no interface number 0 [ 204.676498][ T29] usb 12-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 204.680152][ T29] usb 12-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 204.683678][ T29] usb 12-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 204.687045][ T29] usb 12-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 204.691674][ T29] usb 12-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 204.694464][ T29] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.711242][ T29] usb 12-1: config 0 descriptor?? [ 204.725100][ T29] ldusb 12-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 204.873513][T13040] IPv6: NLM_F_REPLACE set, but no existing node found! [ 205.052821][ T29] usb 12-1: USB disconnect, device number 2 [ 205.061394][ T29] ldusb 12-1:0.55: LD USB Device #0 now disconnected [ 205.201137][T13045] 9pnet_virtio: no channels available for device syz [ 205.246556][T13047] syz.6.2015(13047): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 205.256025][T13049] FAULT_INJECTION: forcing a failure. [ 205.256025][T13049] name failslab, interval 1, probability 0, space 0, times 0 [ 205.260968][T13049] CPU: 1 UID: 0 PID: 13049 Comm: syz.5.2016 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.260987][T13049] Tainted: [L]=SOFTLOCKUP [ 205.260990][T13049] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 205.260997][T13049] Call Trace: [ 205.261001][T13049] [ 205.261005][T13049] dump_stack_lvl+0x100/0x190 [ 205.261036][T13049] should_fail_ex.cold+0x5/0xa [ 205.261050][T13049] should_failslab+0xc2/0x120 [ 205.261065][T13049] __kmalloc_noprof+0xfc/0x820 [ 205.261080][T13049] ? __pfx___mutex_lock+0x10/0x10 [ 205.261101][T13049] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 205.261124][T13049] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 205.261145][T13049] genl_start+0x18f/0x970 [ 205.261165][T13049] __netlink_dump_start+0x60e/0x990 [ 205.261191][T13049] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 205.261205][T13049] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 205.261220][T13049] ? __pfx_genl_get_cmd+0x10/0x10 [ 205.261230][T13049] ? __pfx_genl_start+0x10/0x10 [ 205.261240][T13049] ? __pfx_genl_dumpit+0x10/0x10 [ 205.261251][T13049] ? __pfx_genl_done+0x10/0x10 [ 205.261263][T13049] ? __dev_queue_xmit+0xa33/0x4970 [ 205.261279][T13049] ? __radix_tree_lookup+0x217/0x2b0 [ 205.261293][T13049] genl_rcv_msg+0x471/0x800 [ 205.261305][T13049] ? __pfx_genl_rcv_msg+0x10/0x10 [ 205.261317][T13049] ? __pfx_ethnl_rss_dump_start+0x10/0x10 [ 205.261330][T13049] ? __pfx_ethnl_rss_dumpit+0x10/0x10 [ 205.261350][T13049] netlink_rcv_skb+0x159/0x420 [ 205.261360][T13049] ? __pfx_genl_rcv_msg+0x10/0x10 [ 205.261372][T13049] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 205.261387][T13049] ? netlink_deliver_tap+0x1ae/0xcc0 [ 205.261405][T13049] genl_rcv+0x28/0x40 [ 205.261415][T13049] netlink_unicast+0x585/0x850 [ 205.261427][T13049] ? __pfx_netlink_unicast+0x10/0x10 [ 205.261440][T13049] netlink_sendmsg+0x8b0/0xda0 [ 205.261452][T13049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.261464][T13049] ? selinux_socket_sendmsg+0x198/0x2f0 [ 205.261488][T13049] ____sys_sendmsg+0xa4d/0xbe0 [ 205.261504][T13049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.261514][T13049] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.261536][T13049] ___sys_sendmsg+0x190/0x1e0 [ 205.261553][T13049] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.261568][T13049] ? __lock_acquire+0x49f/0x1a40 [ 205.261581][T13049] ? get_pid_task+0x106/0x250 [ 205.261612][T13049] __sys_sendmsg+0x160/0x210 [ 205.261625][T13049] ? __pfx___sys_sendmsg+0x10/0x10 [ 205.261645][T13049] do_syscall_64+0x115/0x870 [ 205.261656][T13049] ? clear_bhb_loop+0x40/0x90 [ 205.261669][T13049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.261680][T13049] RIP: 0033:0x7f26d4f9de99 [ 205.261690][T13049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.261701][T13049] RSP: 002b:00007f26d5f24028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.261712][T13049] RAX: ffffffffffffffda RBX: 00007f26d5225fa0 RCX: 00007f26d4f9de99 [ 205.261719][T13049] RDX: 00000000000048d4 RSI: 0000200000000240 RDI: 0000000000000003 [ 205.261726][T13049] RBP: 00007f26d5f24090 R08: 0000000000000000 R09: 0000000000000000 [ 205.261732][T13049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.261738][T13049] R13: 00007f26d5226038 R14: 00007f26d5225fa0 R15: 00007ffdb46aa3d8 [ 205.261752][T13049] [ 205.374279][T13051] F2FS-fs (nbd6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 205.380533][T13051] F2FS-fs (nbd6): Can't find valid F2FS filesystem in 1th superblock [ 205.383314][T13051] F2FS-fs (nbd6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 205.385772][T13051] F2FS-fs (nbd6): Can't find valid F2FS filesystem in 2th superblock [ 205.407582][T13039] ------------[ cut here ]------------ [ 205.411895][T13039] Memory manager not clean during takedown. [ 205.414787][T13039] WARNING: drivers/gpu/drm/drm_mm.c:965 at drm_mm_takedown+0x62/0x280, CPU#0: syz.4.2013/13039 [ 205.419367][T13039] Modules linked in: [ 205.421903][T13039] CPU: 0 UID: 0 PID: 13039 Comm: syz.4.2013 Tainted: G L syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 205.423126][T13061] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2019'. [ 205.426271][T13039] Tainted: [L]=SOFTLOCKUP [ 205.426295][T13039] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 205.426307][T13039] RIP: 0010:drm_mm_takedown+0x62/0x280 [ 205.426336][T13039] Code: 8b 43 38 48 39 c5 75 16 e8 fb d3 44 fc 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc e8 e5 d3 44 fc 48 8d 3d 2e 7d 68 0b <67> 48 0f b9 3a 48 c7 c0 e0 e3 46 8e 48 ba 00 00 00 00 00 fc ff df [ 205.426354][T13039] RSP: 0018:ffffc900056c7858 EFLAGS: 00010246 [ 205.426372][T13039] RAX: 0000000000080000 RBX: ffff8880278c5468 RCX: ffffc9002fac5000 [ 205.426387][T13039] RDX: 0000000000080000 RSI: ffffffff85c588bb RDI: ffffffff912e05f0 [ 205.426400][T13039] RBP: ffff8880278c54a0 R08: 0000000000000007 R09: 0000000000000000 [ 205.426412][T13039] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888027b4af00 [ 205.426426][T13039] R13: ffff888027b4af18 R14: ffffffff85c465c0 R15: 0000000000000000 [ 205.426456][T13039] FS: 00007f0126bf66c0(0000) GS:ffff8880d5dde000(0000) knlGS:0000000000000000 [ 205.426488][T13039] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.426504][T13039] CR2: 00007f26d5f24990 CR3: 000000003d0d7000 CR4: 0000000000352ef0 [ 205.426516][T13039] Call Trace: [ 205.426521][T13039] [ 205.426530][T13039] ? __pfx_drm_gem_init_release+0x10/0x10 [ 205.426558][T13039] drm_managed_release+0x1bb/0x540 [ 205.426584][T13039] ? __pfx_virtio_gpu_release+0x10/0x10 [ 205.426607][T13039] drm_dev_put.part.0+0xca/0x140 [ 205.426630][T13039] drm_dev_put+0x1f/0x30 [ 205.426650][T13039] virtio_dev_remove+0xb8/0x170 [ 205.426674][T13039] ? __pfx_virtio_dev_remove+0x10/0x10 [ 205.426693][T13039] device_remove+0xcb/0x180 [ 205.426716][T13039] device_release_driver_internal+0x44e/0x620 [ 205.426742][T13039] bus_remove_device+0x2bc/0x560 [ 205.426764][T13039] ? __pfx_bus_remove_device+0x10/0x10 [ 205.426783][T13039] ? __pfx_device_remove_attrs+0x10/0x10 [ 205.426813][T13039] device_del+0x376/0x9b0 [ 205.426838][T13039] ? __pfx_device_del+0x10/0x10 [ 205.426868][T13039] ? __pfx___might_resched+0x10/0x10 [ 205.426891][T13039] ? __pfx_pci_device_is_present+0x10/0x10 [ 205.426921][T13039] device_unregister+0x1d/0xe0 [ 205.426943][T13039] unregister_virtio_device+0x39/0x60 [ 205.426969][T13039] virtio_pci_remove+0x7c/0x110 [ 205.426990][T13039] pci_device_remove+0xb2/0x1d0 [ 205.427020][T13039] ? __pfx_pci_device_remove+0x10/0x10 [ 205.427051][T13039] device_remove+0xcb/0x180 [ 205.427073][T13039] device_release_driver_internal+0x44e/0x620 [ 205.427100][T13039] unbind_store+0xf8/0x110 [ 205.427119][T13039] ? __pfx_unbind_store+0x10/0x10 [ 205.427140][T13039] drv_attr_store+0x74/0xb0 [ 205.427165][T13039] ? __pfx_drv_attr_store+0x10/0x10 [ 205.427192][T13039] sysfs_kf_write+0xf2/0x150 [ 205.427223][T13039] kernfs_fop_write_iter+0x3e0/0x5f0 [ 205.427245][T13039] ? __pfx_sysfs_kf_write+0x10/0x10 [ 205.427272][T13039] vfs_write+0x6ac/0x1050 [ 205.427296][T13039] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 205.427322][T13039] ? __pfx_vfs_write+0x10/0x10 [ 205.427362][T13039] ksys_write+0x12a/0x250 [ 205.427385][T13039] ? __pfx_ksys_write+0x10/0x10 [ 205.427422][T13039] do_syscall_64+0x115/0x870 [ 205.427444][T13039] ? clear_bhb_loop+0x40/0x90 [ 205.427469][T13039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.427489][T13039] RIP: 0033:0x7f012899de99 [ 205.427507][T13039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.427526][T13039] RSP: 002b:00007f0126bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 205.427545][T13039] RAX: ffffffffffffffda RBX: 00007f0128c25fa0 RCX: 00007f012899de99 [ 205.427555][T13039] RDX: 000000000000000d RSI: 0000200000000700 RDI: 0000000000000004 [ 205.427564][T13039] RBP: 00007f0128a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 205.427575][T13039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.427588][T13039] R13: 00007f0128c26038 R14: 00007f0128c25fa0 R15: 00007ffedc0da7e8 [ 205.427615][T13039] [ 205.427623][T13039] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 205.427635][T13039] CPU: 0 UID: 0 PID: 13039 Comm: syz.4.2013 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.427658][T13039] Tainted: [L]=SOFTLOCKUP [ 205.427665][T13039] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 205.427674][T13039] Call Trace: [ 205.427679][T13039] [ 205.427688][T13039] dump_stack_lvl+0x100/0x190 [ 205.427713][T13039] vpanic+0x552/0x970 [ 205.427733][T13039] ? __pfx_vpanic+0x10/0x10 [ 205.427757][T13039] panic+0xd1/0xe0 [ 205.427770][T13039] ? __pfx_panic+0x10/0x10 [ 205.427798][T13039] check_panic_on_warn.cold+0x19/0x34 [ 205.427816][T13039] ? drm_mm_takedown+0x62/0x280 [ 205.427835][T13039] __warn.cold+0x191/0x318 [ 205.427864][T13039] __report_bug+0x30f/0x440 [ 205.427878][T13039] ? drm_mm_takedown+0x62/0x280 [ 205.427902][T13039] ? __pfx___report_bug+0x10/0x10 [ 205.427916][T13039] ? device_remove+0xcb/0x180 [ 205.427934][T13039] ? device_release_driver_internal+0x44e/0x620 [ 205.427954][T13039] ? unbind_store+0xf8/0x110 [ 205.427968][T13039] ? drm_mm_takedown+0x5b/0x280 [ 205.428002][T13039] report_bug_entry+0xe1/0x290 [ 205.428041][T13039] ? drm_mm_takedown+0x62/0x280 [ 205.428061][T13039] handle_bug+0x1cd/0x2a0 [ 205.428082][T13039] exc_invalid_op+0x17/0x50 [ 205.428104][T13039] asm_exc_invalid_op+0x1a/0x20 [ 205.428118][T13039] RIP: 0010:drm_mm_takedown+0x62/0x280 [ 205.428141][T13039] Code: 8b 43 38 48 39 c5 75 16 e8 fb d3 44 fc 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc e8 e5 d3 44 fc 48 8d 3d 2e 7d 68 0b <67> 48 0f b9 3a 48 c7 c0 e0 e3 46 8e 48 ba 00 00 00 00 00 fc ff df [ 205.428171][T13039] RSP: 0018:ffffc900056c7858 EFLAGS: 00010246 [ 205.428187][T13039] RAX: 0000000000080000 RBX: ffff8880278c5468 RCX: ffffc9002fac5000 [ 205.428199][T13039] RDX: 0000000000080000 RSI: ffffffff85c588bb RDI: ffffffff912e05f0 [ 205.428208][T13039] RBP: ffff8880278c54a0 R08: 0000000000000007 R09: 0000000000000000 [ 205.428216][T13039] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888027b4af00 [ 205.428227][T13039] R13: ffff888027b4af18 R14: ffffffff85c465c0 R15: 0000000000000000 [ 205.428240][T13039] ? __pfx_drm_gem_init_release+0x10/0x10 [ 205.428267][T13039] ? drm_mm_takedown+0x5b/0x280 [ 205.428294][T13039] ? drm_mm_takedown+0x5b/0x280 [ 205.428318][T13039] ? __pfx_drm_gem_init_release+0x10/0x10 [ 205.428341][T13039] drm_managed_release+0x1bb/0x540 [ 205.428369][T13039] ? __pfx_virtio_gpu_release+0x10/0x10 [ 205.428395][T13039] drm_dev_put.part.0+0xca/0x140 [ 205.428419][T13039] drm_dev_put+0x1f/0x30 [ 205.428440][T13039] virtio_dev_remove+0xb8/0x170 [ 205.428462][T13039] ? __pfx_virtio_dev_remove+0x10/0x10 [ 205.428479][T13039] device_remove+0xcb/0x180 [ 205.428521][T13039] device_release_driver_internal+0x44e/0x620 [ 205.428549][T13039] bus_remove_device+0x2bc/0x560 [ 205.428568][T13039] ? __pfx_bus_remove_device+0x10/0x10 [ 205.428588][T13039] ? __pfx_device_remove_attrs+0x10/0x10 [ 205.428614][T13039] device_del+0x376/0x9b0 [ 205.428638][T13039] ? __pfx_device_del+0x10/0x10 [ 205.428662][T13039] ? __pfx___might_resched+0x10/0x10 [ 205.428683][T13039] ? __pfx_pci_device_is_present+0x10/0x10 [ 205.428709][T13039] device_unregister+0x1d/0xe0 [ 205.428732][T13039] unregister_virtio_device+0x39/0x60 [ 205.428756][T13039] virtio_pci_remove+0x7c/0x110 [ 205.428775][T13039] pci_device_remove+0xb2/0x1d0 [ 205.428802][T13039] ? __pfx_pci_device_remove+0x10/0x10 [ 205.428830][T13039] device_remove+0xcb/0x180 [ 205.428853][T13039] device_release_driver_internal+0x44e/0x620 [ 205.428886][T13039] unbind_store+0xf8/0x110 [ 205.428903][T13039] ? __pfx_unbind_store+0x10/0x10 [ 205.428919][T13039] drv_attr_store+0x74/0xb0 [ 205.428946][T13039] ? __pfx_drv_attr_store+0x10/0x10 [ 205.428972][T13039] sysfs_kf_write+0xf2/0x150 [ 205.429000][T13039] kernfs_fop_write_iter+0x3e0/0x5f0 [ 205.429022][T13039] ? __pfx_sysfs_kf_write+0x10/0x10 [ 205.429046][T13039] vfs_write+0x6ac/0x1050 [ 205.429072][T13039] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 205.429098][T13039] ? __pfx_vfs_write+0x10/0x10 [ 205.429136][T13039] ksys_write+0x12a/0x250 [ 205.429162][T13039] ? __pfx_ksys_write+0x10/0x10 [ 205.429198][T13039] do_syscall_64+0x115/0x870 [ 205.429218][T13039] ? clear_bhb_loop+0x40/0x90 [ 205.429236][T13039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.429255][T13039] RIP: 0033:0x7f012899de99 [ 205.429268][T13039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.429285][T13039] RSP: 002b:00007f0126bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 205.429299][T13039] RAX: ffffffffffffffda RBX: 00007f0128c25fa0 RCX: 00007f012899de99 [ 205.429309][T13039] RDX: 000000000000000d RSI: 0000200000000700 RDI: 0000000000000004 [ 205.429321][T13039] RBP: 00007f0128a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 205.429331][T13039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.429339][T13039] R13: 00007f0128c26038 R14: 00007f0128c25fa0 R15: 00007ffedc0da7e8 [ 205.429364][T13039] [ 205.431232][T13039] Kernel Offset: disabled