last executing test programs: 52.810606898s ago: executing program 3 (id=299): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, 0x0) 52.71108935s ago: executing program 3 (id=300): openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) (async, rerun: 32) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (rerun: 32) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x33, 0x0, &(0x7f0000000240)) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x3, 0x7ff, 0x6, 0x4, 0x8, 0x80, 0xf}, 0xc) (async, rerun: 64) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async, rerun: 64) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) (async) creat(0x0, 0x100) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) (async, rerun: 32) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x2) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) unshare(0x60000600) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$ptmx(0xffffffffffffff9c, 0x0, 0x1123102, 0x0) (async, rerun: 64) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) (rerun: 64) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb41f, 0x2000, 0x3, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r9, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) r13 = open(0x0, 0x60840, 0x12) fcntl$setlease(r13, 0x400, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r13, 0x54a2) 52.601647913s ago: executing program 3 (id=301): setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x9) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x42000004, 0x0, &(0x7f0000000100)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x142, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000280)={0x3, 0x0, 0x98, &(0x7f00000000c0)={0x400, 0x1200, 0xd}}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000200), 0x4) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000480)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x7, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x6, 0x9, 0x3, 0x3ff, 0x7], 0xeeee8000, 0x2c2}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x4000, 0xeeee0000, 0xa, 0x8, 0xb, 0xe4, 0x40, 0x10, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0xfec00000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x54000, 0x58000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0x5000, 0xb000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xeeee0000, 0x0, 0xa0, 0x2, 0x8, 0x5, 0xa0, 0x82, 0xf, 0x5, 0x7}, {0xeeef0000, 0x26000, 0x4, 0x5, 0xf3, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x9, 0x70}, {0x200000, 0x4000, 0x14, 0x5, 0xcb, 0x7, 0x1, 0x9, 0x2, 0x19, 0xb0, 0x9}, {0x25000, 0x30}, {0x2, 0x7}, 0x10000, 0x0, 0x0, 0x2024, 0x0, 0x4400, 0xf000, [0x9, 0x100000000000202, 0x1000, 0xb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 52.421583999s ago: executing program 3 (id=302): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x7, &(0x7f0000000280)=[{0x7, 0x6, 0xdc, 0x6}, {0x8, 0x3, 0x80, 0x6}, {0x6, 0xfb, 0x1, 0x3}, {0x9, 0xff, 0x3, 0x2}, {0x7ff, 0x6, 0x2, 0x100}, {0x7, 0x7, 0x9, 0x5e4}, {0xd, 0x69, 0x71, 0x7}]}) r0 = socket$alg(0x26, 0x5, 0x0) flistxattr(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', &(0x7f0000000240)='ncpfs\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000000)='7', 0x1) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd2b, 0x25dfdc02, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x841}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c56096c590001040d007000fadb107c0844b9c9", @ANYRES32, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c000280050016"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x8040) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x4, 0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0xa00, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r8 = fanotify_init(0x200, 0x0) fanotify_mark(r8, 0x1, 0x4800003e, r7, 0x0) mount$afs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB='dyn']) fanotify_mark(r8, 0x1, 0x40000020, r7, &(0x7f00000000c0)='./file0\x00') ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_riscv64=@attr_ctrl={0x0, 0x1, 0x1, &(0x7f0000000140)=0x3}) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') pread64(r9, &(0x7f00000001c0)=""/100, 0x64, 0x9) 52.291797068s ago: executing program 3 (id=303): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./security\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/mpls/conf/lo/input\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./security/tomoyo/domain_policy\x00', 0x1, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000002240)=ANY=[@ANYBLOB="023c0000000000000f000000000000000a"], 0x38) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000080)=[{r4, 0x2000}], 0x1, 0x0, 0x0, 0x0) close(r3) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x900, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) read$FUSE(r0, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r5, &(0x7f00000042c0)={0x20, 0x0, r6, {0xfffffffe, 0x4, 0xffff, 0x7}}, 0x20) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e00)=@updsa={0x148, 0x1a, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in=@remote}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_drop_time={0x8, 0x24, 0x5}]}, 0x148}}, 0x0) faccessat2(r0, &(0x7f00000000c0)='./security/tomoyo/domain_policy\x00', 0x100, 0x1200) set_mempolicy(0x3, &(0x7f0000000040)=0xfff, 0x5) set_mempolicy(0x8000, &(0x7f0000000000)=0x2, 0x0) syz_clone(0x200111, 0x0, 0x0, 0x0, 0x0, 0x0) 52.171584412s ago: executing program 3 (id=307): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0xc03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x0, 0x70, &(0x7f0000000200)=[@cr4={0x1, 0x200000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 42.911245589s ago: executing program 1 (id=366): r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000000)={0x19, 0x4, 0x5, 0x1, 0x5}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x29) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r1, 0x4068aea3, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000140)={0x3a8, r3, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'bridge0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dvmrp1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfffffaa4, @ipv4={'\x00', '\xff\xff', @remote}, 0xffffffff}}}}]}, @TIPC_NLA_NODE={0xd0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc9, 0x3, "258e134fde05cf2f01fb14f938361a5d6c563a76cc3fc2208e9bf33bd9a4023c7514f8fc1fdb22de259900be08941fcc8ff929c01f3cebbe0d6c2b526cc39838759756e11a35022f9a661d52e584b12bbb6252355d29583bbb183771828fa375051f1365d2b701e0c425fda7af002ff385b702e9e7b39ba406e33c89227b2f0b4e138396e1da9edc75d1d6d99388d150bba9078e1d66c659a2d79ae3ec76441504814157d469f5cc06622b156ffcc2439459a1bb967c0bab364c7338052286820a53944d6e"}]}, @TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x18}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xbbd5}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_SOCK={0x90, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xde6c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x10001, @mcast1, 0x7fff}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x4801}, 0x4) r4 = syz_clone3(&(0x7f0000000880)={0x101060000, &(0x7f0000000580)=0xffffffffffffffff, &(0x7f00000005c0)=0x0, &(0x7f0000000600), {0x2}, &(0x7f0000000640)=""/213, 0xd5, &(0x7f0000000740)=""/239, &(0x7f0000000840)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x6}, 0x58) r7 = syz_open_procfs(r6, &(0x7f0000000900)='net/stat\x00') ioctl$PPPIOCSACTIVE(r7, 0x40107446, &(0x7f0000000980)={0x5, &(0x7f0000000940)=[{0x3, 0xaf, 0x40, 0x3}, {0x1, 0xa, 0x3, 0x3}, {0x8, 0x2, 0xfe, 0xec7}, {0x5, 0x4, 0x6, 0x41}, {0xec, 0x9, 0x6, 0xcda}]}) (async) ioctl$TCSBRKP(r2, 0x5425, 0x55) (async) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000009c0), 0x200e00, 0x0) (async) r9 = socket$key(0xf, 0x3, 0x2) r10 = socket$igmp6(0xa, 0x3, 0x2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r8, 0xc0189378, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r9, {r10}}, './file0\x00'}) (async) r12 = fsopen(&(0x7f0000000a40)='iso9660\x00', 0x0) io_cancel(0x0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x3, 0x3, r12, &(0x7f0000000a80)="31cac450963f7c0dd0fd32b76ebbcced4c5feedb520816ab74966d4645dc8b3249fd3d094671a79dfed0fa53d34a5a4de2f4348c246b308718e6930eb1a050f74a600e5d38723529ab4ae335068fa4b7c1219e2f9c73c81e0e8af5b6697dfc4aa0e3774f03a2491dc502372249131c5d89ad66e2b6d34126c2a22bc3101bedad9be9dcdc000742793518357f920bc2a06642153df688203dd6ab4dcf80c9b0f75fcb665fb711ab2905b838a8bc4ac1ad048b945d73cd7fe9a54410bcd8a8436c148719f83fc6be54d0928afa270b71062e4b7aa86f520c", 0xd7, 0x10, 0x0, 0x0, r11}, &(0x7f0000000bc0)) (async) fsetxattr$security_capability(r11, &(0x7f0000000c00), &(0x7f0000000c40)=@v1={0x1000000, [{0x8, 0x7}]}, 0xc, 0x1) (async) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, &(0x7f0000000c80)=""/212, &(0x7f0000000d80)=0xd4) (async) sendmsg$nl_generic(r2, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000a400}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xd8, 0x38, 0x100, 0x70bd2d, 0x25dfdbfb, {0x17}, [@generic="cfeace4f03756a7809b762f15517c00ebbd420a05ef3f52a3e358cc2f7ae5d1971bae7ee9e7e83bd19d5ac64768384f404289335150087f43865c46582ba312f2a610fc7f50d4c8bafca6bf3aff42f72c38ef3a3bf3e3b7cc14e7cfa572458d9419aae021ddeb9101f59548c940fb66d9cb6b1553a0c170b35e23a16172d74db4a58bf46c62f5a58014b751f25441c0d69873e8b1dee5b75b89337fbbde925ced8d7e505ed43b8f120360015e6060413c64492ad827830fc2e3eb7ec", @typed={0x8, 0x84, 0x0, 0x0, @pid=r4}]}, 0xd8}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000) (async) write$binfmt_aout(r7, &(0x7f0000000f80)={{0xcc, 0x7, 0x5c, 0x276, 0x97, 0x1, 0x309, 0x5}, "976052e95b30fe71b0dc29c1c7a8b1ecbb1435d192b30fe28506347d5c1693a6a4798b7f760ee42dab9bee10cd9e6635ba06c78816ac7b282392890239eae5dc418b3d43a2b68a7f639799c05a5b7a2255b70b8b", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x974) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x74, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7fff}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}]}, 0x74}}, 0x10) (async) pipe2$watch_queue(&(0x7f0000001a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000001b00)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) stat(&(0x7f0000001b40)='./file0\x00', &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000001c80)='./file0\x00', &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) (async) getgroups(0x8, &(0x7f0000001d40)=[0xee00, 0xee00, 0xffffffffffffffff, 0xee00, 0xee01, 0x0, 0x0, 0x0]) setxattr$system_posix_acl(&(0x7f0000001a80)='./file0\x00', &(0x7f0000001ac0)='system.posix_acl_access\x00', &(0x7f0000001d80)={{}, {0x1, 0x6}, [{0x2, 0x2, r14}, {0x2, 0x4, r15}, {0x2, 0x4, r16}, {0x2, 0x4, r17}], {0x4, 0x1}, [{0x8, 0x1, r18}], {0x10, 0x7}, {0x20, 0x2}}, 0x4c, 0x3) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r5, &(0x7f0000001f40)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x20, 0x0, 0x400, 0x70bd2b, 0x6, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4060}, 0x4002) 42.835490472s ago: executing program 1 (id=367): r0 = socket$inet(0x2, 0x3, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4ea5, 0x7f, @loopback, 0xb}}}, 0x30) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x118, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x6f631b4376e74f0e, {0x2, 0x0, @rand_addr=0x64010102}}) socket$inet(0x2, 0x3, 0x6) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4ea5, 0x7f, @loopback, 0xb}}}, 0x30) (async) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x118, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x6f631b4376e74f0e, {0x2, 0x0, @rand_addr=0x64010102}}) (async) 42.834904782s ago: executing program 1 (id=368): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='gadgetfs\x00', 0x0, &(0x7f00000000c0)='pquota\x00\x00\xe4\xb7\xceZpB\xe2\x93T\xe4Y\x91\x05\xe1q\xb3\x83\x83\xfe\x14\xe2\xfe\x8b\xfe\xad{$\xbb\xdf\b\x0fN6\xe6N9\x9a\xe2w\x1cW\x9fl\x0fL\x9d\xafE\xc2\xc5\xf5\xe6\xfa\xb5\xb4\xd3\xed\x7f\x8fE\xeb\x9b;?\xe0\xb4\x8am\xe9\xecv\xe6\xd9\x88\xf2\v\x94D\xb4\xdf\xb3M\xf9\xdaJ\x1e2\x9b\x00\x97\xabe\xc2H.v\x06\xce\xb1\xdd1@2\x14\x85G\xef\xafu\xff\xcdQ\x1d\b!\f\xdbI\xc3\xbd{\xb9\xd8yn\xd0T\x91\xcbq\xaauw\x87O\x9e\x15\xd4\xa2\x83\xa5)\t\x96]\xefg\x8e\x16\xa7\xf6\xf5\x9c\xac\xc5\xee\xfb\xff\xff\xff\xff\xff\xff\xff\xb7\x05\xfdE7\x10\xb5\x84\xf2\x95\x13\xab\xaam\x058\xf3\\@\b\xf62\x1770x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x95, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_LIMIT={0x0, 0x5, 0xfffffffe}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x170, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010dfffffffffffffff00"}]}}]}, 0x170}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0x40025b0c, &(0x7f0000000040)) 42.05129963s ago: executing program 1 (id=372): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/comedi\x00', 0x0, 0x0) read(r0, &(0x7f0000000100), 0x1000) r1 = syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0xcb14, 0x10100, 0x3, 0x4001bf}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000fc0)='fdinfo/3\x00') shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000001000)=""/227) pread64(r2, &(0x7f0000000000)=""/224, 0xe0, 0x2) 41.940936909s ago: executing program 1 (id=373): mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x2, 0x801) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r2, 0xb}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x8, 0x0, 0x4002004c5, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0xfffffffffffffffd], 0x8080000, 0x1144}) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1e00, 0xe, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) 36.678169483s ago: executing program 32 (id=307): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0xc03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x0, 0x70, &(0x7f0000000200)=[@cr4={0x1, 0x200000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26.703811161s ago: executing program 33 (id=373): mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x2, 0x801) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r2, 0xb}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x8, 0x0, 0x4002004c5, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0xfffffffffffffffd], 0x8080000, 0x1144}) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1e00, 0xe, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) 7.150987655s ago: executing program 2 (id=681): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20060400) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3f}}}}]}]}, 0x84}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/hci\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/120, 0x78}], 0x1, 0x4f, 0x2) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000000)=[@uexit={0x0, 0x18, 0x7}, @wr_crn={0x67, 0x20, {0x3}}], 0x38}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="0f20a00fb12d8800000066673e660f3882acf800000000c40291015a0d66baf80cb8b796d98bef66bafc0cec400f01dfb98c0b00000f32420f00530945d9f243dbde", 0x42}], 0x1, 0x8, &(0x7f0000000140), 0x0) 7.091533015s ago: executing program 2 (id=683): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv4_newaddr={0x2c, 0x14, 0x509, 0x8070bd28, 0x25dfdbfc, {0x2, 0x5982cd761b928774, 0x174, 0x0, r3}, [@IFA_LABEL={0x14, 0x3, 'pimreg0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="4805000015", 0x5}], 0x1) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) write$char_usb(r1, &(0x7f0000002100)="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", 0x3b9) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@RTM_GETNSID={0x2c, 0x5a, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_FD={0x8, 0x3, r1}, @NETNSA_NSID={0x8, 0x1, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000080), 0x4) 7.022291307s ago: executing program 2 (id=685): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x39, 0x301, 0x70bd25, 0x25dfdbfd, {0x12}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r4 = fsopen(&(0x7f00000000c0)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}, 0x0) waitid$P_PIDFD(0x2, r0, 0x0, 0x4, 0x0) r1 = syz_open_dev$radio(&(0x7f0000001240), 0x2, 0x2) readv(r1, &(0x7f0000001500)=[{&(0x7f00000014c0)=""/30, 0x1e}], 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003580)={0x2020}, 0x2020) 6.501321162s ago: executing program 2 (id=694): r0 = socket$alg(0x26, 0x5, 0x0) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x6, 0x0, 0x2, 0x3c, 0x0}, &(0x7f0000000180)=0x10) (async) symlink(&(0x7f0000000bc0)='./file0/file0/..\x00', &(0x7f0000000000)='./file0\x00') rmdir(&(0x7f00000000c0)='./file0/file0/..\x00') (async, rerun: 64) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={r4, 0xd}, 0xc) (rerun: 64) bind$alg(r0, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x60) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) (async) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)) close_range(r5, 0xffffffffffffffff, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (rerun: 32) fcntl$lock(r7, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) (async, rerun: 64) close_range(r6, r7, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) 6.458519868s ago: executing program 34 (id=694): r0 = socket$alg(0x26, 0x5, 0x0) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x6, 0x0, 0x2, 0x3c, 0x0}, &(0x7f0000000180)=0x10) (async) symlink(&(0x7f0000000bc0)='./file0/file0/..\x00', &(0x7f0000000000)='./file0\x00') rmdir(&(0x7f00000000c0)='./file0/file0/..\x00') (async, rerun: 64) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={r4, 0xd}, 0xc) (rerun: 64) bind$alg(r0, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x60) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) (async) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)) close_range(r5, 0xffffffffffffffff, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (rerun: 32) fcntl$lock(r7, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) (async, rerun: 64) close_range(r6, r7, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) 3.021690245s ago: executing program 4 (id=738): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r2}, 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r2}, 0x38) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0x40025b0c, &(0x7f0000000040)) 2.941504679s ago: executing program 0 (id=739): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl(r5, 0x4048aecb, &(0x7f0000001000)="070000000000000001000000ffffffff") r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x7}]}}}]}, 0x48}}, 0x0) sendto$packet(r6, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r8, 0x1, 0x4, 0x6, @local}, 0x14) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0xffffffc7, 0xe, 0x1, 0x0, [{@remote, 0xb621}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x18a}]}]}}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4}}}}}, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) r10 = landlock_create_ruleset(&(0x7f0000000040)={0x10002, 0xf, 0x3, 0x0, 0x1, 0x3}, 0x30, 0x0) landlock_restrict_self(r10, 0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r11) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) r15 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuseblk(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f0000000300), 0x204002, &(0x7f0000000400)={{'fd', 0x3d, r15}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1200}}]}}) sendmsg$L2TP_CMD_SESSION_DELETE(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r13, 0x100, 0x70bd29, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 2.678935557s ago: executing program 0 (id=748): r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000140)='\')\x00', 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x3c, 0x64, 0x20, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @multicast2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001000010429bd700000000000e0000000", @ANYRES32=0x0, @ANYBLOB="00010000316f0600300012800b00010067656e657665000020000280080011"], 0x64}}, 0x20000000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) getsockopt$sock_int(r3, 0x1, 0xb, &(0x7f0000000100), &(0x7f0000000180)=0x4) (async) getsockopt$sock_int(r3, 0x1, 0xb, &(0x7f0000000100), &(0x7f0000000180)=0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1, 0x8}, @const={0x0, {0xfbff, 0x8, 0x5, 0x81}}}) (async) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1, 0x8}, @const={0x0, {0xfbff, 0x8, 0x5, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) sendmsg$nl_generic(r2, &(0x7f00000018c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001880)={&(0x7f0000000440)={0x1420, 0x3d, 0x4, 0x70bd2a, 0x25dfdbfd, {0x1b}, [@nested={0x16a, 0xc9, 0x0, 0x1, [@generic="cca184a330d64bca99807741886b9eaffe3906f8b51e4455af48dbc52d9c4f68f092508f609113fee701330652d3758be9367b5bf51f73628f3bb490c6bd7656efa9f55965f7a424c10bdb4a7d5d3cb6e908f71e114c506a200c2e85cbce694656f639b6147926effbfa6fcfbfc7131836409225aa33c46b596ae9ec88ce89ab182c4c4c36c7bfd08cad7bf90adf45cd9b93cacae987ff457d8e65d894bc01c43cadac256a2ce8d5ef", @typed={0x4, 0x91}, @nested={0x4, 0xf9}, @generic="88fef8820ba61831082325e52af60c2bd702f1c16df3723115cfb8be50b0ce4db6688c81a085940fd9b8aa4d334a8132bafec66d77163ba7cfa7f5e32dbb8b8a02a3397e2ccde161d014d737184520f4312acfbcaf7cc881ec94b023ca5760d1b0ab2d90dd043d81c4eebddb", @typed={0x4, 0x15e}, @generic="22a4db0a78de464e82364ac004ebb83fd942fb60bd13bd1c6eef2528e8af824c6ddc59197e2b57e36b8873baa1", @typed={0xc, 0xa8, 0x0, 0x0, @u64=0x8001}, @nested={0x4, 0x10}, @nested={0x4, 0x94}, @nested={0x4, 0x3e}]}, @generic="59d6c6e05c470f72a9a85a984ccf1bee09a972459a4cdc1ccea7c5949bb66819c414afeaca89e6fa8fae1d0e1cbfb9cd3324c02ce3e44e3dbd206f468d48d839f68725ef272a66081510b1bffe20bb38bf279c9a07f5dbb3ee63fd1712761d130d934f43cf48ccb93d540b1dabc8c77fa242abd4e98bb5278b4c92f31478464b984e1994780322b92eb452a22165c8809cc520dc1d90167ba3e2fba84fa3803e566baa653840094507bd864d7e5b3aba5008aa1c7c564aadb85ac47d73d2ac87ad3d93af7790c697aebb536591785dd3db9fbe31b610090a12ccc1a5831c2ebe2b5d19903b996ad7d631211f522e0abb", @generic="9938f7aca09b8f9003f506b1cfe17552dc55e0982f36e0713396ff5e6c1165054cac2bb156c8a0e111acc5f50be903194205615ff4530e39eb3ecf7ad4722efe9b7399139113bbfa6944e37f8a5ae19fb937c2291cd950ea3a3014481db784edfd84e42b2b45c3bdd72a2b0891286d059587ec8c73d917bd60af8398e6c4ef6253ff00eced01e1c277a6aac14a8a485bdcdc0db09b528258becb166a07b98cc14aa9", @nested={0x1053, 0x0, 0x0, 0x1, [@generic="5a2fb6d63b63afed632e624e69eeb56da65135e035ec73c248114f2295b9e71dea0b", @generic="81c6fd7bb8af9ea168372a05159c0c40e962061b24153ca5eeb0dfdc40f5a4cee5da2c0f94d71edc699e0e248c", @generic, @generic="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"]}, @generic="a87f6d2569f1333c39756d20d5023c5a3194d9d280fdb2f34da6946f34d98878db45d1b9822f2ab9d4d233d56f33ddf32237dad46ebb574ac22622bc55faec164818f8d7c4a8d141fa483f9e7914a0e6172f51f9875270504c43b0fcacdf89f570cf09689ee6b495780a540bad5aa4903bbe97bf4ae6ed0b518325501fe84cae7c193f876884a3d3312d2acd8fca0da5cf936c1cd7bbd8c5131dd2d78f8e0839b57f83d036f2d8bfdb8bed806dadba9bd267b98b7a2f9a5a4d62"]}, 0x1420}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 2.398559424s ago: executing program 4 (id=752): mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x7, 0x7fff0000}]}) socket(0x2, 0xa, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0xff) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bind$bt_hci(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="976d9023d56482cd284a63da5397", 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c5645", 0x0, 0x8000}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x78}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) socketpair$unix(0x1, 0x0, 0x0, 0x0) fsopen(0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0x256}}], 0x1, 0x0, 0x0) 1.908573714s ago: executing program 4 (id=756): r0 = socket(0x10, 0x803, 0x0) syz_io_uring_setup(0x3412, &(0x7f0000000240)={0x0, 0x8844, 0x0, 0x81, 0x352}, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$RTC_PIE_ON(r3, 0x7005) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x868) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x7, {0x2, 0x0, 0x4}}, 0x18) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x8000000000000003, {}, 0xfd}, 0x18) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00010002"], 0x8) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e}]}}}]}, 0x3c}, 0x1, 0x2000000000000000, 0x0, 0x4000000}, 0x0) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x6f, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f0000000040)=0x1000) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x4301, @dev={0xfe, 0x80, '\x00', 0x15}, 0x3}}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x3, 0x3, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000340)=""/195, 0x0, 0x6, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_usb_connect(0x5, 0xa79, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0x76, 0x97, 0xd9, 0x40, 0x19d2, 0x1259, 0x704b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa67, 0x4, 0x2, 0xcb, 0xd0, 0x1f, "", [{{0x9, 0x4, 0x42, 0x0, 0x2, 0xff, 0xff, 0xff, 0x40, [@generic={0x5f, 0x3, "ae1c1929ae8781b4209d5ad21b0599b5f255ae348a4285724fbc149e1d2bba9c86e414d52f4dfadf2595c0b75708c78cb957fc8590ecadbf664334779e86bdc98d5c7957b15eef0db4d2ea160bb01dabab82e1258090ffb1c77d0c6f73"}], [{{0x9, 0x5, 0xb, 0x2, 0x8, 0x2, 0x5, 0x0, [@generic={0xba, 0x8, "0baba8b196a499c72668e61537da0018268c4f5db3e8cc9aeb7620ed549bc3528d10830da93f3b2cba6d5561ef3fdc7acfde32271806cca05fdb6e03ad21372ae8f8fa68ccc5e0ebb380385fade59e353ae296043b243bcb2b4353b05fad894084b0d1cb45c6910e57e50772197c009a44d3a0fa318c940acc8123140bfbca9dacdb854c752552f599ab8c7d5d3fc2a81cd9d04437948ec2bd84c96f7d9a56296f1295d2be5cc8bba6ace3eae10e56252a42d9050b46cf26"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x20, 0x6, 0x80, 0x2}}]}}, {{0x9, 0x4, 0xf9, 0x8, 0x8, 0x2a, 0x78, 0xf0, 0x0, [], [{{0x9, 0x5, 0xd, 0x0, 0x10, 0x10, 0xe, 0x2}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0xf, 0x3, 0x3}}, {{0x9, 0x5, 0x1, 0x4, 0x8, 0xd6, 0x1, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1}, @generic={0x20, 0x1, "4a6d215661e8b995f3cfef4aef74c53e7fe13198112f8640e005f6251df9"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x0, 0x7, 0x1, 0x9, [@generic={0x97, 0x10, "518bcdf2d9b2b99eee9ae1978b37ab85083807f6add16d5eef3738326e9e19c1005f2be8e230a3f6b394272aa3787aaf40eb19a5d879aba660ef8aa3a7898fedb2608646cdf5498026dfbb9c5adb24dff06760eb1147d1324eeb96cbb5ac77de031e32b5f6f08790f788958535d26b067eefe637fbd3980c74ddf25c680498ff3ab3c1e340dd2ebfb04c11f6ca25aeef1d9f547b99"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x2, 0x3, 0x4}}, {{0x9, 0x5, 0xa, 0xc, 0x400, 0x5, 0x81, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x7}, @generic={0x6, 0xb, "185c48e2"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x20, 0x7, 0xf8, 0x0, [@generic={0x70, 0x11, "5613b86ac01184f60cfb148cd2ef59a933388241dc3ae0124b432e393bc69d85aba00e35263da23f12846965219688112f513a663c692b2a5f073efeb2feff473345a295b1f02d09c99caab1014f21c96c6c32e16dee0133a2f4cf09ceb0c4767af8ec3ca0dcb80f419ca4c0643a"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0xb, 0x7, 0x8, [@generic={0x4b, 0xb, "4d51ecd5346ab4422988f98ce4b843c12fd4c9245733b9d31e52083515c0580edc6bb80ddab70844fbabadf44d205f3dcd32d0ea9c7de01a8b15a4c37501e624a7eedfe9de31ec648e"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7f, 0x3}]}}]}}, {{0x9, 0x4, 0xbe, 0x9, 0xf, 0x8, 0x6, 0x50, 0x9e, [@uac_control={{0xa, 0x24, 0x1, 0xcb, 0x4a}, [@mixer_unit={0x8, 0x24, 0x4, 0x1, 0xfb, "ad75a1"}, @feature_unit={0xb, 0x24, 0x6, 0x1, 0x2, 0x2, [0x5, 0x7], 0xc4}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x100, 0x6, 0x1, 0x8}, @feature_unit={0x11, 0x24, 0x6, 0x5, 0x5, 0x5, [0x7, 0x6cb49725af01d7c8, 0x6, 0x6, 0x9], 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x401, 0x3, 0x3}, @extension_unit={0xa, 0x24, 0x8, 0x2, 0x5, 0x6, "dfc93f"}]}], [{{0x9, 0x5, 0xe, 0x3, 0x10, 0x4, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xdd, 0x32}]}}, {{0x9, 0x5, 0xd, 0x3, 0x50, 0xb, 0x1, 0x5, [@generic={0x9d, 0x4, "4901a54003434b405a12157e56cdf58115341330fa412acbff9921cda80a15016b5743f323d9887f50c8711ad12cef3489c1c4da7d54d5d07eeacf33cc064826e0e1f376b86db8979709b5e1a6458fb3bb61435c1ad9206e707d944aceb06854ba906c934eccd4938365a24b36b5f8b75572da578f76bf9e37cd280fb3e08ebd37a335581be1fbe4f9bff6969fd60e4a0409507502112157c2f54f"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x7892277b7a92a7ba, 0x8, 0x63, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0xa}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x1, 0x1, 0xc, [@generic={0x5, 0x7, "ed8cf0"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x200, 0x2f, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x8001}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x15, 0x6f3}]}}, {{0x9, 0x5, 0xc, 0x10, 0x230, 0x5, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x8}]}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0x6, 0x5, 0x6}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x7, 0x7, 0x4, [@generic={0x31, 0x21, "35c6c6b2312199dc3aebe20dbac2db9b3ae21a9557efbfdfc28d6d312c37d6cb4d21debdfdb64eddeb059a34920f92"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xc}]}}, {{0x9, 0x5, 0xb, 0x0, 0xbba1257c64b315c7, 0x44, 0xf7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x101}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0xf4, 0xc2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xfb, 0x2}]}}, {{0x9, 0x5, 0x4, 0x2, 0x10, 0x4, 0x7f, 0x2, [@generic={0x9f, 0x22, "47fc73cb4c40d49771e0a9bb910413efe39023de4a3debba53ff445303133a303a925c5d19984e7a61c9d5cda7d7511c56e935c87a1dd06d5b42fba82d570751b1b832b174a82a6762754cd3fe94db40d47a6bf723854312debc971edbd98bed8e95ed0c917682a139e7eca5e3d40dff5afe7af1827d1a87cfcba4827e6b232b1f28db39dd9b7d3b4c35ae60cefa56deb76800a1d1c015f6784ec68232"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xd, 0x9}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x9, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x20, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x9, 0x72, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xb6, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x12, 0x9, 0x9}]}}, {{0x9, 0x5, 0x1, 0x8, 0x40, 0x5, 0xe7, 0x81, [@generic={0xb5, 0x21, "b938f32417afbe7257981e4762b55c47cbcdbe07555c8990aee47597e784e6266419471189ed6f7bc881fc7413001bf0bbf154e3af8c82f092b231e01889be5e321c05531466212dacbbdeb3aea7c29993003bc7c8991e863142499652868a66da57dbc325b3058f3ddb608f6bef0a39b50f76eba10275d85fc1fd99d35cfb189d09da3b73f376df8caadf781ca56d659b288a8b429810b64096b548bc0e47bd5044cb08b88ed4322d8277aea0b615f4ff7636"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x3}]}}, {{0x9, 0x5, 0x2, 0x2, 0x8, 0x8, 0xb, 0x4}}]}}, {{0x9, 0x4, 0x7b, 0xf, 0x8, 0x34, 0x9b, 0x4a, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x2f}, [@selector_unit={0xb, 0x24, 0x5, 0x2, 0x6, "2f05db2174d5"}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x1, 0x4, [0x5, 0xa, 0x5, 0xa], 0x9}, @processing_unit={0xb, 0x24, 0x7, 0x4, 0x2, 0x3, "7768f39e"}]}], [{{0x9, 0x5, 0xe, 0x10, 0x40, 0x0, 0x3, 0x1}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0xf9, 0xf, 0xf0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x5}, @generic={0xaa, 0xb, "84675c829bc9bc90993637fba3d0a9da07f42216d8f8dd3b84ff1e17e5e44ed5c458effe9083ec0e93a28efc14da1307db41763c7b227cdcfbafed9f28a35ca6f5a0802fb2ef135c746f79ddd2dde64cffd6fae0d03cd01d25fb609237437e337f5c10c71d1eb2c04e61288f9b16bbf0cf0453cb677c95b308995a77d74732be1fbe57bf9ab13e81ae00a9cab9f907aa50d5c264782fb3b44e3f7deac5fad92f9cbcc7abdf5a488d"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x3ff, 0x1, 0x5, 0xe, [@generic={0xaa, 0x3, "76e40372ea5615471acf73cfd2c76dac4ce89c17c3d5c61aa6ce1eb6d3c1604f30a5b388b3f59961d42ea78ba158065cb827d1e27295d6ff7b45f780a07a1549314601f083d7918529b7bd693ded67fb61925afc6eb4bc02ee898f5cf34673bac4ce91a40e066e8d10087bedbe1273e664d7591346555defcf728f794a081b794c62051c583c7a56f58526b9738825a35a47934b249c4589acf92e8d15aef11fea9551103d53551a"}, @generic={0x3a, 0x31, "ded14780788645210db087b2b48887a0238011dc4dc6c3650f07e825ba55aa828a88119780aeaf386df17b3544ab56043d7ad09cf4f3223b"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x0, 0x9, 0xe2, 0xe, [@generic={0x97, 0x24, "58f9ff7749963473808f3b6ee4b4477a606b5b9b227f7bae8f9180cefba00fcb29bd693e71951eaf9c6d0154738f55b67264c0002e75c5029c2ca09583a00c19003c9d05d76399fe7695d6694aa60f3f02b56971133be9b1ff6d1ca4dddb54472f75fe7d9290335ac04f1a4509f6a2130242db59132dea96316a82baa3572cdbe592a0e0a8e5a1e515cd148c2d80c98a1c622d977d"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xfe, 0x2000}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x81, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x5}, @generic={0xf, 0x6, "34cd83b278c3dfd6614e41eebb"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x40, 0xc, 0xa1, 0xd}}, {{0x9, 0x5, 0x6, 0x2, 0x400, 0x4, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x88, 0x6}, @generic={0xb7, 0x30, "b08b2b82e89be77c5efbad47dd73299ee3943ff9c4b281084a4eef14beafa6dc1a78d6acae01510d2afebe781913eac294af16a77fa5a3301a4329f3212449ed9598fa195ffb032af6a07f6c30e5c8b124f7a7f12fc3e7e2986978779bf7cc4996bdb6f218c4bff17acb200003c6531827045ae51e4985097da3e802b772f137397d5f352f13c10368541800e531b360749ab871897bdf46c0080047b718bcfb4358422743fcf1ecd08d7e19d979ce625b99616ae2"}]}}, {{0x9, 0x5, 0xf, 0x6, 0x200, 0x4, 0x2, 0x0, [@generic={0x24, 0x9, "d2e5d12ebd135fa2cff52113259758cd81e9ffc152f8324133393d01e81c312fd662"}, @generic={0x3e, 0x7, "bad1742e043c2eb763a518a34984e4d2e26eed39f83cfc183dbdcf7e4f2c945a2494d941084a23d189d88d4ff8e70f8bd260d8d310bd17394ecae096"}]}}]}}]}}]}}, &(0x7f00000012c0)={0xa, &(0x7f0000000f00)={0xa, 0x6, 0x310, 0x4, 0x6, 0x2, 0x8, 0x7}, 0xe2, &(0x7f0000000f40)={0x5, 0xf, 0xe2, 0x3, [@generic={0xbf, 0x10, 0x3, "e8da4c80a2118827efedfe8682829fd50a8d50804a116a24c5e7a61ecd5c43453dc5ce75a554da7a4e58148f55e26244df77cdfde6205aa20094f3a8a3f97dbdf221f6c35413434d43f80e9c954c25a287c5173b8de9346e521554015492c03791a478965a916f133bc7a57e89e8936f53a89ad7046db91cc3d7ba68066acf8f78375732027f1e1b040f9f9d9373233bc15e9f241c5044e88022fb2ab7474cd520351f02f183cc76aa27a2e4045cca1764d365e8694920adf0315fd0"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x8, 0x0, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "fdfd36bc96103de5996aab9dbdf4e15b"}]}, 0x6, [{0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x804}}, {0x48, &(0x7f0000001080)=@string={0x48, 0x3, "a1076b38de8216b37587cbf65a66ca855c67e91280d466df9d14b31d8f6d6bb6674a51f9023441af0ef84cbc2e601db9c4288ddcfb7cc08d6913ccf4197914931c367a6ce4d1"}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x419}}, {0xe2, &(0x7f0000001180)=@string={0xe2, 0x3, "f267d546b698100f81c6ff8616227e89c409c87a2f5b159bb86c4fbb7beae79fda56825be3c945be5803b6f6cbec0a05b9ced96c7c4118cb29779da4c4f2dd80ccfab45387aa41aaf03aab39fdecbd0b17e6f396702154561565f3364b17ee07197f55b248d9e4b543a72bc03977f9fd4137ca09adb2845802ec00075e9c3377d99e1e92295143a9fe822d0a4d19d99cd22f29793f2e8c418a9e040947baea372ff893297ba369e9fbc9524e05f0c5718aba917f20db87e99bcbb0933d98b75527718cc01ac03afcc0fbf3402c5e8b333f3ec78ca316cc19787dd0b30f36fa18"}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x405}}]}) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x2f433af6c35aba76, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.781131201s ago: executing program 0 (id=758): r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14202}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x487a17203d682ea1) r3 = mq_open(&(0x7f0000000200)='nfc\x00', 0x40, 0x22, &(0x7f0000000240)={0x4000000000000000, 0x0, 0x7, 0x4}) mq_getsetattr(r3, &(0x7f0000000280)={0x100000000, 0x2, 0x8}, &(0x7f00000002c0)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000300)={0x2, 0x0, @pic={0x6, 0x22, 0x6, 0x9, 0xc, 0x0, 0x0, 0x7, 0x81, 0x6, 0xf8, 0x80, 0x5, 0x19, 0x40, 0xf0}}) r5 = dup(r3) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000540), &(0x7f0000000580)={'U-', 0x5}, 0x16, 0x1) r6 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/rt_acct\x00') ioctl$SNDRV_PCM_IOCTL_STATUS32(r6, 0x806c4120, &(0x7f0000000600)) r7 = pidfd_getfd(r5, r4, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r5) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r7, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r8, 0x300, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) syz_emit_vhci(&(0x7f00000007c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x39}, "8088b3f7dbb9ebedb213c1c939cf62c4f0c4e192554dc8ec43c9d64ea8c86a01bd280dc37d4f2061a254b731a39fad55fbbfa3543dd7057f07"}, 0x3d) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000800)={0x7, 0x4, 0x7fff, 0x5, 0x411}) ioctl$FE_READ_STATUS(r7, 0x80046f45, &(0x7f0000000840)) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r9, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x60002000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004000c}, 0x1) ioctl$VHOST_SET_LOG_BASE(r7, 0x4008af04, &(0x7f00000009c0)=&(0x7f0000000980)) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r5) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r5, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, r10, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x70}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, r10, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x3c}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000c40)={0x88, 0x5, 0xbabe, "2246c57645685f5e207b6e5da7778b080fcc93b7efa66169b5ad9c564d0c340e7b9509db68a0cc15918126bfab48db4a873fdbaecff5db6a84865f89aba173d42bd0bf81df4ea4ad88d07ce0af0ed53faab0cbb9006ebce02d04588ab1daddb41da5a0ebd1160902e0517d2268b1f380858e5ca930b3e0fad7ed38de4ca7c404261d162b219d87d5"}) r11 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000d00), 0x101000, 0x0) ioctl$CDROM_SELECT_SPEED(r11, 0x5322, 0x2) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x44, r10, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x43}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000c6}, 0x4000890) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r12) 1.720810049s ago: executing program 0 (id=760): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r2}, 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r2}, 0x38) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0x40025b0c, &(0x7f0000000040)) 1.290770553s ago: executing program 6 (id=766): syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x67}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_hsr\x00'}]}, 0x34}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000075, 0x0, 0x1001}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000340)={0x10000000000000e6, 0x0, [{0x40000091, 0x0, 0x3}]}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000100039042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="21010000000000001c0012800b00010065727370616e00000c000280060002002c0000006c9f29"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.141857667s ago: executing program 6 (id=769): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000140)=0x54d3, 0x4) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0xc08, 0x80}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=@newlink={0x3c, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x429a4}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x3c}}, 0x8000) 1.050481433s ago: executing program 0 (id=770): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000001, 0x0, 0x0) 991.442932ms ago: executing program 0 (id=771): creat(&(0x7f0000000100)='./file0\x00', 0x1c) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=@newtclass={0x24, 0x28, 0x8, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0x8}, {0xfff3, 0xf}, {0x4, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x81c1}, 0x9080) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000500)={0x20, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000400)={0x38, &(0x7f0000000300)=[{0x2d, '\x00', @data=0x1003, 0x7fffffff}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x0, 0xe, 0x0, &(0x7f0000000240)="ae24a21f9a824666f9acf0e0163fa8d7ad3a0f8e52dfe78a4408100d6ccf068949dbe6ef096242a591f586f19e69e5761f2c2c367a9f3f8e73f487fc3af670b3d9d57112e4d63c230dd8b25837909c10b4864f30", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2003}, 0x10) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000100)={0x2, 0xfffffffffff7fffe, 0x8, 0x64000000, 0x8, 0x4020000, 0xfffffffffffffffd, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x3, 0x9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r5, 0x301, 0x0, 0xfffffffd, {0x2b}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4840}, 0x400c000) 790.529435ms ago: executing program 6 (id=772): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x4000, 0x0) mkdirat(r0, &(0x7f0000000080)='./sys/module/usb_storage/parameters/delay_use\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usb_storage/parameters/delay_use\x00', 0x1, 0x0) write(r1, &(0x7f0000000980)="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", 0xffffffffffffffe0) 788.487642ms ago: executing program 6 (id=773): syz_io_uring_setup(0x5c77, &(0x7f00000000c0)={0x0, 0xc12d, 0x2012, 0x2, 0x112}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) io_uring_setup(0xffffffff, &(0x7f0000000000)={0x0, 0x87c2, 0x20, 0x2, 0xfffffffe}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0xf39, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xc9, 0x0) r2 = socket(0x8, 0x5, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x400261f3, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_emit_ethernet(0x1366, &(0x7f00000013c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x1330, 0x3a, 0xff, @loopback, @mcast2, {[@fragment={0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x66}, @routing={0x0, 0xe, 0x1, 0x0, 0x0, [@private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @local, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @fragment={0x2b, 0x0, 0x3b, 0x0, 0x0, 0x3, 0x67}, @hopopts={0x0, 0x29, '\x00', [@generic={0x8, 0xed, "ee136fc3bf6c52b3e10daa02ba2af3468f1a08b0162a8f9a1ed3f5376e21569cd99e1d1c64b300509e1cb0c20bc2aa3438d8204eb284231cb4f07c0368d5d4e93f2dfe92030a5d51cc4f7b91a0543536a4c964c9fc2b2c78f11cf30f25057f98a73f25e784a7aeb430609dbc01412184859024da82e06b2940ed0e2b6a40e8b3296d17ce8fe2b64a41cbb044845448e166480281e6e0920a70d30eb962edae0be21d668188a4b8cc547bcdaff6ec1ef351fd61e48e44b395095ba4b697db31f19b26e38a5b615a4778df18a588edd9b3bf719c4fc9a016b806bc1e2640de76c2188f9e1636cf2f26a50744a101"}, @generic={0xff, 0x56, "c1be6e02b3a9bb8407522091b11de4b765feba1c95ac2623072c64165c59e2ecacac97d8dfc092072a87714f6a2e6ce61889b0753e5db17058a1613a6054013d6a364e8f81c4901d3fccab6fa618591cdf1aa7f5e850"}, @ra={0x5, 0x2, 0xfc00}, @padn={0x1, 0x1, [0x0]}]}, @srh={0x3b, 0x12, 0x4, 0x9, 0xb, 0x48, 0x3, [@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00', @local, @private2, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x22}, @dev={0xfe, 0x80, '\x00', 0x27}]}, @hopopts={0x4, 0x20e, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x7, 0x1000, "b8e46ad50df4f94da02e1156498b5b41a251c03f5e318ad77196f420698155977921690d099bce3e671f2ee492d55ed8122348c219e0eef0ee26931ca1e67268eef5694711223ded1b9831278983fd55572ef2d0049a8a42c20d8e3b384ab3a3d5f97fe3a76fe1dd2b2e79ed6e77d2191fe707775b430249db5447d7bd31faf8bdf98dde88e8f16d78794c1330356d6c620eb0400e0a00b076c9f5d83e04d0136310d2b042396ca01b2e8267373a3b56ea0604d53638a18cdce0f5e419463aa957fe3d23d5676799a076384a22e735ffb88ab0e9699e40609144e806f18db39480b2d3d871aa6063637f5e49051b60ce89df143838d266129fd03d1bdde1d0bb7b44f7309405376f9ac7726975bffa2b8ac610d515f6a823bab8fca13800d69d0c52964493a713f01f7318db01fc8bc56a88dacbfbb8a7b15bcda0b7894ba1b353dfd23eae38d43fed500a2161547b7bc393ac00234314d814fe228c88e4ca763570d47bbedd4e49b45e5d57db4e03b95ff420bfc21e31f96dca44afbd9e9e78206489080740add3e17b527d2d7ff068fa70a248638f3a11fe2a9630ca96332789f8bad663153765c6d323d8c5ebb167ec42d165b76cc1def0865dee4d4fc3eccc2863b6458eda03c73d35f722847c8839d9c2cd4015341208478f91660102dcf4a1dbf4fd2a019a92aa169a2224e3196476ca19fe82ac8635b48c08ea3d33709bf1f4f53eeb1028eb20368306e81d1d359457b463f5cd8d5932663782c08708d80b5ad92c3659ee78bd9f2c0300320cde446f0b6e52412e856c4d07c3de6977ca7dbb2d9965185208f303d3d2146648ee8233b6f1994376d7d5e65ef24cf134602e68baf41c90b40626546c18e4256cc7f5b032ac48b5bfe0a87fc7d930e67cdac9012a5a905c99189cafd7851c76b09b6926a3e8f6309cf97497f464a0e7de5e64b7b46ba17d55a930511fb4c7ec8b567bc9bf71ee58f973550f5b22788e86616b2678d4994aec0d6a74cb662069e3d4d3a0bef948d8b6580f14f3281c7c3982c6b84ab53283ad8c555ac0c6d46e65eba5e1e9fefedb78648882559ff338462937260c526b23c8b5b71bc44226941e77a0c62a2edf77ec08e00450c94091751c72b82d1cca8e6e04917d891fb8bf409289f5c3776d96ea3261c491bab794b3bfb21ce1b5cfb6a4ade3b5522323adf357deb5f400ff77b822450ee0b4a2d0e28de5b3c8bb2808dd3e4a3e5c1dec787bfa70037eb09c3f4b6d03c78d6dee8132bf5e3a43dabf39d533f98481c365f65005b594fce20142b766b853392326cfca906ea7d5dbbc351eec0496f949df1bab720a65dbf77f799254ccbdd9047e3e21fc2bf7879dc0380d58d0adeaaa2631ee7b822be8970692b7b75119316a04988a485ddca8ffa71cba31aa8c4272188477aa250f1bdaf04382d722852556f9fcf85ea67b45ff3564a14b88604740515b2489fa9cde791349144e12a5691406126047da560cb909e33e2a3ed727d546c9ca4ede40f84251dd97b69422e48b2195b3e26d7df3ee7908299549fce7b59dd0f92989cb1a646256eb583aeca090569449e44bd4f3df102762d859c915c8d1c00576e49a16bd89b66210a481c11ca5f55186554a30b40a8bb8090c30cb8e9ffb60762f69a9951bedbe428000475f2dddc0cdc0e32d62fa534aaa6a8b264e8a6ebe4cc324986e1e330df3d26288463a137bd9dac45af8883380b8a838d5be29eb0517ac5da3d0537f18b5d798861b90a20cb77cac8579f39faa5466299e4de1b433f36e01c49e2f43162fc99ff1e25af7e3dc62d97abd5846edb228423aec438452732766ed33582ed7f75ae383c0cfd7bc90af737177c4ff567ec2de0c897de9e634e799505592bf3b4d3e31ff4351804c900629f52bc5fe6aec1154e9b8f9878058c4577bf2c9f16db1179e9bdaede4fa314f961d85872a0ca274fe2ec624740be9ab7602d356fd3043ddaa93565946dc782e11b7e14cf8bbf38d2da079dbe687db7c19c29e4bf5bd19cd9dea822252ba1292101f794bbf9ba2f7d3246b0c21349e83b4e32cdab27690b94a40c81e6cfba3008be0c177fc7157322e8075beb50eecdd5975f737d3a0848036a6c33f5bab6451ef38620928b21239585bec12e1a8c14b798f87bbab0663a79f4cc51dab45a19a44dd81d34e2f1bc6c2e8d0fd0569ed413dd1f937ea9ab96f0246b82a64817d6aaf03ae6c6586a8a4458ea9f1bd533ebb970a77097bb7a898f3491121073144108f99f7714df1e6da80a318c8c92a71a02203e66f47d68d7236abe2b4f2e526d40a56b1566b3cf5115fdfed35126df4cd2d1031cf9c781e48de1334d884bbe640b8300cb795286e1a047fd9202394bbb8275408bfe3af4f1672b8c20e8fc8f55870073ba6748a0716b45287531c7c44deac7481cf3718d58e98647bff560580737793f4543d8bcf59cf13118923e3e03e16486a78d90d16d8f34b266a103c64360d0d7f82f0dcadb44bc446bf9fd2dacdfb855350c76a321381b889c9d3af68a479dc8adb065570efcdedd634dbf808c633b2fbb4e041027d4f0822e479df44b29c35592db8a243f245c070a4307b2ddb0e7f572d851b5e402b611f4cfd74d0eb4110fd17b4d01dd237412ac555faa045d52dc93a887dba86cb63fe0faba68d4a1adf5b2c5cfafecfac23ef6707660c8cc23eafe02d6296d9951fafc5f2a21d673fa5d431251b3bfd5567901ebfb9a280900dc2ccf3e2669f1a48d15a6cb49ae4ae521a0729d0c0a4ff2ab2498ee78c4cd462d12c1425a2a6b28f406c4d4dcbdafc32fcabdcd98dd4bd5e88ef0b3fb1f7764beaf28580687aec256d58669c11f2f6f8946233cc9b44796c260cf2ebb87df9ab58753f0aaa4a9ecee79979b264ebec74d013eb6a620637ecc5aafe71321d88a6b73d51960fbb2f960b43307ff894a7f52af826387331fec4c7d8f366bc9d27936d2cce3c22799809ffcc4f94cd1c1471897fdf9755b79c187300f4bfc0497bc9cca81d1777bd1ffd5fd50bf695e4235601176aa3437c6e9c60047899e7ca1c141646c6166a0116654e53e885d1bb9070aa1467d507dc683e116c18315eb572b6af50e8ceb42f466689984f04c93219887f10bddabde74332119b85dd54bde794c262deb643f750e2dfa42eb5bc96a385b83c69093701859fc452da421bf9ea2d019924fa226be7f1370dabf2806a2782027f1af49b6cf9c64591ec21553947feb7781183e30dfd3b7bb6d4e74428853452ccff47205e9d26220315bd9011606e44072cc1f8fb6ab2ec1bb07fe5a9b07dfbf4c821f0dece41202f2610be0fdd116d03063c11667c252fd714579dcaaaa6155e097bf06e3edfc89f9e2a62c8a167c251ea12aad67025e146af5d64392605a5d3fe8e0645aaf6313ace13bdc9971e0ae1586c2192859180dae3bd4b83007542cee80a08afc1870a7fcf1561df3be79d2f2fc515323d878a0fe0e81ca0c670cd632005a0ec70702cde92ef4a9e5fe3c2088d7760884a4141bd4112286f9c43c11e5ddc86ef1b3f49e60a3b427ed45266e59fffe3cc213464b6f5f7aa5a9fbf5e27b45ff877d2770ff7c64e731078ea4ef5628193b5b5ca21b1458705038c6206e149d228e237af850a9e6133188b566066f2a1edd2edde926f51e1988c445d1a20e1b995b559f3a2f85b62775bf49b6f8075309bdd033b9986cb3803b4077273a1d0a1808ad3a33121c3cdd59675031b5568b3c68f3c2578415103154e3d727badbb4d19e1c235d0e0b8e27aede0dd42f6690e4936dcb63961bac6a864bec1173119cc9e20574c697440a05a72176ea2110b0b84a1b9c1535a149d327550c4677dc6847db24ab0887fcea13297699219eb7a98c2c0e9cf4637d528d46df560fa2dabd0f4ce25ab45ba5629dd4484b3898835c7de9d556993326cdbf7d3ef7f67cdbba6dc4b0b32a17ce853ad1c114e0f46f5688e3ede5c0f5ffb90808d98f8fa0bd01f69d7e8c666a68f9a44ed984ec4e4988cca79c41754b3bf5af8d79e4393c9702aa37272b2306db26cdb82ba45f63e1a04247ca791004deadbcc9eddf71a8974109d95a349cc86a721714ab3bfea8524b3ae7dc64e59060807f65acac7d01b9c891264b55f298effe21476bd817aa76fb3488394ae5180609d8c2b6adbd10b185aec1877fce55f7278d685752cc51d6d2b321a4586247eccdd6a05192cccab8cfb79c2818161f2847666d4dd12155290705bedd72cf738dc33da589d0e66177981dd6db61a0a144b92f16b8c00425399cc637960a6862977a2adddbac78272923d77a02460e96348cdbb33bb8cae9793d1d919d29541826504f4738cdfb1304c9654ffaf0a3aa24f452fe0705b00878330a8b4182a83a7b9b80ae1305a6d22c11e7ce5b80dfd5fef02d9cd29042933c953f7c5a7d66926645cc77a42196daa9e137cf7f4b788c79c5dec45892ced7d0b08c65260c4fb120dad25fdadb9a133584d96e62d4b59f7683c2081b12b2ec2bd895c004248ce7b6f976e58d3d7a15c600469a27636a7ace3d7f880c6d95c473bb437f0531182b197762ddef7e9cd96bfeeb506bd76a7e74ba174df083582345e538bb6e7f9c3b2f59ac5a34758c0d09fa9521d22a70db01a5620ba35df05cf26c3b8b923ef7cc4dbf3f7b02da3315c1f37edbbc6ca1ac6c9d215c44b5cd88d7e16df316178bafd007b430cf7220a741b108324ca5a151023979c5d06a5ca2cc80f563dcff54110cb23b324416a88ac5877ffcd5f5ee4dad096fd8f94bae2a2e99fbcd14f4c406a3be7d6c84c90d2e4d9a59e02f74853517a1178d8c9526062132d515a53031684571dea853d8337bd9d74dfae19c66b8aad529abd4b719e39c022c65afd82ff19526113bfc544f59eed61fcceb273b581e84b1a299ec916bc608581103377849187af76d677e163d057d949da3920972ad309c1e09ee16ff24a6e6c7b55177db0ef42fc3ea7d9511ebe70b740151187c3940a108224c1ff3084e82de6cc74286e4da6818a9607eb1e2a12db2fb5094fee3db2786cdcf2c19e8751523241ea48e6a433d72ff118076589f7d860b2c36a3f74674f201f0d749ae577fd5a50c293f143fdef3a6c6cbd43aea67c0c58d90a8ca3bc8f3f2484bd2279bcf15f74e5875c7c7e74b756162d74e06140e13238af8838f71a9155fb2765b5b3bf719839cab8566e8505b77a82acf9682d00648ea666c987fd5be03d0bbbed4628f8d89c6d2443b734ca18b8945f583c087f68fbe2ee1b2b2e3cc4ee77bef1e426a4a41c991addafc55c420b74b4cfdd7c75c8bb3e20ef74f4ff02655f6fd91e2baa9f3433a5d7f8066e993f15c73fe05499c7ae0fe5ec10c4ad69d59c0ea81a71fa89e48cf75a0363e45ac61e6034ee8aa41d73200b4546274864f24e26d261032f4138bbe7646a916f56a989808d3d5810a8e9d294881812e064734d66b814aec05a767560da3a0a9679dfde1443389420025e72ad4863b8251a723ce306665fa0fcd49ee6809a6cbce356e0dc5a6677b7298eac502f9142c0132ea4ab8bbf92a259ec35b0047b0311b45f70437539d789ccad49ed4ff3cc8baa81a74bbb50a6fcf6a69f71897cab3fc569e96432ed148756bd773eba4046c985fa5a7dff140e57cca8661dd5f1f47bcd96d3516490e61eecf86d132c56878eaea26e87e22037d079df3f963ddaf932833922fce3b9cd45700abfe0f872b652e03879d6ea063a521cc6c76146ffd089f25e748970a4e8236d3e657442752d01ad70827fe6b5ffbd1ba105a8bbbc"}, @jumbo={0xc2, 0x4, 0x40}, @jumbo={0xc2, 0x4, 0x6}, @ra={0x5, 0x2, 0x139}, @ra={0x5, 0x2, 0x80}, @calipso={0x7, 0x48, {0x0, 0x10, 0xb1, 0x5, [0x80, 0x3, 0x5, 0x6ea6, 0x80000000, 0x5, 0x9, 0x0]}}, @calipso={0x7, 0x8, {0x2, 0x0, 0x0, 0x10}}]}, @dstopts={0x29}, @fragment={0x8, 0x0, 0xb, 0x0, 0x0, 0x3, 0x66}], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1}}}}}}, 0x0) r3 = dup(r1) ioctl$DVB_DEMUX_DMX_QBUF(r3, 0xc0186f3f, &(0x7f0000000080)={0x2, 0x43f78da4, 0x1, 0x3, 0x0, 0x4}) syz_ublk_setup_queues(r3, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x5d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x4, 0x0, 0x0}}, 0x0) 561.460366ms ago: executing program 6 (id=774): ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7409bf", 0x30, 0x0, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@hopopts={0x89, 0x0, '\x00', [@pad1]}, @dstopts={0x84, 0x2, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x65, 0x1ff, [0x1]}}]}]}}}}}, 0x0) (async) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0xfffffffc00000000, 0x0, 0x0, 0x1e, 0x4, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x10, 0x6]}}) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0, @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) (async) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) (async) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async) r3 = syz_open_dev$vcsn(&(0x7f0000000280), 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async) r6 = add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f0000000340)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x34, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x9cd62e9a71949433]}, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0x0) (async) ioctl$FITHAW(r4, 0xc0045878) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_DQEVENT(r7, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r7, 0xc0506107, &(0x7f00000003c0)={0x0, 0x0, 0x0, @raw}) (async) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000180)=0xd0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r8, 0x0) (async) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x36, 0x36, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x62]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00", 0xfffffffc}, 0x48, 0xfffffffffffffffe) (async) r9 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000580)={0x1fe, 0x6, 0x60000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) 486.797087ms ago: executing program 6 (id=775): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) listen(r0, 0xfffffffb) r1 = syz_open_dev$radio(&(0x7f0000001240), 0x2, 0x2) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)=ANY=[@ANYBLOB="28000000130a0103"], 0x28}}, 0x0) ioctl$VT_ACTIVATE(r2, 0x5606, 0x3) readv(r1, &(0x7f0000001500)=[{&(0x7f00000014c0)=""/30, 0x1e}], 0x1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_disconnect(0xffffffffffffffff) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x5, 0x72df, 0x3, 0x1, {0x0, 0x9, 0x7, 0x1, 0x99, 0xd615, 0x9, 0x4, 0x80000001, 0x8000, 0x2, 0x0, 0x0, 0x3, 0x1}}, {0x0, 0x13}}}, 0xa0) ppoll(&(0x7f00000000c0)=[{r6, 0x1504}, {r6}], 0x2, 0x0, 0x0, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES64=r7], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) close_range(r4, r4, 0x2) syz_usb_control_io$uac1(r5, 0x0, 0x0) r8 = epoll_create1(0x0) syz_open_dev$media(&(0x7f0000000000), 0x4, 0x62602) close_range(r8, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x50009404, &(0x7f00000004c0)={0x0, 0x0, 0x37}) sendto$inet6(r9, &(0x7f0000000240)="d4a00a559dd7590fd332e23163f9a3cdcd508acbb0a395cc00108aa758e3d1c4fbb37d5ee6b04d46d1e68401e5dc398cbe5959d62e55ff26ad85ddb66fab547585ff3bae1eef6204953952380f64f60bf6d05700f14d08f7be8668b9e2211855f018103f660efac651acec98a26e69bec1d2612a7d63d6e1655a7fbe1f3ce6fe5f686ef9a4f26fcbcbc56383fb7bd11846b9c9a8710f8f6366903cc43a046cb5daef55e081de9cf47c29cf0797400df7398fd7ff7179c479877d202c493e0be0cb53e4ac0addf88a993ad8d4", 0xcc, 0x10000000, &(0x7f0000000340)={0xa, 0x4e21, 0x8, @mcast2, 0x81}, 0x1c) read$FUSE(r9, &(0x7f0000001540)={0x2020}, 0x2020) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r10) vmsplice(r11, &(0x7f00000013c0)=[{&(0x7f0000000100)='}', 0xffffffd5}], 0x1, 0x0) 484.620157ms ago: executing program 4 (id=776): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x9, 0xdb, 0x3, 0x1000}, {0x100, 0x1, 0x81, 0x40}, {0x8, 0xfc, 0xff, 0x7}, {0x8001, 0xf7, 0x8, 0x9000}, {0x200, 0x8c, 0x0, 0x2}, {0x3, 0x7, 0x40, 0x40000}]}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x1}, 0x6) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000140)=0x5, 0x4) write$uinput_user_dev(r0, &(0x7f0000000180)={'syz0\x00', {0x3, 0x5, 0x4, 0x8}, 0x21, [0x6, 0x200, 0x6, 0x3, 0x9, 0x1, 0xa6a8, 0x80, 0x6, 0x3, 0x1, 0x9, 0x10, 0x5, 0xb, 0x4, 0x1, 0x7, 0x7, 0x5, 0x5, 0x10001, 0x5, 0x1f600, 0x400, 0x8, 0x80000, 0xe23a, 0x3, 0x35c00000, 0x7ff, 0xc57, 0x7, 0xfffffffc, 0xe, 0x7fff, 0x3, 0x0, 0x3, 0x8, 0x20000000, 0x0, 0x81, 0xfffffbff, 0x0, 0x300000, 0x1, 0x4, 0xff, 0x4, 0x1, 0x6, 0x0, 0xf, 0x0, 0x3, 0x3, 0x1, 0xe, 0x0, 0xcb0b, 0x7, 0x80000000, 0x6], [0x3, 0x2, 0x3, 0x6, 0x2, 0x7ff, 0x4, 0x7, 0x7, 0x6, 0x0, 0x4, 0x6, 0x5, 0x7, 0x1, 0x5ed2, 0x7fffffff, 0x4, 0x9, 0x2c3bf0f5, 0x3, 0x9, 0x94f65f2, 0x9, 0x9, 0x10000, 0x3, 0xa, 0xfffffffd, 0x3, 0x7fffffff, 0x4, 0x1000, 0x0, 0x2, 0x5, 0x3, 0x8000, 0x2, 0x0, 0xb8, 0x6, 0xf, 0x3, 0x5, 0x95, 0x0, 0x101, 0x6, 0x8, 0x80000000, 0x4, 0x0, 0x40, 0x51, 0x5, 0xdd, 0x7, 0x7f7, 0x9, 0x20000000, 0xfffffffb, 0x216a], [0x7f, 0xfffffffe, 0x1, 0x7f, 0x9, 0x2, 0x9, 0x53, 0x80000000, 0x0, 0x2, 0x6, 0x7ec3, 0x800, 0xc, 0x498, 0x7ee, 0x5, 0x2, 0x1, 0x80, 0xfff, 0x4, 0x6, 0xa, 0x9, 0x5, 0x7, 0x8, 0x4, 0xee1, 0x1, 0x10, 0x4, 0x1, 0x6, 0x92a3, 0x59bf, 0x0, 0xffffff81, 0x3, 0x8, 0x3, 0x6, 0x8a1, 0x5, 0x9, 0x80000001, 0xe, 0x43c, 0x3, 0x5, 0x616, 0x40, 0xe9ed, 0x200, 0x7, 0x6, 0xa01, 0x8001, 0x7, 0x34088393, 0x6, 0x2], [0x6e6, 0xa32, 0x3, 0x1ad, 0x9, 0x8, 0x6, 0x4, 0x8000, 0x6, 0x1, 0x7, 0x1, 0x80000000, 0x0, 0x1c, 0x4, 0x822a, 0x0, 0xffff, 0x5, 0xd0, 0x2, 0x40, 0x1, 0x6, 0xfffffff1, 0x200, 0x9, 0x3, 0x8, 0x0, 0x1, 0x2, 0x0, 0x800, 0x5, 0x2, 0xfffffff9, 0x9, 0x3f, 0xfe, 0x6, 0x6, 0xfffffff9, 0x7, 0x80, 0x8, 0x6, 0x0, 0x3, 0x1, 0x5, 0x0, 0x4, 0x101, 0xfffffff8, 0x7, 0x8, 0x9, 0xff, 0x4ff2f08c, 0x3ff, 0x100]}, 0x45c) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000001d00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000000640)={0x1604, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0x15f0, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE={0xaf, 0x2a, [@perr={0x84, 0xa9, {0x3, 0xb, [{{0x0, 0x1}, @broadcast, 0xfffffff9, @value=@broadcast, 0x28}, {{}, @device_a, 0x10001}, {{0x0, 0x1}, @broadcast, 0x5, @value=@broadcast, 0x8}, {{}, @device_a, 0x2, @void, 0xc}, {{}, @device_a, 0xfffff801, @void, 0x2}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0x34}, {{0x0, 0x1}, @device_b, 0xca7, @value=@device_b, 0xe}, {{}, @device_b, 0xffffff33, @void, 0x9}, {{}, @device_a, 0x10001, @void, 0x26}, {{}, @device_a, 0x400, @void, 0xe}, {{}, @device_b, 0x8, @void, 0x3f}]}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0xfff3, 0x9]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x14, 0xbb, [0x7, 0x3, 0x2, 0x6, 0x3, 0xc95, 0x9, 0x5]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0x39, 0x438, 0x2, 0x6, 0x243, 0xffff, 0x4, 0x1, 0x9]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x12, 0x7f, [@mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x21}}, @supported_rates={0x1, 0x3, [{0x5, 0x1}, {0x36, 0x1}, {0x0, 0x1}]}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x8001]}, @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x8fa, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x1ff, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x41}, @device_b, @device_a, @initial, {0xf, 0x4}}, 0x6, @default, 0x4000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0xad}, @void, @void, @val={0x5, 0x76, {0x6, 0x8b, 0x57, "af07616273e4c608fd95c65299133259f0987b9b865fb14322d8015df0339082e14ac41c4403203e5ff1171bc7973e41aa69e8e75290903df71bf07e6c50e754e338fab95e84407f725157b6998e8330e89517cb250a2539832a538ed1198a9c0173f4e86f2087a33e61ea84db668fe1a87d1c"}}, @val={0x25, 0x3, {0x1, 0x6c, 0x68}}, @void, @void, @val={0x2d, 0x1a, {0x1000, 0x2, 0x4, 0x0, {0x7, 0x482, 0x0, 0x5, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x6, 0xfffffffa, 0x4}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x3, 0x3, 0x11, 0xfffb}}, [{0xdd, 0xca, "28cf112e8c3826458a1c8e287811b9deb2b600862f0a4387c61249fd0df0f0ade32d6392df88ba6db14cafcbb4ceefd587c4e253c08e639e5425719a2c9f7ca179b6411b9db277ad90ff004dd109875461993f87e311beaa66207cbf789b36e7447bad2328dcd69318c34a6cf964e7e8ec8b2d8d5aaff6aedabfd8d553ff7c8d524753c6812676f891083c152fcd39ae990ac5f175b374730983f91d6e800137f359624fe1d221073ebbf24ff1e8ec0600d6c8f9df7425430f28e1eb6eeeceb8f352327011c95f6950c6"}, {0xdd, 0x55, "3dbba916796400f131cce45971b67b70edd1212bbd7179c6b9d7922f0fa64a005ca24c6bfef30432bdc5e47ea0fd32ed13ad53f62d7bfdaff18c8a1967599b39648cedf50f984b812883c1830c98dc5c7173353a6b"}]}}, @NL80211_ATTR_PROBE_RESP={0x5aa, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x44, 0x80, [@supported_rates, @peer_mgmt={0x75, 0x18, {0x0, 0x6, @val=0x3, @val=0x1d, @val="b1e4e07f35ff6b70122588e66842c200"}}, @ht={0x2d, 0x1a, {0xe082, 0x3, 0x2, 0x0, {0x2, 0x7, 0x0, 0xd, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x801, 0x0, 0x8}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}], @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x18, 0xf, [@link_id={0x65, 0x12, {@random="7fb640a12ddd", @device_b, @broadcast}}]}, @NL80211_ATTR_PROBE_RESP={0x149, 0x91, "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"}], @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x294, 0x80, [@mesh_id={0x72, 0x6}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0xae, {0xb9, 0x4, "ada0467ec05b32eeec9e07d7ffcab2c0", "458c90869e9133cd9da85fdc23828b9a137d640a4ea7ee2d280b27e70f43bde1", "95d3b5f47432b67cd449aaae2dceaa49ac0a61a09ce2b530c15c37de6a4ed1a7", [{0x2, 0x19, "13ef71a1479a880ab1522bfb012cb844dab790aa36473fca3e"}, {0x2, 0x1a, "759d668c1db8b0495ebf5563e1b07fe44b598fee555055a24ad9"}, {0x2, 0x4, "91e35784"}, {0x3, 0x1d, "305fbbd26db6e913b82aaca4df16073dc77e6d16086c6135ee15a14b34"}]}}, @perr={0x84, 0xef, {0x5, 0xf, [{{0x0, 0x1}, @broadcast, 0x7fffffff, @value=@device_b, 0x15}, {{}, @device_b, 0x4, @void, 0x16}, {{0x0, 0x1}, @device_b, 0xc, @value=@broadcast, 0x2c}, {{}, @device_a, 0x3, @void, 0x14}, {{}, @device_a, 0x100, @void, 0x3f}, {{0x0, 0x1}, @device_a, 0xc, @value, 0x28}, {{}, @device_a, 0x0, @void, 0x41}, {{}, @broadcast, 0x13c0d223, @void, 0x29}, {{}, @device_b, 0x1, @void, 0x26}, {{0x0, 0x1}, @device_a, 0x8, @value=@device_b, 0x3d}, {{}, @device_b, 0x7, @void, 0x2f}, {{0x0, 0x1}, @device_a, 0x3, @value=@broadcast, 0x1d}, {{0x0, 0x1}, @device_a, 0x0, @value=@device_b, 0x39}, {{0x0, 0x1}, @device_b, 0x6, @value, 0x1e}, {{}, @broadcast, 0x1, @void, 0x30}]}}, @ibss={0x6, 0x2, 0x5}, @ibss={0x6, 0x2, 0xff10}, @random_vendor={0xdd, 0xbf, "12722c05325153be44aa29474935872aa5ce36c4950dec9d088e84dfb0e46f85a5989ef7f7195bb4643d207236f16771a5b5f041705a29d1a2d3e63b8e25c2ae787c09e358fba730cdf4f9aac455210260688177f5d25c0a0fd3c50372e4441bec62294a3fbb699ac8d24fa5b8aa967577252f7be2566d9bf8bead03622c30747e5a5e16fc81184ee1ae803e8df69cce8469d8fa18284930c28ec4b2bbc146e4d58e95af89cb2584eb726b9779d7b5fcd3bd4b3c0f57d1a295ec531332e7fc"}, @peer_mgmt={0x75, 0x14, {0x1, 0x6, @void, @void, @val="6885441fb32d8a60ccd5310fea826f15"}}]}]]}]}, 0x1604}, 0x1, 0x0, 0x0, 0x8000}, 0x24048820) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001d40)={{{@in=@private=0xa010101, @in6=@empty, 0x4e24, 0x4, 0x4e22, 0x0, 0x2, 0xa0, 0x80, 0x6, 0x0, 0xffffffffffffffff}, {0x5, 0x100000000, 0x9, 0x0, 0x7, 0xc, 0xfffffffffffffff9, 0x2}, {0xc, 0x1a1, 0x8000000000000000, 0x1}, 0x6, 0x0, 0x2, 0x0, 0x1, 0x1}, {{@in=@rand_addr=0x64010100, 0x4d4, 0x32}, 0x2, @in6=@mcast2, 0x3504, 0x7, 0x3, 0x75, 0x7ff, 0x1, 0xf}}, 0xe8) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) setxattr$trusted_overlay_opaque(&(0x7f0000001e40)='./file1\x00', &(0x7f0000001e80), &(0x7f0000001ec0), 0x2, 0x1) read(0xffffffffffffffff, &(0x7f0000001f00)=""/4096, 0x1000) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002f00)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mknodat(r1, &(0x7f0000002f40)='./file0\x00', 0x4, 0x95) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000003040)={'ip6_vti0\x00', &(0x7f0000002fc0)={'syztnl2\x00', 0x0, 0x4, 0xfc, 0x6, 0xbf, 0x40, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, 0x7800, 0x40, 0xa, 0x4ad}}) sendmsg$nl_route_sched(r1, &(0x7f0000004a80)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004a40)={&(0x7f0000003080)=@newtfilter={0x1988, 0x2c, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x8, 0x2}, {0xc, 0x8014}, {0xb0c22bc575389489, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x80000000}, @TCA_RATE={0x6, 0x5, {0x3, 0xa}}, @filter_kind_options=@f_cgroup={{0xb}, {0x18fc, 0x2, [@TCA_CGROUP_POLICE={0xc60, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xb}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x4, 0x1, 0x1, 0x80000001, 0x101, 0x2, 0x2, 0x7fff, 0x4, 0x80, 0x40, 0x200, 0x5, 0x400, 0xfffffff8, 0x8, 0x7, 0xfffffffb, 0x5, 0x9, 0x8001, 0x0, 0x3, 0x853, 0xfff, 0x3, 0x4, 0x9, 0xa4, 0x47, 0x6, 0x4b28, 0x1000, 0x0, 0x91, 0x0, 0x6, 0x2, 0x1, 0xfffffff9, 0x2, 0x2, 0x1, 0x2, 0x7, 0xe, 0x40, 0x0, 0xffffffff, 0x800, 0x23, 0x7, 0x5, 0x8, 0x6, 0x7, 0x7, 0x6e, 0xb5, 0x2, 0x9, 0x2, 0x8e, 0x0, 0x9, 0x5, 0x8001, 0x1, 0x9, 0x6a0839ee, 0x6, 0x7ff, 0x5, 0x10001, 0x0, 0x2, 0xf, 0x0, 0x4, 0x8, 0x100, 0x10, 0xfff, 0xfffff7cb, 0x2, 0x10001, 0x9, 0x7fff, 0x8, 0x2a1, 0x2, 0x1, 0x2, 0x80000000, 0x7fff, 0x2, 0x9a5, 0x23, 0x2, 0x1, 0x4, 0x14, 0x80, 0x0, 0xd9, 0x5, 0x4, 0x37000, 0xffffed35, 0x80000000, 0x5, 0xffffffff, 0x4c0a1b09, 0x8, 0x1, 0x98, 0x7, 0x8, 0x6, 0x1, 0x5, 0x80000001, 0x145, 0x6, 0xffc00000, 0x9, 0x8001, 0x3, 0x1, 0x3, 0x5, 0x7, 0x3, 0x0, 0xfffffffc, 0x6, 0xff, 0x10000, 0x9, 0xfffffffe, 0x9, 0xfff, 0x7, 0x9, 0x8, 0xfff, 0x1, 0x334, 0x2, 0x6, 0xffff3745, 0x3, 0x1, 0xfffffff7, 0x0, 0x8001, 0x7, 0x0, 0xffff8001, 0x8, 0x77, 0x7, 0xfffffffe, 0xd82, 0x3, 0x3, 0x5, 0xfffffffb, 0xb, 0x48, 0x80000000, 0x8, 0x3, 0x63, 0x1, 0xe, 0x400, 0x933b506e, 0x8, 0x8, 0xfffffffc, 0xb04, 0xfffffffa, 0x5d, 0x7, 0x6, 0x2, 0x7f, 0x8, 0xfff, 0x4f8, 0x5, 0xe41c, 0x2, 0x7, 0x1ffc0, 0xfffffbff, 0x4, 0x7, 0x9, 0x2, 0x10, 0x8, 0x81, 0x1c, 0x3, 0x2, 0x9, 0x7, 0x1, 0x22ac, 0x8, 0x7, 0x10001, 0x2, 0x0, 0x81, 0xbba, 0x9, 0x6, 0x10001, 0x19, 0x8, 0x7fffffff, 0x3, 0x3, 0xe, 0x5, 0xfffff801, 0x0, 0xfffffff8, 0xf060, 0x507d, 0xace, 0x4, 0x8, 0x7ff, 0x7, 0x0, 0x800, 0x8001, 0xfffffffe, 0x80000000, 0x571, 0x2, 0x88, 0x6, 0x3, 0x7, 0x8001, 0x9b8, 0x4, 0xfff, 0x7fffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x8, 0x800, 0xba9e7fb6, 0x4, {0x8, 0x0, 0x3, 0x6ac3, 0x5, 0x4}, {0x60, 0x0, 0x4, 0x1, 0x7, 0x9}, 0x2, 0x1b3, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8, 0xa, 0x3, 0x800, 0x0, 0x2, 0x0, 0x4, 0x7, 0x9, 0x2, 0x2, 0x8, 0x5, 0x7, 0x1, 0x6, 0xfb14, 0xad, 0x2, 0x10, 0x4, 0x7, 0x0, 0x83, 0x3, 0x6, 0x5, 0x1000, 0x8, 0x5, 0x8df, 0x5, 0x81, 0x5, 0x8000, 0x1, 0xa, 0x8001, 0x6, 0x45e8, 0x5, 0xfffffbff, 0x6, 0x7, 0xa, 0x8, 0x5, 0x7ff, 0x10001, 0x0, 0x7, 0x1, 0x5, 0xfce, 0x8, 0x6, 0x6690, 0x7fff, 0x1, 0x80, 0x9, 0x2, 0x7, 0x3, 0x7fffffff, 0x6, 0xfffffff9, 0x9, 0xa94, 0x6, 0x2, 0x7, 0x0, 0x8, 0x9, 0x800, 0x3, 0x2, 0x80, 0xfc5a, 0x2, 0x5, 0x9, 0x810000, 0x8, 0x3ff, 0xfae, 0xfffffffb, 0xa, 0xc, 0x8, 0x78, 0x6, 0xc1, 0x3, 0x80000000, 0x1, 0x0, 0x80000001, 0x8a9, 0x8, 0xf, 0x4, 0x2c6, 0x9, 0xfffffffa, 0x9, 0x9, 0x43c, 0x9, 0x6, 0x9, 0x4, 0x0, 0x80000001, 0x7fff, 0x4, 0xc, 0x9c, 0x8, 0x4, 0x5, 0x34d4, 0x0, 0x7fffffff, 0x2, 0x4, 0x520d, 0x401, 0xfffffffc, 0x3, 0xa74, 0x0, 0x6, 0x0, 0x4, 0xfffff000, 0x1000, 0x10000, 0x7, 0x94, 0x7, 0xe, 0x9, 0x9, 0x80, 0xfffffffc, 0x1, 0xe14, 0xc, 0x9, 0x4, 0x4, 0x0, 0x4, 0x40, 0x7, 0x1000, 0x8, 0x2, 0x9, 0x8, 0x59, 0x4, 0x104, 0x8, 0xe, 0x401, 0x8, 0x3, 0x2, 0x7, 0x6, 0x4, 0x401, 0x1, 0x3, 0x81, 0x7, 0x6, 0xa, 0x2, 0x80000000, 0x3, 0x8, 0xf, 0xfffffffe, 0x3, 0x7, 0x7e7a40c6, 0x80000000, 0x9bc, 0x72b1, 0x6d, 0x8, 0xa29, 0x284, 0x4, 0xffff, 0x5, 0x5, 0x13, 0x48f, 0xfe0, 0x7ff, 0x6d, 0xe2, 0x9, 0x0, 0x1ff, 0x5, 0x401, 0x3, 0xfff, 0xc9ca0000, 0x1, 0x5, 0x101, 0x5c1d, 0x5, 0x2, 0x2, 0xa, 0x7, 0x7, 0xfffffffc, 0xe, 0x186f, 0x7fffffff, 0x6, 0xd0, 0x809, 0xfffffffc, 0x78, 0x2, 0x4, 0x6000, 0x0, 0x4, 0x10001, 0x2, 0x9, 0x3d, 0x2, 0xfffffffc, 0x3, 0x7, 0x5, 0x1, 0xe7a, 0x2, 0x1, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffff2133, 0x0, 0x2, 0xc, 0x79a7, 0x800, 0x3, 0x1, 0x80000000, 0x5, 0x1000, 0x8, 0x2, 0x0, 0xb50, 0x0, 0x4, 0xfffff1f5, 0x6, 0x180, 0x785a, 0x7, 0x8, 0x3, 0x1, 0xb4fc, 0x7fff, 0x80000000, 0x8, 0x8f4, 0x13cf, 0x6, 0x2f5d, 0x5, 0x8, 0x9, 0x105, 0x1ff, 0x7ff, 0x1, 0x3ff, 0xfffffffe, 0x1, 0x3, 0x5, 0x9, 0x1, 0x8, 0x1, 0x6, 0x9, 0xe1cf, 0x6, 0x3, 0xfff, 0x81, 0x2e71, 0x69, 0x8, 0x40, 0x3ad, 0x6, 0xfffffff8, 0x2, 0x226570ec, 0x23a, 0x80000001, 0x1, 0x2, 0x2, 0x8, 0x7, 0x8, 0x4, 0x7, 0x1, 0x7, 0xfffffffd, 0x7, 0xa, 0x5, 0x2, 0x3b4cf8cd, 0xe9, 0x7, 0x20a, 0x81, 0x6, 0x1, 0x9e4a, 0x10, 0x7, 0x8, 0x4, 0x3, 0x5, 0x9, 0x1ff, 0x0, 0xff5, 0x3a8, 0x9, 0xf, 0x8, 0x7f, 0x24976efb, 0xfffffffe, 0x7fff, 0x2, 0x0, 0x47d4, 0x7, 0x33, 0x6, 0x4, 0x7, 0x200, 0x2, 0x1, 0x2, 0xb, 0x3, 0x5, 0x0, 0x2, 0x5, 0xd, 0x1, 0x9, 0xc, 0x7, 0xffff, 0x5, 0x4, 0x4, 0x130a, 0xc0f, 0x9, 0x3, 0x0, 0x7, 0x3, 0x7, 0xa, 0xfffffff7, 0x5, 0x8, 0x2c30, 0x5, 0x1, 0x1, 0x1, 0x7, 0x5, 0x2, 0x5, 0x6, 0x6, 0x7fff, 0x32, 0x401, 0x0, 0xd, 0xfff, 0x93, 0x80000000, 0x7fff, 0x6e56, 0xf, 0x1, 0x5, 0x6, 0x1, 0x29, 0x9, 0xec0, 0x40cf, 0x5, 0x2, 0x1, 0x4, 0x8, 0x2, 0x0, 0x4, 0xfffffffb, 0x5, 0x7dfa, 0xd, 0x9, 0x3, 0x4, 0xa, 0x6, 0x80000000, 0xffffffff, 0x7, 0x45, 0x80, 0x5, 0x3, 0x10000, 0xd3, 0xcf, 0x1000, 0xc2, 0x0, 0x4, 0x3d59, 0x10, 0x3ff, 0x4, 0x9, 0x7, 0x80000001, 0xfff, 0xf85, 0x6, 0x0, 0x4, 0x6, 0x9, 0x10001, 0x1, 0xff, 0x6, 0x26, 0x4, 0x7ff, 0x4, 0xffffffff, 0x8a2, 0x7ff, 0x3ff, 0x8ae8, 0x10, 0x2, 0x800, 0x4, 0x3, 0x99, 0x7, 0x6, 0x3, 0x8000000, 0xffffff8b, 0x6, 0xd, 0x3, 0xffff751a, 0xac97, 0x4, 0xf3, 0x6, 0x4, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]}, @TCA_CGROUP_ACT={0x7c0, 0x1, [@m_ife={0x140, 0xa, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x1, 0x4, 0x7, 0x3}}}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x6, 0xffffffffffffffff, 0xd31, 0x4}, 0x1}}]}, {0xd2, 0x6, "16b80b8cf3def666bdac6df04de3893124685cb4f71cfc1ab27a0dac507be9e26cc20302f32e72581330f5c86366738ffcb4601ac4c28d911c63d6fdddb48a9d02657b617f5abcea2330a31dfdc5a1e0e6d6a2dfb7168f0a5e0ee371f0151c1406d059e1213d15e4f023670b53417d228b97d474668263a13d19c45e502205626a916ac56b5c3f2e8b5c7cb5ca8d3103005739d2fe2f97a2f89b0e047bb1e105023fd501e5135357871d72985d76b83dac2250287d38edda8b2b023be945938bf80f4cd9bb25c90ec97152c4fc2c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x1a4, 0x3, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7ac, 0xffffffff, 0x6, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80000001, 0x6, 0x7, 0x6e, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2520, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x178, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0xff, 0x401, 0x0, 0xb, 0x100}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0xffffffff, 0x6, 0x7, 0xb}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x17ed, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1c38, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x400, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1eee, 0x7}}]}, {0xcf, 0x6, "95ec7f58ed6a4b2f09c7fbc4347c7f7b2116acbe0ac94e85302e095014bd7495faace2ce11b63680f3f6965892d01b862776a602f269f13e66b375cb6397f50bd681d52f3d9ed73a63f220af6a540a8ac1d0f73bfa4b8309e1f6214e9642ded81cd5dc42ffa6af13c544a3111a808a66f5a16ec6f5816d1b3a5052b88dda2b8025ca329f4453487e4ec49399399ce6d6dc1f82d4f28f6f1b75ebfc284154428fac4f4c9a114d29ede1d148f66db71d6d52bcdf527a3f9482e4c84d7be191783d3e24fbcc0510dffae3a7db"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6, 0x3}}}}, @m_csum={0x168, 0x12, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x4, 0x1000, 0xfffffffc}, 0x7d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0xffff8001, 0x6, 0x17, 0x9}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x3, 0x1, 0x5}, 0x1b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0x0, 0x5, 0x9, 0x80000001}, 0x63}}]}, {0xcc, 0x6, "fc3c65336435fc38d614729881e271b0cee3689309fbada00f6af683ce95495536436756471c07d3467fd833f0238db7b155abc87a7dc92221497c56e6cd60031b654c2056ec4b7a4cecae1adfdd1eaab3cea613ee947a13feb379091e95b541d1faf2488685c71605711a331cdc41f03e31a7a078a7e958784437b6227072741eacc787dd5f661ecb9cfe5d0702921b5494d05b59eb8d68a76267da9d0766601c35aa319fe4fd6a05376d160d690fe8762ece600fc81fd95ad9c932594615cc22c689286e15578e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_csum={0x190, 0x11, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x8, 0x2, 0x5}, 0x61}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d, 0x3, 0xffffffffffffffff, 0x40, 0x9}, 0x63}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1400000, 0xb5, 0x1, 0x2, 0x8}, 0x37}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x8cbc, 0x0, 0x10001, 0xa7}, 0x51}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x2, 0x2, 0xffff, 0x5}, 0x6}}]}, {0xd8, 0x6, "65f189d41895d9691664ebe61acca26dec24109b9238372b11e71bfc9e1b829f1ef024301c4d07c89e1c2ac3048fca67aa59d65cc0d014fdc085dccc3c71a03ba8f73728680b6a23c2fad5d0b1d3f398aa30cc881ebeb4910a9867dfcc36e1a13d66c549bd9799cd9d58e81271ee496445761a5d5ea3ee6fd8f6712837d588b0251d966f9f78471a98db77f8bdac6048b4f8f3376391fd2fef679bee0ed5660d1224807ea62d72658822961bcb3130aa1ad006aac36395037849f5c1535c7947ad193830d0f5dd41e0547b592765fe1cadfb224a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0xec, 0x1d, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xce, 0x3, 0x0, 0x4cf0396c, 0x10001}}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}]}, {0x95, 0x6, "799581c16a81ae2036468883fe3fc72a818521d58c48c6fd020b5e209ade4f717e9fa612ae8d7788a73b5579f3688958aabffe5e31d151082619cedd670eac90029cc18087a32bbf4884197b316a6d923f707d390a8afaa2fbce1ce19ff9ad6e556697a34820b3d1b30d92ff4a32de0dd56c79d1400d6b15b536f08c03c7ae3dc6bd04b392ed270e0c67589ea88ebd1c18"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_bpf={0xf4, 0x10, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0xc1, 0x6, "41ba9b949559cd29999f3ecf35f2e3ae7e75922732dd63c880cfa0fdd26df30c3220868e60676e56492cae2b74ca54d9f66a1f55d9ff5a18379b316f9ecae23416a596bc68c47ff10eea275abfb660ee906ec4d72ffb944026c365197e8332f10303955b1e02e54ec8acf59a1ad8aee838f9d3eae8920e4f81425aea2d045e053c6f3c0658c83e8cad9335fcaed6da4eacbb2be161dfba806e0bf6a570387b42524b86d630e3fbdaeeaba718c4d94f5e63e35474530a3541a6e8df505b"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_CGROUP_POLICE={0x410, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff8, 0x9, 0x6, 0x2, 0x7ff, 0x3, 0xb, 0xfffffffa, 0x0, 0x6, 0x4, 0x31, 0x2000000, 0x48, 0x51, 0x5, 0x5, 0x0, 0x3, 0xffff7027, 0x5, 0x9, 0x2, 0x0, 0x1, 0x8001, 0xd, 0x9945, 0x4, 0xf, 0x0, 0xb, 0x6, 0x80000000, 0x20000000, 0x9, 0xffffff7f, 0x1000, 0x6, 0x7fffffff, 0x2, 0x8, 0xffff, 0x4ecb, 0xf, 0x0, 0x7, 0xb, 0xc, 0x6, 0x1ff, 0x2, 0x5, 0x4, 0x6, 0x6, 0x8000, 0x101, 0x0, 0x5, 0x6, 0x6, 0x5, 0x241c, 0x0, 0xf, 0x10000, 0x4, 0x5, 0x3, 0xf204, 0x4, 0x8, 0x9, 0xa2, 0x5, 0x9, 0x5, 0x4, 0x10, 0x8, 0x1, 0x1, 0x800, 0xffffbc3a, 0x6, 0x8, 0x9, 0xfffffffd, 0x0, 0x0, 0x1, 0x1, 0x14e, 0x8, 0x77e, 0x6, 0x81, 0xfffffff9, 0x67c4f82c, 0x0, 0x5, 0x40, 0x4, 0x6, 0xfffffffe, 0x10000, 0xfffffff7, 0xffffffff, 0x7fffffff, 0x2, 0x3, 0x3, 0x9, 0x9, 0x7, 0x80000000, 0x1, 0x2, 0x5, 0xfeb, 0x5, 0x1000, 0x8, 0xf9, 0x8, 0x8, 0x4608, 0x0, 0x0, 0xba0, 0x70b66ddc, 0x1a, 0x4, 0xa, 0x4, 0x0, 0xb, 0x4f, 0x8001, 0xb9, 0x4, 0x4, 0x1, 0x8, 0x1, 0x4, 0x3, 0x3, 0x8bb6, 0x7ff, 0x7, 0x3a, 0xb, 0x1, 0x8, 0x3, 0x4, 0x3d00, 0x2, 0x7fffffff, 0x0, 0x9, 0x3, 0x1, 0xffff, 0x1, 0x7, 0x8, 0x1ff, 0x8694, 0x40, 0x5c43, 0x646d, 0x9a, 0x9, 0x80000001, 0x6d4, 0xfffffff7, 0x0, 0xcf41, 0xfffffff8, 0x8, 0x8, 0x6, 0x2, 0x1, 0x1, 0xd, 0x3ff, 0x9, 0x10000, 0x4, 0x10000, 0x0, 0x1, 0x1, 0x9bf6, 0x879, 0xe, 0x9, 0xf8f3, 0x7, 0x401, 0x0, 0x4, 0xfffffff7, 0xa93, 0x85, 0x6, 0x944, 0x2, 0x5, 0x100, 0x2, 0x4, 0xa9f0, 0x9, 0x4, 0x3, 0x3, 0x2, 0x4, 0x6, 0x4, 0x6, 0xffffffff, 0x5, 0x4, 0xf39e, 0x1, 0xb85, 0x1f82, 0x3, 0xfc0, 0xe, 0x1ff, 0x170a, 0x9, 0x7, 0x5d16, 0xd6, 0x6, 0x10001, 0x40, 0x0, 0x2, 0x9, 0x9, 0xfffffff6, 0x9, 0x4, 0x7, 0x6, 0x8, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}]}, @TCA_CGROUP_EMATCHES={0x94, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0xfffd}, {0x189, 0x9, 0x10001, 0x8001}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x8f}, {0x3, 0x1, 0x4}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x9, 0x8, 0x8000}, {0x1, 0x6, 0x4}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x6, 0x2, 0xf}, {0x10, 0x6, 0x0, "bb0cc652e220"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x3, 0x0, 0x0, {{0xf0, 0x9, 0x6268}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x80}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x43}}]}, @TCA_CGROUP_POLICE={0x20, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x77}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0xdb54}]}, @TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x80}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}, @filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file1\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file1\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0xe}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}]}, 0x1988}, 0x1, 0x0, 0x0, 0x200000a0}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000004b40)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) mount$tmpfs(0x0, &(0x7f0000004ac0)='./file1\x00', &(0x7f0000004b00), 0x20491, &(0x7f0000004b80)={[{@grpquota}, {@nr_inodes={'nr_inodes', 0x3d, [0x25, 0x34, 0x65]}}, {@inode64}, {@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x58, 0x6d]}}], [{@euid_eq={'euid', 0x3d, r5}}]}) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000004c80)={0x60, 0x2, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x5, &(0x7f0000004c00)=[{0xffffffff, 0x8, 0x6}, {0x7, 0x3, 0xd3f1}, {0x2, 0x9, 0x7fff}], 0x3, 0x1ff, 0x12, 0x8, 0x0, 0xc}) mount$9p_rdma(&(0x7f0000004d00), &(0x7f0000004d40)='./file1\x00', &(0x7f0000004d80), 0x2000, &(0x7f0000004dc0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@appraise}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, 'grpquota'}}]}}) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f0000004e40)={{r0}, "a5175a7dac85c365ccd9010f92fb436640295f3b6f2cc33d40889ecafa7bb5d0f35846dde77cf78bae15da7752d961ba4149f7b62ca1de736e8d6b920de67c03f2e6ab2e04f536ac6fa9aa15e0cc868c9e5325f7912823c7a51c86017aee5dd45c0019eab3438c7e570d88c9bd1c859a0e5d3e96b821070d959eacb730f4579120d6f6a2b067bdf62e7281904c02cfc7d0c5463b6b6f0d89ef0d4cd10600694c4c329664d6aed98c6533b876721818429c6750f059f58ff821d6f222fb66424f299ed8e199e82ec07c87edc49829739a2206b2834cafe41353aee668064e497b401c37edc4a8eda69fa73b858248653eb7d911f4535146df2f825f5959787d213ca539d26214a9341f201f56d1960d391a55f776a50e17b4e9a8703beee9237e3a44296169317632119fabd35c7cbef3092c2a4b74c66da263a1df20a73a85593e630d18a17cfeecda9d854b2d32008160615bdd09977b7d23a8d6633285b6138344cae38c6e63cc15f2c9ab4de2459f209b11eb0b368d69f5e7fd1015b85894e2fe656180d10b245d87c381cc3f2b3175fcf8cbca061bf830b7e8f9ca7df43b702931b770eb7d51fbf93e13217c4c61906cd398f115466a1d940d16777e0ae96e01846cfd3f71c80f70cee6622464b508022abf1946d136c21018d6f7796ebdb7a05eb7675410870196be425ba9c3fd37327b7dfa3005118eec96b1ac8439d088d75b68da34381b369b367ae0609322a395782aeeb67a07f5401f744df153fa0dceebc57c3902f6218ccafdc973d0ea211bbafd2ee6e0d2d7312fbfab523d408141b27e797ea6c58264cade565066888dbbb601a1a43d0a01374c29f16af6a599bbde0863cdfc475624b7685f75ebf63de27f3a0f4faba355b3bdc42602b238f86679f86703c13b7ed05e4fea777399dddab592035e4579b1c81ad16849431e17212bfcc101b28aa2dbccc8c5500a928f9620c2e094b2236d82fbb9027e50a961aa5686db7e939d77a55ecb33fc181847ac983d8d044c0667bb27fedabab5858bffa4db26d63c00a943a065d9c6413f83fedbca2675de00954e67c542c4f60f30cd97512cd3bc6b45476208cac5c6d537d9c8b55e6a2d59f229bd32e123afbdc17c7612131d76f68ee305b89dc08b7500bf513774604c56a507f4d14c13ee110659087fa61b8d7f7a13b7b2081090f41a923506d0c05dd547e2bd2357d471a32ec78e19154ad95c2b208e1ec0fea411fb903284177a81e6efc660a55283f3253b6643e96b8682bc4300861a41e5f6bc6523b2eebed5a525dd5ef0068a6fd0b1fdeaf2560e014a1f173613470369cba47f73ff34943c7ed632793eff4d7c648dd75979ac304360c715372d489c471e7045739561bc69e7898575b574838b90fb17ad0e180f9928aa8d2b3cf43e06ec2b8183ca6fe141cf6cb7913c6ae3ce01b268b4b64bb5a4c6d9f9d46189418e25877b03668867723ed900535dda86d4af34d7bc45c5f4cf333ccac10f205646d8b8bfeb3c8f58e5533806a7bafc310c7e43165f77b98c85e74eec644a507a0f11254482d703afac2d1b6b10c5643641e018cc75fa103b08dc94707e5c9e84eaf61538a7f27dcf8f52ce9d4b95dc0f13f9b1dfe655aebd1a70a273bac42a19226d1540f56472d04c5959ee72c0326c7f2677fd18a22c6c659b2789a73c4756f0f75d6db3ec94fb4c0c4b57646005b1f90f645f5d7b62019183d4fbeae29e743973a170579488fbdbe7b67bd2fb534b4f7f17d7be6bfd657ea56559e3c59febf6256ed6cc3f11775412da72a7fca53d8224034cad808c7094cb7248845902bbed619048887696e068c7345bf48d640891388731d18a4207fa10b67e5e1e91d79fedf6e16ff9d3c941d59af7f1bfeadb0ccb64b764c6626694e5fc7ba70d94c3734b0142f1299e2e6b857c9c54298c14711e41f3dbd303d66b177263ce188f2afd1718f2942a587b6962cebd2eb03dc133a7b792aeb9059a4586e1b1a303329c9b89fa70311eca0e0a7016aa678b103d0733746e49740a8d5dccd36da624c842fc734009331f72ecca3ae20a47cb941bc8942625fbcc02dfd4a8386ce6822004560a0af592e192dc8278739b5b903421685fae07b440ff0e7e982ab602ec3d39420be53a89ac2ad20aa483c34ae94f0fbba72259c9224e13c173291086efff0f0826a3764be115c9ee6afeec8783a77e207b38eac235a7da4030dd6b893d2aab26027dfac63347abee84952b34d3a11d689b04a4ef87086cf2eb62c534e5fef0c7374de882d3a8a436019d8eb812f162c425b4b6f83dde42f5457f50fedd6b1b3af89a4459643a76144517c5c0a89f64d932eed437591f27aea52c8fcd4f078399eb67a3ce3e11eaed7d8d896b9f353e1bde9f59e7ebab50f6595c7af4b8051f4e2d78f6454c24b7ba7938e3320a5a0a231540b604445a7bc85eab6166e5507e12ddcccd17789b9231a2468301c29134fd07eaf14b409fad4d24eb2d5f86a9578f7ea0a46b26104c68d7879d773459bc5fb909fddcb5198f6e322d2b00914040071915d6455d1d9a1f0dcb8e718ba1f81e6d8601f2ade2a64dc365e8ce25f8e0f1c1eb8f7e4a3183c1f6abb067dd89792b3ed93c66c399c65054dd79f0d3be9842d671d0e301fe5c7fcc5e0ac1da238014cb84fa680e433c6fa94921e8bbcedec3556e3d2c8e1d47092aa174de62e5fd53c12a6ccf9b6b3586cac376e4517f3e51d0135dce0a2361fc489d1d4fb72a134ffea2cb6a30a5a6d0eaf93596ff62a88a1d209182851916d672f5b0a380cc773e8f2153c949238fce2ddc07fcc23458223b07d4e15cbfc3dd971cd911a4a68326c9707b861c13e1181253e987345f2dbdf8771b0f154faa1d63ce53b870c3b08b03edea1976b46e193b452dc140765530a0c33c1c4fa2e3ca503c74f695ad08d42d3e11a2483cf143587ab1109190f703296218e3858a651ec05ec17803476140a0c9a0cf7e59af1becadad9da416cb84107863e89196a46ad418286240e37a40652f3af23214c0d0a9dde5fac1e92ba6b742cfdb7dd731a76d95d1a59039ee5afc403072d4685e77e7952ab1080d0cffd1bcf0a0174759b91bf6f849866ee7d9567403e5d677154d5f0ed1034da7f14b9ce6259e12d4dca76d79b147886127ce3fd319ce61c80f5b55c3f38e0f9c0670d8d47ab704bf38d5e6f39daf9b260e8a100f3e2e01846d690927e9281928406f8d6c3eba9707015ea69bbf89bc727a0c5d515f06ba6645037adec30bbe9012de03f933373d2e6ee7511e77381c4a9a6a7056c78077ca6b4275b2a3594713bfe6a1fa55893eda6d938adc7b73a2c68dfeed1aad598332d7890aeebd47225ad6dfe04435c6dfcbc287a38924e2f66176858d0d5519022004d697ff19baa380ea93553b759710cc34ce9c374e719bba08992cb8347dbe2425f40c5663f69d712baf458bbf7ba3572a552297fd073b81394ad90d23b439dd98ae9794e7cb081eb1be4a275805e433f6e1ac6ad0ab26cebbbdcf974f33e14f4485f18e616c1566257d3c7c00a7eca8d239fccaa156740cf0c89a45a416223a4603985dd7ef2fd978de9d6ede49516280b6072777a1532c783e1259d76f603ed7eb57db32bfec64fd982ceed4e520d03cb8f92b8143d836cea1ff57c37c5acdfd9bc4581b3a6c746cd571453824403ba7025e4fc348ffca3a89571c80729d1ff380e77363afd3cf848676092ac3a82d503b585da62e0bd3e5d9cdca5dac7a4de4fdccd04b65594b911649ca2aa4bbe5eb55130cf6ae67ac5417d266debdd4010f8c484d47e00193bd31fb459cba072343e553cecf673dffb1cb79e55b3dd553721702d035a21e060649c33cf6b44bdd476cc7bff727af825f16ed85198a19a5049fbf91649195527473ff9f72cd0b13f6b21bc233f1a603c121bd6cefd4104a1fb9cf277caa64800bc1848be5bb5e7cf362f990a65d5e17b3ce53a154b4c167b0e0c4d82bc5484577142437f7e9433ce645650923ba2114323c6b46bd36ad302b927becb991dfdea6a7767a0ec83c93a2e38f6208b6607bfe7de5b07339a8aea4b12a4878dc703f39c8f695d7187a9e7e991ba7fd1f224edbe1d8d610e429ee31ca191c6865be1db1e8d300019bdae935361c440868aff3b6016d114aa16f26276007b6663dc22793f51128f01d9842959969c4c1e9a68f92ab4ca99e1feddfad4dd31016f1c114de910faeac3a0897da15a127b22b03948c94571856f8d54fb4df6be07a9ba79916b451631c29574e74a0d70d02ff4c9deba12c341d31f1300803087eb9d162d1b306ad7ce8932b3ba04251cc2eb72c9dcbe5cfa83f1f98f62b8bf6e05cae7c0fd5fef5aba639e8b7495c4a95845193040247ac736ad93888c2d7d4c676382146916fb96ceeaadf7f69285c1d432e9dd0a740ec1a91310282963b4066513890d9599cecc3fac59c2964abd9a1e9cb09e87e4b21cd043856528ad5754e66ea8420e608d0acbc31b566a62af69b5f409b8dbfb03f967c5b68d785fa8e377e75dd1cc82747a5358bdc172986b0cbfe6507fdb0ea12929a8d3c8cc27c0dcc7494b82a1508b5766c474d3d1a05aa7a3e21c4a6eeac5b6d5a2788ed94a7e6ed8c0b7795abd65e81bd12dec0a5c8ec618fe147fcb0e81b3021f12b67dbbcee1eed04930acee6e6c8ee245434165bd1d7e6f7d0149c2cec08babde69e52a213866f4dbe33e68e22c65c8afce062f24bee080b31db26c3830f36c0dfed5708edae271aa3077701e61f4076ec2f3add9a07b81d3ce2684fdca840fef4ff39384fd9c8a7aea9912cccd2d5efaef6e490cce7c4af5044a7ac3e4178bb2d4c0929840466321081fda28219b748753c97efdf980888feb75d514e8ee36961e1f92217b02c3f1f4134362a4e5eb9ef0abb145c97eedff0dc9aaed8bbdfde3981c853cf28a86fa541c5a77feaaa152cba25de240bec96e2940ceddfc55a96357e08332113dffd3f768fc1ac5c083510be23b0ebef553cfe2d9619e7a9232c380621ac7e529e5109daf2c2110c4db933c0014480af08949325b51b9085e7db030182e96ce7c9a70bafa5acdb9943c354c1b4f3cac5b273e24bc73ea778bf31dab1c0ced3c589b0a547907826a0398d0e538d2f15f0ae73b78ea9a435035032a7f532435c54d91beef0e915ccc43c6c3a94418a057e90f4447a8e61d40bf16ee5da81db71289641bf25429d58e47a617376a853be0956f93613c8a916edf2efd037146bb656d029cf902616be3c38c2e9ca0955405adec90fc6822150bc80603c8546fc7baed07fb84a798771d2807b079d2da2f4b8f4b158238de77484220167b6909b2c8af570b7c99cdc9a9bf60ffddba9fece81537b8afe26cf5829b8700c95b8b2e86a643359c755debf1d340043628dd1777db8a64ebac50454ac9a8a45f63c0f10f444c1bea82e6b91fccc35181e072c64ab088d4efa5b001936c0cbb0e9689ae057d129088e2126c0658a9df17f79ac2f62a7d1ac5630aca8489164f5e9107b4d03f5417d8675906d2328a566bd51031b424ba92f8b1dd51d8781220a8d37551175cb4f272b09b0283096ee4e48cccdca7934c71ce5e9c6ad8fa45a4ecb7e9601e523fa01ae14afc95664df1f0b15af736f730d0b37e002bffe3b2dc12203582e08028d72a1f34ff426ab2f57211512e43f5e20c360f7b7c8ea8eaec811c7b2a75bea053256c610002bcc973effa570333513f427141bea6a7e0557f0f6fdc0aefac173bdbf34511eb7e2a77bc8aa1549d6"}) exit_group(0x6) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000005e80)={0x1, &(0x7f0000005e40)=[{0x0, 0x0, 0x0, @multicast}]}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000005ec0), 0x100, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005f40), r1) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000006000)={&(0x7f0000005f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f0000005f80)={0x20, r7, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x22}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8b2c6c6ecc1e0b7d}, 0x1) syz_extract_tcp_res(&(0x7f0000006040)={0x41424344}, 0xf, 0x1ff) syz_extract_tcp_res$synack(&(0x7f0000006080)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x186b, &(0x7f00000060c0)={@remote, @remote, @void, {@mpls_mc={0x8848, {[{0x62, 0x0, 0x1}, {}, {0x4, 0x0, 0x1}, {0x8}, {0x7, 0x0, 0x1}, {0x8}, {0xa63}], @ipv6=@esp={0xf, 0x6, "6485bc", 0x1819, 0x32, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[@fragment={0xa4, 0x0, 0x3, 0x1, 0x0, 0x3, 0x66}, @fragment={0x2b, 0x0, 0x9, 0x0, 0x0, 0x4, 0x64}], {0x4d3, 0xea3d, @cc={0x1, 0x0, 0x0, 0x0, 0x4, 0x5, 0x3, [@ipv6=@esp={0x5, 0x6, "74026b", 0x247, 0x32, 0xff, @private2, @mcast2, {[@hopopts={0x6, 0x9, '\x00', [@calipso={0x7, 0x40, {0x2, 0xe, 0x9, 0xc, [0x10001, 0x7, 0x3, 0xe7, 0xb, 0x248d, 0x6]}}, @pad1, @enc_lim={0x4, 0x1, 0x3}]}, @fragment={0x5e, 0x0, 0x1, 0x1, 0x0, 0x8, 0x68}, @hopopts={0x3b, 0x32, '\x00', [@calipso={0x7, 0x38, {0x3, 0xc, 0xd, 0x3, [0x10001, 0x1, 0x7, 0x7, 0xfffffffffffffffe, 0x5]}}, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @enc_lim={0x4, 0x1, 0xab}, @jumbo={0xc2, 0x4, 0x1}, @enc_lim={0x4, 0x1, 0x5}, @generic={0x81, 0xf3, "049c4885fb0195a83f2822463a36ff0595570bdc12afae7eed86da1dce1b6d077cf27b7ccbcb13bd0e401157cf5a064479e10ddb1605217166e2db8dddc364145c17ccb6926cae19c4b390c2203b11976c20c7a2cf1f96e33d399cd95550113c77160ebc33749affb6ce5a9fe498eebd4490e3c4e40ea87629651c12ba15b7ebd075488013fc5abe7009c94e839e2f05580a020550156d0866d870e3404f9ea7508f251339ca7e1f023483fc73826751a814ddc1da125a6274f3f176391a2a49504b62403391fdf34b76c7378f16c4bb810023775ee3bb6da78cf756062b559c0f5f661217e642d79206bf2f2a394365213776"}, @calipso={0x7, 0x40, {0x2, 0xe, 0x9, 0x7ff, [0xe, 0xfffffffffffffff8, 0x0, 0xffffffff, 0x1, 0x1, 0x6]}}, @enc_lim={0x4, 0x1, 0x3}]}, @fragment={0x6, 0x0, 0xfa, 0x1, 0x0, 0xc, 0x64}, @routing={0x2c, 0x4, 0x0, 0x7, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @dev={0xfe, 0x80, '\x00', 0x1c}]}], {0x4d3, 0xa, @basic={0x0, 0x0, 0x5, [@runt="eae8f27e9c5a49bf89708a"]}, "19b56d667ca1", 0x6}}}, @ipv4=@icmp={{0x8, 0x4, 0x3, 0x0, 0xf7, 0x66, 0x0, 0x4, 0x1, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0xb, 0x8d, [@dev={0xac, 0x14, 0x14, 0x43}, @local]}]}}, @echo={0x8, 0x0, 0x0, 0x6, 0x16, "0c089b1c803be3e53aa2ab36cde1610a5622108a2a2ad0466005b8d98c5f7eaecd4868d832e8a2eddb8f2525adee03c97f648343b0eb0ac71c23b65e905bdfc3fe4db1f138ab6557e5c058da5b9571494750fffaf0336dbd6485f2aec63b4d5e567616b36f4ca8ad433752722ca5ad9c3c24c9697c429fc66bf902394e77e98da3be9a46de570ea4154bab00b9e0f4c7ad363eab943adaa7f87409ad9ab728d8f2f08c37fe1e8eee000616537750233864177cbd62cc254f0b5a586178e82683ed85e7d122f8ab211c80415509942f"}}, @ipv6=@gre_packet={0x9, 0x6, "bef0ee", 0x35e, 0x2f, 0xff, @dev={0xfe, 0x80, '\x00', 0x24}, @private1={0xfc, 0x1, '\x00', 0x1}, {[@fragment={0x5c, 0x0, 0xa, 0x0, 0x0, 0xc, 0x65}, @hopopts={0x4, 0x0, '\x00', [@ra={0x5, 0x2, 0x1}]}, @hopopts={0x8, 0xe, '\x00', [@calipso={0x7, 0x50, {0x0, 0x12, 0xfc, 0x107, [0x8, 0x984, 0x81, 0x100000000, 0x6, 0x100, 0x6, 0x0, 0xffffffffffffff27]}}, @ra={0x5, 0x2, 0x2}, @enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0xc}, @ra, @hao={0xc9, 0x10, @empty}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x31, 0x3, [0x0, 0xfff3], "32490affa9f8d233f0e758af6b0de86cfc7f1957a8566f30d76ef4ff8bf219971bb9e3c5774e8ef417db0f9b4360ec3a14"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x1, 0xf000, 0x3], "bc12f709ffa11b5c2e2ad9d9ebb5528f777e1ee294631f27602b466284474d4f548ebd98d7971e7222fd567381f677052780cb923d5f567b43df336f6fad55a6becb514cf59092c84f9e9a5ef34344740e894a79d59f77fb3597f7fe22d64fecf89444ebbe8935c634bcf2bfae6d8a883148ab59b815a457eba433cf0b94ca36cc5311f215b3bc88b3be343506bf55d4d32c3c499a5b76b29169958b99b60246485ac1bd1a221dd3058035835b89b1559b37a1168943db2bcd1246facde4a296b3aced3024a51d8c064ba831b1d679c2b81d144f726926e6dd8d2eb0b3ddfa11f16a8d993af5d0bc0462f1962ae5a9ba499dd2e27973702f"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x9, 0x3ff, 0xeb], "c1bcd74a3a999a9e23ea6db457a311d2842b45dbc7a92cd27595870db6ee5cc7ad6ffe399e135e3440859a45edc1245123591f7db5d54c560d08ff33309ecff96e6a05552c737c34c7eef8ce4ee297095fc8f5d577f0e788f3432fe6e8e5"}, {0x8, 0x88be, 0x4, {{0xe, 0x1, 0xe8, 0x0, 0x1, 0x0, 0x4, 0xe}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x2, {{0x2, 0x2, 0xef, 0x2, 0x1, 0x0, 0x2, 0x4}, 0x2, {0xfffffffc, 0x8fc, 0x3, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x2, "e3d9f09cf562cc391d5a7cf72d1a747c4f28d055198e75cbae7a7ba09dc288278fb6fefa08f8b78f4be704993bb53519f2a7edac3480e3caffba882028e881064e02e720b391334345c4c952db90acde4bf729642e5d0a78baaec0fa7dd34b551198e71658fa95451c50ac1749633489be1f12b652e43f59e7e7a9544449b8604b8bb820b60d5f5b2b00162f088a4bcd90e088f61a7f4a30a5412f4a72d03de9c6ec30c2b6d695861425aa38c346947b2d9e5ac5298c6262ce866d431bfc4c49eff2d3da9c76c424c0965d52da5ade09b02ffb4708d1760bd5e32b6e72091d279b6dab7cad3611a60fa97b"}}}}, @runt="ab46f7794c8e88dfba1a0a09a2af5a98f0beabd296c23666be0a7cf248989c90690f88f67ca3410afdeaf3d33eb04a", @ipv4=@esp={{0x2f, 0x4, 0x3, 0x1, 0xbc6, 0x66, 0x0, 0x1, 0x32, 0x0, @empty, @remote, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x1c, 0x14, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x7fffffff}, {@rand_addr=0x64010101, 0xb}, {@rand_addr=0x64010100, 0x9}]}, @timestamp={0x44, 0x20, 0xb9, 0x0, 0x5, [0x2c3, 0xf, 0x4, 0x3, 0x4, 0x2, 0x2]}, @noop, @timestamp={0x44, 0x20, 0xd3, 0x0, 0x7, [0x2, 0x1, 0xfc2, 0x6, 0x1, 0x6, 0x6]}, @end, @timestamp_addr={0x44, 0x3c, 0x3a, 0x1, 0x8, [{@multicast2, 0xffffff00}, {@remote, 0x8000}, {@broadcast, 0x35ac}, {@multicast1, 0x1}, {@empty, 0x9}, {@empty, 0x4}, {@remote, 0x8}]}]}}, {0x4d2, 0x5, @basic={0x0, 0x0, 0x200, [@ipv4=@udp={{0x2c, 0x4, 0x2, 0x8, 0xf8, 0x65, 0x0, 0x0, 0x11, 0x0, @broadcast, @local, {[@lsrr={0x83, 0x27, 0xbf, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x39}, @dev={0xac, 0x14, 0x14, 0x20}, @rand_addr=0x64010100, @remote, @private=0xa010102]}, @timestamp={0x44, 0x18, 0xc4, 0x0, 0x3, [0x8, 0x100, 0x0, 0x8, 0x7fffffff]}, @timestamp_prespec={0x44, 0x3c, 0x3d, 0x3, 0x2, [{@empty, 0x7}, {@broadcast, 0x1}, {@empty, 0x3}, {@multicast1, 0x7}, {@empty, 0x9}, {@broadcast, 0x40000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @timestamp_addr={0x44, 0x14, 0x18, 0x1, 0x0, [{@private=0xa010101, 0x6}, {@loopback, 0x4}]}, @timestamp={0x44, 0xc, 0xf3, 0x0, 0xd, [0x8001, 0x3]}]}}, {0x4e22, 0x4e24, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "6152ca292b7a1bf6289c1645f14475b0a8f40e4dadcd9be1", "a26ffffb432e5738b6033c043a7cd2804ba92853bffccc1185aa52b776c634d3"}}}, @ipv6=@icmpv6={0x0, 0x6, "a18326", 0x45e, 0x3a, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, {[@dstopts={0x3a, 0x29, '\x00', [@pad1, @generic={0x5, 0xfc, "9a0f8448e3d390fccfab31e6ee8e9a6b8079693fdac5abb55a10343739040ea8d0851ad35874ec3d3fe3a0936065f36e311f21654126d4e9252962c5933f1563e2368f5dc77d3a041fef44fccda985a838fda96ca08f107c753a0f363e2d4ea119a22c43eda19684642f6cb923c7712693244048f9c4089317ccf320814c0321f5dfccc5c24b22b7c7367f0cbf5daa7b91597153e7b5a797499e904eb77ba6f688cf4845eb91ecfbc0083fe4ccbd3e8f196a6dec939fc2cb0ff885ba345e0ac125873d430670c2ac0ae1443b4c907a7cace6701d5a5dc7a40a8c92fa82f02823f8f9cbbd285f415d7c91b4992ba4ea194cce934381bab43b9d440446"}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @jumbo={0xc2, 0x4, 0xb23e}, @calipso={0x7, 0x28, {0x3, 0x8, 0x15, 0xd, [0xff, 0x8, 0x2, 0xfb5]}}, @pad1, @enc_lim={0x4, 0x1, 0x4}]}, @hopopts={0xbd, 0x13, '\x00', [@pad1, @generic={0x2, 0x4e, "b68aacba31b4ef83a0d4081dfd5e2dffb3780742c1012edced1b143f7808dc1cb63e330e0810282b8cd3058a4e91a78ba1ab65050dbf30421a0cf7cde7028564a91a1d6ec8735eebd131409c4ada"}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x30, {0x0, 0xa, 0x4, 0x7, [0xffffffff, 0x6, 0x6, 0xdbb, 0x8]}}, @pad1]}, @hopopts={0x87, 0x6, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xe8d1}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @local}, @enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0xffff}]}], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x4, 0x6, "6177e8", 0x0, 0x73, 0x0, @mcast1, @private0, [@routing={0x2, 0xa, 0x0, 0x6, 0x0, [@local, @mcast2, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @private1]}, @hopopts={0x1d, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @hopopts={0x32, 0x22, '\x00', [@generic={0x9, 0xec, "c86a33f171819bc7d991472c4977b10ceac586c34de261841468ccb6a61eaff69af9d2cb866a4fe5052c3f3559927a429ac88b51adcb8ff098eff12084991883d372bd5d4af3b343032eeb38b7a4827d4d15d1d0ce5ff65d5483e87c938541db7486c7e1da7a74ed850f38f5b24b72ecaa9200e83d63afdd5a762135ce2d877b1b4d07e5edf3d3e102a88d15da8ec660e56da551869e3727d24f99659388fa881dac03c937e1574154fa9748a2eb96d5f3cfae87259537b1b124c2c6a026d8876ca1f06defd4dd46287da414c0ce889b8deabf59a2216929973a36d826fa713e33e758b3d148f7bdd151a225"}, @enc_lim={0x4, 0x1, 0x24}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @ra={0x5, 0x2, 0xd}, @pad1, @ra={0x5, 0x2, 0x5}, @enc_lim={0x4, 0x1, 0x6}, @enc_lim={0x4, 0x1, 0x5}, @enc_lim={0x4, 0x1, 0x7}]}, @fragment={0x32, 0x0, 0x10, 0x1, 0x0, 0x8, 0x66}], "374b99c9f82474458361bb13916cf80e1de2c717374b79ff1e4c2190301e432bb0bf819e348c49dfd9de8722ea278973cb242ccd7c20ebccef99abb707910605ddb4d0d696c5af6eb1b0c19baf8bb6be80a87b51017b"}}}}, @runt="e58657ff50fc582b8c3a17130fc15a435d36ac20766583a78b59bbda463544605ed3", @runt='9B', @runt="414c75b8cdf60baf73e38dbf97aafef81e90591a2fef8a9fc8e323a50d00b80f2819a53807bd03f48fdb06f0d88e2893b14d7773d92645216ed287df62", @ipv6=@udp={0x2, 0x6, "b01537", 0x1a4, 0x11, 0xff, @loopback, @ipv4={'\x00', '\xff\xff', @multicast2}, {[@dstopts={0x2f, 0x0, '\x00', [@enc_lim]}, @routing={0x3c, 0x2, 0x2, 0x7f, 0x0, [@loopback]}, @dstopts={0x88, 0x8, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @calipso={0x7, 0x8, {0x0, 0x0, 0x7f}}, @ra={0x5, 0x2, 0x5}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xf}}, @ra={0x5, 0x2, 0x3ff}, @ra={0x5, 0x2, 0x2}, @enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0x8}]}, @fragment={0x3b, 0x0, 0x40, 0x0, 0x0, 0x3, 0x67}, @hopopts={0xc, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0xcea}, @calipso={0x7, 0x18, {0x0, 0x4, 0x6, 0x6, [0xfffffffffffffffd, 0x8]}}]}, @hopopts={0x3c, 0x9, '\x00', [@calipso={0x7, 0x48, {0x3, 0x10, 0x1, 0x80, [0x9, 0x7, 0xfec, 0x4d2, 0x3, 0x0, 0x2000000000, 0x6]}}, @ra={0x5, 0x2, 0x800}]}, @fragment={0x3a, 0x0, 0x6, 0x1, 0x0, 0x6, 0x67}, @routing={0x4, 0x6, 0x1, 0xf, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}]}], {0x4e23, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x3, "070f19522fb17bf44373224244585a916cd70e36cd94006f9f21e10f969f75d9", "f36b3c8c01df4c1dc353179594b615bd", {"7a2d817b839dfeab3120ef9013679bbf", "c683afc91d1faf639a3ebef886a53c15"}}}}}, @ipv4=@igmp={{0x1b, 0x4, 0x1, 0x5, 0x94, 0x67, 0x0, 0x4, 0x2, 0x0, @private=0x1, @empty, {[@rr={0x7, 0x27, 0x27, [@dev={0xac, 0x14, 0x14, 0x21}, @broadcast, @multicast2, @loopback, @broadcast, @private=0xa010102, @loopback, @local, @broadcast]}, @rr={0x7, 0x1f, 0xba, [@broadcast, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xe}, @empty, @broadcast, @loopback, @private=0xa010102]}, @timestamp={0x44, 0x10, 0x64, 0x0, 0xf, [0x9, 0xfe4, 0x6]}]}}, {0x9, 0x3, 0x0, @remote, "b59f400a5aa1dc0446d9acbcff80651d0c0ee0f1a56725538527d5de871d85e9"}}, @ipv4=@gre={{0x39, 0x4, 0x1, 0x7, 0x2b7, 0x65, 0x0, 0x8f, 0x2f, 0x0, @broadcast, @remote, {[@ssrr={0x89, 0x13, 0xf5, [@local, @multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x44, 0x3, "b3"}, @timestamp_addr={0x44, 0x3c, 0xc3, 0x1, 0x5, [{@empty, 0xfffffffb}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@rand_addr=0x64010101, 0x401}, {@broadcast, 0x1}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x2}, {@multicast2, 0xab}, {@multicast1, 0x8}]}, @end, @ssrr={0x89, 0x1f, 0x6f, [@loopback, @dev={0xac, 0x14, 0x14, 0x20}, @multicast1, @multicast1, @loopback, @loopback, @loopback]}, @rr={0x7, 0x1b, 0x4b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @remote, @empty, @loopback, @multicast1]}, @timestamp_prespec={0x44, 0x34, 0x10, 0x3, 0x8, [{@broadcast, 0x3}, {@loopback}, {@multicast2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast2, 0x1}, {@multicast1, 0xa3e}]}, @end, @timestamp_prespec={0x44, 0xc, 0xd6, 0x3, 0x3, [{@private=0xa010100, 0x1000}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x3a, 0x0, [], "bfdc23ffbb3fe6e5031a10c1c6a44da5317bef792ac4b54e8c7e6a2c27eca40c75f70d1c6559864005a4bd402239c2409ce9248524c7417f8b23"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "d83b3af569c905d9354fb5657e2e0393ce96287c62ad7b756ab9ffa8bdbfa859620551b6d76254400ecfa718e88021a011a9febc06354d110607395e6ecbebe66e52706489d2489006c5d0977fae7c5c883ddf34f4e510044d8c8b00ad257222d957f5c1ed28ef38bcd645c6f5eb64eec426c314d50c5db99bdb216ce4eb973cc79cc3044f4ba5496e"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x8, 0xcc], "ccf52b3c238615baaf28ed30b21b05cf270e18f0addb5ffd5bcf1485463d7bca37c5dcbf85c091c01a9027e4b15c852221569f7d49"}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x2, 0x2, 0x0, 0x3, 0x1, 0x5}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0xff, 0x2, 0x0, 0x1, 0x2, 0x9}, 0x2, {0xd, 0x7, 0x3, 0x3, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "ff8f098bc90dde38c79df6221817525bbcb8048552146662c64714473eed7c025570495b0c481288dc091b82d6805199891a8f76494ed052678781d2e8872572179193cd51f0399e276af2ad58f492081b2e539765ea8250f731692dfeb745db60018366ee79f147bc61d51f82f17e32f720749943f2d7ba9cee00b90d8ab22d39c0952c7d475a23ece93281324d0275789384"}}}]}, "c508aa3db7cd", 0x6}}, @ipv6=@gre_packet={0x4, 0x6, "2302e2", 0x364, 0x2f, 0x0, @mcast1, @mcast1, {[@srh={0x67, 0x12, 0x4, 0x9, 0x6, 0x0, 0x8, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @loopback, @private0, @mcast2, @remote, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x87, 0x0}, @local]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xe3, 0x1, [0x1ff], "8bc6457bc40b1761ce3c59f10fdd7fe4408c07acc6ca30ffd37c5dcaad840f1a9cafd84d1b809c5c47ee3cdf9ccb70d1e4d06d0fe0526e00ff15e5a2cd567e42b6626cd50e5ee9344be53a6aebc313de628d5f27c8f31fe97d6c0af37a5a79c08eadb0cc454f6b9c30729dc81f29f3c83dec05d04782e5d13471f3205bebc284f945ba83436c60b1527e1f1e9762493d865f0f70473ce175efa52aae8a9a1c6cdef9581817ca689d8a97445f7bc504e8dfa215a944d5ae7bcff427216e3868182ef7bfa37035ace0de220cd2b5ad7c80fca684135d97bda2d9d5289ca25cfb2b38415a"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x9, 0x9], "37d1cbd9ac6005dfbed3177f49207cefa4264b51e0cbf46a10920fbebd59c0ec7105d8257ac949817900eb206a682c53e1b650f16516ff2b4cf592a8a534d968775d9827e4eaa4d80118bb2efbd74cf978a0894d34c912c86d7744b26d7d33daeec634f8a14ca5ff84823fdf467aa636718f458ec1db86d6c1f70b32cb6df2a1bb"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x6, 0x0, 0xf], "e311ed70879be764f151bdc93ccee9911ef9c214741c6c640f638617ce1043fe8c1bab4df4b74ba54177342b3553e173ef69c064611023b51cf878b0fbe7d91a9eb83850fd089f6ce5d90546ab99321a6c5af291002104d575f8272eef1cd916145e6c7ac0706ef25fd82ce76b4768b2ca6a4d178c6827d6cb2c897970ab5a1bd1135164dbc7428d8c8a5f8461f992d5e04c449ae4c03ad9f041f11b9890029ee8ef4c1c6266bc1cd9d00504fd36e387df613aba461cc56a4f018079cdfbd3442cc17084eb30bf9058"}, {0x8, 0x88be, 0x3, {{0x2, 0x1, 0x9, 0x1, 0x0, 0x3, 0x0, 0x3}, 0x1, {0x3b8c}}}, {0x8, 0x22eb, 0x2, {{0x7, 0x2, 0x9, 0x3, 0x1, 0x3, 0x5, 0x1}, 0x2, {0xffff, 0x6, 0x0, 0x5}}}, {0x8, 0x6558, 0x0, "9b9a3a8fff7c562041272089d8451ae48cae6dfffd2e8e10f2968da6715b73d9327ea94f1007081c0195e7175cdaebd98680a5961f966e9dbe26518a7d27a3c9ffe15bc3e911a0e8f64203d268fd7d"}}}}, @ipv6=@tcp={0x8, 0x6, "846010", 0xf7, 0x6, 0xff, @local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, {[@routing={0x3a, 0xe, 0x0, 0x8, 0x0, [@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x30}, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}]}], {{0x4e24, 0x4e20, r8, r9, 0x1, 0x0, 0x7, 0x4, 0x200, 0x0, 0xaf3b, {[@mss={0x2, 0x4, 0xf}, @eol]}}, {"d753d07a6f683bd18a2ffd0c0677e3761d69262dd736829f8150391f5d1011b2a7d2072f59a91ad10f60b5a5df03da8b338c06c1cee9c94e90873c345255775a06c69a4f3a96a35bb3170f1e99a6ff6b28355ff3c60780c8a9c217e69390751e3ec3f0"}}}}, @runt="e56f745b4052b3bdc898bf7d104d2a16b73db96115bcecc4ec05cf", @runt="8e7dedd1b19d8aab1d0949d63ab7e889a843b2b4006fb5ebd38ab5746f2d88e4595617a444c92ffcba77f45c24d6b3783488825add59b4bd016347dd0e"]}, "6f9a2e", 0x3}}}}}}}, &(0x7f0000007940)={0x1, 0x3, [0xaf2, 0x382, 0x35a, 0x419]}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r6, 0x5411, &(0x7f0000007980)) 436.896231ms ago: executing program 4 (id=777): munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x9, 0x801}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003640)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x0) 436.547929ms ago: executing program 4 (id=778): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r2}, 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r2}, 0x38) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0x40025b0c, &(0x7f0000000040)) 300.808875ms ago: executing program 5 (id=779): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SREG={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 300.117195ms ago: executing program 5 (id=780): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000040)) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0xffff, 0x1) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/18) (async) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000140)={0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}]}) (async, rerun: 64) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) (async, rerun: 64) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000001c0)=0x4) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000200)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xbc, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_COMMENT={0x7, 0x1a, '{!\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x68c}]}, @IPSET_ATTR_ADT={0x60, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xa}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x60}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x9}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000003c0)={0x2, 0x1, 0x400, 0x9, 0x400}) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000400)) write$P9_RSTATFS(r0, &(0x7f0000000440)={0x43, 0x9, 0x1, {0x2, 0x6, 0xfffffffffffffff3, 0x9, 0xff, 0xffffffffffffffff, 0x9f6, 0x9, 0x6}}, 0x43) (async, rerun: 32) syz_ublk_setup_queues(r0, 0x0, &(0x7f00000004c0)={0x0, 0x5783, 0x400, 0x2, 0x32, 0x0, r0}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x42c5, 0x8000, 0x2, 0xe8, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfa0, 0x8000, 0x2, 0xac, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1bbb, 0x10, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1193, 0x10, 0x0, 0x9f, 0x0, r0}, 0xffffffffffffffff}], 0x4, &(0x7f00000017c0)={0x2e, 0x8, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, 0x0, '\x00', {0x3, 0xde1, 0x0, &(0x7f00000007c0)=@buf_1k="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"}}, &(0x7f0000001840)) (rerun: 32) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000001880)={0x710, 0x1e9, 0x2, 0xfffffff8, 0x4}) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000018c0)=""/19) (async) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000001900), &(0x7f0000001940)={'L-', 0x10001}, 0x16, 0x1) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r0, 0x4068aea3, &(0x7f0000001980)) (async) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001a00)=0x9) (async) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000002d80)={0x0, 0x5, 0x9, 0x0, 0xefc7, 0x7, 0xfffb, 0x1, {0x0, @in={{0x2, 0x4e20, @private=0xa010100}}, 0x9, 0x8, 0xa000000, 0x81, 0x8}}, &(0x7f0000002e40)=0xb0) sendmsg$inet_sctp(r0, &(0x7f0000002f40)={&(0x7f0000001a40)=@in6={0xa, 0x4e20, 0xdd0b, @remote, 0x83}, 0x1c, &(0x7f0000002d00)=[{&(0x7f0000001a80)="4f2b81af2cdd0139e568a3e62b7ebb8e710c3a8ea6b4641dde7927f38dfe5c194c7d74586397faedfeffdb28384e72d94d0848d1939d8a1c8a3f6a7a8562c1f0fc86f074675c4d0563cfefa8fdf239a747ed39dc60fccf37a8ad57800187fbc8d760e4a40520301463c2f808fc94aa4ddd07a51d8cf6cbfb4abaf44505228ec71e19be618b9e061911cbac76683f75f024c08ba2ed4e3b85f0c336dbcbbdbe58d5a9681dc459e7e03a9a82e02be127c080594f0befa2a76cc8", 0xb9}, {&(0x7f0000001b40)="b86a109956053d2c5b7bffe6dc0f6b037825d658153b2c51d189a441c3a8cf6a4adf8665ea76e9f416fb8a314ac49446edb367ffee319846fd025f83243382c45c7bb56b3783a1c6c16439ab919f4baf1c456025bbe87e423144804fc2c6fdec36d7b38f0ac4aed66283b24af9af0de562db10f03871402be98ea65d9aa6f9", 0x7f}, {&(0x7f0000001bc0)="491c5c445c6198950554879a7b6a8e9097249ddf96371bf8df9421972bf5319fc15ddcb4c02313f34bc3208d334abbfae3c3ecc9b05cd72eb6da7a78626949370325501c374b5528269cd5702c6609b95a18b0a618f1867387b3e13026595fca445228b68737ddfaa347bf514c03bf4de1092910006afb9cb6a6f4f49c5c2e9bf4d6307bb39b22116ad7a6686a446b075411c7f2480d4e6b935e59848f74ace6fb2e0d283fe7c6194863211353f49ec35fc53f553e4be3e7ec145f2688f3ad78ed306f9f74746531dd489eaea1", 0xcd}, {&(0x7f0000001cc0)="5073c833a6611f4e4c74c42886d23064409fc41761c8fd720827b6e9d3275750a8609a88a23fd613ee999c186bda7fd0f1168f27d632cf5dde1f4fef016e54b5d8aec6f336f91c92a3d5b8e79ff3dea149e6501f8fc3151d31c4fcc47e5774ed2d3369174267d777112a3c4781c04918133041602214f4d21bb4d956a19ab8bc10502e98eecbe8e044b1db40ebb2c8caa9579fa01a7f4ed478eb83d0d9244b99728b3f6193e734ad324cf517d14e8aba16b8690eb4068b2bb01968ecfc98f0d9e9d2ded5984091ee0db5919aad7067f9cf732a8554d3ab5584a42a05fbf8b321d61fee98ca2c36029e382658ef1eb25d1b346ea77202a5cac826afe206b4d5d5386e8abeab63160c9ea6eb772e5a5d22d4a679055f02dc1f342983302bfff807bc55dbf1693252a2b4cccf85531d06ddb692d6837db83b6145385e315f588ee7cfe047286ed3342ee10352d2b45ee909210f3168baf75e563e34740496bb383ec605cfce61c008956cf48bf9b1b42e277c38f718eda5ea8ac20bd94a2de49b59094ca2828c0ba29a2fb65bd376ec6801d86d948af98761ee35cb4b57aa7a4260ef473636d836772d689a82aec60ac40df64e3f0085a7db807053da29618d496e7e0281196a8c3541052b92cb5546d0f3ff39ef1520ee68b78ae225be00b729c2127f194377db47330966d5515e5ac3f874ffd575d0a827da4a5e8a735bae6c936645456f126e9e5b71bd1a4c3e3550c9ab69e93d59cd7580e4440e56bb9962b2349b99c213ae6d707e8dae13a4d8e6f335ca7e1ad8304c9a06d5df237af2e065a3f5e814cf60a02776a45fe7250cd17c173f80bb9cd30512767fb1f4c4c6993a7de943d8c9da45aacb035cfbd6c71f78dd8a1d30975e3310bd22dd5e210805d68716c09957c4b8d8245f244525adb48d6f987378b55b6981b97ea65c42caa240b09f60ca83161904c3edb3ea4a881b8c473f66c6f9ee53a9f2655e00053af8f240606582675c1fecaaad9a5ce9aba55c9ebf63a42e5e5e51f5df8133660d02e0432dd1dde009cfad6866231070c982d319b12033c2c5b0c01e8c36ae75a9f33583b361695d045559263f755bc2e668824ccf53fa769d994f75daa917e42e0e399b893e827debbc823576dfbcc6229331255f21ed95be03f214a893a90c58fabd13246349460f32ead32c2dcf422c4ffc9a119d5b16742b694d2686659bfae10aeaa1fe2b1fb2e0a3b962f6df4e22e86de1f7efa2daa6f97ad34f3388fbcfcedcceb87b8763e901e7dd8ca8317c27e5bc695e9a3d529326fd118290839eb394846eb7c1e14ce9894a840b505aba2cd3c450e1071ac2e26c573838f149a683c7e292160ec7870283c09d7d5f10b53462742a3879532751e7e1f883f7c7408504aea84041f0afd1f88d0850b3f720ce0fdb4ed8b7ca6541f70479b4bdcd8bb32a711a50e7f96a3af3185aa13bfcb93ab7ea83c3b4e6103885c6ac0069d7e80b54e685cee9bd86abdf9f7a07a5fe5eb4220e728a9f5f71e6a346655b34e074efe4a5b13fa298c9ddf20d58e9faf203cf516ebce99a33f16de97c485da0897daec0b642e081b0c9b5d09c266872c59bebc48c73d4de58f99533c4e8c8b8b279b1d41c097ab90251481677078263d860e1c303a64dd354b7b08407bdbcb023235c8d88b15173699ef3ba9da17169b68f6f2fabc3ee735db552fc00c935ff1521546650ad93bad1f4078c385a9533c811c6fba46caf47a526ba1340e37bdc8018bb0aea8aebd1d017df2a0b411cc91c75f51374471cb9f74b1852b20caeadf5c1c30ebf7baea33be17e45baf12c9f0856a64071b18016e1e7bde4e67eb9a24137b12cf74ae9451b422f252f73475c53828e68f3a6e972171be4fdd47efc3b0b0b6195653b4368806840930cad886ca5aaf6c3fe56d273655e799d119a8f986f9cf705d5221d52f73847c70fbcbdb9636fe5310c8695daf74e62044576cf8057f4aa256016b2575c43b517693bc8847ed40ce3f97b2b684fc1553a2b209b2b6f315a9fd72809961a64e99a5834ea8bf24f7359289a4fac8adec95c07c328d705b071791a4dc119931095f6b562c0154e3709c148479c369477ee8160878e1d2f98dfa2ca5de836ab8e27a2f0cd8bac58a8fe777348252824633edc3c8ed2a067d00979812c08fe06e0d563d6be5d09682195875fa082c9651d4dd67ef2e376458b1d88d288bf489de46b7e8263dec957759925562fc33c6c6d2a111eb36a0f9cd9873c1033e8d922e81472052531f45bd91b3ce33ef30ecdc15f440cc06b56f759d468dd4e3ecbdda05292f8b2d58b51aa53e28998d6036330bd0e74102595a16ec3ccb7db6f5360a32d027f4d1bcede0b16b897ebb611c842e6fc7dc56fa8f96eb9b195381ec3322cb36293141a8d2f3f82c85bc0c23d88874d66e3b5d47309a110299b081bff753fae65837036ed72f175feedee2c191328445ade7d1a738e000c26cbc3019f87dd8e6689e2ea677e115ce34917313dee5b132f60ad7eafcfb4368729c4bc8ec7171edb7eadf88830d6ffb43d709f66b458ddd52d0cbe732abc88e635f35b54be6daa85311326ac870c87c2f582cf646f58f7ac61fe405fe1138083b0410194544c9836523b7c878492ecfb842deddf253a3ac77eb3d327b61ee8dab892e12fef4c071a36396073ac9e9946195e6420b39b853810b15517c203d64a2c72def2469255ec81bc6d79172fd6b672a14d866f45a002807b8827da3fa17cf4db54367a09d6f2a905311553ef31b70867ac8322abcac5fc22ac8a29274457eb7812ba76d04f5d22a16f38e3efd21daf30e2134dd844f4dc52f08de11d16d5159f46885dc93fad95a70299489be305a2f62c5060dc18b987250e5998d9b0330b53ae4ba2d7f66b634a3970fe430e5e217871466d9073269fa684fd38a1501a02ff8a3276494e9338ed210dab347ed12ed129f0ccacef0b0dc031564466ae5220deb97bf396fbe87aedaa9807e08af3cbd56a25f89328d4c424dbe3578e0b6d278c2cf3c0fa9e1185dbbd3c494ba6487b3b5c474d3d23850c1aafa5ffca266cced8a602041f19089cef7aad8d5b292d7af0af4a6070a473a0eccc09529e6ce7ea5a7a6f6f84b7a527b26fe300f57c85bae8e921f8da4ee2b3145c296e27570f0647338924753dc277d2aefe357c09cdf0c17b76ea33dec36e483610a6a6bb8af81f8443b67bdac341f721cf99f8d5adc0cbb10fcb43c5bc73054ffb08014c783ec1ba5e7c143eabcea2b23d991ba20bf3ce9036d2ef3ed92138be42120f6ca9663d78e7861bf6f696d593f7efae9f3d092e199d5abaa42d105360b00db75b49942f71b0cd5a1379edf727af67a04af869511ca7d606c65b95f89c7a4d3d67b3b88864323c166ea682bdac0bb9574249dec6f2e04c9dd0cb1d444ee7f9d132db3bd68f1ab4f7c3549933c637b1878c1cee9e3c155bfccb7a06dc4e5cc00ddfd96f7b850496f8a6f7ae1c74509c3e9af015d7399faaa94b3659fbd92502e9cf34189c17d96efff4851c138809c7086e706d6a67e724a9ad4e73cce971010bc73540ceb4c2093f206080dbc14d407c5d2e2b46a5f388567d5b3eca1efb0f3b74ca8815022c18a1366fc2a41ba3eb39b955e0ea45dc0a47d93bce7b2ddc64de738d8406880606224d607b9070a231e42c1cda4950c6bfca10d249876375140583b5dd4fb776669a683ad413eca84bf1bdfd40c080d18de5149a9efc51c08818d3564b189cbe7fcd7129a6ce699bbd5b9b892c29cfd1c2b03d0e4d07bbe5ad0a72454868f9692a9a3008b93f51f91b77a260ad64c65bc7a402d014ca890a9e60d9acfaa8192fac56e44667b074553c4a00abafdaa07d98bfcd6b1c8affccdea8acc17d41cbf99a48bad11116372270a8314a6f74e364169184019fccb987d3ed743c49146d6c063db14a3dee7976cd2a384126f0191432adb3c04c4ce513ecac644888a6b6147740fca40dadad1ff08cc02fb37236fa066784e9841ecd89cb4348bf9c137469514809510d7d7962586dab634f007c733ae4e6bba9b1a11749ed6f243b5e8d06419a8e52ca6a57fc6deab244808f5e82ba2c57db40240ff5aa986afbbffa1ffde6cc91e23c5139eadb2a24c724dc4e6eaebda6936265107baa2a0502c6a51156edb8a7d3e3e1feaa944d477b7362055324cfc8415b1aef5fb176c137901e1594b6da1df0c73c79f1abe85943fd164ff03573b2793e032ac293a3feb933140cdd9407665028c995b92321f18a88702117976b13d71560fe31f4a3846d21ff8f985cd9e61d3465036b0e600a62da852ac868d2b7b7278c4a3a84ac04a7bcabf5b00dd9a461ddc19d8152869c7920c24660bec37655a0e7d3b009c0c1d8cbca4ba5f9faeca0fd0c27949139b4b62a04fa9812ff967c1ef7ee7b6d1fa3ec3203c285b25a4466976bffe193a61b9a6ae152155dbef6cc1ce9666637e2b43b5982bb7723f19b1a805bc7fa2e64ed4ae604d72944bf075f5d692d9ec84fb8a8cdade25591fb1e2123d2074260d646df4c176bd121fe8bf15b475612af180225ca2ad96cee8c099d5548c33b506e7402f810f0a379ca75bcec19fc02097e3ea45b99d5cfbda79c5847a89ee71d2f2c2be302e5ce8dd115b357e3af43c395673af281d94cb2c873cd17675a19a9970331d1e85b563d5faafbe8be70a1cbe80c050bf4b5d71f4d181f679ce186858557b4815d298d6fdb44c0ebdd8d7c29fe481abaebbce0a97894886cd80a44593b0b314caf2f61367efb8c6cb694fb820575fdca977101d6c44ad46a986dbca6a561cadd4b17f533661b91b27c7eeb8df8eea44120f6ca565963047aca0856f2f81168ad907dc1dfa7db1f394ee5923e77238a5e5b6d29714d1115dcd7cb860c74b207a94a201c3a77b7c7d3c4e9502fcffa823ed91ead6caf50555bb243c4fc625d83b429ad9398466849c1643d6dd4bb6933fc170dd66f0aadb10d2604d82d2d456380a908838c643bffbd582449122231f3d0f458d38735a5f994558d43900b11da9cf8d5fd1b7b09cfe706c60b906ace9350e77c11315a4f723761af1b8a242b0a1c5ae4eb4ad1c65723925e752a833e8bc88d3abd94d62b6d8a8196b09e1a89d08adc03544bbd50aae86a09fee7dea82c30db488c3b1d9c30f17021a35b8d685083f460d9d38e7b7160b5d2f268ab4d1d75d2fb25ced7c8f95350fdd1722a710e678781b48dccaf04eb4e7b1216b3d0dd33f93676bccb47d82c61e376ccf22d4e8f59f3802808c92f0ccb5339a6b061e40a6bcfd3777fde4e33d2a67df74a6a656491ef7b6c627c6d3ec2197ba6b19db7066fa1d0843460e8a5895f6cd1c1055037d3405196776a0b1b3ac4cc28e5d6131063ff9a7faa865ed2c59a841f59027e0a3cc679d113260140eb683d5b9330dc057564c48a24185e18aa421779056cc7a4408af6dca6173c8b3464b89ac9c986a4f129a193e62a0effc27a7ba456af228eae5cc88faa8a835039c55a4605557b526428b61cbf8a67124384b296ea0f7a158b3286ebe61884ee6211ed8b6892744438cb8026ebade30d423b5777c05fcf7a9e606b001398b4d6e0cc26d0ba452cfa23672b2d22541bdcf592d44e22e41d8d625b6df4b758b48fc15c657c42f0f8e6005aca4473dc34c87a87fade077a3e3022600239931190cab2be3476e6eeab855a5b45d5d066f63747180c73b8194b47833080775f5399378a1b9de4f54c64aba5fcb29fa78c47e3e7c1d041daec7f5d317f391136725923bb16c9541adb4157", 0x1000}, {&(0x7f0000002cc0)="29216882b484b0659fb816e405b209fc0af26ed9c3561816d2e33969deb116f9008a5824628f0d91e6e02c4930ad74b606ce", 0x32}], 0x5, &(0x7f0000002e80)=[@dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @remote}}, @sndrcv={0x30, 0x84, 0x1, {0xff, 0x52d5, 0x820b, 0x9, 0x6, 0x100, 0x3, 0x2, r4}}, @dstaddrv6={0x20, 0x84, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}}, @authinfo={0x18, 0x84, 0x6, {0x9}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}], 0xa0, 0x894}, 0x800) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000002f80)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000003080)={'ip_vti0\x00', &(0x7f0000002fc0)={'erspan0\x00', r6, 0x40, 0x7, 0x3, 0x0, {{0x19, 0x4, 0x2, 0x39, 0x64, 0x67, 0x0, 0x81, 0x2f, 0x0, @remote, @rand_addr=0xef9, {[@timestamp_addr={0x44, 0x44, 0x67, 0x1, 0x1, [{@loopback, 0xfffffffb}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x8001}, {@local, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@rand_addr=0x64010101}, {@rand_addr=0x64010100, 0xd5}, {@multicast1, 0x3}, {@local, 0x7f}]}, @rr={0x7, 0xb, 0xc7, [@multicast2, @local]}, @noop]}}}}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000030c0)=0x4, 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000003100)={r5, 0xc, 0xb, 0x7fff, 0xa9, 0x34}, &(0x7f0000003140)=0x14) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000003180)=0x11, 0x4) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003200), r3) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000003400)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000033c0)={&(0x7f0000003240)={0x158, r7, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xfffff800, @local, 0x5}}}}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6c5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xab50}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}]}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x40}, 0x20000020) listen(r0, 0x2) 178.131625ms ago: executing program 5 (id=781): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0xa}, 0x102) (async) r3 = fanotify_init(0x200, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r3, 0x1, 0x4800105b, r4, 0x0) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vlan0\x00'}) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c898}, 0x20004804) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8, 0x8, 0x1db89a2d, 0x6, {{0xc, 0x4, 0x2, 0x5, 0x30, 0x65, 0x0, 0x8, 0x0, 0x0, @private=0xa010100, @rand_addr=0x64010102, {[@timestamp={0x44, 0x1c, 0x9b, 0x0, 0x3, [0x4, 0x0, 0x800, 0x3, 0xb, 0x90]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x80, 0x8000, 0x1, 0x800, {{0x2e, 0x4, 0x0, 0xa, 0xb8, 0x64, 0x0, 0xc, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x2c, 0x27, 0x1, 0x8, [{@multicast2, 0x10}, {@empty, 0x4}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x81}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc19}, {@loopback, 0x3}]}, @rr={0x7, 0x13, 0xbe, [@dev={0xac, 0x14, 0x14, 0x37}, @multicast2, @private=0xa010101, @remote]}, @generic={0x7, 0x6, "b22319fa"}, @timestamp_prespec={0x44, 0x1c, 0xcf, 0x3, 0x0, [{@private=0xa010102, 0x4}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x113}, {@rand_addr=0x64010101, 0x3}]}, @cipso={0x86, 0x38, 0x2, [{0x2, 0xb, "949106554bf091b0d5"}, {0x2, 0x2}, {0x6, 0x8, "dc45f2a5ee28"}, {0x0, 0x10, "11a79ac06bbb7951347003982621"}, {0x0, 0x7, "dcd7556339"}, {0x7, 0x6, "e67eea94"}]}, @end, @rr={0x7, 0x7, 0x19, [@loopback]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c010000", @ANYRES16=r5, @ANYBLOB="010029bd7000fddbdf25020000005c000180140002006970766c616e3000000000000000000008000300000000001400020069703665727370616e3000000000000008000300000000000800030001000000080003000000000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRESOCT=r8, @ANYBLOB="7000018008000100", @ANYRES32=0x0, @ANYBLOB="14000200677265300000000000000000000000001400020064766d727031000000000000000000000800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08ff17cf6c4530b01670000100", @ANYRES32=r9, @ANYBLOB="1400020065727370616e3000000000000000000008000300010000003c0001801400020070696d3672656731000000000000000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="1400020067656e657665300000000000000000002000018008000300000000001400020065727370616e30000000000000000000"], 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) socket$kcm(0x10, 0x3, 0x10) (async) socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r11 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000000)=0x2, 0x56) (async) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r13, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x803, 0x9, 0x0, 0x400, 0x80, 0x89, 0xfffffffffffffffd, 0x8, 0x8d], 0x100000, 0x240046}) (async) ioctl$KVM_RUN(r13, 0xae80, 0x0) (async) ioctl$KVM_RUN(r13, 0xae80, 0x0) 635.48µs ago: executing program 5 (id=782): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f0000000340)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @alu={0x4, 0x1, 0x0, 0xa, 0x4, 0x18, 0x8}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffeffff}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0x10}, @alu={0xa, 0x1, 0xc, 0x4, 0x5, 0xfffffffffffffff0, 0x4}], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 179.899µs ago: executing program 5 (id=783): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f00000003c0)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x67, 0x0, 0x5, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x101040) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000140)={0x1, 0x1, 0xfa6, 0x10000, 0x1000, 0x8000000000000001, 0xfffffffffffffffa, 0x7, 0x2, 0x40, 0x1}) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000002c0)='./mnt_trace/trace_pipe\x00', &(0x7f0000000300), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=virtio,msize=0x000000005ad64e']) 0s ago: executing program 5 (id=784): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000000c06000000000000015f000007000006050001b5909922000900020073797a31000000006860ba6b7f7af6aad4052afcfb070651a4019cf9373a743f44a5b1ccbb35b4a197ab8faef231a83e2a22c370b76fae147530841561adc539c31f644ff77dcb3d48dd0d08c4d3b1ef6bcaedd53e0013be3eb66660bc14fbcb5a9e08ec7bc2a1"], 0x28}}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000040)=@delchain={0x24, 0x65, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe}, {0xa, 0xb}, {0x10, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x28}, [@ldst={0x4, 0x2, 0x6, 0x0, 0x4, 0x0, 0x10}], {0x95, 0x0, 0xc00}}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x10}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x24, 0x0, &(0x7f0000000040)="d82774439890e167add4d442e8680d85ff978276fc3094ed67cb35006157ecee4b67afe1", 0x0, 0x8, 0x0, 0x0, 0xfffffde5, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='1', 0x1) pwritev(r0, &(0x7f0000001680)=[{&(0x7f0000000680)="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", 0x1000}], 0x1, 0x800, 0x9) kernel console output (not intermixed with test programs): process `syz.2.350'. [ 66.410245][ T7203] can: request_module (can-proto-0) failed. [ 67.254316][ T7206] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 67.371746][ T7208] fuse: fd is not a fuse device [ 67.438675][ T1478] usb 6-1: USB disconnect, device number 6 [ 67.609228][ T7214] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 68.419695][ T7219] loop3: detected capacity change from 0 to 231 [ 68.426029][ T7221] netlink: 'syz.2.356': attribute type 11 has an invalid length. [ 68.437921][ T7219] loop3: p1 p4 [ 68.500174][ T6253] udevd[6253]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 68.502687][ T5735] udevd[5735]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 68.530110][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 68.530514][ T43] audit: type=1400 audit(1788009427.194:609): avc: denied { read } for pid=7222 comm="syz.1.357" name="control" dev="devtmpfs" ino=1287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 68.533467][ T43] audit: type=1400 audit(1788009427.194:610): avc: denied { open } for pid=7222 comm="syz.1.357" path="/92/dev/mapper/control" dev="devtmpfs" ino=1287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 68.737977][ T7230] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 69.647992][ T7245] netlink: 'syz.1.362': attribute type 23 has an invalid length. [ 69.741129][ T7250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.364'. [ 69.741211][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.364'. [ 69.741264][ T7250] netlink: 'syz.1.364': attribute type 15 has an invalid length. [ 69.742890][ T7250] syzkaller0: entered promiscuous mode [ 69.742903][ T7250] syzkaller0: entered allmulticast mode [ 69.902394][ T43] audit: type=1400 audit(1788009428.564:611): avc: denied { name_bind } for pid=7251 comm="syz.1.365" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 70.223230][ T7263] gadgetfs: Unknown parameter 'pquota' [ 70.289160][ T7265] netlink: 68 bytes leftover after parsing attributes in process `syz.1.369'. [ 70.576225][ T5818] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 70.745578][ T5818] usb 5-1: Using ep0 maxpacket: 32 [ 70.750063][ T5818] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 70.754104][ T5818] usb 5-1: config 1 interface 0 altsetting 90 bulk endpoint 0x82 has invalid maxpacket 1023 [ 70.754139][ T5818] usb 5-1: config 1 interface 0 altsetting 90 bulk endpoint 0x3 has invalid maxpacket 1024 [ 70.754184][ T5818] usb 5-1: config 1 interface 0 has no altsetting 0 [ 70.766926][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.769820][ T5818] usb 5-1: Product: 웘耰ꬃ簈㮭镆償짐꒐讖❺墉馞厉ሷ맴칏뢇浧ﹶ隧祥靲팖驫✩䃲Ⱞ樻꜡䱣 [ 70.773988][ T5818] usb 5-1: Manufacturer: ہ饦懼啱ఄ鲎偢췑궕꣸鏅䳷尵抰Ḑ៚⫖䬴횫⎲垵飢蛹튢項혔餐캄겻踽ﺩ⫗ᜪ헏䤐第ꇜ䝯煤ะ௧砽尧뭿䆕찗ⳕ嘆ꭸ㻷 [ 70.780513][ T5818] usb 5-1: SerialNumber: ⿹畈陁罾⊇万ꋕ♥墲퓍サ嗄ꩧ㥬 [ 70.790540][ T7267] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 70.790740][ T7267] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 70.999206][ T7267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.999822][ T7267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.002989][ T7267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.003334][ T7267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.007067][ T7267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.007424][ T7267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.010846][ T7267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.011031][ T7267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.014684][ T7267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.014868][ T7267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.045575][ T5818] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 71.056343][ T5818] usb 5-1: USB disconnect, device number 9 [ 71.113884][ T35] cfg80211: failed to load regulatory.db [ 71.595941][ T7278] netlink: 16 bytes leftover after parsing attributes in process `syz.0.375'. [ 71.595998][ T7278] netlink: 16 bytes leftover after parsing attributes in process `syz.0.375'. [ 71.612951][ T7278] team0: Device vlan3 is already an upper device of the team interface [ 71.814807][ T7281] jffs2: notice: (7281) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 71.851641][ T43] audit: type=1400 audit(1788009430.514:612): avc: denied { name_bind } for pid=7280 comm="syz.0.376" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 71.863958][ T43] audit: type=1400 audit(1788009430.524:613): avc: denied { write } for pid=7285 comm="syz.2.377" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 71.864237][ T43] audit: type=1400 audit(1788009430.524:614): avc: denied { open } for pid=7285 comm="syz.2.377" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 71.875419][ T43] audit: type=1400 audit(1788009430.524:615): avc: denied { ioctl } for pid=7285 comm="syz.2.377" path="/dev/mtd0" dev="devtmpfs" ino=714 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 71.887386][ T7282] jffs2: notice: (7282) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 71.944117][ T7290] netlink: 28 bytes leftover after parsing attributes in process `syz.2.378'. [ 71.944228][ T7290] netlink: 'syz.2.378': attribute type 7 has an invalid length. [ 71.944286][ T7290] netlink: 'syz.2.378': attribute type 8 has an invalid length. [ 71.944299][ T7290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'. [ 72.102108][ T7293] program syz.2.379 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.106722][ T7297] program syz.2.379 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.172548][ T43] audit: type=1400 audit(1788009430.834:616): avc: denied { perfmon } for pid=7298 comm="syz.2.380" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.179917][ T43] audit: type=1400 audit(1788009430.844:617): avc: denied { module_request } for pid=7298 comm="syz.2.380" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 72.293896][ T7299] netlink: 68 bytes leftover after parsing attributes in process `syz.2.380'. [ 72.653938][ T7308] netlink: 'syz.0.381': attribute type 13 has an invalid length. [ 72.896904][ T7325] loop4: detected capacity change from 0 to 7 [ 72.948100][ T1309] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.948265][ T1309] Buffer I/O error on dev loop4, logical block 0, async page read [ 72.950988][ T43] audit: type=1400 audit(1788009431.614:618): avc: denied { bpf } for pid=7324 comm="syz.2.385" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.951406][ T7325] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.951428][ T7325] Buffer I/O error on dev loop4, logical block 0, async page read [ 72.951464][ T7325] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.951478][ T7325] Buffer I/O error on dev loop4, logical block 0, async page read [ 72.951498][ T7325] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.951512][ T7325] Buffer I/O error on dev loop4, logical block 0, async page read [ 72.951540][ T7325] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.951553][ T7325] Buffer I/O error on dev loop4, logical block 0, async page read [ 72.951577][ T7325] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.951590][ T7325] Buffer I/O error on dev loop4, logical block 0, async page read [ 72.951609][ T7325] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.951621][ T7325] Buffer I/O error on dev loop4, logical block 0, async page read [ 72.951631][ T7325] ldm_validate_partition_table(): Disk read failed. [ 72.951648][ T7325] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.951661][ T7325] Buffer I/O error on dev loop4, logical block 0, async page read [ 72.951681][ T7325] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.951694][ T7325] Buffer I/O error on dev loop4, logical block 0, async page read [ 72.951713][ T7325] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.951726][ T7325] Buffer I/O error on dev loop4, logical block 0, async page read [ 72.951748][ T7325] Dev loop4: unable to read RDB block 0 [ 72.951806][ T7325] loop4: unable to read partition table [ 72.951896][ T7325] loop4: partition table beyond EOD, truncated [ 72.951919][ T7325] loop_reread_partitions: partition scan of loop4 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 73.469639][ T7344] netlink: 5 bytes leftover after parsing attributes in process `syz.2.389'. [ 73.488607][ T7344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 73.552303][ T7344] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 73.555654][ T7344] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 74.045489][ T5818] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 74.195628][ T5818] usb 5-1: Using ep0 maxpacket: 8 [ 74.198437][ T5818] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 74.202927][ T5818] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 74.205814][ T5818] usb 5-1: config 0 has no interface number 0 [ 74.207995][ T5818] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 74.211589][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.215949][ T5818] usb 5-1: config 0 descriptor?? [ 74.224066][ T5818] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 74.439498][ T7350] netlink: 68 bytes leftover after parsing attributes in process `syz.2.391'. [ 74.442955][ T7347] netlink: 20 bytes leftover after parsing attributes in process `syz.0.390'. [ 74.445054][ T1357] usb 5-1: USB disconnect, device number 10 [ 75.034418][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 75.034479][ T43] audit: type=1400 audit(1788009433.694:621): avc: denied { read } for pid=7358 comm="syz.2.392" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 75.085788][ T7359] tipc: Started in network mode [ 75.085866][ T7359] tipc: Node identity 2000004, cluster identity 4711 [ 75.085904][ T7359] tipc: Node number set to 33554436 [ 75.172669][ T7361] ieee802154 phy0 wpan0: encryption failed: -22 [ 75.172787][ T43] audit: type=1400 audit(1788009433.834:622): avc: denied { write } for pid=7360 comm="syz.0.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 75.277911][ T7365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'. [ 75.284746][ T7365] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=7365 comm=syz.0.394 [ 75.477149][ T7371] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 76.201339][ T7376] cgroup: fork rejected by pids controller in /syz2 [ 76.361396][ T43] audit: type=1400 audit(1788009435.024:623): avc: denied { execute } for pid=7414 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 76.361932][ T43] audit: type=1400 audit(1788009435.024:624): avc: denied { execute_no_trans } for pid=7414 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 76.370232][ T7413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.398'. [ 76.534638][ T5737] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.541335][ T5737] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.544992][ T5737] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.547694][ T5737] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.554696][ T5737] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.560153][ T43] audit: type=1400 audit(1788009435.224:625): avc: denied { map } for pid=7422 comm="syz.0.401" path="socket:[21068]" dev="sockfs" ino=21068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.630759][ T7430] __nla_validate_parse: 1 callbacks suppressed [ 76.651361][ T7430] netlink: 68 bytes leftover after parsing attributes in process `syz.2.400'. [ 76.842310][ T5832] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.969613][ T5832] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.112787][ T5832] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.129471][ T43] audit: type=1800 audit(1788009435.794:626): pid=7455 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.404" name="(" dev="sda1" ino=2039 res=0 errno=0 [ 77.188615][ T7418] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.192009][ T7418] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.194402][ T7418] bridge_slave_0: entered allmulticast mode [ 77.195146][ T7418] bridge_slave_0: entered promiscuous mode [ 77.198217][ T7418] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.198269][ T7418] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.198324][ T7418] bridge_slave_1: entered allmulticast mode [ 77.199219][ T7418] bridge_slave_1: entered promiscuous mode [ 77.232320][ T5832] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.247203][ T7418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.249595][ T7418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.286530][ T7418] team0: Port device team_slave_0 added [ 77.296649][ T7418] team0: Port device team_slave_1 added [ 77.325658][ T7418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.325692][ T7418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.325955][ T7418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.331299][ T7418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.331312][ T7418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.331328][ T7418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.356008][ T7418] hsr_slave_0: entered promiscuous mode [ 77.356450][ T7418] hsr_slave_1: entered promiscuous mode [ 77.356774][ T7418] debugfs: 'hsr0' already exists in 'hsr' [ 77.356785][ T7418] Cannot create hsr debugfs directory [ 77.522662][ T7471] rnbd_client L607: Mapping device / on session s1, (access_mode: rw, nr_poll_queues: 0) [ 77.523105][ T7471] rnbd_client L1256: Session s1 not found, and path parameter not given [ 77.617476][ T5832] bridge_slave_1: left allmulticast mode [ 77.617561][ T5832] bridge_slave_1: left promiscuous mode [ 77.618261][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.656210][ T43] audit: type=1400 audit(1788009436.324:627): avc: denied { map } for pid=7475 comm="syz.2.410" path="pipe:[28161]" dev="pipefs" ino=28161 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 77.656593][ T43] audit: type=1400 audit(1788009436.324:628): avc: denied { mounton } for pid=7475 comm="syz.2.410" path="/112/gadget" dev="gadgetfs" ino=7671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 77.845272][ T5832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.858340][ T5832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.862746][ T5832] bond0 (unregistering): Released all slaves [ 77.903679][ T7491] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_macvtap, syncid = 4, id = 0 [ 77.907816][ T7484] syzkaller1: entered promiscuous mode [ 77.909667][ T7484] syzkaller1: entered allmulticast mode [ 78.049405][ T7495] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 78.049471][ T7495] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 78.066194][ T43] audit: type=1400 audit(1788009436.724:629): avc: denied { write } for pid=7493 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.119861][ T43] audit: type=1400 audit(1788009436.784:630): avc: denied { create } for pid=7499 comm="syz.2.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 78.231800][ T5443] 8021q: adding VLAN 0 to HW filter on device eth2 [ 78.358290][ T7505] Bluetooth: MGMT ver 1.23 [ 78.400039][ T7418] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.428768][ T7418] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.429509][ T7418] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.441090][ T7418] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.441876][ T7418] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.458062][ T7418] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.475824][ T7418] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.486838][ T1169] Bluetooth: (null): Invalid header checksum [ 78.486942][ T7418] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.495244][ T7517] Bluetooth: (null): Non-link packet received in non-active state [ 78.532459][ T5832] hsr_slave_0: left promiscuous mode [ 78.540933][ T5832] hsr_slave_1: left promiscuous mode [ 78.541778][ T5832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.541810][ T5832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.552143][ T5832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.552208][ T5832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.583418][ T5832] veth1_macvtap: left promiscuous mode [ 78.583549][ T5832] veth0_macvtap: left promiscuous mode [ 78.583624][ T5832] veth1_vlan: left promiscuous mode [ 78.583680][ T5832] veth0_vlan: left promiscuous mode [ 78.618765][ T5090] Bluetooth: hci4: command tx timeout [ 78.822924][ T5832] team0 (unregistering): Port device team_slave_1 removed [ 78.918872][ T5443] 8021q: adding VLAN 0 to HW filter on device eth3 [ 78.997338][ T7418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.002724][ T7418] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.024002][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.024094][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.030918][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.030998][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.065086][ T7555] ip_tables: iptables: counters copy to user failed while replacing table [ 79.115877][ T1478] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 79.179244][ T5443] 8021q: adding VLAN 0 to HW filter on device eth4 [ 79.276045][ T1478] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 79.277071][ T1478] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 79.277842][ T1478] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 79.279404][ T1478] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.279418][ T1478] usb 5-1: Product: syz [ 79.279427][ T1478] usb 5-1: Manufacturer: syz [ 79.279435][ T1478] usb 5-1: SerialNumber: syz [ 79.284896][ T1478] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 79.297641][ T1478] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 79.306176][ T1478] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 79.388061][ T7418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.405394][ T5443] 8021q: adding VLAN 0 to HW filter on device eth5 [ 79.545785][ T5931] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 79.552062][ T7418] veth0_vlan: entered promiscuous mode [ 79.562408][ T7418] veth1_vlan: entered promiscuous mode [ 79.583488][ T7418] veth0_macvtap: entered promiscuous mode [ 79.586684][ T7418] veth1_macvtap: entered promiscuous mode [ 79.593987][ T7418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.600261][ T7418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.664491][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.664644][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.684945][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.688969][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.695734][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.696034][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.696241][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.696320][ T5931] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.696426][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.697308][ T5931] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 79.697323][ T5931] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 79.698900][ T5931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.698914][ T5931] usb 7-1: Product: п [ 79.698921][ T5931] usb 7-1: Manufacturer: А [ 79.698929][ T5931] usb 7-1: SerialNumber: 䗨䝫쌄쯶₲ᅈ薗蓋炮↑䶶饲䧏佰宊㶛趝꜎沺呄ಡ镂둴᧟⭹ᴌᣋ㙩榉곋娦䐩ꡡ锲ᒇ咴愍校蜻쟁汧湩塠唼啰坨궯墷⎴众輍ࡺ쳋Ɛ캍惼ਏ긿Ɀ냷뫡稻흹࿎犮 [ 79.701777][ T5931] usb 7-1: rejected 1 configuration due to insufficient available bus power [ 79.701790][ T5931] usb 7-1: no configuration chosen from 1 choice [ 79.785639][ T5090] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 79.860230][ T7601] mac80211_hwsim hwsim15 : renamed from wlan1 (while UP) [ 80.054804][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.428'. [ 80.054875][ T7618] netlink: 16 bytes leftover after parsing attributes in process `syz.4.428'. [ 80.281738][ T7625] kAFS: unable to lookup cell '1' [ 80.678479][ T7638] program syz.4.434 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.684210][ T43] kauditd_printk_skb: 11 callbacks suppressed [ 80.684283][ T43] audit: type=1400 audit(1788009439.344:642): avc: denied { write } for pid=7637 comm="syz.4.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 80.701693][ T43] audit: type=1400 audit(1788009439.364:643): avc: denied { read } for pid=7637 comm="syz.4.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 81.658215][ T7658] netlink: 16 bytes leftover after parsing attributes in process `syz.4.438'. [ 81.695538][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.439'. [ 81.753994][ T7663] ovs-system: entered promiscuous mode [ 81.824824][ T43] audit: type=1400 audit(1788009440.484:644): avc: denied { ioctl } for pid=7666 comm="syz.4.440" path="socket:[28909]" dev="sockfs" ino=28909 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 81.831231][ T7667] sctp: [Deprecated]: syz.4.440 (pid 7667) Use of struct sctp_assoc_value in delayed_ack socket option. [ 81.831231][ T7667] Use struct sctp_sack_info instead [ 81.879489][ T5931] usb 5-1: USB disconnect, device number 11 [ 81.887457][ T5931] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 81.888820][ T5931] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 81.889192][ T5931] ti_usb_3410_5052 5-1:2.0: device disconnected [ 81.908239][ T5090] Bluetooth: hci4: command tx timeout [ 81.945411][ T7671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.442'. [ 82.030083][ T7678] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 82.038505][ T43] audit: type=1400 audit(1788009440.704:645): avc: denied { read } for pid=7677 comm="syz.4.444" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 82.294218][ T5931] usb 7-1: USB disconnect, device number 5 [ 82.336038][ T43] audit: type=1400 audit(1788009441.004:646): avc: denied { getopt } for pid=7684 comm="syz.2.447" lport=53597 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 83.975496][ T5090] Bluetooth: hci4: command tx timeout [ 84.215549][ T5090] Bluetooth: hci1: command 0x0c1a tx timeout [ 84.220813][ T7678] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 85.012547][ T7678] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 85.022235][ T7678] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 85.026520][ T7678] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 85.026615][ T7678] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 85.031529][ T7678] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 85.037143][ T7678] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 85.037234][ T7678] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 85.042449][ T7678] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 85.079675][ T7693] lo: Caught tx_queue_len zero misconfig [ 85.090990][ T43] audit: type=1800 audit(1788009443.754:647): pid=7693 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.448" name="syzkaller0" dev="sda1" ino=2038 res=0 errno=0 [ 85.098619][ T7693] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 1986356271 (only 8 groups) [ 85.137635][ T7696] loop5: detected capacity change from 0 to 2640 [ 85.137998][ T7696] buffer_io_error: 5 callbacks suppressed [ 85.139446][ T7696] Buffer I/O error on dev loop5, logical block 0, async page read [ 85.139511][ T7696] Buffer I/O error on dev loop5, logical block 0, async page read [ 85.139529][ T7696] Buffer I/O error on dev loop5, logical block 0, async page read [ 85.139544][ T7696] Buffer I/O error on dev loop5, logical block 0, async page read [ 85.139559][ T7696] Buffer I/O error on dev loop5, logical block 0, async page read [ 85.139584][ T7696] Buffer I/O error on dev loop5, logical block 0, async page read [ 85.139605][ T7696] Buffer I/O error on dev loop5, logical block 0, async page read [ 85.139620][ T7696] Buffer I/O error on dev loop5, logical block 0, async page read [ 85.139628][ T7696] ldm_validate_partition_table(): Disk read failed. [ 85.139642][ T7696] Buffer I/O error on dev loop5, logical block 0, async page read [ 85.139658][ T7696] Buffer I/O error on dev loop5, logical block 0, async page read [ 85.139682][ T7696] Dev loop5: unable to read RDB block 0 [ 85.139771][ T7696] loop5: unable to read partition table [ 85.139860][ T7696] loop_reread_partitions: partition scan of loop5 (3 ) failed (rc=-5) [ 85.142424][ T7696] gfs2: error -5 reading superblock [ 85.297672][ T43] audit: type=1400 audit(1788009443.964:648): avc: denied { read } for pid=7708 comm="syz.0.453" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 85.297947][ T43] audit: type=1400 audit(1788009443.964:649): avc: denied { open } for pid=7708 comm="syz.0.453" path="/99/trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 85.323706][ T43] audit: type=1400 audit(1788009443.984:650): avc: denied { mounton } for pid=7708 comm="syz.0.453" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 85.366427][ T43] audit: type=1400 audit(1788009444.024:651): avc: denied { mac_admin } for pid=7720 comm="syz.4.455" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.366551][ T7721] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 85.368236][ T7711] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 85.393870][ T7711] kvm: pic: single mode not supported [ 85.394374][ T7711] kvm: pic: non byte read [ 85.396755][ T7711] kvm: pic: level sensitive irq not supported [ 85.397116][ T7711] kvm: pic: non byte read [ 85.398403][ T7711] kvm: pic: level sensitive irq not supported [ 85.398894][ T7711] kvm: pic: non byte read [ 85.399965][ T7711] kvm: pic: level sensitive irq not supported [ 85.400246][ T7711] kvm: pic: non byte read [ 85.401577][ T7711] kvm: pic: level sensitive irq not supported [ 85.401894][ T7711] kvm: pic: non byte read [ 85.402952][ T7711] kvm: pic: level sensitive irq not supported [ 85.403229][ T7711] kvm: pic: non byte read [ 85.404136][ T7711] kvm: pic: level sensitive irq not supported [ 85.404406][ T7711] kvm: pic: non byte read [ 85.406755][ T7711] kvm: pic: level sensitive irq not supported [ 85.407026][ T7711] kvm: pic: non byte read [ 85.420919][ T7724] netlink: 44 bytes leftover after parsing attributes in process `syz.4.456'. [ 85.420935][ T7724] netlink: 'syz.4.456': attribute type 6 has an invalid length. [ 85.420942][ T7724] netlink: 'syz.4.456': attribute type 5 has an invalid length. [ 85.420948][ T7724] netlink: 'syz.4.456': attribute type 4 has an invalid length. [ 85.637840][ T7754] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 85.902537][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 85.902640][ T43] audit: type=1400 audit(1788009444.564:655): avc: denied { write } for pid=7768 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.945461][ T7772] syzkaller0: entered promiscuous mode [ 85.945521][ T7772] syzkaller0: entered allmulticast mode [ 85.952250][ T43] audit: type=1400 audit(1788009444.614:656): avc: denied { write } for pid=7773 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.953874][ T43] audit: type=1400 audit(1788009444.614:657): avc: denied { connect } for pid=7771 comm="syz.0.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.010975][ T43] audit: type=1400 audit(1788009444.674:658): avc: denied { remount } for pid=7771 comm="syz.0.466" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 86.295476][ T5090] Bluetooth: hci1: command 0x0c1a tx timeout [ 86.382361][ T43] audit: type=1400 audit(1788009445.044:659): avc: denied { mount } for pid=7778 comm="syz.4.468" name="/" dev="autofs" ino=29789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 86.432357][ T5737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.436175][ T5737] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.440405][ T5737] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.444502][ T5737] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.446134][ T5737] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.452898][ T7782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.810099][ T43] audit: type=1400 audit(1788009445.474:660): avc: denied { write } for pid=7812 comm="syz.2.474" name="functions" dev="configfs" ino=18861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 86.813196][ T43] audit: type=1400 audit(1788009445.474:661): avc: denied { write } for pid=7812 comm="syz.2.474" name="functions" dev="configfs" ino=18861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 86.823840][ T7781] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.823920][ T7781] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.823980][ T7781] bridge_slave_0: entered allmulticast mode [ 86.825003][ T7781] bridge_slave_0: entered promiscuous mode [ 86.826617][ T7781] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.826686][ T7781] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.826840][ T7781] bridge_slave_1: entered allmulticast mode [ 86.827605][ T7781] bridge_slave_1: entered promiscuous mode [ 86.844950][ T7781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.851186][ T7781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.876882][ T7781] team0: Port device team_slave_0 added [ 86.878137][ T7781] team0: Port device team_slave_1 added [ 86.902358][ T7781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.904507][ T7781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.905648][ T7781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.908330][ T7781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.908338][ T7781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.908352][ T7781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.916737][ T43] audit: type=1400 audit(1788009445.574:662): avc: denied { write } for pid=7823 comm="syz.2.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 86.926822][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.477'. [ 86.926839][ T7824] netlink: 16 bytes leftover after parsing attributes in process `syz.2.477'. [ 86.927030][ T7781] hsr_slave_0: entered promiscuous mode [ 86.927436][ T7781] hsr_slave_1: entered promiscuous mode [ 86.927803][ T7781] debugfs: 'hsr0' already exists in 'hsr' [ 86.927820][ T7781] Cannot create hsr debugfs directory [ 86.931881][ T7821] netlink: 20 bytes leftover after parsing attributes in process `syz.0.476'. [ 86.959894][ T7831] netlink: 14 bytes leftover after parsing attributes in process `syz.0.476'. [ 87.040575][ T7831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.046581][ T7831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.047672][ T7831] bond0 (unregistering): Released all slaves [ 87.095630][ T5090] Bluetooth: hci4: command 0x0c1a tx timeout [ 87.095640][ T5737] Bluetooth: hci2: command 0x0c1a tx timeout [ 87.226331][ T7781] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 87.231991][ T7781] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.232632][ T7781] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 87.237545][ T7781] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.237928][ T7781] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 87.243012][ T7781] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.248557][ T7781] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 87.258620][ T7781] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.275978][ T7863] program syz.4.485 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.312330][ T7781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.320786][ T7781] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.328561][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.328656][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.333122][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.333187][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.338328][ T43] audit: type=1400 audit(1788009446.004:663): avc: denied { bind } for pid=7867 comm="syz.2.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 87.365697][ T43] audit: type=1400 audit(1788009446.034:664): avc: denied { ioctl } for pid=7869 comm="syz.4.487" path="socket:[27560]" dev="sockfs" ino=27560 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.492051][ T7886] netlink: 'syz.4.489': attribute type 1 has an invalid length. [ 87.492092][ T7886] netlink: 'syz.4.489': attribute type 7 has an invalid length. [ 87.492124][ T7886] netlink: 'syz.4.489': attribute type 8 has an invalid length. [ 87.492144][ T7886] netlink: 208 bytes leftover after parsing attributes in process `syz.4.489'. [ 87.492165][ T7886] NCSI netlink: No device for ifindex 1073545264 [ 87.570636][ T7781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.642196][ T7903] 9pnet_virtio: no channels available for device syz [ 87.730880][ T7899] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.731153][ T7899] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.790787][ T7914] /dev/sg0: Can't lookup blockdev [ 87.799561][ T7899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.804851][ T7899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.923624][ T7914] vlan3: entered allmulticast mode [ 87.945879][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.948678][ T5832] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.948702][ T5832] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.948720][ T5832] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.992450][ T7921] netlink: 'syz.0.496': attribute type 1 has an invalid length. [ 88.003342][ T7921] bond0: option mode: invalid value (10) [ 88.006535][ T7921] bond0 (unregistering): Released all slaves [ 88.044984][ T7781] veth0_vlan: entered promiscuous mode [ 88.100707][ T7921] netlink: 'syz.0.496': attribute type 11 has an invalid length. [ 88.105065][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.496'. [ 88.113219][ T7781] veth1_vlan: entered promiscuous mode [ 88.128328][ T7781] veth0_macvtap: entered promiscuous mode [ 88.130275][ T7781] veth1_macvtap: entered promiscuous mode [ 88.146931][ T7781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.154822][ T7781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.237281][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.240141][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.251133][ T7941] echo interval is out of bounds [ 88.251133][ T7941] [ 88.254078][ T7941] CIFS: VFS: echo interval is out of bounds [ 88.254991][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.255002][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.276657][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.276718][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.289629][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.289999][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.320316][ T7948] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 88.350637][ T7949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7949 comm=syz.0.506 [ 88.352163][ T7948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7948 comm=syz.0.506 [ 88.417547][ T7964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=7964 comm=syz.2.509 [ 88.530966][ T7962] Process accounting resumed [ 88.535830][ T5090] Bluetooth: hci3: command tx timeout [ 88.570299][ T7977] netlink: 'syz.0.514': attribute type 62 has an invalid length. [ 88.572250][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.514'. [ 88.592747][ T7981] fuse: Invalid rootmode [ 88.650968][ T7991] netlink: 20 bytes leftover after parsing attributes in process `syz.5.518'. [ 88.738526][ T7998] netlink: 68 bytes leftover after parsing attributes in process `syz.5.519'. [ 88.958685][ T8033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.523'. [ 88.958752][ T8033] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 88.970977][ T8038] overlay: ./bus is not a directory [ 89.177850][ T5090] Bluetooth: hci2: command 0x0c1a tx timeout [ 89.177921][ T5737] Bluetooth: hci4: command 0x0c1a tx timeout [ 89.296785][ T5818] input: syz0 as /devices/virtual/misc/uhid/0005:0009:0306.0006/input/input15 [ 89.321682][ T5818] hid-generic 0005:0009:0306.0006: input,hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 89.473863][ T8065] ifb0: entered promiscuous mode [ 89.476601][ T8065] macvlan0: entered allmulticast mode [ 89.476660][ T8065] ifb0: entered allmulticast mode [ 89.508087][ T8072] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 89.510560][ T8072] VFS: Can't find a romfs filesystem on dev nullb0. [ 89.510560][ T8072] [ 89.548755][ T8078] jffs2: notice: (8078) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 90.235953][ T8121] Need at least one configuration in g1. [ 90.252246][ T8121] udc usbip-vudc.0: failed to start g1: -22 [ 90.256081][ T8121] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 90.277142][ T8121] UDC core: g1: couldn't find an available UDC or it's busy [ 90.294747][ T5833] wiimote 0005:057E:0306.0007: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 90.295899][ T5833] wiimote 0005:057E:0306.0007: New device registered [ 90.312414][ T8127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.312675][ T8127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.407368][ T8131] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 90.416978][ T8131] binder_alloc: binder_alloc_mmap_handler: 8129 200000ffd000-200001000000 already mapped failed -16 [ 90.417614][ T8133] program syz.4.546 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.555485][ T57] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 90.614351][ T8092] syz.5.537 (8092) used greatest stack depth: 18760 bytes left [ 90.615639][ T5737] Bluetooth: hci3: command tx timeout [ 90.717264][ T57] usb 5-1: Using ep0 maxpacket: 8 [ 90.718137][ T57] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 90.720789][ T57] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.724673][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.724689][ T57] usb 5-1: Product: syz [ 90.724699][ T57] usb 5-1: Manufacturer: syz [ 90.724708][ T57] usb 5-1: SerialNumber: syz [ 90.912411][ T43] kauditd_printk_skb: 31 callbacks suppressed [ 90.912481][ T43] audit: type=1400 audit(1788009449.574:696): avc: denied { write } for pid=8154 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.022449][ T8126] qrtr: Invalid version 10 [ 91.098149][ T8131] syz.2.545 (8131): drop_caches: 2 [ 91.137992][ T8167] CacheFiles: Empty directory specified [ 91.138237][ T8167] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 91.192216][ T8125] wiimote 0005:057E:0306.0007: Device removed [ 91.196268][ T57] usb 5-1: USB disconnect, device number 12 [ 91.257492][ T5737] Bluetooth: hci2: command 0x0c1a tx timeout [ 91.257680][ T5090] Bluetooth: hci4: command 0x0c1a tx timeout [ 91.259298][ T43] audit: type=1400 audit(1788009449.924:697): avc: denied { write } for pid=8172 comm="syz.2.555" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 91.402359][ T43] audit: type=1400 audit(1788009450.064:698): avc: denied { name_bind } for pid=8178 comm="syz.4.557" src=24097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 91.576044][ T8185] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 91.761993][ T8190] netlink: 'syz.5.560': attribute type 1 has an invalid length. [ 91.777099][ T8193] netlink: 'syz.5.560': attribute type 1 has an invalid length. [ 91.842357][ T8197] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 91.842411][ T8197] IPv6: NLM_F_CREATE should be set when creating new route [ 91.864645][ T8197] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.865061][ T8197] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.907888][ T8197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.913258][ T8197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.026362][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.026434][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.026480][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.026513][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.042913][ T43] audit: type=1400 audit(1788009450.704:699): avc: denied { write } for pid=8200 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.083015][ T65] block nbd4: Receive control failed (result -32) [ 92.086743][ T8199] block nbd4: shutting down sockets [ 92.118366][ T43] audit: type=1400 audit(1788009450.784:700): avc: denied { write } for pid=8207 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.323680][ T43] audit: type=1400 audit(1788009450.984:701): avc: denied { write } for pid=8216 comm="syz.5.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 92.695556][ T5737] Bluetooth: hci3: command tx timeout [ 93.015554][ T5833] wiimote 0005:057E:0306.0007: detected device: Nintendo Wii Remote (Gen 1) [ 93.041325][ T5833] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0007/input/input17 [ 93.051931][ T5833] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0007/input/input18 [ 93.055213][ T5833] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0007/input/input16 [ 93.215118][ T8246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.215828][ T8246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.445501][ T57] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 93.595464][ T57] usb 10-1: Using ep0 maxpacket: 8 [ 93.596234][ T57] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 93.599504][ T57] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 93.599531][ T57] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 93.599650][ T57] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.599672][ T57] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.599706][ T57] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.666924][ T73] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 93.672709][ T8257] syzkaller0: entered promiscuous mode [ 93.672771][ T8257] syzkaller0: entered allmulticast mode [ 93.798778][ T73] usb 7-1: device descriptor read/64, error -71 [ 93.810711][ T57] usb 10-1: usb_control_msg returned -71 [ 93.810777][ T57] usbtmc 10-1:16.0: can't read capabilities [ 93.822442][ T57] usb 10-1: USB disconnect, device number 2 [ 94.035882][ T73] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 94.168211][ T73] usb 7-1: device descriptor read/64, error -71 [ 94.277477][ T73] usb usb7-port1: attempt power cycle [ 94.538247][ T8267] __nla_validate_parse: 8 callbacks suppressed [ 94.538445][ T8267] netlink: 68 bytes leftover after parsing attributes in process `syz.5.577'. [ 94.627539][ T73] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 94.649248][ T73] usb 7-1: device descriptor read/8, error -71 [ 94.776366][ T5737] Bluetooth: hci3: command tx timeout [ 94.895521][ T73] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 94.909981][ T43] audit: type=1400 audit(1788009453.574:702): avc: denied { setopt } for pid=8268 comm="syz.4.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 94.910044][ T43] audit: type=1400 audit(1788009453.574:703): avc: denied { getopt } for pid=8268 comm="syz.4.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 94.924793][ T73] usb 7-1: device descriptor read/8, error -71 [ 94.929691][ T43] audit: type=1804 audit(1788009453.594:704): pid=8270 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.578" name="/newroot/59/mnt/syzkaller0" dev="sda1" ino=2038 res=1 errno=0 [ 95.036227][ T73] usb usb7-port1: unable to enumerate USB device [ 95.072713][ T8273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'. [ 95.101010][ T8275] program syz.4.580 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.104244][ T43] audit: type=1800 audit(1788009453.764:705): pid=8275 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.580" name="(" dev="sda1" ino=2039 res=0 errno=0 [ 95.290622][ T8280] netlink: 20 bytes leftover after parsing attributes in process `syz.4.582'. [ 95.304945][ T73] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 95.350907][ T8283] program syz.4.582 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.558971][ T73] libceph: mon0 (1)[c::]:6789 socket error on write [ 95.570151][ T8289] netlink: 'syz.5.584': attribute type 12 has an invalid length. [ 95.570205][ T8289] netlink: 'syz.5.584': attribute type 29 has an invalid length. [ 95.570219][ T8289] netlink: 148 bytes leftover after parsing attributes in process `syz.5.584'. [ 95.570239][ T8289] netlink: 'syz.5.584': attribute type 3 has an invalid length. [ 95.570251][ T8289] netlink: 'syz.5.584': attribute type 2 has an invalid length. [ 95.570262][ T8289] netlink: 35 bytes leftover after parsing attributes in process `syz.5.584'. [ 95.622517][ T8292] netlink: 56 bytes leftover after parsing attributes in process `syz.5.585'. [ 96.078514][ T73] libceph: mon0 (1)[c::]:6789 socket error on write [ 96.154447][ T8280] ceph: No mds server is up or the cluster is laggy [ 96.244579][ T8296] netlink: 'syz.4.586': attribute type 2 has an invalid length. [ 96.244647][ T8296] netlink: 'syz.4.586': attribute type 4 has an invalid length. [ 96.299359][ T8299] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 96.500200][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.590'. [ 96.500209][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.5.590'. [ 96.537592][ T8316] FAULT_INJECTION: forcing a failure. [ 96.537592][ T8316] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 96.537664][ T8316] CPU: 1 UID: 0 PID: 8316 Comm: syz.5.592 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.537681][ T8316] Tainted: [L]=SOFTLOCKUP [ 96.537685][ T8316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.537692][ T8316] Call Trace: [ 96.537696][ T8316] [ 96.537700][ T8316] dump_stack_lvl+0x100/0x190 [ 96.537744][ T8316] should_fail_ex.cold+0x5/0xa [ 96.537757][ T8316] ? prepare_alloc_pages+0x16d/0x5b0 [ 96.537776][ T8316] should_fail_alloc_page+0xeb/0x140 [ 96.537791][ T8316] prepare_alloc_pages+0x1f0/0x5b0 [ 96.537807][ T8316] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 96.537826][ T8316] ? find_held_lock+0x2b/0x80 [ 96.537841][ T8316] ? is_bpf_text_address+0x8a/0x1a0 [ 96.537855][ T8316] ? is_bpf_text_address+0x8a/0x1a0 [ 96.537869][ T8316] ? bpf_ksym_find+0x128/0x1c0 [ 96.537885][ T8316] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 96.537903][ T8316] ? is_bpf_text_address+0x94/0x1a0 [ 96.537917][ T8316] ? kernel_text_address+0x8d/0x100 [ 96.537934][ T8316] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 96.537951][ T8316] ? unwind_get_return_address+0x59/0xa0 [ 96.537968][ T8316] ? __lock_acquire+0x4c5/0x1ec0 [ 96.537982][ T8316] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 96.538002][ T8316] ? register_lock_class+0x3f/0x7b0 [ 96.538014][ T8316] ? find_held_lock+0x2b/0x80 [ 96.538028][ T8316] ? ima_match_policy+0x8b8/0x23e0 [ 96.538043][ T8316] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 96.538056][ T8316] ? policy_nodemask+0xed/0x4f0 [ 96.538071][ T8316] alloc_pages_mpol+0x201/0x550 [ 96.538086][ T8316] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 96.538099][ T8316] ? lock_acquire+0x1d1/0x380 [ 96.538109][ T8316] ? process_measurement+0x1567/0x2350 [ 96.538129][ T8316] folio_alloc_mpol_noprof+0x36/0x260 [ 96.538146][ T8316] vma_alloc_folio_noprof+0xed/0x1d0 [ 96.538162][ T8316] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 96.538182][ T8316] do_anonymous_page+0xac9/0x2050 [ 96.538201][ T8316] ? __pfx_do_anonymous_page+0x10/0x10 [ 96.538215][ T8316] ? rcu_read_unlock+0x2d/0xb0 [ 96.538230][ T8316] ? rcu_read_unlock+0x2d/0xb0 [ 96.538245][ T8316] ? __pte_offset_map+0x179/0x310 [ 96.538258][ T8316] __handle_mm_fault+0x1ff3/0x2f60 [ 96.538276][ T8316] ? __pfx___handle_mm_fault+0x10/0x10 [ 96.538290][ T8316] ? __pfx_mt_find+0x10/0x10 [ 96.538317][ T8316] ? find_vma+0xbf/0x140 [ 96.538328][ T8316] ? __pfx_find_vma+0x10/0x10 [ 96.538340][ T8316] handle_mm_fault+0x363/0xa20 [ 96.538358][ T8316] do_user_addr_fault+0x745/0x12f0 [ 96.538376][ T8316] exc_page_fault+0x6f/0xd0 [ 96.538388][ T8316] asm_exc_page_fault+0x26/0x30 [ 96.538400][ T8316] RIP: 0010:_copy_to_user+0x9f/0xd0 [ 96.538417][ T8316] Code: 89 ee 48 89 ef e8 a1 4b e2 fc 4d 85 ff 75 26 e8 b7 51 e2 fc 89 de 4c 89 e7 e8 0d 69 55 fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb e8 91 51 e2 fc 48 89 d8 5b 5d 41 [ 96.538428][ T8316] RSP: 0018:ffffc900064b7b80 EFLAGS: 00050297 [ 96.538437][ T8316] RAX: 0000000000000001 RBX: 0000000000000003 RCX: 0000000000000003 [ 96.538444][ T8316] RDX: 0000000000000001 RSI: ffffc900064b7c38 RDI: 0000200000003c80 [ 96.538453][ T8316] RBP: 0000200000003c80 R08: 0000000000000000 R09: fffff52000c96f87 [ 96.538460][ T8316] R10: 0000000000000002 R11: 0000000000000001 R12: ffffc900064b7c38 [ 96.538467][ T8316] R13: 0000200000003c83 R14: 00007ffffffff000 R15: 0000000000000000 [ 96.538483][ T8316] vivid_radio_rx_read+0x7c1/0xb90 [ 96.538504][ T8316] ? __pfx_vivid_radio_rx_read+0x10/0x10 [ 96.538517][ T8316] ? get_pid_task+0x106/0x250 [ 96.538531][ T8316] ? avc_policy_seqno+0x9/0x20 [ 96.538545][ T8316] vivid_radio_read+0x86/0xc0 [ 96.538563][ T8316] v4l2_read+0x229/0x2c0 [ 96.538577][ T8316] ? __pfx_v4l2_read+0x10/0x10 [ 96.538591][ T8316] vfs_read+0x1e4/0xb40 [ 96.538609][ T8316] ? lock_acquire+0x1d1/0x380 [ 96.538620][ T8316] ? __fget_files+0x34/0x3d0 [ 96.538632][ T8316] ? __pfx_vfs_read+0x10/0x10 [ 96.538657][ T8316] ? find_held_lock+0x2b/0x80 [ 96.538671][ T8316] ? __fget_files+0x215/0x3d0 [ 96.538683][ T8316] ? __fget_files+0x215/0x3d0 [ 96.538697][ T8316] ? __fget_files+0x21f/0x3d0 [ 96.538714][ T8316] ksys_read+0x12a/0x250 [ 96.538730][ T8316] ? __pfx_ksys_read+0x10/0x10 [ 96.538751][ T8316] do_syscall_64+0x123/0x790 [ 96.538764][ T8316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.538776][ T8316] RIP: 0033:0x7f98ee99e159 [ 96.538785][ T8316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.538795][ T8316] RSP: 002b:00007f98ef858028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 96.538805][ T8316] RAX: ffffffffffffffda RBX: 00007f98eec25fa0 RCX: 00007f98ee99e159 [ 96.538812][ T8316] RDX: 0000000000002020 RSI: 0000200000003c80 RDI: 0000000000000003 [ 96.538819][ T8316] RBP: 00007f98ef858090 R08: 0000000000000000 R09: 0000000000000000 [ 96.538825][ T8316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.538831][ T8316] R13: 00007f98eec26038 R14: 00007f98eec25fa0 R15: 00007ffc95ecb308 [ 96.538846][ T8316] [ 96.550455][ T8314] netlink: 68 bytes leftover after parsing attributes in process `syz.4.591'. [ 96.644337][ T8323] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4356.0.0), cmd(9) [ 96.782916][ T8330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8330 comm=syz.2.597 [ 96.801043][ T8330] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.842458][ T8335] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8335 comm=syz.5.599 [ 96.843525][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 96.843535][ T43] audit: type=1400 audit(1788009455.504:707): avc: denied { ioctl } for pid=8334 comm="syz.5.599" path="socket:[31698]" dev="sockfs" ino=31698 ioctlcmd=0x700e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 97.115481][ T35] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 97.155476][ T73] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 97.233492][ T8346] FAULT_INJECTION: forcing a failure. [ 97.233492][ T8346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.233565][ T8346] CPU: 3 UID: 0 PID: 8346 Comm: syz.4.604 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.233604][ T8346] Tainted: [L]=SOFTLOCKUP [ 97.233611][ T8346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.233621][ T8346] Call Trace: [ 97.233627][ T8346] [ 97.233636][ T8346] dump_stack_lvl+0x100/0x190 [ 97.233674][ T8346] should_fail_ex.cold+0x5/0xa [ 97.233697][ T8346] _copy_to_user+0x32/0xd0 [ 97.233727][ T8346] vivid_radio_rx_read+0x7c1/0xb90 [ 97.233754][ T8346] ? __pfx_vivid_radio_rx_read+0x10/0x10 [ 97.233773][ T8346] ? get_pid_task+0x106/0x250 [ 97.233796][ T8346] ? avc_policy_seqno+0x9/0x20 [ 97.233821][ T8346] vivid_radio_read+0x86/0xc0 [ 97.233847][ T8346] v4l2_read+0x229/0x2c0 [ 97.233867][ T8346] ? __pfx_v4l2_read+0x10/0x10 [ 97.233891][ T8346] vfs_read+0x1e4/0xb40 [ 97.233919][ T8346] ? lock_acquire+0x1d1/0x380 [ 97.233934][ T8346] ? __fget_files+0x34/0x3d0 [ 97.233955][ T8346] ? __pfx_vfs_read+0x10/0x10 [ 97.233981][ T8346] ? find_held_lock+0x2b/0x80 [ 97.234003][ T8346] ? __fget_files+0x215/0x3d0 [ 97.234019][ T8346] ? __fget_files+0x215/0x3d0 [ 97.234044][ T8346] ? __fget_files+0x21f/0x3d0 [ 97.234072][ T8346] ksys_read+0x12a/0x250 [ 97.234095][ T8346] ? __pfx_ksys_read+0x10/0x10 [ 97.234130][ T8346] do_syscall_64+0x123/0x790 [ 97.234154][ T8346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.234171][ T8346] RIP: 0033:0x7fe23259e159 [ 97.234185][ T8346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.234202][ T8346] RSP: 002b:00007fe233504028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 97.234221][ T8346] RAX: ffffffffffffffda RBX: 00007fe232825fa0 RCX: 00007fe23259e159 [ 97.234235][ T8346] RDX: 0000000000002020 RSI: 0000200000003c80 RDI: 0000000000000003 [ 97.234245][ T8346] RBP: 00007fe233504090 R08: 0000000000000000 R09: 0000000000000000 [ 97.234255][ T8346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.234264][ T8346] R13: 00007fe232826038 R14: 00007fe232825fa0 R15: 00007ffe8be790a8 [ 97.234289][ T8346] [ 97.265548][ T35] usb 7-1: Using ep0 maxpacket: 8 [ 97.266554][ T35] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 97.267782][ T35] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 97.267810][ T35] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 97.267831][ T35] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.267854][ T35] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.267891][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.316060][ T73] usb 10-1: Using ep0 maxpacket: 32 [ 97.318573][ T73] usb 10-1: unable to get BOS descriptor or descriptor too short [ 97.318596][ T73] usb 10-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 97.319417][ T73] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.324086][ T73] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.324098][ T73] usb 10-1: Product: syz [ 97.324105][ T73] usb 10-1: Manufacturer: syz [ 97.324112][ T73] usb 10-1: SerialNumber: syz [ 97.475019][ T35] usb 7-1: GET_CAPABILITIES returned 0 [ 97.475081][ T35] usbtmc 7-1:16.0: can't read capabilities [ 97.535954][ T73] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 97.536017][ T73] usb 10-1: MIDIStreaming interface descriptor not found [ 97.570344][ T73] usb 10-1: USB disconnect, device number 3 [ 97.612262][ T6789] udevd[6789]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.679210][ T8340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.684581][ T8340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.687729][ T35] usb 7-1: USB disconnect, device number 10 [ 98.059383][ T8359] netlink: 'syz.5.607': attribute type 58 has an invalid length. [ 98.225111][ T43] audit: type=1400 audit(1788009456.884:708): avc: denied { create } for pid=8363 comm="syz.2.609" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 98.239363][ T43] audit: type=1400 audit(1788009456.904:709): avc: denied { unlink } for pid=5724 comm="syz-executor" name="file1" dev="tmpfs" ino=913 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 98.269143][ T8366] syzkaller0: entered promiscuous mode [ 98.269193][ T8366] syzkaller0: entered allmulticast mode [ 98.325272][ T43] audit: type=1400 audit(1788009456.984:710): avc: denied { unmount } for pid=7418 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 98.363166][ T8373] netlink: 68 bytes leftover after parsing attributes in process `syz.4.612'. [ 98.490423][ T8375] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 98.490468][ T8375] UDF-fs: Scanning with blocksize 2048 failed [ 98.491575][ T8375] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 98.491585][ T8375] UDF-fs: Scanning with blocksize 4096 failed [ 98.507120][ T8377] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 98.507681][ T8377] UDF-fs: Scanning with blocksize 2048 failed [ 98.509602][ T8377] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 98.509613][ T8377] UDF-fs: Scanning with blocksize 4096 failed [ 98.514055][ T8375] FAULT_INJECTION: forcing a failure. [ 98.514055][ T8375] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 98.514075][ T8375] CPU: 3 UID: 0 PID: 8375 Comm: syz.2.613 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.514090][ T8375] Tainted: [L]=SOFTLOCKUP [ 98.514094][ T8375] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.514100][ T8375] Call Trace: [ 98.514104][ T8375] [ 98.514109][ T8375] dump_stack_lvl+0x100/0x190 [ 98.514136][ T8375] should_fail_ex.cold+0x5/0xa [ 98.514150][ T8375] ? prepare_alloc_pages+0x16d/0x5b0 [ 98.514165][ T8375] should_fail_alloc_page+0xeb/0x140 [ 98.514179][ T8375] prepare_alloc_pages+0x1f0/0x5b0 [ 98.514194][ T8375] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 98.514215][ T8375] ? prepare_alloc_pages+0x1f1/0x5b0 [ 98.514233][ T8375] ? rcu_is_watching+0x13/0xc0 [ 98.514247][ T8375] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 98.514274][ T43] audit: type=1400 audit(1788009457.174:711): avc: denied { mounton } for pid=8374 comm="syz.2.613" path="/168/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 98.514266][ T8375] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 98.514304][ T8375] ? find_held_lock+0x2b/0x80 [ 98.514319][ T8375] ? is_bpf_text_address+0x8a/0x1a0 [ 98.514332][ T8375] ? is_bpf_text_address+0x8a/0x1a0 [ 98.514346][ T8375] ? bpf_ksym_find+0x128/0x1c0 [ 98.514362][ T8375] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 98.514380][ T8375] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 98.514396][ T8375] ? is_bpf_text_address+0x94/0x1a0 [ 98.514411][ T8375] ? __kernel_text_address+0xd/0x30 [ 98.514437][ T8375] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 98.514457][ T8375] ? policy_nodemask+0xed/0x4f0 [ 98.514472][ T8375] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 98.514497][ T8375] __kasan_populate_vmalloc+0xf0/0x210 [ 98.514518][ T8375] alloc_vmap_area+0x95d/0x2bb0 [ 98.514534][ T8375] ? kasan_save_track+0x14/0x30 [ 98.514545][ T8375] ? __kasan_kmalloc+0xaa/0xb0 [ 98.514556][ T8375] ? __pfx_alloc_vmap_area+0x10/0x10 [ 98.514568][ T8375] ? __get_vm_area_node+0x124/0x350 [ 98.514583][ T8375] __get_vm_area_node+0x1ed/0x350 [ 98.514598][ T8375] __vmalloc_node_range_noprof+0x268/0x1420 [ 98.514612][ T8375] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 98.514625][ T8375] ? __pfx_stack_trace_save+0x10/0x10 [ 98.514644][ T8375] ? stack_depot_save_flags+0x27/0x9f0 [ 98.514659][ T8375] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 98.514672][ T8375] ? __kasan_kmalloc+0xaa/0xb0 [ 98.514683][ T8375] ? do_syscall_64+0x123/0x790 [ 98.514696][ T8375] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 98.514715][ T8375] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 98.514727][ T8375] __vmalloc_node_noprof+0xad/0xf0 [ 98.514741][ T8375] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 98.514755][ T8375] __vmalloc_noprof+0xa3/0x120 [ 98.514769][ T8375] ? __pfx___vmalloc_noprof+0x10/0x10 [ 98.514787][ T8375] bpf_prog_alloc_no_stats+0x59/0x690 [ 98.514802][ T8375] bpf_prog_alloc+0x3b/0x200 [ 98.514815][ T8375] bpf_prog_create_from_user+0xb4/0x2e0 [ 98.514829][ T8375] ? __pfx_seccomp_check_filter+0x10/0x10 [ 98.514846][ T8375] do_seccomp+0x870/0x27c0 [ 98.514861][ T8375] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 98.514877][ T8375] ? __pfx_do_seccomp+0x10/0x10 [ 98.514893][ T8375] ? xfd_validate_state+0x129/0x190 [ 98.514910][ T8375] do_syscall_64+0x123/0x790 [ 98.514923][ T8375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.514935][ T8375] RIP: 0033:0x7f8fefb9e159 [ 98.514944][ T8375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.514955][ T8375] RSP: 002b:00007f8ff0a31028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 98.514967][ T8375] RAX: ffffffffffffffda RBX: 00007f8fefe25fa0 RCX: 00007f8fefb9e159 [ 98.514974][ T8375] RDX: 00002000000000c0 RSI: 000000000000000a RDI: 0000000000000001 [ 98.514980][ T8375] RBP: 00007f8fefc35024 R08: 0000000000000000 R09: 0000000000000000 [ 98.514987][ T8375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.514993][ T8375] R13: 00007f8fefe26038 R14: 00007f8fefe25fa0 R15: 00007ffded3675c8 [ 98.515007][ T8375] [ 98.515093][ T8375] syz.2.613: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 98.515133][ T8375] CPU: 3 UID: 0 PID: 8375 Comm: syz.2.613 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.515147][ T8375] Tainted: [L]=SOFTLOCKUP [ 98.515151][ T8375] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.515157][ T8375] Call Trace: [ 98.515160][ T8375] [ 98.515165][ T8375] dump_stack_lvl+0x100/0x190 [ 98.515181][ T8375] warn_alloc.cold+0x9e/0xb2 [ 98.515194][ T8375] ? __pfx_warn_alloc+0x10/0x10 [ 98.515209][ T8375] ? lockdep_hardirqs_on+0x7d/0x110 [ 98.515222][ T8375] ? __get_vm_area_node+0x2f0/0x350 [ 98.515237][ T8375] ? __get_vm_area_node+0x22b/0x350 [ 98.515253][ T8375] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 98.515267][ T8375] ? __pfx_stack_trace_save+0x10/0x10 [ 98.515284][ T8375] ? stack_depot_save_flags+0x27/0x9f0 [ 98.515297][ T8375] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 98.515311][ T8375] ? __kasan_kmalloc+0xaa/0xb0 [ 98.515321][ T8375] ? do_syscall_64+0x123/0x790 [ 98.515347][ T8375] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 98.515366][ T8375] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 98.515379][ T8375] __vmalloc_node_noprof+0xad/0xf0 [ 98.515393][ T8375] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 98.515407][ T8375] __vmalloc_noprof+0xa3/0x120 [ 98.515421][ T8375] ? __pfx___vmalloc_noprof+0x10/0x10 [ 98.515439][ T8375] bpf_prog_alloc_no_stats+0x59/0x690 [ 98.515454][ T8375] bpf_prog_alloc+0x3b/0x200 [ 98.515468][ T8375] bpf_prog_create_from_user+0xb4/0x2e0 [ 98.515480][ T8375] ? __pfx_seccomp_check_filter+0x10/0x10 [ 98.515496][ T8375] do_seccomp+0x870/0x27c0 [ 98.515511][ T8375] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 98.515526][ T8375] ? __pfx_do_seccomp+0x10/0x10 [ 98.515542][ T8375] ? xfd_validate_state+0x129/0x190 [ 98.515558][ T8375] do_syscall_64+0x123/0x790 [ 98.515571][ T8375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.515582][ T8375] RIP: 0033:0x7f8fefb9e159 [ 98.515591][ T8375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.515601][ T8375] RSP: 002b:00007f8ff0a31028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 98.515611][ T8375] RAX: ffffffffffffffda RBX: 00007f8fefe25fa0 RCX: 00007f8fefb9e159 [ 98.515618][ T8375] RDX: 00002000000000c0 RSI: 000000000000000a RDI: 0000000000000001 [ 98.515624][ T8375] RBP: 00007f8fefc35024 R08: 0000000000000000 R09: 0000000000000000 [ 98.515633][ T8375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.515639][ T8375] R13: 00007f8fefe26038 R14: 00007f8fefe25fa0 R15: 00007ffded3675c8 [ 98.515653][ T8375] [ 98.515729][ T8375] Mem-Info: [ 98.515735][ T8375] active_anon:15579 inactive_anon:4710 isolated_anon:0 [ 98.515735][ T8375] active_file:162 inactive_file:63958 isolated_file:0 [ 98.515735][ T8375] unevictable:1000 dirty:24 writeback:0 [ 98.515735][ T8375] slab_reclaimable:8220 slab_unreclaimable:71238 [ 98.515735][ T8375] mapped:25069 shmem:10549 pagetables:1358 [ 98.515735][ T8375] sec_pagetables:295 bounce:0 [ 98.515735][ T8375] kernel_misc_reclaimable:0 [ 98.515735][ T8375] free:436403 free_pcp:12838 free_cma:0 [ 98.515762][ T8375] Node 0 active_anon:61392kB inactive_anon:16420kB active_file:648kB inactive_file:255628kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:100276kB dirty:96kB writeback:0kB shmem:36972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15328kB pagetables:5116kB sec_pagetables:1180kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 98.515790][ T8375] Node 1 active_anon:924kB inactive_anon:2420kB active_file:0kB inactive_file:204kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:5224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:316kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 98.515817][ T8375] Node 0 DMA free:6256kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:68kB inactive_anon:696kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB [ 98.515846][ T8375] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 98.515869][ T8375] Node 0 DMA32 free:99424kB boost:0kB min:27360kB low:34200kB high:41040kB reserved_highatomic:0kB free_highatomic:0kB active_anon:61324kB inactive_anon:15724kB active_file:648kB inactive_file:255628kB unevictable:2000kB writepending:96kB zspages:928kB present:2080628kB managed:1253048kB mlocked:0kB bounce:0kB free_pcp:44656kB local_pcp:9904kB free_cma:0kB [ 98.515913][ T8375] lowmem_reserve[]: 0 0 0 0 0 [ 98.515938][ T8375] Node 1 Normal free:1639932kB boost:0kB min:39876kB low:49844kB high:59812kB reserved_highatomic:0kB free_highatomic:0kB active_anon:924kB inactive_anon:2420kB active_file:0kB inactive_file:204kB unevictable:2000kB writepending:0kB zspages:1280kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:6580kB local_pcp:128kB free_cma:0kB [ 98.515985][ T8375] lowmem_reserve[]: 0 0 0 0 0 [ 98.516009][ T8375] Node 0 DMA: 2*4kB (M) 1*8kB (M) 4*16kB (UM) 5*32kB (UME) 4*64kB (UME) 3*128kB (UME) 3*256kB (UE) 1*512kB (E) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 6256kB [ 98.516218][ T8375] Node 0 DMA32: 450*4kB (UME) 363*8kB (UME) 268*16kB (UME) 334*32kB (UE) 141*64kB (UME) 29*128kB (UE) 45*256kB (UME) 12*512kB (ME) 2*1024kB (ME) 13*2048kB (UM) 5*4096kB (U) = 99232kB [ 98.516347][ T8375] Node 1 Normal: 45*4kB (UME) 43*8kB (UME) 41*16kB (UME) 47*32kB (UME) 40*64kB (UME) 35*128kB (UME) 18*256kB (UME) 11*512kB (UE) 2*1024kB (UM) 4*2048kB (UME) 393*4096kB (UM) = 1639932kB [ 98.516429][ T8375] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 98.516437][ T8375] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 98.516445][ T8375] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 98.516454][ T8375] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 98.516480][ T8375] 74671 total pagecache pages [ 98.516485][ T8375] 6 pages in swap cache [ 98.516488][ T8375] Free swap = 95096kB [ 98.516492][ T8375] Total swap = 124996kB [ 98.516496][ T8375] 1048443 pages RAM [ 98.516500][ T8375] 0 pages HighMem/MovableOnly [ 98.516503][ T8375] 285871 pages reserved [ 98.516507][ T8375] 0 pages cma reserved [ 98.663765][ T8380] FAULT_INJECTION: forcing a failure. [ 98.663765][ T8380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.663786][ T8380] CPU: 2 UID: 0 PID: 8380 Comm: syz.2.614 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.663802][ T8380] Tainted: [L]=SOFTLOCKUP [ 98.663806][ T8380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.663812][ T8380] Call Trace: [ 98.663816][ T8380] [ 98.663821][ T8380] dump_stack_lvl+0x100/0x190 [ 98.663842][ T8380] should_fail_ex.cold+0x5/0xa [ 98.663858][ T8380] _copy_to_user+0x32/0xd0 [ 98.663875][ T8380] vivid_radio_rx_read+0x7c1/0xb90 [ 98.663891][ T8380] ? __pfx_vivid_radio_rx_read+0x10/0x10 [ 98.663903][ T8380] ? get_pid_task+0x106/0x250 [ 98.663917][ T8380] ? avc_policy_seqno+0x9/0x20 [ 98.663932][ T8380] vivid_radio_read+0x86/0xc0 [ 98.663950][ T8380] v4l2_read+0x229/0x2c0 [ 98.663964][ T8380] ? __pfx_v4l2_read+0x10/0x10 [ 98.663977][ T8380] vfs_read+0x1e4/0xb40 [ 98.663995][ T8380] ? lock_acquire+0x1d1/0x380 [ 98.664006][ T8380] ? __fget_files+0x34/0x3d0 [ 98.664018][ T8380] ? __pfx_vfs_read+0x10/0x10 [ 98.664040][ T8380] ? find_held_lock+0x2b/0x80 [ 98.664054][ T8380] ? __fget_files+0x215/0x3d0 [ 98.664066][ T8380] ? __fget_files+0x215/0x3d0 [ 98.664080][ T8380] ? __fget_files+0x21f/0x3d0 [ 98.664096][ T8380] ksys_read+0x12a/0x250 [ 98.664113][ T8380] ? __pfx_ksys_read+0x10/0x10 [ 98.664133][ T8380] do_syscall_64+0x123/0x790 [ 98.664148][ T8380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.664161][ T8380] RIP: 0033:0x7f8fefb9e159 [ 98.664175][ T8380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.664191][ T8380] RSP: 002b:00007f8ff0a31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 98.664209][ T8380] RAX: ffffffffffffffda RBX: 00007f8fefe25fa0 RCX: 00007f8fefb9e159 [ 98.664222][ T8380] RDX: 0000000000002020 RSI: 0000200000003c80 RDI: 0000000000000003 [ 98.664235][ T8380] RBP: 00007f8ff0a31090 R08: 0000000000000000 R09: 0000000000000000 [ 98.664245][ T8380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.664253][ T8380] R13: 00007f8fefe26038 R14: 00007f8fefe25fa0 R15: 00007ffded3675c8 [ 98.664266][ T8380] [ 98.716051][ T6689] IPVS: starting estimator thread 0... [ 98.805456][ T8383] IPVS: using max 44 ests per chain, 105600 per kthread [ 99.127026][ T8400] device-mapper: ioctl: Unable to rename non-existent device, to $ [ 99.157345][ T8405] trusted_key: syz.4.621 sent an empty control message without MSG_MORE. [ 99.161550][ T43] audit: type=1400 audit(1788009457.824:712): avc: denied { read } for pid=8403 comm="syz.4.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 99.365648][ T43] audit: type=1400 audit(1788009458.024:713): avc: denied { write } for pid=8418 comm="syz.0.627" name="core" dev="configfs" ino=1518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.366433][ T43] audit: type=1400 audit(1788009458.034:714): avc: denied { write } for pid=8418 comm="syz.0.627" name="rd_mcp_0" dev="configfs" ino=33921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.443724][ T43] audit: type=1400 audit(1788009458.104:715): avc: denied { load_policy } for pid=8422 comm="syz.4.629" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 99.445934][ T8423] SELinux: policydb version -267186538 does not match my version range 15-35 [ 99.446102][ T8423] SELinux: failed to load policy [ 99.704157][ T43] audit: type=1400 audit(1788009458.364:716): avc: denied { write } for pid=8437 comm="syz.2.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.754687][ T8438] fuse: Bad value for 'fd' [ 99.808019][ T8438] fuse: Bad value for 'fd' [ 101.335623][ T5090] Bluetooth: hci2: command 0x0c1a tx timeout [ 101.337882][ T8411] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 102.214902][ T8411] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 102.215081][ T8411] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 102.215117][ T8411] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 102.222313][ T8411] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 102.253234][ T8458] openvswitch: netlink: Geneve option length err (len 856, max 255). [ 102.287247][ T8464] netlink: 'syz.2.636': attribute type 12 has an invalid length. [ 102.323148][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 102.323361][ T43] audit: type=1400 audit(1788009460.984:723): avc: denied { ioctl } for pid=8467 comm="syz.4.639" path="/dev/usbmon7" dev="devtmpfs" ino=757 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 102.347416][ T8466] batadv_slave_0: Caught tx_queue_len zero misconfig [ 102.401104][ T8475] FAULT_INJECTION: forcing a failure. [ 102.401104][ T8475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.401199][ T8475] CPU: 3 UID: 0 PID: 8475 Comm: syz.2.640 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.401239][ T8475] Tainted: [L]=SOFTLOCKUP [ 102.401248][ T8475] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.401261][ T8475] Call Trace: [ 102.401268][ T8475] [ 102.401275][ T8475] dump_stack_lvl+0x100/0x190 [ 102.401303][ T8475] should_fail_ex.cold+0x5/0xa [ 102.401321][ T8475] _copy_to_user+0x32/0xd0 [ 102.401339][ T8475] vivid_radio_rx_read+0x7c1/0xb90 [ 102.401356][ T8475] ? __pfx_vivid_radio_rx_read+0x10/0x10 [ 102.401370][ T8475] ? get_pid_task+0x106/0x250 [ 102.401385][ T8475] ? avc_policy_seqno+0x9/0x20 [ 102.401401][ T8475] vivid_radio_read+0x86/0xc0 [ 102.401419][ T8475] v4l2_read+0x229/0x2c0 [ 102.401491][ T8475] ? __pfx_v4l2_read+0x10/0x10 [ 102.401506][ T8475] vfs_read+0x1e4/0xb40 [ 102.401526][ T8475] ? lock_acquire+0x1d1/0x380 [ 102.401537][ T8475] ? __fget_files+0x34/0x3d0 [ 102.401551][ T8475] ? __pfx_vfs_read+0x10/0x10 [ 102.401567][ T8475] ? find_held_lock+0x2b/0x80 [ 102.401584][ T8475] ? __fget_files+0x215/0x3d0 [ 102.401598][ T8475] ? __fget_files+0x215/0x3d0 [ 102.401613][ T8475] ? __fget_files+0x21f/0x3d0 [ 102.401630][ T8475] ksys_read+0x12a/0x250 [ 102.401648][ T8475] ? __pfx_ksys_read+0x10/0x10 [ 102.401669][ T8475] do_syscall_64+0x123/0x790 [ 102.401684][ T8475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.401697][ T8475] RIP: 0033:0x7f8fefb9e159 [ 102.401708][ T8475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.401719][ T8475] RSP: 002b:00007f8ff0a31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.401731][ T8475] RAX: ffffffffffffffda RBX: 00007f8fefe25fa0 RCX: 00007f8fefb9e159 [ 102.401739][ T8475] RDX: 0000000000002020 RSI: 0000200000003c80 RDI: 0000000000000003 [ 102.401746][ T8475] RBP: 00007f8ff0a31090 R08: 0000000000000000 R09: 0000000000000000 [ 102.401753][ T8475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.401760][ T8475] R13: 00007f8fefe26038 R14: 00007f8fefe25fa0 R15: 00007ffded3675c8 [ 102.401775][ T8475] [ 102.459894][ T8477] __nla_validate_parse: 1 callbacks suppressed [ 102.459906][ T8477] netlink: 16 bytes leftover after parsing attributes in process `syz.2.641'. [ 102.507306][ T43] audit: type=1400 audit(1788009461.174:724): avc: denied { wake_alarm } for pid=8478 comm="syz.4.642" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 102.508150][ T43] audit: type=1400 audit(1788009461.174:725): avc: denied { setopt } for pid=8478 comm="syz.4.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.585251][ T43] audit: type=1400 audit(1788009461.244:726): avc: denied { listen } for pid=8481 comm="syz.2.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 102.726084][ T43] audit: type=1400 audit(1788009461.394:727): avc: denied { connect } for pid=8485 comm="syz.5.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 102.746605][ T57] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 102.895560][ T57] usb 9-1: Using ep0 maxpacket: 8 [ 102.898900][ T57] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 102.904506][ T57] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 102.909882][ T57] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 102.914138][ T57] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 102.914163][ T57] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.914201][ T57] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.985461][ T35] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 103.135985][ T35] usb 10-1: device descriptor read/64, error -71 [ 103.138562][ T57] usb 9-1: GET_CAPABILITIES returned 0 [ 103.140592][ T57] usbtmc 9-1:16.0: can't read capabilities [ 103.374648][ T8506] netlink: 'syz.0.650': attribute type 4 has an invalid length. [ 103.377600][ T35] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 103.403917][ T8508] FAULT_INJECTION: forcing a failure. [ 103.403917][ T8508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.403995][ T8508] CPU: 0 UID: 0 PID: 8508 Comm: syz.0.651 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.404024][ T8508] Tainted: [L]=SOFTLOCKUP [ 103.404030][ T8508] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.404037][ T8508] Call Trace: [ 103.404041][ T8508] [ 103.404046][ T8508] dump_stack_lvl+0x100/0x190 [ 103.404076][ T8508] should_fail_ex.cold+0x5/0xa [ 103.404092][ T8508] _copy_to_user+0x32/0xd0 [ 103.404112][ T8508] vivid_radio_rx_read+0x7c1/0xb90 [ 103.404132][ T8508] ? __pfx_vivid_radio_rx_read+0x10/0x10 [ 103.404158][ T8508] ? get_pid_task+0x106/0x250 [ 103.404175][ T8508] ? avc_policy_seqno+0x9/0x20 [ 103.404190][ T8508] vivid_radio_read+0x86/0xc0 [ 103.404207][ T8508] v4l2_read+0x229/0x2c0 [ 103.404221][ T8508] ? __pfx_v4l2_read+0x10/0x10 [ 103.404235][ T8508] vfs_read+0x1e4/0xb40 [ 103.404252][ T8508] ? lock_acquire+0x1d1/0x380 [ 103.404263][ T8508] ? __fget_files+0x34/0x3d0 [ 103.404276][ T8508] ? __pfx_vfs_read+0x10/0x10 [ 103.404292][ T8508] ? find_held_lock+0x2b/0x80 [ 103.404306][ T8508] ? __fget_files+0x215/0x3d0 [ 103.404318][ T8508] ? __fget_files+0x215/0x3d0 [ 103.404332][ T8508] ? __fget_files+0x21f/0x3d0 [ 103.404348][ T8508] ksys_read+0x12a/0x250 [ 103.404365][ T8508] ? __pfx_ksys_read+0x10/0x10 [ 103.404385][ T8508] do_syscall_64+0x123/0x790 [ 103.404403][ T8508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.404415][ T8508] RIP: 0033:0x7fcec5f9e159 [ 103.404425][ T8508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.404455][ T8508] RSP: 002b:00007fcec6f2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.404468][ T8508] RAX: ffffffffffffffda RBX: 00007fcec6225fa0 RCX: 00007fcec5f9e159 [ 103.404475][ T8508] RDX: 0000000000002020 RSI: 0000200000003c80 RDI: 0000000000000003 [ 103.404482][ T8508] RBP: 00007fcec6f2c090 R08: 0000000000000000 R09: 0000000000000000 [ 103.404488][ T8508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.404495][ T8508] R13: 00007fcec6226038 R14: 00007fcec6225fa0 R15: 00007ffebfd86e18 [ 103.404509][ T8508] [ 103.415415][ T5090] Bluetooth: hci4: command 0x0c1a tx timeout [ 103.454607][ T43] audit: type=1400 audit(1788009462.114:728): avc: denied { ioctl } for pid=8509 comm="syz.0.652" path="socket:[32559]" dev="sockfs" ino=32559 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 103.480329][ T43] audit: type=1400 audit(1788009462.144:729): avc: denied { mounton } for pid=8509 comm="syz.0.652" path="/135/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 103.515428][ T35] usb 10-1: device descriptor read/64, error -71 [ 103.516751][ T8516] tmpfs: Unknown parameter '' [ 103.516913][ T8479] tmpfs: Unknown parameter '' [ 103.626098][ T35] usb usb10-port1: attempt power cycle [ 103.648366][ T8523] netlink: 'syz.2.655': attribute type 1 has an invalid length. [ 103.649050][ T8523] netlink: 224 bytes leftover after parsing attributes in process `syz.2.655'. [ 103.967552][ T35] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 103.970599][ T8528] bond0: invalid ARP target specified [ 103.991251][ T35] usb 10-1: device descriptor read/8, error -71 [ 104.017931][ T43] audit: type=1400 audit(1788009462.684:730): avc: denied { nlmsg_read } for pid=8529 comm="syz.2.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 104.216820][ T5090] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.225551][ T35] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 104.246678][ T35] usb 10-1: device descriptor read/8, error -71 [ 104.350892][ T8543] FAULT_INJECTION: forcing a failure. [ 104.350892][ T8543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.350953][ T8543] CPU: 0 UID: 0 PID: 8543 Comm: syz.2.660 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.350980][ T8543] Tainted: [L]=SOFTLOCKUP [ 104.350986][ T8543] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.350993][ T8543] Call Trace: [ 104.350997][ T8543] [ 104.351002][ T8543] dump_stack_lvl+0x100/0x190 [ 104.351031][ T8543] should_fail_ex.cold+0x5/0xa [ 104.351047][ T8543] _copy_to_user+0x32/0xd0 [ 104.351070][ T8543] vivid_radio_rx_read+0x7c1/0xb90 [ 104.351102][ T8543] ? __pfx_vivid_radio_rx_read+0x10/0x10 [ 104.351115][ T8543] ? get_pid_task+0x106/0x250 [ 104.351129][ T8543] ? avc_policy_seqno+0x9/0x20 [ 104.351144][ T8543] vivid_radio_read+0x86/0xc0 [ 104.351162][ T8543] v4l2_read+0x229/0x2c0 [ 104.351176][ T8543] ? __pfx_v4l2_read+0x10/0x10 [ 104.351196][ T8543] vfs_read+0x1e4/0xb40 [ 104.351214][ T8543] ? lock_acquire+0x1d1/0x380 [ 104.351225][ T8543] ? __fget_files+0x34/0x3d0 [ 104.351239][ T8543] ? __pfx_vfs_read+0x10/0x10 [ 104.351255][ T8543] ? find_held_lock+0x2b/0x80 [ 104.351269][ T8543] ? __fget_files+0x215/0x3d0 [ 104.351281][ T8543] ? __fget_files+0x215/0x3d0 [ 104.351296][ T8543] ? __fget_files+0x21f/0x3d0 [ 104.351311][ T8543] ksys_read+0x12a/0x250 [ 104.351328][ T8543] ? __pfx_ksys_read+0x10/0x10 [ 104.351349][ T8543] do_syscall_64+0x123/0x790 [ 104.351366][ T8543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.351378][ T8543] RIP: 0033:0x7f8fefb9e159 [ 104.351388][ T8543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.351399][ T8543] RSP: 002b:00007f8ff0a31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 104.351410][ T8543] RAX: ffffffffffffffda RBX: 00007f8fefe25fa0 RCX: 00007f8fefb9e159 [ 104.351417][ T8543] RDX: 0000000000002020 RSI: 0000200000003c80 RDI: 0000000000000003 [ 104.351424][ T8543] RBP: 00007f8ff0a31090 R08: 0000000000000000 R09: 0000000000000000 [ 104.351431][ T8543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.351437][ T8543] R13: 00007f8fefe26038 R14: 00007f8fefe25fa0 R15: 00007ffded3675c8 [ 104.351451][ T8543] [ 104.415748][ T35] usb usb10-port1: unable to enumerate USB device [ 104.521099][ T43] audit: type=1400 audit(1788009463.184:731): avc: denied { listen } for pid=8549 comm="syz.2.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.532543][ T43] audit: type=1400 audit(1788009463.194:732): avc: denied { accept } for pid=8549 comm="syz.2.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.575895][ T8553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.663'. [ 104.598486][ T8553] SET target dimension over the limit! [ 104.656626][ T8559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.665'. [ 104.721281][ T8561] netlink: 68 bytes leftover after parsing attributes in process `syz.0.666'. [ 105.005605][ T8579] netlink: 'syz.2.669': attribute type 4 has an invalid length. [ 105.008745][ T8579] syz_tun: entered allmulticast mode [ 105.142379][ T8578] syz_tun: left allmulticast mode [ 105.293038][ T8590] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 105.528793][ T30] usb 9-1: USB disconnect, device number 3 [ 105.558140][ T8602] netlink: 16 bytes leftover after parsing attributes in process `syz.4.676'. [ 105.647552][ T8606] syzkaller1: entered allmulticast mode [ 105.864251][ T8609] netlink: 8 bytes leftover after parsing attributes in process `syz.5.678'. [ 105.984888][ T8620] netlink: 68 bytes leftover after parsing attributes in process `syz.4.682'. [ 106.187225][ T7001] IPVS: starting estimator thread 0... [ 106.246926][ T8635] tipc: Started in network mode [ 106.246977][ T8635] tipc: Node identity 061d442ddd1b, cluster identity 4711 [ 106.247284][ T8635] tipc: Enabled bearer , priority 0 [ 106.247728][ T8635] syzkaller0: entered promiscuous mode [ 106.247739][ T8635] syzkaller0: entered allmulticast mode [ 106.249823][ T8635] tipc: Resetting bearer [ 106.260946][ T8635] hpfs: Bad magic ... probably not HPFS [ 106.268009][ T8634] tipc: Resetting bearer [ 106.275985][ T8633] IPVS: using max 44 ests per chain, 105600 per kthread [ 106.280168][ T8634] tipc: Disabling bearer [ 106.295637][ T5090] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.503707][ T8648] netlink: 'syz.0.693': attribute type 11 has an invalid length. [ 106.639249][ T5090] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.642298][ T5090] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.645965][ T5090] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.648906][ T5090] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.652473][ T5090] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.729650][ T8660] netlink: 48 bytes leftover after parsing attributes in process `syz.4.696'. [ 106.729739][ T8660] netlink: 48 bytes leftover after parsing attributes in process `syz.4.696'. [ 106.871328][ T8681] netlink: 'syz.5.697': attribute type 2 has an invalid length. [ 107.041579][ T8656] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.044917][ T8656] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.048318][ T8656] bridge_slave_0: entered allmulticast mode [ 107.051909][ T8656] bridge_slave_0: entered promiscuous mode [ 107.058723][ T8656] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.062043][ T8656] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.062175][ T8656] bridge_slave_1: entered allmulticast mode [ 107.063704][ T8656] bridge_slave_1: entered promiscuous mode [ 107.088704][ T8656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.093485][ T8656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.114028][ T8656] team0: Port device team_slave_0 added [ 107.117622][ T8656] team0: Port device team_slave_1 added [ 107.132881][ T8656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.135283][ T8656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.144476][ T8656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.149232][ T8656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.151691][ T8656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.160340][ T8656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.187060][ T8656] hsr_slave_0: entered promiscuous mode [ 107.189555][ T8656] hsr_slave_1: entered promiscuous mode [ 107.192360][ T8656] debugfs: 'hsr0' already exists in 'hsr' [ 107.194423][ T8656] Cannot create hsr debugfs directory [ 107.320830][ T8656] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 107.328119][ T8656] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.330821][ T8656] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 107.335031][ T8656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.338095][ T8656] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 107.343547][ T8656] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.346567][ T8656] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 107.352807][ T8656] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.367830][ T8656] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.367902][ T8656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.368051][ T8656] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.368120][ T8656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.407234][ T8656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.425036][ T6689] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.433980][ T6689] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.444208][ T8656] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.451260][ T6689] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.451386][ T6689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.460484][ T6689] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.460551][ T6689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.486659][ T8714] binder: 8710:8714 ioctl 4b72 200000000040 returned -22 [ 107.500123][ T8709] tipc: Enabling not permitted [ 107.500179][ T8709] tipc: Enabling of bearer rejected, failed to enable media [ 107.534951][ T8718] netlink: 'syz.4.702': attribute type 8 has an invalid length. [ 107.634088][ T8726] __nla_validate_parse: 63 callbacks suppressed [ 107.634318][ T8726] netlink: 68 bytes leftover after parsing attributes in process `syz.0.703'. [ 107.733875][ T8656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.782193][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.704'. [ 107.840920][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 107.841009][ T43] audit: type=1400 audit(1788009466.504:741): avc: denied { setattr } for pid=8742 comm="syz.5.706" name="NETLINK" dev="sockfs" ino=34940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 107.843691][ T8743] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 107.894234][ T8656] veth0_vlan: entered promiscuous mode [ 107.898507][ T8656] veth1_vlan: entered promiscuous mode [ 107.912683][ T8656] veth0_macvtap: entered promiscuous mode [ 107.919839][ T8656] veth1_macvtap: entered promiscuous mode [ 107.935605][ T8656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.977939][ T8656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.999857][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.000047][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.000095][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.000122][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.062972][ T8759] syzkaller0: entered promiscuous mode [ 108.063020][ T8759] syzkaller0: entered allmulticast mode [ 108.093482][ T43] audit: type=1400 audit(1788009466.754:742): avc: denied { getopt } for pid=8757 comm="syz.4.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 108.099939][ T7001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.099955][ T7001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.134240][ T6681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.134331][ T6681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.186942][ T43] audit: type=1400 audit(1788009466.854:743): avc: denied { append } for pid=8760 comm="syz.6.695" name="uprobe_events" dev="tracefs" ino=2072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 108.229318][ T43] audit: type=1400 audit(1788009466.894:744): avc: denied { write } for pid=8762 comm="syz.6.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 108.269635][ T8765] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 108.282808][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.712'. [ 108.282877][ T8769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.712'. [ 108.288830][ T43] audit: type=1400 audit(1788009466.954:745): avc: denied { setopt } for pid=8762 comm="syz.6.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 108.299856][ T8769] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=23829 sclass=netlink_xfrm_socket pid=8769 comm=syz.0.712 [ 108.341120][ T8780] mmap: syz.0.713 (8780) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.385659][ T5737] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.503676][ T8788] loop8: detected capacity change from 0 to 7 [ 108.510318][ T8788] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 108.510397][ T8788] loop8: partition table partially beyond EOD, truncated [ 108.514110][ T8788] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 108.519849][ T8788] loop8: p2 start 121280928 is beyond EOD, truncated [ 108.558729][ T5735] udevd[5735]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 108.696279][ T5737] Bluetooth: hci1: command tx timeout [ 108.712148][ T8818] netlink: 68 bytes leftover after parsing attributes in process `syz.0.721'. [ 108.842402][ T8790] cgroup: fork rejected by pids controller in /syz5 [ 109.102564][ T43] audit: type=1400 audit(1788009467.764:746): avc: denied { bind } for pid=8838 comm="syz.4.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 109.116663][ T43] audit: type=1400 audit(1788009467.784:747): avc: denied { append } for pid=8848 comm="syz.6.724" name="exports" dev="nfsd" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 109.358998][ T8862] loop3: detected capacity change from 0 to 7 [ 109.361964][ C1] blk_print_req_error: 5 callbacks suppressed [ 109.362018][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.362079][ C1] buffer_io_error: 12 callbacks suppressed [ 109.362110][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 109.375046][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.375131][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 109.375380][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.375418][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 109.375516][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.375544][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 109.375615][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.375642][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 109.375709][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.375735][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 109.375795][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.375820][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 109.375841][ T8862] ldm_validate_partition_table(): Disk read failed. [ 109.375890][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.375916][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 109.375976][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.376002][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 109.376068][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.376093][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 109.376460][ T8862] Dev loop3: unable to read RDB block 0 [ 109.376724][ T8862] loop3: unable to read partition table [ 109.376807][ T8862] loop3: partition table beyond EOD, truncated [ 109.376824][ T8862] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 109.524287][ T5141] ldm_validate_partition_table(): Disk read failed. [ 109.524691][ T5141] Dev loop3: unable to read RDB block 0 [ 109.526507][ T5141] loop3: unable to read partition table [ 109.526658][ T5141] loop3: partition table beyond EOD, truncated [ 109.542858][ T8868] xt_hashlimit: size too large, truncated to 1048576 [ 109.655213][ T8875] tmpfs: Bad value for 'mpol' [ 109.658030][ T43] audit: type=1400 audit(1788009468.324:748): avc: denied { getopt } for pid=8872 comm="syz.4.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 109.662976][ T43] audit: type=1400 audit(1788009468.324:749): avc: denied { append } for pid=8872 comm="syz.4.731" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 109.685923][ T8880] xt_hashlimit: size too large, truncated to 1048576 [ 109.770637][ T8886] bond1 (unregistering): Released all slaves [ 109.845245][ T8886] overlayfs: failed lookup in lower (newroot/103, name='bus', err=-40): overlapping layers [ 109.852191][ T43] audit: type=1400 audit(1788009468.514:750): avc: denied { write } for pid=8891 comm="syz.0.736" name="configs" dev="configfs" ino=18862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 109.938479][ T8899] gfs2: not a GFS2 filesystem [ 109.940777][ T8899] tipc: Started in network mode [ 109.941007][ T8899] tipc: Node identity 3ecc31467ac3, cluster identity 4711 [ 109.941080][ T8899] tipc: Enabled bearer , priority 0 [ 109.941364][ T8899] syzkaller0: entered promiscuous mode [ 109.941374][ T8899] syzkaller0: entered allmulticast mode [ 109.944204][ T8899] tipc: Resetting bearer [ 109.954759][ T8898] tipc: Resetting bearer [ 109.968931][ T8898] tipc: Disabling bearer [ 110.030455][ T8902] netlink: 68 bytes leftover after parsing attributes in process `syz.4.738'. [ 110.077051][ T8904] 9pnet_virtio: no channels available for device syz [ 110.081549][ T8904] 9pnet_virtio: no channels available for device @ [ 110.145312][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.5.743'. [ 110.147962][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.743'. [ 110.217975][ T8924] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 110.220796][ T8924] comedi comedi3: comedi_config --init_data is deprecated [ 110.256240][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 110.340403][ T8931] FAULT_INJECTION: forcing a failure. [ 110.340403][ T8931] name failslab, interval 1, probability 0, space 0, times 0 [ 110.345781][ T8931] CPU: 3 UID: 0 PID: 8931 Comm: syz.6.747 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.345817][ T8931] Tainted: [L]=SOFTLOCKUP [ 110.345824][ T8931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.345832][ T8931] Call Trace: [ 110.345836][ T8931] [ 110.345842][ T8931] dump_stack_lvl+0x100/0x190 [ 110.345879][ T8931] should_fail_ex.cold+0x5/0xa [ 110.345899][ T8931] should_failslab+0xc2/0x120 [ 110.345919][ T8931] kmem_cache_alloc_noprof+0x92/0x6a0 [ 110.345934][ T8931] ? alloc_empty_file+0x5b/0x1c0 [ 110.345953][ T8931] alloc_empty_file+0x5b/0x1c0 [ 110.345970][ T8931] path_openat+0xdb/0x2440 [ 110.345989][ T8931] ? __pfx_path_openat+0x10/0x10 [ 110.346009][ T8931] do_file_open+0x20e/0x430 [ 110.346025][ T8931] ? __pfx_do_file_open+0x10/0x10 [ 110.346058][ T8931] ? _raw_spin_unlock+0x28/0x50 [ 110.346083][ T8931] ? alloc_fd+0x471/0x7a0 [ 110.346103][ T8931] do_sys_openat2+0x10f/0x1e0 [ 110.346121][ T8931] ? __pfx_do_sys_openat2+0x10/0x10 [ 110.346142][ T8931] __x64_sys_openat+0x12d/0x210 [ 110.346159][ T8931] ? __pfx___x64_sys_openat+0x10/0x10 [ 110.346183][ T8931] do_syscall_64+0x123/0x790 [ 110.346199][ T8931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.346213][ T8931] RIP: 0033:0x7fce0539e159 [ 110.346225][ T8931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.346238][ T8931] RSP: 002b:00007fce06197028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 110.346252][ T8931] RAX: ffffffffffffffda RBX: 00007fce05625fa0 RCX: 00007fce0539e159 [ 110.346260][ T8931] RDX: 0000000000143142 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 110.346268][ T8931] RBP: 00007fce05435024 R08: 0000000000000000 R09: 0000000000000000 [ 110.346276][ T8931] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000000 [ 110.346283][ T8931] R13: 00007fce05626038 R14: 00007fce05625fa0 R15: 00007ffd9ff52508 [ 110.346300][ T8931] [ 110.354267][ T8933] netlink: 20 bytes leftover after parsing attributes in process `syz.0.748'. [ 110.354287][ T8933] netlink: 20 bytes leftover after parsing attributes in process `syz.0.748'. [ 110.416722][ T10] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 110.419088][ T10] usb 5-1: Dual-Role OTG device on HNP port [ 110.419422][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.427859][ T10] gspca_main: spca501-2.14.0 probing 0000:0000 [ 110.428825][ T10] gspca_spca501: reg write: error -32 [ 110.428834][ T10] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 110.428867][ T10] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 110.557574][ T8941] netdevsim netdevsim6 : renamed from netdevsim0 (while UP) [ 110.616130][ T8946] use of bytesused == 0 is deprecated and will be removed in the future, [ 110.616184][ T8946] use the actual size instead. [ 110.619219][ T8946] raw_sendmsg: syz.6.751 forgot to set AF_INET. Fix it! [ 110.786354][ T5737] Bluetooth: hci1: command tx timeout [ 110.788372][ T5832] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.788460][ T5832] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.788493][ T5832] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.788525][ T5832] netdevsim netdevsim6 : set [0, 0] type 1 family 0 port 8472 - 0 [ 111.102222][ T8962] Bluetooth: MGMT ver 1.23 [ 111.103788][ T8962] netlink: 'syz.4.756': attribute type 30 has an invalid length. [ 111.119353][ T8962] bond1: option arp_missed_max: invalid value (0) [ 111.119395][ T8962] bond1: option arp_missed_max: allowed values 1 - 255 [ 111.125234][ T8962] bond1 (unregistering): Released all slaves [ 111.195129][ T8969] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 111.408266][ T8982] could not allocate digest TFM handle sha3-512-generic [ 111.485435][ T30] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 111.558256][ T8986] batman_adv: batadv0: Adding interface: veth0 [ 111.558294][ T8986] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.558312][ T8986] batman_adv: batadv0: Interface activated: veth0 [ 111.559667][ T8986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.561767][ T8986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.569156][ T8986] batman_adv: batadv0: Interface deactivated: veth0 [ 111.569168][ T8986] batman_adv: batadv0: Removing interface: veth0 [ 111.641059][ T30] usb 9-1: New USB device found, idVendor=19d2, idProduct=1259, bcdDevice=70.4b [ 111.641924][ T30] usb 9-1: config 2 has an invalid interface number: 66 but max is 3 [ 111.641938][ T30] usb 9-1: config 2 has an invalid interface number: 249 but max is 3 [ 111.641949][ T30] usb 9-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 111.641958][ T30] usb 9-1: config 2 has an invalid interface association descriptor of length 6, skipping [ 111.641968][ T30] usb 9-1: config 2 has an invalid interface number: 190 but max is 3 [ 111.641978][ T30] usb 9-1: config 2 has an invalid interface number: 73 but max is 3 [ 111.641989][ T30] usb 9-1: config 2 has an invalid interface number: 123 but max is 3 [ 111.642000][ T30] usb 9-1: config 2 has 5 interfaces, different from the descriptor's value: 4 [ 111.642016][ T30] usb 9-1: config 2 has no interface number 0 [ 111.642024][ T30] usb 9-1: config 2 has no interface number 1 [ 111.642032][ T30] usb 9-1: config 2 has no interface number 2 [ 111.642041][ T30] usb 9-1: config 2 has no interface number 3 [ 111.642049][ T30] usb 9-1: config 2 has no interface number 4 [ 111.642086][ T30] usb 9-1: config 2 interface 66 altsetting 0 bulk endpoint 0xB has invalid maxpacket 8 [ 111.642105][ T30] usb 9-1: config 2 interface 249 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 111.642117][ T30] usb 9-1: config 2 interface 249 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0 [ 111.642129][ T30] usb 9-1: config 2 interface 249 altsetting 8 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 111.642142][ T30] usb 9-1: config 2 interface 249 altsetting 8 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 111.642163][ T30] usb 9-1: config 2 interface 190 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 111.642174][ T30] usb 9-1: config 2 interface 190 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 15 [ 111.642188][ T30] usb 9-1: too many endpoints for config 2 interface 73 altsetting 1: 165, using maximum allowed: 30 [ 111.642205][ T30] usb 9-1: config 2 interface 73 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 111.642217][ T30] usb 9-1: config 2 interface 73 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 111.642228][ T30] usb 9-1: config 2 interface 73 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 111.642240][ T30] usb 9-1: config 2 interface 73 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 111.642251][ T30] usb 9-1: config 2 interface 73 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 111.642262][ T30] usb 9-1: config 2 interface 73 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 111.642273][ T30] usb 9-1: config 2 interface 73 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 111.642284][ T30] usb 9-1: config 2 interface 73 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 111.642296][ T30] usb 9-1: config 2 interface 73 altsetting 1 bulk endpoint 0x4 has invalid maxpacket 16 [ 111.642308][ T30] usb 9-1: config 2 interface 73 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 111.642319][ T30] usb 9-1: config 2 interface 73 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 111.642331][ T30] usb 9-1: config 2 interface 73 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 111.642343][ T30] usb 9-1: config 2 interface 73 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 8 [ 111.642354][ T30] usb 9-1: config 2 interface 73 altsetting 1 has 13 endpoint descriptors, different from the interface descriptor's value: 165 [ 111.642410][ T30] usb 9-1: config 2 interface 123 altsetting 15 has a duplicate endpoint with address 0xE, skipping [ 111.642425][ T30] usb 9-1: config 2 interface 123 altsetting 15 has a duplicate endpoint with address 0xA, skipping [ 111.642436][ T30] usb 9-1: config 2 interface 123 altsetting 15 has a duplicate endpoint with address 0x7, skipping [ 111.642452][ T30] usb 9-1: config 2 interface 123 altsetting 15 has a duplicate endpoint with address 0x5, skipping [ 111.642468][ T30] usb 9-1: config 2 interface 123 altsetting 15 has a duplicate endpoint with address 0xB, skipping [ 111.642484][ T30] usb 9-1: config 2 interface 123 altsetting 15 has a duplicate endpoint with address 0xD, skipping [ 111.642501][ T30] usb 9-1: config 2 interface 123 altsetting 15 has a duplicate endpoint with address 0x6, skipping [ 111.642518][ T30] usb 9-1: config 2 interface 123 altsetting 15 has a duplicate endpoint with address 0xF, skipping [ 111.642539][ T30] usb 9-1: config 2 interface 249 has no altsetting 0 [ 111.642553][ T30] usb 9-1: config 2 interface 190 has no altsetting 0 [ 111.642567][ T30] usb 9-1: config 2 interface 73 has no altsetting 0 [ 111.642581][ T30] usb 9-1: config 2 interface 123 has no altsetting 0 [ 111.647510][ T30] usb 9-1: Dual-Role OTG device on HNP port [ 111.647707][ T30] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.647718][ T30] usb 9-1: Product: Ъ [ 111.647726][ T30] usb 9-1: Manufacturer: ޡ㡫苞댖蝵晚藊杜ዩ풀ᒝᶳ涏뙫䩧陋㐂꽁뱌怮뤝⣄系跀፩礙錔㘜決퇤 [ 111.647739][ T30] usb 9-1: SerialNumber: Й [ 111.652453][ T8962] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 111.664827][ T8991] tmpfs: Bad value for 'mpol' [ 111.668287][ T8991] FAULT_INJECTION: forcing a failure. [ 111.668287][ T8991] name failslab, interval 1, probability 0, space 0, times 0 [ 111.668306][ T8991] CPU: 1 UID: 0 PID: 8991 Comm: syz.6.765 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.668322][ T8991] Tainted: [L]=SOFTLOCKUP [ 111.668326][ T8991] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.668334][ T8991] Call Trace: [ 111.668338][ T8991] [ 111.668355][ T8991] dump_stack_lvl+0x100/0x190 [ 111.668376][ T8991] should_fail_ex.cold+0x5/0xa [ 111.668392][ T8991] should_failslab+0xc2/0x120 [ 111.668425][ T8991] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 111.668438][ T8991] ? __d_alloc+0x35/0xa50 [ 111.668461][ T8991] __d_alloc+0x35/0xa50 [ 111.668477][ T8991] d_alloc_pseudo+0x1c/0xc0 [ 111.668487][ T8991] alloc_file_pseudo+0x118/0x290 [ 111.668504][ T8991] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 111.668520][ T8991] ? alloc_fd+0x471/0x7a0 [ 111.668536][ T8991] sock_alloc_file+0x50/0x210 [ 111.668557][ T8991] __sys_socket+0x1c0/0x260 [ 111.668573][ T8991] ? __pfx___sys_socket+0x10/0x10 [ 111.668593][ T8991] __x64_sys_socket+0x72/0xb0 [ 111.668608][ T8991] ? lockdep_hardirqs_on+0x7d/0x110 [ 111.668622][ T8991] do_syscall_64+0x123/0x790 [ 111.668636][ T8991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.668649][ T8991] RIP: 0033:0x7fce0539e159 [ 111.668660][ T8991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.668670][ T8991] RSP: 002b:00007fce06197028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 111.668682][ T8991] RAX: ffffffffffffffda RBX: 00007fce05625fa0 RCX: 00007fce0539e159 [ 111.668690][ T8991] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 111.668696][ T8991] RBP: 00007fce05435024 R08: 0000000000000000 R09: 0000000000000000 [ 111.668703][ T8991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.668710][ T8991] R13: 00007fce05626038 R14: 00007fce05625fa0 R15: 00007ffd9ff52508 [ 111.668725][ T8991] [ 111.670202][ T8991] netlink: 'syz.6.765': attribute type 11 has an invalid length. [ 111.670212][ T8991] netlink: 'syz.6.765': attribute type 4 has an invalid length. [ 111.738955][ T8994] kvm: kvm [8992]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000075) [ 111.849889][ T9001] ubi31: attaching mtd0 [ 111.872509][ T9001] ubi31: scanning is finished [ 111.872590][ T9001] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 111.914510][ T57] usb 5-1: USB disconnect, device number 13 [ 111.921433][ T9009] netlink: 'syz.6.769': attribute type 1 has an invalid length. [ 111.949540][ T8962] kvm: pic: non byte write [ 111.994806][ T30] option 9-1:2.66: GSM modem (1-port) converter detected [ 112.003035][ T9015] mac80211_hwsim hwsim20 wlan1: entered promiscuous mode [ 112.057244][ T30] usb-storage 9-1:2.190: USB Mass Storage device detected [ 112.106419][ T9001] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 112.165892][ T30] usb 9-1: USB disconnect, device number 4 [ 112.167982][ T30] option 9-1:2.66: device disconnected [ 112.466596][ T57] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 112.625558][ T57] usb 5-1: Using ep0 maxpacket: 8 [ 112.630640][ T57] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 112.632507][ T57] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.632530][ T57] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.632551][ T57] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.632571][ T57] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.632601][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.714085][ T9043] 9pnet_virtio: no channels available for device syz [ 112.795782][ T73] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 112.842869][ T57] usb 5-1: GET_CAPABILITIES returned 0 [ 112.842927][ T57] usbtmc 5-1:16.0: can't read capabilities [ 112.855637][ T5737] Bluetooth: hci1: command tx timeout [ 112.945450][ T73] usb 11-1: Using ep0 maxpacket: 8 [ 112.946980][ T73] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 112.947872][ T73] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 112.947896][ T73] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.947908][ T73] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.947920][ T73] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.947940][ T73] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.947960][ T73] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.020634][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 113.020694][ T9062] 9pnet_virtio: no channels available for device syz [ 113.020934][ T43] audit: type=1400 audit(1788009471.684:761): avc: denied { mounton } for pid=9061 comm="syz.5.783" path="/70/mnt_trace/trace_pipe" dev="tracefs" ino=6214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 113.044024][ T43] audit: type=1400 audit(1788009471.704:762): avc: denied { app ** replaying previous printk message ** [ 113.044024][ T43] audit: type=1400 audit(1788009471.704:762): avc: denied { append } for pid=9016 comm="syz.0.771" name="frontend0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 113.046151][ C3] ================================================================== [ 113.046164][ C3] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0 [ 113.046194][ C3] Read of size 1 at addr ffff888055ffb8e8 by task syz-executor/9063 [ 113.046203][ C3] [ 113.046211][ C3] CPU: 3 UID: 0 PID: 9063 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 113.046226][ C3] Tainted: [L]=SOFTLOCKUP [ 113.046231][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.046237][ C3] Call Trace: [ 113.046242][ C3] [ 113.046246][ C3] dump_stack_lvl+0x100/0x190 [ 113.046264][ C3] print_report+0x13d/0x4b0 [ 113.046280][ C3] ? __virt_addr_valid+0x239/0x430 [ 113.046291][ C3] ? find_endpoint+0x2a3/0x2c0 [ 113.046303][ C3] kasan_report+0xdf/0x1c0 [ 113.046320][ C3] ? find_endpoint+0x2a3/0x2c0 [ 113.046333][ C3] find_endpoint+0x2a3/0x2c0 [ 113.046347][ C3] dummy_timer+0x500/0x3700 [ 113.046365][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 113.046386][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 113.046399][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 113.046413][ C3] ? mark_held_locks+0x40/0x70 [ 113.046424][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 113.046447][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 113.046461][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 113.046478][ C3] hrtimer_run_softirq+0x1ca/0x360 [ 113.046494][ C3] handle_softirqs+0x1e6/0x9d0 [ 113.046507][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 113.046517][ C3] ? _raw_spin_unlock+0x28/0x50 [ 113.046533][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 113.046548][ C3] __irq_exit_rcu+0x194/0x210 [ 113.046558][ C3] irq_exit_rcu+0x9/0x30 [ 113.046569][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 113.046580][ C3] [ 113.046584][ C3] [ 113.046588][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 113.046601][ C3] RIP: 0010:finish_task_switch.isra.0+0x2ca/0x10d0 [ 113.046615][ C3] Code: b6 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 8d 7f 48 e8 f3 ea fa 09 e8 7e 06 3d 00 fb 48 8d bb 10 17 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 113.046626][ C3] RSP: 0018:ffffc900037ef3d0 EFLAGS: 00000202 [ 113.046635][ C3] RAX: 0000000000000149 RBX: ffff888034804b00 RCX: 0000000000000080 [ 113.046643][ C3] RDX: 0000000000000001 RSI: ffffffff8e3eaa9f RDI: ffff888034806210 [ 113.046650][ C3] RBP: ffffc900037ef428 R08: 0000000000000001 R09: 0000000000000000 [ 113.046656][ C3] R10: 0000000000000001 R11: ffffffff81d71c79 R12: ffff88805a9d8000 [ 113.046663][ C3] R13: 0000000000000000 R14: ffffffff91452704 R15: ffff88806a73bf00 [ 113.046671][ C3] ? finish_task_switch.isra.0+0x149/0x10d0 [ 113.046687][ C3] __schedule+0x1261/0x6920 [ 113.046697][ C3] ? __kernel_text_address+0xd/0x30 [ 113.046716][ C3] ? __pfx___schedule+0x10/0x10 [ 113.046726][ C3] ? mark_held_locks+0x40/0x70 [ 113.046737][ C3] preempt_schedule_irq+0x4e/0x90 [ 113.046747][ C3] irqentry_exit+0x205/0xa10 [ 113.046759][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 113.046770][ C3] RIP: 0010:lock_acquire+0x5e/0x380 [ 113.046781][ C3] Code: 05 4f b1 a4 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 5e e6 5d 0f 0f 82 c9 02 00 00 8b 35 fe 17 5e 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 ed b0 a4 12 0f 85 09 03 00 00 48 83 c4 [ 113.046791][ C3] RSP: 0018:ffffc900037ef6a0 EFLAGS: 00000206 [ 113.046799][ C3] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 113.046806][ C3] RDX: 0000000000000000 RSI: ffffffff8e3c46d0 RDI: ffffffff8c620c80 [ 113.046813][ C3] RBP: ffffffff8edec060 R08: 00000000a2445889 R09: 0000000000000007 [ 113.046819][ C3] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 113.046826][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 113.046837][ C3] rcu_lock_acquire.constprop.0+0x23/0x30 [ 113.046854][ C3] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 113.046870][ C3] get_mem_cgroup_from_objcg+0xd7/0x1f0 [ 113.046881][ C3] __memcg_slab_post_alloc_hook+0x26a/0x1270 [ 113.046899][ C3] ? kasan_save_track+0x14/0x30 [ 113.046910][ C3] kmem_cache_alloc_lru_noprof+0x4f6/0x6a0 [ 113.046922][ C3] ? proc_alloc_inode+0x25/0x200 [ 113.046939][ C3] ? __pfx_proc_alloc_inode+0x10/0x10 [ 113.046953][ C3] proc_alloc_inode+0x25/0x200 [ 113.046966][ C3] alloc_inode+0x68/0x250 [ 113.046981][ C3] new_inode+0x22/0x1c0 [ 113.046996][ C3] proc_pid_make_inode+0x22/0x160 [ 113.047010][ C3] proc_pid_make_base_inode.constprop.0+0x25/0x180 [ 113.047026][ C3] proc_pid_instantiate+0x51/0x1e0 [ 113.047040][ C3] proc_pid_lookup+0x1f3/0x4e0 [ 113.047054][ C3] proc_root_lookup+0x23/0x70 [ 113.047069][ C3] __lookup_slow+0x155/0x320 [ 113.047084][ C3] lookup_slow+0x50/0x70 [ 113.047099][ C3] link_path_walk+0x1712/0x1cc0 [ 113.047111][ C3] path_openat+0x1ac/0x2440 [ 113.047123][ C3] ? __pfx_path_openat+0x10/0x10 [ 113.047137][ C3] do_file_open+0x20e/0x430 [ 113.047149][ C3] ? __pfx_do_file_open+0x10/0x10 [ 113.047163][ C3] ? __pfx_kfree_link+0x10/0x10 [ 113.047174][ C3] ? _raw_spin_unlock+0x28/0x50 [ 113.047190][ C3] ? alloc_fd+0x471/0x7a0 [ 113.047203][ C3] do_sys_openat2+0x10f/0x1e0 [ 113.047216][ C3] ? __pfx_do_sys_openat2+0x10/0x10 [ 113.047231][ C3] __x64_sys_openat+0x12d/0x210 [ 113.047245][ C3] ? __pfx___x64_sys_openat+0x10/0x10 [ 113.047260][ C3] do_syscall_64+0x123/0x790 [ 113.047272][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.047283][ C3] RIP: 0033:0x7f98ee95e98e [ 113.047292][ C3] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 113.047302][ C3] RSP: 002b:00007ffc95ecb0b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 113.047312][ C3] RAX: ffffffffffffffda RBX: 000055559429e500 RCX: 00007f98ee95e98e [ 113.047319][ C3] RDX: 0000000000080001 RSI: 00007f98eea35fb9 RDI: ffffffffffffff9c [ 113.047325][ C3] RBP: 00007f98eea35fb9 R08: 0000000000000000 R09: 0000000000000000 [ 113.047332][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 113.047339][ C3] R13: 00007ffc95ecb190 R14: 000000000001b90d R15: 00007ffc95ecb700 [ 113.047349][ C3] [ 113.047353][ C3] [ 113.047355][ C3] Allocated by task 8892: [ 113.047361][ C3] kasan_save_stack+0x30/0x50 [ 113.047371][ C3] kasan_save_track+0x14/0x30 [ 113.047381][ C3] __kasan_kmalloc+0xaa/0xb0 [ 113.047390][ C3] __kmalloc_noprof+0x32f/0x840 [ 113.047399][ C3] usb_copy_descriptors+0xcd/0x320 [ 113.047410][ C3] f_midi2_bind+0x1dad/0x2770 [ 113.047419][ C3] usb_add_function+0x219/0x890 [ 113.047435][ C3] configfs_composite_bind+0xd83/0x1960 [ 113.047447][ C3] gadget_bind_driver+0x28c/0xbf0 [ 113.047461][ C3] really_probe+0x241/0xa60 [ 113.047476][ C3] __driver_probe_device+0x210/0x460 [ 113.047492][ C3] driver_probe_device+0x4a/0x140 [ 113.047506][ C3] __driver_attach+0x21f/0x5b0 [ 113.047521][ C3] bus_for_each_dev+0x13e/0x1d0 [ 113.047533][ C3] bus_add_driver+0x305/0x5b0 [ 113.047546][ C3] driver_register+0x1e2/0x360 [ 113.047555][ C3] usb_gadget_register_driver_owner+0x132/0x210 [ 113.047570][ C3] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 113.047580][ C3] configfs_write_iter+0x302/0x4e0 [ 113.047594][ C3] vfs_write+0x6af/0x1050 [ 113.047608][ C3] ksys_write+0x12a/0x250 [ 113.047616][ C3] do_syscall_64+0x123/0x790 [ 113.047626][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.047635][ C3] [ 113.047638][ C3] Freed by task 9004: [ 113.047642][ C3] kasan_save_stack+0x30/0x50 [ 113.047652][ C3] kasan_save_track+0x14/0x30 [ 113.047661][ C3] kasan_save_free_info+0x3b/0x70 [ 113.047675][ C3] __kasan_slab_free+0x5f/0x80 [ 113.047685][ C3] kfree+0x22b/0x6d0 [ 113.047697][ C3] usb_free_all_descriptors+0x81/0x1a0 [ 113.047709][ C3] purge_configs_funcs+0x285/0x510 [ 113.047719][ C3] configfs_composite_unbind+0xae/0x210 [ 113.047729][ C3] gadget_unbind_driver+0x20c/0x4f0 [ 113.047744][ C3] device_remove+0xcb/0x180 [ 113.047757][ C3] device_release_driver_internal+0x44e/0x620 [ 113.047767][ C3] driver_detach+0xd8/0x1b0 [ 113.047776][ C3] bus_remove_driver+0x13b/0x2e0 [ 113.047789][ C3] driver_unregister+0x76/0xb0 [ 113.047798][ C3] usb_gadget_unregister_driver+0x49/0x70 [ 113.047812][ C3] gadget_dev_desc_UDC_store+0x170/0x2e0 [ 113.047823][ C3] configfs_write_iter+0x302/0x4e0 [ 113.047836][ C3] vfs_write+0x6af/0x1050 [ 113.047849][ C3] ksys_write+0x12a/0x250 [ 113.047857][ C3] do_syscall_64+0x123/0x790 [ 113.047867][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.047877][ C3] [ 113.047879][ C3] The buggy address belongs to the object at ffff888055ffb800 [ 113.047879][ C3] which belongs to the cache kmalloc-512 of size 512 [ 113.047888][ C3] The buggy address is located 232 bytes inside of [ 113.047888][ C3] freed 512-byte region [ffff888055ffb800, ffff888055ffba00) [ 113.047898][ C3] [ 113.047900][ C3] The buggy address belongs to the physical page: [ 113.047905][ C3] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888055ffa800 pfn:0x55ff8 [ 113.047940][ C3] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 113.047949][ C3] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 113.047960][ C3] page_type: f5(slab) [ 113.047969][ C3] raw: 00fff00000000240 ffff88801c042c80 ffffea000162d010 ffff88801c0407c8 [ 113.047978][ C3] raw: ffff888055ffa800 0000000000100003 00000000f5000000 0000000000000000 [ 113.047987][ C3] head: 00fff00000000240 ffff88801c042c80 ffffea000162d010 ffff88801c0407c8 [ 113.047996][ C3] head: ffff888055ffa800 0000000000100003 00000000f5000000 0000000000000000 [ 113.048005][ C3] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 113.048014][ C3] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 113.048019][ C3] page dumped because: kasan: bad access detected [ 113.048025][ C3] page_owner tracks the page as allocated [ 113.048028][ C3] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8892, tgid 8891 (syz.0.736), ts 110018964443 [ 113.048046][ C3] post_alloc_hook+0xfd/0x120 [ 113.048059][ C3] get_page_from_freelist+0x110d/0x35b0 [ 113.048073][ C3] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 113.048088][ C3] new_slab+0xa9/0x6e0 [ 113.048101][ C3] refill_objects+0xe3/0x410 [ 113.048114][ C3] __pcs_replace_empty_main+0x35e/0x650 [ 113.048128][ C3] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 113.048141][ C3] snd_mixer_oss_build_test+0x7a/0x380 [ 113.048157][ C3] snd_mixer_oss_build_test_all+0x444/0x6e0 [ 113.048172][ C3] snd_mixer_oss_build_input+0x139/0xd50 [ 113.048182][ C3] snd_mixer_oss_notify_handler+0x48d/0x990 [ 113.048192][ C3] snd_card_register+0x2af/0x760 [ 113.048203][ C3] f_midi2_bind+0x1198/0x2770 [ 113.048212][ C3] usb_add_function+0x219/0x890 [ 113.048223][ C3] configfs_composite_bind+0xd83/0x1960 [ 113.048235][ C3] gadget_bind_driver+0x28c/0xbf0 [ 113.048249][ C3] page last free pid 30 tgid 30 ts 109616387994 stack trace: [ 113.048255][ C3] __free_frozen_pages+0x79f/0x10f0 [ 113.048267][ C3] kasan_depopulate_vmalloc_pte+0x5d/0x80 [ 113.048283][ C3] __apply_to_page_range+0xb1d/0x1520 [ 113.048296][ C3] __kasan_release_vmalloc+0xd7/0xe0 [ 113.048311][ C3] purge_vmap_node+0x210/0xb40 [ 113.048320][ C3] __purge_vmap_area_lazy+0x90a/0xc00 [ 113.048330][ C3] drain_vmap_area_work+0x27/0x40 [ 113.048339][ C3] process_one_work+0xac7/0x1b10 [ 113.048354][ C3] worker_thread+0x5ef/0xe50 [ 113.048368][ C3] kthread+0x373/0x450 [ 113.048380][ C3] ret_from_fork+0x730/0xd60 [ 113.048390][ C3] ret_from_fork_asm+0x1a/0x30 [ 113.048420][ C3] [ 113.048422][ C3] Memory state around the buggy address: [ 113.048432][ C3] ffff888055ffb780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 113.048439][ C3] ffff888055ffb800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.048446][ C3] >ffff888055ffb880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.048451][ C3] ^ [ 113.048457][ C3] ffff888055ffb900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.048464][ C3] ffff888055ffb980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.048469][ C3] ================================================================== [ 113.048475][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 113.445964][ C3] CPU: 3 UID: 0 PID: 9063 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 113.449359][ C3] Tainted: [L]=SOFTLOCKUP [ 113.450723][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.453993][ C3] Call Trace: [ 113.455053][ C3] [ 113.455974][ C3] dump_stack_lvl+0x100/0x190 [ 113.457475][ C3] vpanic+0x553/0x970 [ 113.458733][ C3] ? __pfx_vpanic+0x10/0x10 [ 113.460161][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 113.461750][ C3] ? find_endpoint+0x2a3/0x2c0 [ 113.463320][ C3] panic+0xd1/0xe0 [ 113.464510][ C3] ? __pfx_panic+0x10/0x10 [ 113.465926][ C3] ? end_report.part.0+0x23/0x90 [ 113.467587][ C3] ? rcu_is_watching+0x13/0xc0 [ 113.469131][ C3] ? end_report.part.0+0x23/0x90 [ 113.470739][ C3] check_panic_on_warn.cold+0x19/0x34 [ 113.472448][ C3] end_report.part.0+0x3a/0x90 [ 113.473972][ C3] kasan_report.cold+0xe/0x18 [ 113.475469][ C3] ? find_endpoint+0x2a3/0x2c0 [ 113.476987][ C3] find_endpoint+0x2a3/0x2c0 [ 113.478455][ C3] dummy_timer+0x500/0x3700 [ 113.479918][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 113.481774][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 113.483731][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 113.485300][ C3] ? mark_held_locks+0x40/0x70 [ 113.486897][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 113.488764][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 113.490333][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 113.491982][ C3] hrtimer_run_softirq+0x1ca/0x360 [ 113.493653][ C3] handle_softirqs+0x1e6/0x9d0 [ 113.495170][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 113.496895][ C3] ? _raw_spin_unlock+0x28/0x50 [ 113.498449][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 113.500214][ C3] __irq_exit_rcu+0x194/0x210 [ 113.501717][ C3] irq_exit_rcu+0x9/0x30 [ 113.503327][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 113.505095][ C3] [ 113.506035][ C3] [ 113.507050][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 113.508967][ C3] RIP: 0010:finish_task_switch.isra.0+0x2ca/0x10d0 [ 113.510983][ C3] Code: b6 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 8d 7f 48 e8 f3 ea fa 09 e8 7e 06 3d 00 fb 48 8d bb 10 17 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 113.517533][ C3] RSP: 0018:ffffc900037ef3d0 EFLAGS: 00000202 [ 113.519586][ C3] RAX: 0000000000000149 RBX: ffff888034804b00 RCX: 0000000000000080 [ 113.522245][ C3] RDX: 0000000000000001 RSI: ffffffff8e3eaa9f RDI: ffff888034806210 [ 113.524880][ C3] RBP: ffffc900037ef428 R08: 0000000000000001 R09: 0000000000000000 [ 113.527354][ C3] R10: 0000000000000001 R11: ffffffff81d71c79 R12: ffff88805a9d8000 [ 113.529832][ C3] R13: 0000000000000000 R14: ffffffff91452704 R15: ffff88806a73bf00 [ 113.532296][ C3] ? finish_task_switch.isra.0+0x149/0x10d0 [ 113.534200][ C3] __schedule+0x1261/0x6920 [ 113.535632][ C3] ? __kernel_text_address+0xd/0x30 [ 113.537277][ C3] ? __pfx___schedule+0x10/0x10 [ 113.538819][ C3] ? mark_held_locks+0x40/0x70 [ 113.540346][ C3] preempt_schedule_irq+0x4e/0x90 [ 113.541966][ C3] irqentry_exit+0x205/0xa10 [ 113.543474][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 113.545353][ C3] RIP: 0010:lock_acquire+0x5e/0x380 [ 113.546982][ C3] Code: 05 4f b1 a4 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 5e e6 5d 0f 0f 82 c9 02 00 00 8b 35 fe 17 5e 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 ed b0 a4 12 0f 85 09 03 00 00 48 83 c4 [ 113.553003][ C3] RSP: 0018:ffffc900037ef6a0 EFLAGS: 00000206 [ 113.554922][ C3] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 113.557378][ C3] RDX: 0000000000000000 RSI: ffffffff8e3c46d0 RDI: ffffffff8c620c80 [ 113.559860][ C3] RBP: ffffffff8edec060 R08: 00000000a2445889 R09: 0000000000000007 [ 113.562320][ C3] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 113.565043][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 113.567504][ C3] rcu_lock_acquire.constprop.0+0x23/0x30 [ 113.569449][ C3] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 113.571276][ C3] get_mem_cgroup_from_objcg+0xd7/0x1f0 [ 113.573034][ C3] __memcg_slab_post_alloc_hook+0x26a/0x1270 [ 113.574947][ C3] ? kasan_save_track+0x14/0x30 [ 113.576482][ C3] kmem_cache_alloc_lru_noprof+0x4f6/0x6a0 [ 113.578333][ C3] ? proc_alloc_inode+0x25/0x200 [ 113.579895][ C3] ? __pfx_proc_alloc_inode+0x10/0x10 [ 113.581596][ C3] proc_alloc_inode+0x25/0x200 [ 113.583166][ C3] alloc_inode+0x68/0x250 [ 113.584536][ C3] new_inode+0x22/0x1c0 [ 113.585853][ C3] proc_pid_make_inode+0x22/0x160 [ 113.587439][ C3] proc_pid_make_base_inode.constprop.0+0x25/0x180 [ 113.589505][ C3] proc_pid_instantiate+0x51/0x1e0 [ 113.591133][ C3] proc_pid_lookup+0x1f3/0x4e0 [ 113.592745][ C3] proc_root_lookup+0x23/0x70 [ 113.594366][ C3] __lookup_slow+0x155/0x320 [ 113.595955][ C3] lookup_slow+0x50/0x70 [ 113.597375][ C3] link_path_walk+0x1712/0x1cc0 [ 113.598972][ C3] path_openat+0x1ac/0x2440 [ 113.600425][ C3] ? __pfx_path_openat+0x10/0x10 [ 113.601997][ C3] do_file_open+0x20e/0x430 [ 113.603663][ C3] ? __pfx_do_file_open+0x10/0x10 [ 113.605639][ C3] ? __pfx_kfree_link+0x10/0x10 [ 113.607288][ C3] ? _raw_spin_unlock+0x28/0x50 [ 113.608883][ C3] ? alloc_fd+0x471/0x7a0 [ 113.610260][ C3] do_sys_openat2+0x10f/0x1e0 [ 113.611755][ C3] ? __pfx_do_sys_openat2+0x10/0x10 [ 113.613542][ C3] __x64_sys_openat+0x12d/0x210 [ 113.615106][ C3] ? __pfx___x64_sys_openat+0x10/0x10 [ 113.616902][ C3] do_syscall_64+0x123/0x790 [ 113.618376][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.620258][ C3] RIP: 0033:0x7f98ee95e98e [ 113.621800][ C3] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 113.628139][ C3] RSP: 002b:00007ffc95ecb0b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 113.630968][ C3] RAX: ffffffffffffffda RBX: 000055559429e500 RCX: 00007f98ee95e98e [ 113.633928][ C3] RDX: 0000000000080001 RSI: 00007f98eea35fb9 RDI: ffffffffffffff9c [ 113.636560][ C3] RBP: 00007f98eea35fb9 R08: 0000000000000000 R09: 0000000000000000 [ 113.639110][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 113.641592][ C3] R13: 00007ffc95ecb190 R14: 000000000001b90d R15: 00007ffc95ecb700 [ 113.644125][ C3] [ 113.646033][ C3] Kernel Offset: disabled [ 113.647516][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:13:35 Registers: info registers vcpu 0 CPU#0 RAX=8000000000000001 RBX=0000000000000001 RCX=ffffffff81ea051c RDX=0000000000000001 RSI=0000000000000000 RDI=ffff88801eee8000 RBP=ffffc90000137da8 RSP=ffffc90000137958 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=74203a7469647561 R12=ffffffff8fbd3bc0 R13=ffffc90000137da8 R14=0000000000000000 R15=ffffc90000137db4 RIP=ffffffff820bd011 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5b64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f98ee9aedc0 CR3=000000006211d000 CR4=00352ef0 DR0=0000000000000009 DR1=0000000000000004 DR2=0000000000000006 DR3=00000000000000d0 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffefff0 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc95ecb670 0000003000000010 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7a79732f74656e2f 70756f7267637a79 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc95ecb7f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc95ecb7f6 00007ffc95ecb7fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f98eea35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f98eea35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f98eea357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f98eea35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2e006a64615f65 726f63735f6d6f6f 2f666c65732f636f 72702f0030303031 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0b004f41445f40 574a46565f484a4a 0a434940560a464a 57550a0015151514 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000000de457 RBX=ffff88801f69cb00 RCX=ffffffff8bcf2115 RDX=0000000000000001 RSI=ffffffff8e3eaa9f RDI=ffffffff8c620c80 RBP=ffffed1003ed3960 RSP=ffffc90000187e00 R8 =0000000000000001 R9 =ffffed100d4a67bd R10=ffff88806a533deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=dffffc0000000000 RIP=ffffffff8bcf06bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5c64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc95ec9f20 CR3=0000000029fa6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000316 0000001000000000 0000000000000000 0000000000000014 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffef084a 8003200800061000 201000060074d43c 0000033600000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000a100002100008 0175ae0180020007 0b80040008000210 00021000080175ae ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0180020007021000 0610004e10000601 77c8018002000700 0800061000201000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 060174da02880800 0a10000410000601 74b8000800061000 201000060174da00 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200070100000008 064a8004040177a2 0002000700313132 30386c6e01ffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000001000580 02000c010000e000 020008010000e000 0100088001001480 ZMM25=3c55b6453c55b645 3c55b6453c55b645 3c55b6453c55b645 3c55b6453c55b645 3c55b6453c55b645 3c55b6453c55b645 3c55b6453c55b645 3c55b6453c55b645 ZMM26=ee3f4704ee3f4704 ee3f4704ee3f4704 ee3f4704ee3f4704 ee3f4704ee3f4704 ee3f4704ee3f4704 ee3f4704ee3f4704 ee3f4704ee3f4704 ee3f4704ee3f4704 ZMM27=64e7097264e70972 64e7097264e70972 64e7097264e70972 64e7097264e70972 64e7097264e70972 64e7097264e70972 64e7097264e70972 64e7097264e70972 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=9304000093040000 9304000093040000 9304000093040000 9304000093040000 9304000093040000 9304000093040000 9304000093040000 9304000093040000 info registers vcpu 2 CPU#2 RAX=8000000000000101 RBX=ffff88806a628500 RCX=ffffffff81f70d18 RDX=0000000000000101 RSI=0000000000000000 RDI=ffff88801fa82580 RBP=1ffff920000c5f8b RSP=ffffc9000062fc50 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=00000000000000f0 R13=0000000000000000 R14=18d04909dd425666 R15=0000000000000002 RIP=ffffffff820bd73c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5d64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001780 CR3=000000000eb96000 CR4=00352ef0 DR0=0000000000000009 DR1=0000000000000004 DR2=0000000000000006 DR3=00000000000000d0 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c95889860ac089da 7dbccb0d3d7c67ce ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f3cc67aaa81f7dde 04c4cc1c53166151 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c862d53b45ae697b 75221ec99bf0231e ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 71b32d0408ff33aa a2fc1df4d62a613e ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004fc0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 58b7e41800000045 59e3c1b600800100 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 59a3dfb400000045 1ff3d30c00800100 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0080010059b60b38 0000004500000045 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000045f5f400ff 59f3f73e00000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bc17b23fa4a33c9c 111c604f73b219f6 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e1ce32145d0d464b 25bc646f31562f95 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce055f2600 00007fce055f25e0 00007fce055f25e8 00007fce055f2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce055f25f8 00007fce055f25c8 00007fce055f2600 00007fce055f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 0000000000000098 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85afb6c5 RDI=ffffffff9bc60ca0 RBP=ffffffff9bc60c60 RSP=ffffc900007083c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000003a555043 R12=0000000000000000 R13=0000000000000020 R14=0000000000000002 R15=ffffc900007086e0 RIP=ffffffff85afb6ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055559429e500 ffffffff 00c00000 GS =0000 ffff8880d5e64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c258600 CR3=000000006211d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000f8000000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcec6f2bbe0 0000003000000010 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffebfd87306 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffebfd87306 00007ffebfd8730c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcec6035607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcec6035647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcec60357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcec6035639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000030646e 65746e6f72662f30 726574706164612f 6276642f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000013474d 46574d4c51450c13 514657534247420c 4155470c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcec61f25f8 00007fcec61f25c8 00007fcec61f2600 00007fcec61f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000