last executing test programs: 2m17.334184372s ago: executing program 2 (id=415): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x9, 0x3, &(0x7f0000000000)=@framed={{0x1e, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x30}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r2}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[0x0], &(0x7f00000001c0), 0x0, 0x1, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f00000004c0)={0x3, r5, r4}) r6 = socket$kcm(0xa, 0x3, 0x3a) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0x0, 0x20000820}, 0x890) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') socket$inet6(0xa, 0x6, 0x80000000) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000200001c00128009000100766c616e000000000c0002800600012101000000080001"], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r9, {0xe7}}, './file0\x00'}) r10 = socket$inet6(0xa, 0x3, 0x5) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES64, @ANYRES16=r12, @ANYRES16=r11], 0x2c}, 0x1, 0x0, 0x0, 0x24000005}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) setsockopt$inet6_opts(r10, 0x29, 0x37, &(0x7f0000000500)=ANY=[@ANYBLOB="111204090550ff03ff020000000000000000000000000001ff020000000000000000000000000001fe88000000000000000000000000ff01000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000003c00000000000000000000ffffac1e0001fe80000000000000000000000000003dce3cef39ca9c1071a2c8766a12780b59d8bc31bcb4"], 0x98) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000001f80)="5c8ebfd700000000", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x60) 2m17.152653766s ago: executing program 2 (id=418): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x10, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', r1, 0x7, 0x7, 0xfffffff0, 0x6, {{0x5, 0x4, 0x1, 0x38, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @multicast1, @rand_addr=0x401}}}}) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x2, 0x2, 0x73) socket$kcm(0x2, 0x2, 0x73) close_range(r2, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 2m17.013687699s ago: executing program 2 (id=421): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000df1b0001c0"]) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd604dd30800180601fe800000000000000000000000000023fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009005000000020000"], 0x0) 2m16.950356378s ago: executing program 2 (id=424): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) (async, rerun: 64) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async, rerun: 64) chdir(&(0x7f0000000340)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x2000000000008, 0x800) read$usbmon(r0, 0x0, 0xfffffe4a) (async) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket(0x2c, 0x3, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000f40000000000000000b92e9e4a2309b97fe6dbb3d42eff49224cad7b439258ee4273a482062e445ef73e8040db810f626ebbfd6d597834f22b9e3299da138355a5c44050ce3279dd32391cde7defbb9720470ac058781f230f92fd7aa7f1626e8ff6e13dcb31e213d61925f36095edbdf771664a1bbee358b690ba976dd069949aaef4d9f3345e94b1472b9fe354595efca8e3da8aedd91f399489d5e74ad75d8dd96dd89d58cd906df2291725e442471937f9bef39673b1e737d5b6ed7b79d5d6bcfd176558803b428562fd01d067cc036ece5761d2ebe0809d27856800"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp=r2}, 0x20) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000004800010300000000000000000a006000", @ANYRES32=0x0, @ANYBLOB="0000000008000200ff0000ff140001"], 0x38}}, 0x0) (async) r5 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000180), &(0x7f0000000080)=@tcp6=r5, 0x1}, 0x20) (async) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@allocspi={0x1dc, 0x16, 0x300, 0x0, 0x0, {{{@in6=@private2, @in=@private}, {@in6=@private1, 0x0, 0x33}, @in=@empty, {}, {}, {}, 0x8000000, 0x0, 0x2}, 0x0, 0xfdffff00}, [@sa={0xe4, 0x6, {{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x1, 0x4e20, 0x8, 0x2, 0x20, 0xa0, 0x21}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0xcd}, @in6=@mcast2, {0x4, 0x2, 0x6, 0x2, 0x7, 0x4, 0xa, 0xeb}, {0x8001, 0xc, 0x2000000000000004, 0x9}, {0x5, 0x3, 0xd15}, 0x70bd2e, 0x3505, 0xa, 0x0, 0x1, 0x2}}]}, 0x1dc}}, 0x0) mount$nfs(&(0x7f00000001c0)='>/.4\x8e\xc5\x16+\xec\xf6\bP\xca.v%\x05k\xa9\xcb\x00.\xa1\x82\xb5F\x03\xb8\x04\xd6%\x91-a\xb2\xd5\x00\xe5\xa5V8\x16sd@F\r\xb2Y\x8b!r~\xc1\x02\xee,\x93\a\xa2{}h\xaa\xc1e\xc0\x8e\xf4;\x7f\x90\\\'\xc3\r\x9a\x8d\x1d\x86\xff\x03\x973hr\xa3\"w\xf2\xea\xff\xb2\xe3\x9c\x81-\x92\x85\xa4\xf8\'\xc7\x11\xf4\x19\xa0\x1c\x03\x14\xc4P\\\x95h\xb5\x9b\xa3\x1fG5+\x84\xc3(\'\tCA6^)\xa73\xa4|\x04\x84\x03\xadQ\xd1\xf8\xea8\\\x97{F4\xdc\x99)b\xdb.\x9b\xfd2e{#\x8d\xaa\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) 2m16.901121619s ago: executing program 2 (id=427): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000200)={0x2, 0x0, [{0x9, 0x4, 0x1, 0x0, @adapter={0xce, 0x200000000000000, 0xb9b9, 0x2, 0xb}}, {0xfffffffa, 0x5, 0x4, 0x0, @irqchip={0xfffffffa, 0x2}}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='mmap_lock_acquire_returned\x00', r2}, 0x18) set_mempolicy_home_node(&(0x7f000082a000/0x2000)=nil, 0x2000, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000140)={[0x100000000, 0x80, 0x2, 0x4, 0xfffffffffffffffd, 0x7, 0x3e, 0xf6, 0x2, 0x40000, 0x5, 0xfdb, 0x10000000009, 0x1, 0x1, 0x1002], 0x1, 0x1c0583}) ioctl$KVM_RUN(r1, 0xae80, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @broadcast}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000150000", @ANYRES64=r5], 0x18}}, 0x0) 2m16.733209498s ago: executing program 2 (id=432): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r1 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x3, 0x2}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e00", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r3, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x48}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x10) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r5, &(0x7f0000000240)=""/44, 0x7a) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8002, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) getdents64(r5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) mremap(&(0x7f000055a000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000003000/0x1000)=nil) (async, rerun: 32) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000100)={{0x2, 0x4e21, @multicast1}, {0x306, @remote}, 0x12, {0x2, 0x4e21, @empty}, 'veth0_to_bond\x00'}) (rerun: 32) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffdc1, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdbdf25047a0000000000000000018006000600800a000008001400ffffff7f"], 0x2c}, 0x1, 0x0, 0x0, 0x400c045}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 2m16.679154461s ago: executing program 32 (id=432): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r1 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x3, 0x2}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e00", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r3, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x48}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x10) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r5, &(0x7f0000000240)=""/44, 0x7a) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8002, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) getdents64(r5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) mremap(&(0x7f000055a000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000003000/0x1000)=nil) (async, rerun: 32) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000100)={{0x2, 0x4e21, @multicast1}, {0x306, @remote}, 0x12, {0x2, 0x4e21, @empty}, 'veth0_to_bond\x00'}) (rerun: 32) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffdc1, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdbdf25047a0000000000000000018006000600800a000008001400ffffff7f"], 0x2c}, 0x1, 0x0, 0x0, 0x400c045}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 2m7.253038806s ago: executing program 0 (id=673): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = openat$ndctl0(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000140)) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'caif0\x00', {0x2, 0xce21, @rand_addr=0x640100fc}}) 2m7.191903787s ago: executing program 0 (id=674): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r1, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x38}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0x6, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f00000002c0)="9eb07acda001", 0x0, 0x4, 0x6, 0x0, 0x0}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c9, 0x3f) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r1, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x38}}, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0x6, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f00000002c0)="9eb07acda001", 0x0, 0x4, 0x6, 0x0, 0x0}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) (async) write$cgroup_int(r3, &(0x7f0000000040)=0x1c9, 0x3f) (async) 2m7.191275537s ago: executing program 0 (id=676): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x26, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0xff, 0x4, 0x81, 0xffffffff, 0x0, 0x17, 0x4, 0x0, [0x6, 0x110000]}}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000b00fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) 2m7.141868662s ago: executing program 0 (id=678): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) (async) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x5, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x34, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0xb, "f7d11634eea26b75af"}, {0x0, 0x6, "02a20948"}]}, @timestamp={0x44, 0xc, 0x56, 0x0, 0x0, [0x0, 0x0]}]}}}}}}}, 0x0) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, 0x0, 0x68) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r2, &(0x7f00000002c0), 0x4001) (async) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r7, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd4de7f9c7643600e0000260", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) getsockopt$X25_QBITINCL(r6, 0x106, 0x1, 0x0, &(0x7f00000004c0)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000100)={&(0x7f00000000c0)=[{0x9cf6, 0x2200, 0xcb, &(0x7f00000003c0)="56a196a1c1bb0d4cb8d7927134016b08c4336360fb9617dd2d66865e0ca2ab0601fd9c4ae7a33807da98d2f2d7eb931ccf2c3b2848fe376d5f504ef0fef992d4c2f546400f0637c981c7a8274e9621434306bf2b7cbf93e5a783c5580d0498e49738384be38e4184bbc7e585f1237cea5c2e32e9077a39656e3e242ad88cbdc6042d263cd285b6dd415ced83e2d02406a95a1bfb8405496b333a64b69c170eaeb1a87611ca433998f0287a9980d95c13e0c9972541337c0e3c73df688f43e49d6c8858c1eee75934a3a390"}, {0xaf2, 0x10, 0x92, &(0x7f0000000500)="0f59a0dffa5ff4e0d9711852977b88f930f850253996966e1ebe7cce1f8126a3454ee48773987711e726b73a448778aa8cfca960d740edb093f95dcd94951289f785c6013cecbdff500404ac65be63a72ecf56114fd9f7ee5f64a4e1b73e1f111d5bf09deee86bea6ef6ef7276724a6c92602580beb3020e5e3e81a3b66624baabf456436ba15667f93deb0a1674375fb15a"}], 0x2}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) (async) keyctl$negate(0xd, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e079c0814"], 0xa) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x16, &(0x7f0000000140)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m6.920510807s ago: executing program 0 (id=688): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000000c0)=0x2, 0x4) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000060000000600000000000008000000000300000002000005040000000c00000004000000b00100000d0000000509000000005f612e2e009a8c0a9d09ce3c61c122546c1c942bad475abaf4645d2e990e1d8c4656e19e991edd5a3c881c9a85baf4be028abeca9e642b2a8eebffb21ad20302c372803216121daa3ea66120f9362027915c401092c056a133c54ae22c8ab52f2348a3000000"], &(0x7f0000000180)=""/177, 0x4e, 0xb1, 0x0, 0x6791, 0x10000, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x14, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001680)={r2, 0x0, 0x1000, 0xe7, &(0x7f0000000580)="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", &(0x7f0000001580)=""/231, 0x1, 0x0, 0x4a, 0x1c, &(0x7f0000000400)="4daad8b35cb4664a8ebc74c167e1dc2aaa355791b4678d3ea81452622dfeefdd3265d62ee24180b87c83e50f03418324fb7267716e403abbcadfa7c7e98b43c748227947547569e78906", &(0x7f0000000480)="f04856526965ff015ee792de62228a021f635fec5b5760abd9ab2768", 0x6, 0x0, 0x7}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000180)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000080)={0xf400, 0x1}, 0xf4240, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) unshare(0x6a040000) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00', 0x0, [0x0, 0xb82, 0x87, 0x3]}, &(0x7f0000000140)=0x54) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x4804, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @private0}, 0x1c) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={0x0, 0x0, 0x8}, 0x18) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000240), &(0x7f00000002c0)=0x8) 2m6.730685032s ago: executing program 0 (id=699): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010023bd7000ffdbdf25030000000500030008000000050005000000000005000200000000002c000180140002006d6163766c616e311400020070696d72656730000000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20009005}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4000000, 0x4008032, 0xffffffffffffffff, 0x97224000) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0x8000, 0x8, 0x6, 0x9, 0x81, "043c6fc5b7e8b33d4654856c6800f5cd4015a8", 0x8, 0x4}) r3 = socket$inet(0x2, 0xa, 0x0) setsockopt$sock_int(r3, 0x1, 0x2c, &(0x7f0000000040)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x2c, &(0x7f0000000140)={0x0, 0x0}, 0x10) read(r2, &(0x7f0000000040)=""/157, 0x9d) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)=0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r7 = socket(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r11, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x10) r12 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_DISALLOCATE(r12, 0x5608) 2m6.630055292s ago: executing program 33 (id=699): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010023bd7000ffdbdf25030000000500030008000000050005000000000005000200000000002c000180140002006d6163766c616e311400020070696d72656730000000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20009005}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4000000, 0x4008032, 0xffffffffffffffff, 0x97224000) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0x8000, 0x8, 0x6, 0x9, 0x81, "043c6fc5b7e8b33d4654856c6800f5cd4015a8", 0x8, 0x4}) r3 = socket$inet(0x2, 0xa, 0x0) setsockopt$sock_int(r3, 0x1, 0x2c, &(0x7f0000000040)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x2c, &(0x7f0000000140)={0x0, 0x0}, 0x10) read(r2, &(0x7f0000000040)=""/157, 0x9d) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)=0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r7 = socket(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r11, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x10) r12 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_DISALLOCATE(r12, 0x5608) 1m29.992997402s ago: executing program 4 (id=1360): r0 = syz_open_dev$video(&(0x7f0000000000), 0x1c0, 0x8000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x0, 0x0, 0x4, {0xab94, 0x366, 0x100, 0x2}}) (async) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000080)={0xa, {0xf, 0xf, 0x6, 0x6}}) (async) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/60}) (async) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f00000001c0)={{r1}, "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"}) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f00000011c0)={0x9, {0x8, 0x9, 0x621b, 0x2}}) (async) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000001200)) (async) ioctl$KDMKTONE(r1, 0x4b30, 0x5) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000001240)={0x2, @sliced={0x9, [0x7f, 0x2, 0xff, 0x5, 0x4, 0x7fff, 0x2, 0x7, 0xe279, 0x1, 0xfff, 0xa, 0xc00, 0x9, 0x3, 0x562, 0x9, 0x1000, 0xff, 0x101, 0x6, 0x101, 0x1, 0x2, 0xf, 0x3, 0x9, 0x3f, 0x9, 0x101, 0x2, 0x5, 0xc45b, 0x1, 0x9ab, 0x7, 0x4, 0x3, 0x6, 0x0, 0x3, 0x1, 0xa, 0xa7, 0x6, 0xf6, 0x96c, 0xffff], 0x4}}) (async) r2 = syz_open_dev$sg(&(0x7f0000001340), 0xe, 0x20002) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000001380)={0x8c, 0x346d, 0x0, "da1f04889e64c680c671e9f7380581661c627a36e1c7b1e6c4f9e2880c0cb4b7c621e40b03071432db6accc315acbd2b35e0b1aeffbf49b23e22fe9ee8af579cedf0953c759dfd2bb930f499dc24bbc1f294213f95f5068e710586e53aa8872fdd9994b677290a9d75cb577905bbc0fad343b5cd5dd603246d7290ab7b9278ab4b6bcbbad12aa42b56b91f14"}) (async) fremovexattr(r1, &(0x7f0000001440)=@known='trusted.overlay.redirect\x00') (async) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000001480)={0x3ff, 0x3, 0xd20c0e6}) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f00000014c0)=0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001500)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000001540)) fchmod(0xffffffffffffffff, 0x2) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000001580)) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000015c0)={'\x00', 0x0}) (async) ioctl$KDMKTONE(r1, 0x4b30, 0x9) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000001600)={0x0, 0x101}, &(0x7f0000001640)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000001680)={r6, @in6={{0xa, 0x4e22, 0x9, @mcast2}}, 0xffff79d2, 0x8, 0x9, 0x3ff, 0x80, 0x81, 0x7f}, &(0x7f0000001740)=0x9c) (async) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_UNBLANKSCREEN(r7, 0x541c, &(0x7f0000001780)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)=@getchain={0x2c, 0x66, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xf, 0x3}, {0xa, 0xffe0}, {0xb, 0x4}}, [{0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40890}, 0x4) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000001980)={0x1, &(0x7f00000018c0)=[{}]}) ioctl$FITHAW(r3, 0xc0045878) 1m29.942280338s ago: executing program 4 (id=1361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000006006600c78800001a0033"], 0x50}, 0x1, 0x0, 0x0, 0x3f00}, 0x0) 1m29.852038315s ago: executing program 4 (id=1362): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x34}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe1, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/keycreate\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x34}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe1, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_open_procfs(0x0, &(0x7f0000000040)='attr/keycreate\x00') (async) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) 1m29.782506269s ago: executing program 4 (id=1363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRES64=r0], 0x54}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000002340)=""/4096, &(0x7f0000000340)=0x1000) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a0101000000000000000002000000091f010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x4, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040effff2820"], 0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x50, 0x2, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000940)='\r', 0x1}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES32=r4, @ANYRESOCT=r1, @ANYRES16=r3, @ANYBLOB="10000000000000000c000000feffffff00000000", @ANYBLOB="22b71818e0360c6aca68ef18e47352393b960abd1573250ad2274a2ecc1b1da6a86e069b85e13f667f26ea1f05f29b944698de7ee45befae36e3654c0f67b42bb95536aca3205cc071552196e5a9326e71dc5e3d94fac23976a2ad14c952741f355176d23079fd12a3a8250f20bcefae9819aca4e4afb14d10620b109bf9351163c1a98e9fc6cb816f1ad47a2b874463def2f852d8f2aeec692d4e6ab355"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r6) mount$bpf(0x0, 0x0, 0x0, 0x80000, 0x0) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x800000000000001) syz_emit_ethernet(0x4a, &(0x7f0000000980)=ANY=[@ANYRES32=r2, @ANYBLOB="316831b4340781eae29c7fe5938de9d714488e4f9897724d2e62672ca36d2e5944ca0672db93b5eb8d8377df95a845d8085a3f204e1dcb9a0623a83cd07dd37db31ef83fc9656888489b555e77d2c82e69536fc99537a84a7777d2e22fa15bb5fcbea4d6e9583ca0722d4113ebda934c102d2f4473", @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES16, @ANYRES64=r5, @ANYRESOCT, @ANYRESDEC], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000000180)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2d, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4000000, 0x2}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m29.65027212s ago: executing program 4 (id=1365): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x101842) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) readv(r2, &(0x7f0000000280)=[{&(0x7f0000004580)=""/4107, 0x100b}], 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_CLR_FD(r0, 0x4c01) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x44, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r4, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r8, 0x11a, 0x3, 0x0, &(0x7f00000004c0)=0x4) keyctl$KEYCTL_MOVE(0x1e, r6, 0xffffffffffffffff, r7, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000400)={0xb0, 0xfffffffffffffff5, 0x3, [{{0x5, 0x1, 0x5, 0x5, 0x2, 0xdf7, {0x3, 0x6, 0x28, 0x0, 0x2b26f94500000000, 0xca, 0x8, 0xff, 0x7, 0x1000, 0x3, 0x0, r5, 0xe5, 0x6}}, {0x0, 0xd70b, 0x1, 0x1, 'm'}}]}, 0xb0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}]}) fanotify_init(0x2, 0x400) 1m29.561646368s ago: executing program 4 (id=1367): r0 = socket(0x2a, 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa97c4864ef7a30800490000240064000000299078ac14d6bbac14140c8907efe000006a860600000000000000"], 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="220006000000067b6933176f0905000007000000", @ANYRES32=r4, @ANYBLOB="000000000a00020014001a80100004800c000480080001001d000000"], 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000bc0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x8, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0x375}]}}]}, 0x44}}, 0x24000014) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m29.490018763s ago: executing program 34 (id=1367): r0 = socket(0x2a, 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa97c4864ef7a30800490000240064000000299078ac14d6bbac14140c8907efe000006a860600000000000000"], 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="220006000000067b6933176f0905000007000000", @ANYRES32=r4, @ANYBLOB="000000000a00020014001a80100004800c000480080001001d000000"], 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000bc0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x8, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0x375}]}}]}, 0x44}}, 0x24000014) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 34.481130619s ago: executing program 3 (id=2094): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000501c0007800c0001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) lsm_set_self_attr(0x68, &(0x7f0000000040)=ANY=[@ANYBLOB="6d00000000000000030000000000000020000000000000000003000000000000c61647cbbb7251"], 0x20, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x2, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(r4, &(0x7f0000000700)=""/90, 0x5a) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00158018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 34.221534253s ago: executing program 3 (id=2097): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x18, &(0x7f0000000080)=@ringbuf={{}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @tail_call, @exit]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600)={0x4, 0x0, 0x0, 0xfffffffe}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x511000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000200)=0x6ea4d361) 34.09139439s ago: executing program 3 (id=2099): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0xf5, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c000000020601000600000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000003000c000180080001400000000a080006401c02000005000500020000000500010006"], 0x6c}}, 0x40000) mount(&(0x7f00000000c0)=@filename='./bus\x00', &(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='btrfs\x00', 0x2800080, &(0x7f00000001c0)='discard') (async) mount(&(0x7f00000000c0)=@filename='./bus\x00', &(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='btrfs\x00', 0x2800080, &(0x7f00000001c0)='discard') 34.038274624s ago: executing program 3 (id=2101): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0xfffffffffffffffd, {0x1, 0x0, 0x4}, 0xff}, 0x18) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x39, 0x1, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000280)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x30, 0x0, 0x0, @ipv4, @local, {[@routing={0x29}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d5"}}}}}, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x8d, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f00000007c0)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x7, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x426, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000, 0x2, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0, 0x4000000, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff1085, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1]}) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f384", 0x6}], 0x1}, 0x48005) listen(r0, 0x40a5) 33.819728515s ago: executing program 3 (id=2105): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000da5896f40000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e000000050000000100940d3ad4c71ecc27f0268aa0b53b9bdfee565c4b6d8a007ca8b73fb2d0504603c5ca93192f6b2f582b2804b3e4ec6b3a13c19e632b3a47f64079e531a12e02ca6c98310d19772d3dcaeeb77d6f794d64972133", @ANYRES32=r1, @ANYRES64=r1, @ANYRES16=r1, @ANYRES32, @ANYBLOB="0000000001100000050000000200"/24, @ANYRES32=r0, @ANYBLOB], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r6}, 0x10) dup(r5) (async) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) mkdir(&(0x7f0000000040)='./file1\x00', 0x160) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x160) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setpgid(r8, 0x0) (async) setpgid(r8, 0x0) setpgid(0x0, r8) (async) setpgid(0x0, r8) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) fcntl$setstatus(r9, 0x4, 0x2000) ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000004c0)={0x57, 0x81, 0x6, {0x4, 0x6}, {0xc, 0x3}, @period={0x58, 0x8001, 0x7, 0x3b5a, 0x1, {0x5, 0x1, 0x7, 0xcd8}, 0x5, &(0x7f0000000340)=[0x6, 0x100, 0x601, 0x8, 0xd811]}}) (async) ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000004c0)={0x57, 0x81, 0x6, {0x4, 0x6}, {0xc, 0x3}, @period={0x58, 0x8001, 0x7, 0x3b5a, 0x1, {0x5, 0x1, 0x7, 0xcd8}, 0x5, &(0x7f0000000340)=[0x6, 0x100, 0x601, 0x8, 0xd811]}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="05000050000000040000000700000000c4000000", @ANYRES64, @ANYBLOB="0000000000000000000000000000000000000000e18669326ec01f102b7d0cdc7f8e062e7c7ca9bc29d773445d0b278f1b9f55d02bd1332832f73c5fa91c49166cbab4534c79dd6fee0d7de260dc04b1832c410d2a1e26f61336e5d930eab34828918bebc6f71cc9e85d30f57ad1a736f437d34fac0e0358b0688ac120fb8d7027ee17b4d0f05e99982f597c1009f8ecc7de3386280c1e4a8a35247c5d9b2673eceb85c1230b9dc94734ccf5e61cb707558f348b20fc972a570b6d1758d68fa90da770d1f8ca", @ANYRESHEX, @ANYRES32=r1, @ANYBLOB="02050000010000000000000000c82300"/28], 0x50) 33.601531728s ago: executing program 3 (id=2110): munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) r1 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) r2 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0x826e, 0x1000, 0x2, 0x6}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000080)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) r3 = io_uring_setup(0x6f9e, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x3, 0x28b}) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r2], 0x1) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x9, @raw_data="8ff1418bc959a937387ca5d16ed0adafe8a9513a164056db534f8bcb568ad5a35b260b1db29d654acadb3455fb663fbbfc7263c1eb2ba445ebb087ffba37a02841427bc9e919941f2b8521bbae541da8e154303a0111e433c6de4b5c795340940baab0f63819c73f0dd71a8e307a98cc91692dd08c6b72b89c29e5651d69937e788207a17a1192d58353de293dbc831b2e6a2e90cddc38929c41ba04581f445e7b449d346e83ab266811ea5a9208ca5c55f43800bb52d20be08ec35b9648160fe09410a0ff02527c"}) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x2000) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000000280)=[{&(0x7f00000001c0)=@in6={0xa, 0x4e24, 0xffffffff, @private2, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x2c}], 0x1, 0x890) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffff9c, 0x0, 0x41, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r7, 0x4068aea3, &(0x7f0000000200)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) socket$inet6_sctp(0xa, 0x1, 0x84) 18.564592558s ago: executing program 35 (id=2110): munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) r1 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) r2 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0x826e, 0x1000, 0x2, 0x6}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000080)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) r3 = io_uring_setup(0x6f9e, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x3, 0x28b}) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r2], 0x1) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x9, @raw_data="8ff1418bc959a937387ca5d16ed0adafe8a9513a164056db534f8bcb568ad5a35b260b1db29d654acadb3455fb663fbbfc7263c1eb2ba445ebb087ffba37a02841427bc9e919941f2b8521bbae541da8e154303a0111e433c6de4b5c795340940baab0f63819c73f0dd71a8e307a98cc91692dd08c6b72b89c29e5651d69937e788207a17a1192d58353de293dbc831b2e6a2e90cddc38929c41ba04581f445e7b449d346e83ab266811ea5a9208ca5c55f43800bb52d20be08ec35b9648160fe09410a0ff02527c"}) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x2000) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000000280)=[{&(0x7f00000001c0)=@in6={0xa, 0x4e24, 0xffffffff, @private2, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x2c}], 0x1, 0x890) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffff9c, 0x0, 0x41, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r7, 0x4068aea3, &(0x7f0000000200)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) socket$inet6_sctp(0xa, 0x1, 0x84) 13.491068603s ago: executing program 6 (id=2314): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xfff4}}]}}]}, 0x40}}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_getaddr={0x7c, 0x16, 0x100, 0x70bd2b, 0x25dfdbff, {0xa, 0x40, 0x39, 0xff, r2}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_ADDRESS={0x14, 0x1, @private1}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4c000}, 0x40080) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b4050000000000006110a400000000001f150000000000009500000000000000704fff7649b0983f42d01eccd13e9ec8a0a0ba6f00720c38fb17c6973e6361f5710065aaf625b96d173daf810865508ce8e9e1fa28e8bc8620294d24b6e609fa8a42156ea7394b8e0f09362f9e2576fd38cecff65abf747c96f88c9e0d54c135a1666ac39044329aaff9afb6"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 13.322169477s ago: executing program 6 (id=2315): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x4c, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x18}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000890}, 0x20000005) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x64, r1, 0x1, 0x0, 0x0, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r3}, 0x18) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 13.179662317s ago: executing program 6 (id=2316): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000000000000000007fffffffffff", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 13.052206806s ago: executing program 6 (id=2317): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001040)={0x28, r1, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}]}, 0x28}, 0x1, 0x0, 0x0, 0x4005}, 0x8840) 12.92043219s ago: executing program 6 (id=2318): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@loopback, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@private2}}, &(0x7f00000007c0)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000800)={0x4f0, 0xedc, {}, {r1}, 0xfffffffffffffff7, 0x1}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000406050800000000000000000000000005000400000000000900020073797a300000000014000780080013400000000008000640000000000500050000000000050001000600"], 0x5c}}, 0x0) r3 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000600), 0xfec8) recvmmsg(r3, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file1\x00') r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000740)={0x5}) lgetxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00', &(0x7f0000001300)=""/4096, 0x1000) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x1000000, 0x0, 0x4, 0xfffffffc}, 0x10) write(r8, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000240)={'syztnl2\x00', r7, 0x80, 0x7800, 0xa6, 0x7, {{0x33, 0x4, 0x1, 0x7, 0xcc, 0x67, 0x0, 0x29, 0x2f, 0x0, @empty, @remote, {[@noop, @timestamp={0x44, 0x2c, 0xe9, 0x0, 0x0, [0x9, 0x9, 0x1, 0x3, 0x8, 0x8, 0xe, 0x3, 0xfffff6d0, 0x5]}, @ssrr={0x89, 0x1b, 0xdd, [@dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @remote, @private=0x9, @remote]}, @timestamp_addr={0x44, 0xc, 0x2a, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc}]}, @timestamp_addr={0x44, 0x44, 0xd1, 0x1, 0x6, [{@remote, 0x26}, {@remote, 0x9}, {@loopback, 0x100}, {@local}, {@local, 0xd}, {@broadcast, 0x5}, {@initdev={0xac, 0x1e, 0x7, 0x0}, 0x31}, {@broadcast, 0x1000}]}, @cipso={0x86, 0x1d, 0x3, [{0x2, 0x5, "d38f50"}, {0x0, 0x6, "2e158718"}, {0x6, 0x8, "776a0bb2dae2"}, {0x6, 0x4, "b023"}]}, @end]}}}}}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x9, 0x8}, {0x17, 0x6}, {0xfff3, 0xc}}, [""]}, 0x24}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x90}}, 0x0) 12.541447297s ago: executing program 6 (id=2324): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000500)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f00000003c0)={&(0x7f0000000400)=[r2], &(0x7f0000000380), 0x1}) fchmodat(r0, &(0x7f0000000000)='./file2\x00', 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) 7.542104012s ago: executing program 5 (id=2363): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000001000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000200)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x9c}, {0x6}]}, 0x10) 7.42937496s ago: executing program 5 (id=2365): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 32) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040014) (async, rerun: 64) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@mcast2, @in=@remote, 0x4e21, 0x4, 0x0, 0x0, 0xa, 0x60, 0x60, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000001}, {0x0, 0x0, 0x0, 0x4}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x20000050) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0x5, &(0x7f0000000240)={@multicast2, @local, 0xffffffffffffffff, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x0, 0x407e, 0x6b}, 0x3c) (async) setreuid(0x0, 0xee00) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r3, 0x89ea, &(0x7f0000000000)) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r4, 0x9, 0x0, 0x0) (async, rerun: 32) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) (async, rerun: 32) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000600)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x46}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 64) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) (async, rerun: 64) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x80, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040", @ANYRES32=0xee01], 0xb8}}, 0x4000) (async, rerun: 32) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d18, &(0x7f0000000000)) (async, rerun: 32) r8 = socket$tipc(0x1e, 0x2, 0x0) getsockname$tipc(r8, &(0x7f0000000280), &(0x7f0000000080)=0x10) r9 = memfd_create(&(0x7f0000000240)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4C\x80\x00\x00\x00\x00\x00\xa9t\xa24>X@\rq@\xf2\xe9[\x05N\xb1\x84\xea\x91^%A\xf5\x9e\x13TdT\xc6^p\xcc#P\x04\x06\xae\xeb\x7f;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\a`\xf0\xc728\xfc\xfc\x1c1?\x86\xac\xd4\f\x00\x00\x00\x00\x00\x80\f\xed{u[\xbd\x9d^\xffj\xa0\x14\xb7\xb6\x8b\x1d*1\xe8\xb0\x00\x00\x00\x00\x00\x00\t\x00\x003F\xf1 \x17-\x964C?]\xdfe;\xc0w\xad\xef\xa3r\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\x8c\xcd\b\xb5U\xec\x85\x9b\xe4Q>\xed\xdf\xdf\a\xd0lg\x13\r\x8c:s3\xd7s\xef\xb3\x9f#\x15$\x97I\xf0LC\xfc\xe7\xdf\x86\x9d\xd3[i\x1b|{4)\xd8\xa2\xb8\x8f\xa2\x84_k\xe5\xf0\x05a2)\x8d\xec\xf0(!\xf0\xb5-e+><\xc8X\xdaNz,u\x8f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf5\x1a5\x8c\xa6\xfbq\xa9\x87\x9f\xe1\xfa\xb5\x92\xb1\x00\x00\x00\x00\xd6\xce\xab\x1d%\xb0\xaa\xed\x10\xe9Z\"\x7f\xb2\xde\x00\x00\x00\x00\x00y\xd8\xdf\xc8R\x8b0Bs\x95N\xfa\x02\xe9\xf6\xa20\f1L\v\xdf8W{P\xab\x82\x84\xf0w\x9c\t\xf8\x85\x98S)M*\x88\xf8\xbaC\xa2\xf8\xc3\xe0\xb2)\xf8\x9da%\xd7\x8c\x03\xa9\xb6\x15\x8c\xdd\xaf\xeb\xfa\x1bV\x1c\fJ\xe6n\x19\x94\xea\xb7\xcc\x12q\x06\xbab\xda\xfa\xf7\xe4\x85U:\x1e\xeaC\x9b\xa5\xbb:\xe8\x04\xd9\xb2|\x85\a\x93\xa1a\r\xf0R\x8f\xac\xbc]\xc6\x1a\x86RK\xb3\x95\xbaz\xb7I\a\xd6j,pI\xb07\xc4\x82G\xd2u\x8a\xfc\x10\xffs5\xfd\x99\xdc\x9e\xdf\x86\x11~0+\xa7\x11\x13\xbb5\xc8\x8aW\xfd{\xe1QN\xef\xce~k7\xd9\x02\xac#n\xc3\xdd\x9a\xdaeJ7\x9f5\xae4\x9aoJ\xdcZf\xd4\x7f\x01}\'\x1f\x8e\xee_Q\xb4\xad@\x1a(>\x88\xd2F\x14r\x8c\x1aq@n6~1WP\xc8\xb5\x82\x02*\xcf\x95I\xc01\"\x8c_\x8d\xcb-X\x1f:bOmgTC\xe16\xef\xed\x87\xe42\b\xe5)\x99\x1dt\x17\x8d\xdc\xc2\aL\xb9\x90\xdc~\xf4\x12eXR\x89\x14E\x06\xeb<\x1b-\x955\xb4U\xceN\xf4\xb4l\xd5\xd0\xbfc\xa0\xb4{\xa9\\JL@tW\xa8\xf5\x8b\x9a\x9cF\xf5\xe0\xf4\xeeR#\x16r\x80\x91]c\x99\xd0o\x81b.\x82\xcf4\x01j\xe8\xaf[\xc1\b\xc5@n\x8a(qC\x16\x9e\xf8\x11l\xdbLM\xf9\xb7\xd1\xd5\xa1^\xcb=X\xe56\xc4FW\x0f\xe3\xe0\xa0\xb5JBE\xb5F(\t\xd8\x87\xf7\x92id\x8b\xcf\x846Z\x00\x80\x94\x999\xc2\xc7_\xb0\x02\xcb\xa2k\nB\x8a\'s95\x93Z\xf0\xf1\x9d\n\xf1$N\x03\f\x04Z\xfeX6\xf1\xe0\x95\x80(AV\x91\xd8\xa3\xc4?\xebhh|\xe0\xad2#\xcdF\xd8\x89akF\x05\xb5r6Ueh\x03\x82\x91@\xba\x84\xf5\x84\xaa\x1fZ\x11\n\xb9Y\xba;\xf27\xb9\xd3e1\xe5\xf9\xb3\xeb\x82V\x12\xebO\x02\x81\xd0\xfc1\xf5\x9c|\xfc\x1e_\x00\xa7\x89\x9e\xbe@\xcd\a\x82\xa8`\xa4e\xb7\xb8d\xb45>\xd5o\x1a[d\x04t\xb9\xc2Q T]j~\xa5\x12Lo\xfbP\x1fH*\xe5\a|\x1c/\xc3\x84\x01.F6\xba+\x90/\xc5\xc7\x95Tu\xacH\xbd\xb8\xe9\x04\xe6\xaf\xe7\xa6\x10\xb6\xde', 0x7) fcntl$addseals(r9, 0x409, 0x8) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000003, 0x11, r9, 0x0) (async, rerun: 64) fsetxattr$trusted_overlay_origin(r5, &(0x7f00000000c0), &(0x7f0000000200), 0x2, 0x2) (rerun: 64) 7.321389055s ago: executing program 5 (id=2366): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100040000000000004cea840a7cc27424c3ed003f00000008000300", @ANYRES32=r1, @ANYBLOB="14005e80080002000000000108000100ffffffef"], 0x30}}, 0x0) 7.14088703s ago: executing program 5 (id=2369): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x64, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8b549cdbfd"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e7eb556d2c"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3f94af3861"}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008891}, 0x44840) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r1, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r0, r1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003404000100e140010"], 0x80}}, 0x0) listen(r3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000100)={0x2, 0x1, 0x0, 0x0, 0xfffffff7}) ioctl$TIOCGSOFTCAR(r5, 0x4b46, &(0x7f0000000500)) accept4$rose(r3, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r7, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x60}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc3c3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40080b5) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000000200"/20, @ANYRESHEX=r8, @ANYBLOB="000000000000000000000e00272c05fa2d5ee462e7e776ee9be6000000000000010000000000000004010000"], 0x28}}, 0x200080c0) 6.25114282s ago: executing program 5 (id=2377): socket$qrtr(0x2a, 0x2, 0x0) (async) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) (async) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@gettfilter={0x13, 0x2e, 0x201, 0x0, 0x0, {}, [{0x8, 0xf}]}, 0x2c}}, 0x0) writev(r0, &(0x7f0000000880)=[{&(0x7f0000000340)="64e5fa06", 0x4}, {0x0, 0x3f}], 0x2) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x30002, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0x7f, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r6, 0x3ba0, &(0x7f0000000240)={0x48, 0xb, r5, 0x0, r7}) (async) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r6, 0x3ba0, &(0x7f0000000240)={0x48, 0xb, r5, 0x0, r7}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r2, 0x3b83, &(0x7f0000000100)={0x28, 0x4, r7, r8, 0x215f6b, 0x9, 0x1, 0x1956f9}) 6.028412588s ago: executing program 5 (id=2378): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffc}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a00)=@newtaction={0x14, 0x76, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x0) r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r2, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000080)=0x7) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0xc1, 0x0) ioctl$sock_netrom_SIOCDELRT(r3, 0x890c, &(0x7f0000000100)={0x1, @bcast, @bpq0, 0x8000, 'syz0\x00', @null, 0x3, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000240)="e7c6b878c0006ae3f83b9f3d98767a140e91334a1434da88ef0f140a971b2081588c70e113935a0ff6ac8ff038b42e4e51d2946f94e99e3118c3a3d447261517e1a53545cf4288761f44aef83af59a70ab8f9617506e172599cbf5e8d3339a05b380ca98b39124c6a9e5d0c7bb9e5815e33408324951b043f8d65ea474373ae0bea5335e55e438fc9356c231bdbc8ca92ff1b714b0f67af32c26ca636ab7664a20e7939dafc9f8a03bae34128156504a9ac74a9e", 0xb4}, {&(0x7f0000000300)="5fe0e556032f6070ddcd647e3320a4d82f33fe4e95b2f2407e3e93b4f3a8eb", 0x1f}], 0x2, &(0x7f0000000380)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @rand_addr=0x64010102}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@cipso={0x86, 0x3b, 0x3, [{0x7, 0x11, "395730a8008d14460c8a95423e0d4e"}, {0x0, 0x8, "73327823ab4f"}, {0x0, 0xf, "191a01b7fe09cbefed9d1dd966"}, {0x6, 0xd, "41e7dbbce72495f313044e"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xeb}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@rr={0x7, 0x2b, 0x88, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010101, @remote, @private=0xa010100, @empty, @local, @rand_addr=0x64010100]}]}}}], 0xf8}, 0x4010) mount$binder(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xe2ca6, &(0x7f0000000200)=ANY=[@ANYBLOB='max=0000000010000000']) keyctl$read(0x2, r1, &(0x7f0000001940)=""/4086, 0xff6) 681.605524ms ago: executing program 1 (id=2437): r0 = socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010043, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @echo_request}}}}}, 0x0) 559.212285ms ago: executing program 1 (id=2438): r0 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000000c0)={r2, 0xd3, "cb1aceaf7e034c553e0fb025f80787d1de3c352393f7933d61e2bb91d8ddd87b882fcb5dabf7731c9d983e321315511a56da8e1bab5fd50aff3f60856d98f41722516e5ee307314828233bb7defc76a74cb0ae472d432233cc05ac58bd2732b7b304a9bb9ff5defd129fb24683ae2a11a0b5dc746f8b284f0f69a677be023b9191825dddbde79b7255dd351749a06f37dfb8fdc35bf3a4f3c802f85b130e2743ed6063ae840b432c4c9cf200b70b2c60c0168380b1980a2abe0f089c0cf8a86abd8663ccc053b4e063067a0131a3d2b8dab17f"}, &(0x7f0000000240)=0xdb) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x0) 490.271257ms ago: executing program 1 (id=2440): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x2, 0x5, 0xf0f3, 0x2, 0x2, 0x6}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000000c0)=0x2, 0x4) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x38, r5, 0x60b, 0x2000, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x80}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x20000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe70, 0x30, 0x25, 0x0, 0x0, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x800, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xcd}, {}, {0x0, 0x0, 0x0, 0x0, 0x9bad}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x5ad8d0b5}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x8}, {0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe70}}, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x5c, 0xa, 0x0, "b75cbb1844038d2cd97c94fc49f31638b5f9623a74002a5b00", 0x38415262}) r7 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r7, 0x29, 0x33, &(0x7f00000011c0)=0x80000001, 0x4) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x2, @raw_data="8a6528fa2eba577bfa6b99723c0c1b0200e2004480807edf8b5f010c46c1a6e9ec85449d34fbb88d5483106c6380e37c5e269951bebf29ed14e535fedd9e39d56748d2087da94ef0ee4b44d2815963aa6366ac844175dbe2a195662da79450b8c9a03c5001000000e570a4777c53df9e2fad1d7ea8572d23d9ce5e60f2eb0b2c4a009998961146866788869040839ff19b3bff10e491a365966d00b03513d980d80f1c81c992d15d2d0c83847a9fb064598446f84f00000000000000000000000000004900"}) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f0000000040)={0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) write$P9_RSTATu(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB="330200007d00000005f2000000000000000000000000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa673effeb09b5351f5bde05"], 0x233) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000001180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c0000000001010800000000000000000100000834000d8014000400fe88000000000000000000000000000108000200000000001400050000000000000000000000ffffac1414aa240002800c000280050001003a0000001400018008000100ac1414aa08000200ac1e01011000058028000100736e6d7000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000) r10 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x42c00) 489.799932ms ago: executing program 7 (id=2441): mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0x43, 0xa0, 0x238, 0x98, 0x330, 0x178, 0x178, 0x330, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1f0, 0x238, 0x0, {0x0, 0x7a010000}, [@common=@inet=@hashlimit3={{0x158}, {'bond_slave_0\x00', {0x9, 0x0, 0x57, 0x0, 0x0, 0x1, 0xe1, 0x3}}}, @inet=@rpfilter={{0x28}, {0xbb}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x428) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) 421.004929ms ago: executing program 7 (id=2442): fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000000)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x50800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000}}, './file0\x00'}) write$tcp_mem(r1, &(0x7f00000000c0)={0x1, 0x20, 0xa71, 0x20, 0x6}, 0x48) (async) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000140)) (async) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4, 0x0, 0x0, 0x1d, &(0x7f0000000180)="f933781686430bef6d12f8a9716cf13840984fde0fb719ad31399d35cf", 0x9}) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000240)={0x9fe8, 0x200, 0x5}) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000280)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000000640)={0x4, 0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/38, 0x26}, {&(0x7f0000000300)=""/228, 0xe4}, {&(0x7f0000000400)=""/153, 0x99}, {&(0x7f00000004c0)=""/221, 0xdd}], &(0x7f0000000600)=[0x580, 0x1, 0x9]}, 0x20) (async) fcntl$setsig(r0, 0xa, 0x14) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000680)={0xc0000001}) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f00000006c0)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000700)={0x63, 0x400, {}, {0xee01}, 0x9, 0x9}) (async) r3 = getgid() fchown(r0, r2, r3) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000007c0)={0x15, 0x110, 0xfa00, {r4, 0x2, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, @ib={0x1b, 0x7ff, 0x2e, {"d2486931a0cae11eefbc4ac1bf94efe0"}, 0x8, 0xe15, 0x6}}}, 0x118) process_mrelease(r1, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) write$snapshot(r1, &(0x7f0000000900)="3ddf3161a58dbcab159db8dcc842daca34adcec6c41df677c8b33507fa716a17895d130605686102839234e3e6bb23e1a6507bd88942f986fcefdd6bed0fad4563492e7469589a6c7dedeba0e2e6f1a47131a797cad7dbd985252950534d880d50c1ab225b5bbf966765fd290db49e5a7ccc0a283e777924c63caba9996a925d3d2f4aa083aebd5458a21c878119fbdc1ebf33e6d9b2067907fb6ad59ca53fd9acc7dd4832340460ff1e9de79d596ea28f0225a1dc57fa811907e008", 0xbc) (async) ioctl$SNDRV_PCM_IOCTL_DROP(r1, 0x4143, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f00000009c0)={0x9, 0xffffffffffffffff}) (async) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000000a00)=""/213, &(0x7f0000000b00)=0xd5) (async) ioctl$KVM_GET_DEVICE_ATTR_vm(r1, 0x4018aee2, &(0x7f0000000b80)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000b40)={0x7f, 0x5}}) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000c00)={0x12, 0x10, 0xfa00, {&(0x7f0000000bc0), r4}}, 0x18) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r7, 0xc058671e, &(0x7f00000010c0)={{'\x00', 0x1}, {0x7fff}, 0x188, 0x0, 0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)="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", 0x11e, 0x0, &(0x7f0000000e00)={0x2, 0x198, {0x0, 0xc, 0xe4, "8cb70eeabc06e0d03c8ba3cb068dd8c1b996a3187a7e98e5da363486a92aee6c9f7ec143e63b5803607c5757767aba7e437dcbe0959912af482cc4cb1e2686310e0f586c4ed8dcc3b74e21b08ddfca2157f7720e7b9db7a3d1c3e803b1169738ef5605517e473e0585f1ebb41efb32d4e27eda2dd7ef013dcd272c537437ab19a253d4439b3d8d6c0026ae0ae12627bdad811d39e65846e50e5c8ef9ef1addcdca0120b58042a3d9d5c44f3b8ef589c7a8cc113b3c4aff6e3385eed4524b9cb80b2ad4d57e70fe4902e1bd80c7b0e745f9334a77855b94aa0eb0618671ddda7e0c9b7353", 0xa7, "244fc3468aca8febc057023fe46b4a4bd72a2b464c9bc5f515706ebf76a62080091b455d34b855c7ce79cb95563275a25d9edd694c9a23ee6902b303b139ace76ecd65e1d02eeb682ab79dcbdfb1bd787fc134cf0c8a73c74e670379998ecd94745131b6b3509ecdab43ce8eb4d5f00a0f62fe21512bf51bb57a094c904a57e69f63955fe616033f4929ea84f8de605233510542fbe882b09fcdb9d070020edf9f632bbe6bcdb5"}, 0xf4, "682586945d5eb3d17f31f01d266f0554127b1da23e247f02ca5699e9dd557c609a68892229c43b281017cc8ef3cb46508688d9c7e17d46314de880801e84011953e80fec659a0d28f2c30862e48ae675cb09c47712bb44c814e10e1e615c5d9e382f1d4967f5502ccc1e2e1e278fce5714622a1bcecd16ab21c676077934ab72a2bcc3adb5b5d1e88d025701a00e86ebf9276a56ff7f79cd086c649d6b5d3b8cc7adb9c226572bf08c934ea150e943d11385efb2fcdf163a24d0f3fb46d22cd1ffdbc98a7f8568611654d119b1a425b237fbdd7870dcd0db4beda2ed57b9cedc6f11ad640bc8efcc7a99cae68f41f2ace9a8acc7"}, 0x298}) (async) write$RDMA_USER_CM_CMD_ACCEPT(r5, &(0x7f0000001140)={0x8, 0x120, 0xfa00, {0x1, {0x6, 0x0, "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", 0x10, 0x9, 0x8, 0x3, 0x9, 0x0, 0x6}, r4}}, 0x128) (async) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000001280)) 331.920026ms ago: executing program 7 (id=2443): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x13, r2, 0x0) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x44800) ioctl$KVM_HAS_DEVICE_ATTR_vm(r1, 0x4018aee3, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000040)={0x101, 0x8}}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800000019008111e0020f060d8107040a60000060020000000455a12a00090008000699e3ffffff14000500fe80817806000500000000000074d67f6f9400f7d1d9bbe94fa27108a007a240c77f01896034277ce06bbace8037cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2366e4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad96267e004dcdf634c1f215ce3bb9ad809d50b69b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51f9ffffff000000000000000000f49956e4f98b53ced9802b", 0xd8}], 0x1}, 0x4008040) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r4, 0x5601, 0x0) 330.56692ms ago: executing program 1 (id=2444): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000100)={@pptp={0x18, 0x2, {0x1, @private=0xa010101}}, {0x0}, 0x0}, 0xa0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000340)=0x8, &(0x7f0000000380)=0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socket$rds(0x15, 0x5, 0x0) (async) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000100)={@pptp={0x18, 0x2, {0x1, @private=0xa010101}}, {0x0}, 0x0}, 0xa0) (async) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000340)=0x8, &(0x7f0000000380)=0x2) (async) 212.066833ms ago: executing program 1 (id=2445): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r0 = socket$inet6(0xa, 0x802, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f00000001c0)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, &(0x7f0000000000)=0x46, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e24, @remote}, {0x2, 0x4e21, @remote}, 0x31, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000040)='syzkaller0\x00', 0x1, 0x849a, 0x5}) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000180)={0x9, 0x1, 0x1, 0x0, 0x9d}) 131.617343ms ago: executing program 7 (id=2446): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000016c0)={&(0x7f0000000200)=@hci={0x1f, 0x1, 0x4}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000280)="53299297a14c5b03fb7f37baa6ba374b43301d9d995cf0886500875d07bf8090d4522aa7283798ce1527dac7651fd3774ad2569690cfa142526a8c5fe56c7e0d031a589af8af2cfd5dd068093fa3dd177d208f7a54eb81fbbc1c88ff60ee14a6f81284a1e097341e2b06", 0x6a}, {&(0x7f0000000300)="af9ccf3a49ad61cd126d40c00b6b2a0e19ea3aeca324cfbe39ac7d24f00ecc3b68c70c557b67ee0f2e7b0d31819ebc3287963fb199b73c15cac29f6b31232fd7c6d5f18468", 0x45}, {&(0x7f0000000380)="fbe362e4e9ccc3b3ad740f3c2bcbfd5415fe421ac6bab8b487edbcb2fee077a905b563ac187389ef3d0d148456d340af93df0ac003ad8049f3aec7ea18bcf0307bbe46bf808a413bbd4fc188177824c483791964ca7a7ccc402ad2a9a3fb90ef4ac033ea4059ed103a156b200e5f1b5028bf751deadac13ceed3aa04bcbef6a7b9f0036189062221bcae626b9a842979f477c497342884e774f5cf941ebaf4206d3f5a0efeb227c7bcc0281b4ef77fcc53e57a", 0xb3}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="ba30cd8222d25dd722205e105411dccd0ee39950d72ae477c74129a1e5a96cb411b260edc56a75b54fc3d534b55338e1f39c87ab7b02a2eac80cb0da560c45a6dcfd61c2cb49bb3cbccb8cef5a4c30383417f325362b390e18ea27a494c8fd1502796c93e798ac17612e71e65612261f78f261935950337c3718cc70fc8977ff24287a60851f6f12cd89164922cf86801353a6e1ac828cf5d3d30b09b224c7d1d216bed12223c633fd715e5515f334729f0f1ab09c587e353afe3ae1591d75195c4010b18adde140539162eb6fad3736d4097b60a3189f2c59b8b8e3133fbdbf9de40e39c6", 0xe5}, {&(0x7f0000001540)="e24643aedb93670f13937ed066b4be69ce35f4fb064dfde8e719e92143e75d3f067b7878b1bd18a9047e94321fb5370bfa2c904332ff93452f4e665aa7141f18f938b6bfbc42da277d0d0edebd8bc176c13c0087bb35e5aa735f9771560740af7b439b57e3c81627c6355c6abd523a159df31e123315bbe2c0cff9ce5ced160d6409834d12cc9694c50213c72d956b3d46c5269b29265ab72b06b36a86446404813c945a39f796fd67680805fbe90bd333af577efb5b3c93cc80357bf1ae399fc2c27207d27647777866bc09d4791191bb4f307f16aa717aa4e3c45e1860cc9dadedd942d60189b3ff5838", 0xeb}], 0x6}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x10, 0x0, &(0x7f0000002580)="f0b9547ee7affa9daabd309a75d387db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002240)={0x0, 0x0}) openat$mice(0xffffffffffffff9c, &(0x7f0000002300), 0x0) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000002300), 0x0) socket(0x2, 0x80805, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000001040)=@assoc_value, &(0x7f0000000080)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000001040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000001080)={r6, 0xfff}, &(0x7f00000010c0)=0x8) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100000000000000000008"], 0x14}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000002340)={r6, 0xfffffffc}, &(0x7f0000002380)=0x8) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000002340)={r6, 0xfffffffc}, &(0x7f0000002380)=0x8) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r8) (async) close(r8) r9 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x2, {0xa, 0x4e22, 0x2, @loopback, 0x3}}}, 0x80, 0x0}, 0x2000f765) ioctl$SIOCSIFHWADDR(r8, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast}) syz_open_procfs(r2, &(0x7f00000022c0)='oom_adj\x00') 62.317293ms ago: executing program 7 (id=2447): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat\x00') read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c2d7f00", @ANYRESOCT=r1, @ANYBLOB="01002bbd7000fcdbdf255900000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x40) 1.278106ms ago: executing program 7 (id=2448): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x1006, 0x8, 0xae, 0x0, 0x1, 0x20727ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0d00000002000000040000000640000005000000", @ANYRES32=r3], 0x50) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x240080d8}, 0x0) 0s ago: executing program 1 (id=2449): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@getstats={0x1c, 0x5e, 0x10, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) ptrace$ARCH_SET_GS(0x1e, r3, 0x0, 0x1001) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="cf0004000000ffdbdf251200000008000300", @ANYRES32=r7, @ANYBLOB="0a0006000802310400010000140081"], 0x3c}, 0x1, 0x0, 0x0, 0x45}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0xd22, 0x1a1802) capset(0x0, &(0x7f0000000100)={0x200000, 0x4, 0x4, 0x0, 0x6b20, 0x8}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x606c) kernel console output (not intermixed with test programs): arge, truncated to 1048576 [ 136.381958][T11127] xt_CT: You must specify a L4 protocol and not use inversions on it [ 136.680495][T11161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1549'. [ 136.756452][T11171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1553'. [ 136.769335][T11169] loop2: detected capacity change from 0 to 7 [ 136.773537][T11169] loop2: [ 136.774499][T11169] loop2: partition table partially beyond EOD, truncated [ 136.825857][T11173] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 136.827897][T11173] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 136.832231][T11173] vhci_hcd vhci_hcd.0: Device attached [ 136.835269][T11174] vhci_hcd: connection closed [ 136.837402][ T7335] vhci_hcd: stop threads [ 136.842992][ T7335] vhci_hcd: release socket [ 136.844424][ T7335] vhci_hcd: disconnect device [ 136.977524][T11184] xt_hashlimit: size too large, truncated to 1048576 [ 136.998926][T11181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1556'. [ 137.072399][T11188] FAULT_INJECTION: forcing a failure. [ 137.072399][T11188] name failslab, interval 1, probability 0, space 0, times 0 [ 137.076576][T11188] CPU: 1 UID: 0 PID: 11188 Comm: syz.3.1558 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 137.076592][T11188] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 137.076599][T11188] Call Trace: [ 137.076603][T11188] [ 137.076608][T11188] dump_stack_lvl+0x16c/0x1f0 [ 137.076628][T11188] should_fail_ex+0x512/0x640 [ 137.076643][T11188] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 137.076657][T11188] should_failslab+0xc2/0x120 [ 137.076674][T11188] __kmalloc_cache_noprof+0x6a/0x3e0 [ 137.076686][T11188] ? subflow_create_ctx+0x9b/0x2c0 [ 137.076706][T11188] subflow_create_ctx+0x9b/0x2c0 [ 137.076723][T11188] subflow_ulp_init+0xc3/0x4d0 [ 137.076741][T11188] tcp_set_ulp+0x326/0x7f0 [ 137.076755][T11188] mptcp_subflow_create_socket+0x361/0xed0 [ 137.076767][T11188] ? avc_has_perm_noaudit+0x2bd/0x3b0 [ 137.076779][T11188] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 137.076796][T11188] __mptcp_nmpc_sk+0x182/0x7d0 [ 137.076810][T11188] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 137.076840][T11188] ? __lock_acquire+0xb8a/0x1c90 [ 137.076861][T11188] mptcp_connect+0x7f/0xfe0 [ 137.076876][T11188] __inet_stream_connect+0x3c8/0x1020 [ 137.076894][T11188] ? __pfx___inet_stream_connect+0x10/0x10 [ 137.076909][T11188] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 137.076923][T11188] ? __pfx_inet_stream_connect+0x10/0x10 [ 137.076938][T11188] ? __local_bh_enable_ip+0xa4/0x120 [ 137.076953][T11188] ? __pfx_inet_stream_connect+0x10/0x10 [ 137.076967][T11188] inet_stream_connect+0x57/0xa0 [ 137.076982][T11188] __sys_connect_file+0x141/0x1a0 [ 137.077003][T11188] __sys_connect+0x13b/0x160 [ 137.077016][T11188] ? __pfx___sys_connect+0x10/0x10 [ 137.077035][T11188] ? __pfx_ksys_write+0x10/0x10 [ 137.077052][T11188] __x64_sys_connect+0x72/0xb0 [ 137.077064][T11188] ? lockdep_hardirqs_on+0x7c/0x110 [ 137.077080][T11188] do_syscall_64+0xcd/0x4c0 [ 137.077098][T11188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.077109][T11188] RIP: 0033:0x7f66ba38e929 [ 137.077119][T11188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.077130][T11188] RSP: 002b:00007f66bb1f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 137.077141][T11188] RAX: ffffffffffffffda RBX: 00007f66ba5b5fa0 RCX: 00007f66ba38e929 [ 137.077147][T11188] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000003 [ 137.077154][T11188] RBP: 00007f66bb1f1090 R08: 0000000000000000 R09: 0000000000000000 [ 137.077160][T11188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 137.077166][T11188] R13: 0000000000000000 R14: 00007f66ba5b5fa0 R15: 00007ffce82a7f38 [ 137.077180][T11188] [ 137.160751][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.221124][T11192] syz.3.1560: attempt to access beyond end of device [ 137.221124][T11192] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 137.225044][T11192] efs: cannot read volume header [ 137.248211][T11194] dvmrp1: entered allmulticast mode [ 137.303329][T11198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1562'. [ 137.306084][T11198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1562'. [ 137.308804][T11198] netlink: 'syz.3.1562': attribute type 11 has an invalid length. [ 137.322448][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1563'. [ 137.325276][T11200] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1563'. [ 137.328199][T11200] netlink: 'syz.5.1563': attribute type 6 has an invalid length. [ 137.544568][T11221] xt_hashlimit: size too large, truncated to 1048576 [ 137.549796][ T5947] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 137.763481][T11238] syz_tun: entered allmulticast mode [ 137.816677][T11241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=11241 comm=syz.6.1573 [ 138.125511][T11253] syz.3.1580: attempt to access beyond end of device [ 138.125511][T11253] nbd3: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 138.129814][T11253] gfs2: error -5 reading superblock [ 138.162807][T11234] syz_tun: left allmulticast mode [ 138.179432][ T836] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 138.236745][T11255] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=11255 comm=syz.3.1581 [ 138.241922][T11257] xt_hashlimit: size too large, truncated to 1048576 [ 138.339237][ T836] usb 6-1: Using ep0 maxpacket: 8 [ 138.380863][ T836] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.384707][ T836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.387983][ T836] usb 6-1: Product: Ћ [ 138.391710][ T836] usb 6-1: Manufacturer: ㉠[ 138.393720][ T836] usb 6-1: SerialNumber: 䀎耰뭪㒄ះ픙â—䙀ԭ犾ꬩ཈ [ 138.522034][T11267] bridge2: entered promiscuous mode [ 138.592533][T11274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.624305][ T836] cdc_ncm 6-1:1.0: bind() failure [ 138.627824][ T836] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 138.632614][ T836] cdc_ncm 6-1:1.1: bind() failure [ 138.637087][ T836] usb 6-1: USB disconnect, device number 12 [ 138.730609][ T40] kauditd_printk_skb: 1406 callbacks suppressed [ 138.730621][ T40] audit: type=1400 audit(1750168784.476:10363): avc: denied { create } for pid=11284 comm="syz.3.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 138.743088][T11285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=11285 comm=syz.3.1592 [ 138.749574][ T40] audit: type=1400 audit(1750168784.476:10364): avc: denied { write } for pid=11284 comm="syz.3.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 138.756520][ T40] audit: type=1400 audit(1750168784.486:10365): avc: denied { create } for pid=11283 comm="syz.5.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 138.764365][ T40] audit: type=1400 audit(1750168784.486:10366): avc: denied { bind } for pid=11283 comm="syz.5.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 138.771031][ T40] audit: type=1400 audit(1750168784.486:10367): avc: denied { create } for pid=11283 comm="syz.5.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 138.772394][ T54] IPVS: starting estimator thread 0... [ 138.777160][ T40] audit: type=1400 audit(1750168784.486:10368): avc: denied { ioctl } for pid=11284 comm="syz.3.1592" path="socket:[37295]" dev="sockfs" ino=37295 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 138.777190][ T40] audit: type=1400 audit(1750168784.496:10369): avc: denied { write } for pid=11283 comm="syz.5.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 138.799328][T11288] loop2: detected capacity change from 0 to 7 [ 138.803914][T11288] loop2: [ 138.805290][T11288] loop2: partition table partially beyond EOD, truncated [ 138.832066][ T40] audit: type=1400 audit(1750168784.496:10370): avc: denied { read } for pid=11283 comm="syz.5.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 138.838842][ T40] audit: type=1400 audit(1750168784.496:10371): avc: denied { read } for pid=11283 comm="syz.5.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 138.845709][ T40] audit: type=1400 audit(1750168784.496:10372): avc: denied { create } for pid=11283 comm="syz.5.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 138.879299][T11289] IPVS: using max 42 ests per chain, 100800 per kthread [ 139.406894][T11318] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002 [ 139.593544][T11333] usb usb9: usbfs: process 11333 (syz.1.1607) did not claim interface 0 before use [ 139.696506][T11336] xt_hashlimit: size too large, truncated to 1048576 [ 139.816991][T11340] netlink: 'syz.6.1609': attribute type 1 has an invalid length. [ 139.833026][T11340] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.844541][T11340] bond2: (slave geneve2): making interface the new active one [ 139.848324][T11340] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 139.855828][T11340] random: crng reseeded on system resumption [ 139.893372][T11340] veth3: entered promiscuous mode [ 139.898850][T11340] bond2: (slave veth3): Enslaving as an active interface with a down link [ 139.916653][T11340] vlan2: entered allmulticast mode [ 139.918940][T11340] bond2: entered allmulticast mode [ 139.921189][T11340] geneve2: entered allmulticast mode [ 139.924824][T11340] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 140.036317][T11348] xt_hashlimit: size too large, truncated to 1048576 [ 140.748912][T11365] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 140.753217][T11365] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 141.193121][T11384] xt_hashlimit: size too large, truncated to 1048576 [ 141.415812][T11394] xt_hashlimit: size too large, truncated to 1048576 [ 141.630805][T11403] __nla_validate_parse: 11 callbacks suppressed [ 141.630817][T11403] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1627'. [ 141.811555][T11413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1630'. [ 142.259953][T11446] fuse: Bad value for 'fd' [ 142.276199][T11443] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 142.390376][T11459] netlink: 'syz.5.1641': attribute type 2 has an invalid length. [ 142.563752][T11470] fuse: Bad value for 'fd' [ 142.641174][T11475] 9pnet: Unknown protocol version 9p20\++} [ 142.646721][T11475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1646'. [ 142.649752][T11475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1646'. [ 142.847385][T11491] syz.5.1650: attempt to access beyond end of device [ 142.847385][T11491] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 143.042721][T11495] loop2: detected capacity change from 0 to 7 [ 143.046959][T11495] loop2: [ 143.047986][T11495] loop2: partition table partially beyond EOD, truncated [ 143.168158][T11497] overlayfs: missing 'lowerdir' [ 143.327007][T11501] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000004 [ 143.338019][T11503] nft_compat: unsupported protocol 0 [ 143.469491][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1658'. [ 143.600086][T11513] /dev/sg0: Can't lookup blockdev [ 143.603898][T11509] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1659'. [ 143.616971][T11514] loop2: detected capacity change from 0 to 7 [ 143.622847][T11514] loop2: [ 143.623850][T11514] loop2: partition table partially beyond EOD, truncated [ 143.739239][ T40] kauditd_printk_skb: 1043 callbacks suppressed [ 143.739249][ T40] audit: type=1400 audit(1750168789.486:11416): avc: denied { write } for pid=11519 comm="syz.6.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 143.749819][ T40] audit: type=1400 audit(1750168789.486:11417): avc: denied { perfmon } for pid=11517 comm="syz.1.1662" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 143.789964][ T40] audit: type=1400 audit(1750168789.486:11418): avc: denied { perfmon } for pid=11517 comm="syz.1.1662" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 143.798271][ T40] audit: type=1400 audit(1750168789.486:11419): avc: denied { bpf } for pid=11517 comm="syz.1.1662" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 143.822219][ T40] audit: type=1400 audit(1750168789.486:11420): avc: denied { module_request } for pid=11520 comm="syz.3.1663" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 143.831489][ T40] audit: type=1400 audit(1750168789.496:11421): avc: denied { ioctl } for pid=11519 comm="syz.6.1664" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64c6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 143.840014][ T40] audit: type=1400 audit(1750168789.506:11422): avc: denied { read open } for pid=11519 comm="syz.6.1664" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 143.847625][ T40] audit: type=1400 audit(1750168789.506:11423): avc: denied { read write } for pid=5935 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 143.855699][ T40] audit: type=1400 audit(1750168789.506:11424): avc: denied { read write open } for pid=5935 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 143.864127][ T40] audit: type=1400 audit(1750168789.506:11425): avc: denied { ioctl } for pid=5935 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 143.954020][T11536] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1667'. [ 144.114162][T11546] program syz.1.1668 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.128957][T11547] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=23 sclass=netlink_audit_socket pid=11547 comm=syz.6.1669 [ 144.145265][T11542] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=11542 comm=syz.6.1669 [ 144.441231][T11560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1676'. [ 144.506610][T11573] 9pnet_virtio: no channels available for device syz [ 144.709536][T11585] tmpfs: Bad value for 'mpol' [ 144.996459][T11592] geneve2: entered promiscuous mode [ 144.998174][T11592] geneve2: entered allmulticast mode [ 145.158513][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1687'. [ 145.162073][T11598] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1687'. [ 145.210373][T11597] netlink: 'syz.6.1687': attribute type 7 has an invalid length. [ 145.496404][T11613] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 145.498205][T11612] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 145.767235][T11623] openvswitch: netlink: IP tunnel dst address not specified [ 146.174171][T11639] input: syz0 as /devices/virtual/input/input13 [ 146.261040][T11641] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.263777][T11641] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.266407][T11641] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.269061][T11641] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.343359][T11643] block device autoloading is deprecated and will be removed. [ 146.492792][T11651] netlink: 'syz.6.1703': attribute type 21 has an invalid length. [ 146.637000][T11655] sp0: Synchronizing with TNC [ 146.645488][T11655] xt_hashlimit: size too large, truncated to 1048576 [ 146.838122][T11661] __nla_validate_parse: 6 callbacks suppressed [ 146.838139][T11661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1708'. [ 146.849461][T11661] netlink: 29 bytes leftover after parsing attributes in process `syz.1.1708'. [ 146.982988][T11668] Device name cannot be null; rc = [-22] [ 147.148040][T11682] nbd: must specify at least one socket [ 147.157429][T11682] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 147.159515][T11682] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 147.163313][T11682] vhci_hcd vhci_hcd.0: Device attached [ 147.166806][T11687] vhci_hcd: connection closed [ 147.167010][ T7334] vhci_hcd: stop threads [ 147.170769][ T7334] vhci_hcd: release socket [ 147.172226][ T7334] vhci_hcd: disconnect device [ 147.578458][T11713] syzkaller0: tun_chr_ioctl cmd 35092 [ 147.582963][T11713] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 147.585461][T11713] syzkaller0: linktype set to 65535 [ 147.836695][T11715] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 147.969727][ T5946] Bluetooth: hci3: command 0x0405 tx timeout [ 148.514956][T11730] netlink: 'syz.1.1727': attribute type 1 has an invalid length. [ 148.517474][T11730] netlink: 'syz.1.1727': attribute type 2 has an invalid length. [ 148.525824][T11730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1727'. [ 148.773437][ T40] kauditd_printk_skb: 2889 callbacks suppressed [ 148.773449][ T40] audit: type=1400 audit(1750168794.506:14315): avc: denied { create } for pid=11738 comm="syz.1.1730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 148.776762][T11739] xt_hashlimit: size too large, truncated to 1048576 [ 148.794448][ T40] audit: type=1400 audit(1750168794.516:14316): avc: denied { create } for pid=11738 comm="syz.1.1730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.803565][ T40] audit: type=1400 audit(1750168794.516:14317): avc: denied { read } for pid=11738 comm="syz.1.1730" name="system" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.820803][ T40] audit: type=1400 audit(1750168794.516:14318): avc: denied { read open } for pid=11738 comm="syz.1.1730" path="/dev/dma_heap/system" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.831409][ T40] audit: type=1400 audit(1750168794.516:14319): avc: denied { ioctl } for pid=11738 comm="syz.1.1730" path="/dev/dma_heap/system" dev="devtmpfs" ino=712 ioctlcmd=0x4800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.851535][ T40] audit: type=1400 audit(1750168794.516:14320): avc: denied { read write } for pid=11738 comm="syz.1.1730" name="radio0" dev="devtmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 148.858791][ T40] audit: type=1400 audit(1750168794.516:14321): avc: denied { read write open } for pid=11738 comm="syz.1.1730" path="/dev/radio0" dev="devtmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 148.874349][ T40] audit: type=1400 audit(1750168794.516:14322): avc: denied { ioctl } for pid=11738 comm="syz.1.1730" path="/dev/radio0" dev="devtmpfs" ino=981 ioctlcmd=0x5647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 148.885172][ T40] audit: type=1400 audit(1750168794.516:14323): avc: denied { setopt } for pid=11738 comm="syz.1.1730" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.902004][ T40] audit: type=1400 audit(1750168794.536:14324): avc: denied { module_request } for pid=11738 comm="syz.1.1730" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 149.030848][T11745] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 149.034451][T11745] overlayfs: failed to set xattr on upper [ 149.036300][T11745] overlayfs: ...falling back to redirect_dir=nofollow. [ 149.038384][T11745] overlayfs: ...falling back to index=off. [ 149.046429][T11745] overlayfs: ...falling back to uuid=null. [ 149.048259][T11745] overlayfs: ...falling back to xino=off. [ 149.059058][T11745] overlayfs: conflicting lowerdir path [ 149.796460][ T5946] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 150.600453][T11772] orangefs_mount: mount request failed with -4 [ 150.692051][T11795] hsr0: entered promiscuous mode [ 150.694067][T11795] macsec1: entered allmulticast mode [ 150.695737][T11795] hsr0: entered allmulticast mode [ 150.697475][T11795] hsr_slave_0: entered allmulticast mode [ 150.699752][T11795] hsr_slave_1: entered allmulticast mode [ 150.709709][T11795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11795 comm=syz.6.1747 [ 150.805689][T11802] usb usb8: usbfs: process 11802 (syz.3.1751) did not claim interface 0 before use [ 151.089530][ T5946] Bluetooth: hci3: command 0x0405 tx timeout [ 151.673860][T11837] xt_hashlimit: size too large, truncated to 1048576 [ 151.681242][T11833] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 151.921039][T11850] loop2: detected capacity change from 0 to 7 [ 151.929684][T11850] loop2: [ 151.930743][T11850] loop2: partition table partially beyond EOD, truncated [ 152.067638][T11856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1768'. [ 152.244791][T11869] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 152.246872][T11869] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 152.251708][T11869] vhci_hcd vhci_hcd.0: Device attached [ 152.299234][T11866] block nbd5: Device being setup by another task [ 152.303702][T11857] block nbd5: shutting down sockets [ 152.489335][ T836] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 152.615362][T11888] loop2: detected capacity change from 0 to 7 [ 152.624340][ T6326] loop2: [ 152.625673][ T6326] loop2: partition table partially beyond EOD, truncated [ 152.632865][T11888] loop2: [ 152.633944][T11888] loop2: partition table partially beyond EOD, truncated [ 152.723872][T11891] xt_hashlimit: size too large, truncated to 1048576 [ 152.985391][T11893] Invalid option length (1048180) for dns_resolver key [ 153.083340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 153.090041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 153.516070][T11917] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 153.632335][T11922] xt_hashlimit: size too large, truncated to 1048576 [ 153.713489][T11927] netlink: 'syz.5.1790': attribute type 1 has an invalid length. [ 153.728394][T11927] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.737701][T11927] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 153.763873][T11927] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1790'. [ 153.794305][ T40] kauditd_printk_skb: 913 callbacks suppressed [ 153.794317][ T40] audit: type=1400 audit(1750168799.536:15238): avc: denied { read write } for pid=8323 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 153.819246][ T40] audit: type=1400 audit(1750168799.536:15239): avc: denied { read write open } for pid=8323 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 153.826987][ T40] audit: type=1400 audit(1750168799.536:15240): avc: denied { ioctl } for pid=8323 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 153.858332][ T40] audit: type=1400 audit(1750168799.546:15241): avc: denied { read write } for pid=10608 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 153.866328][ T40] audit: type=1400 audit(1750168799.546:15242): avc: denied { read write open } for pid=10608 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 153.874107][ T40] audit: type=1400 audit(1750168799.546:15243): avc: denied { ioctl } for pid=10608 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 153.882447][ T40] audit: type=1400 audit(1750168799.586:15244): avc: denied { read write } for pid=11930 comm="syz.6.1792" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 153.889832][ T40] audit: type=1400 audit(1750168799.586:15245): avc: denied { read write open } for pid=11930 comm="syz.6.1792" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 153.897625][ T40] audit: type=1400 audit(1750168799.586:15246): avc: denied { read write } for pid=11930 comm="syz.6.1792" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 153.905208][ T40] audit: type=1400 audit(1750168799.586:15247): avc: denied { read write open } for pid=11930 comm="syz.6.1792" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 153.952203][T11941] loop2: detected capacity change from 0 to 7 [ 153.956220][T11941] loop2: [ 153.957214][T11941] loop2: partition table partially beyond EOD, truncated [ 154.482287][T11952] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 154.663274][T11958] xt_hashlimit: size too large, truncated to 1048576 [ 155.162752][ T5983] hid-generic 0000:0006:0000.0006: unknown main item tag 0x0 [ 155.165154][ T5983] hid-generic 0000:0006:0000.0006: unknown main item tag 0x0 [ 155.167510][ T5983] hid-generic 0000:0006:0000.0006: unknown main item tag 0x0 [ 155.189421][ T5983] hid-generic 0000:0006:0000.0006: hidraw1: HID v4.00 Device [syz0] on syz1 [ 155.251765][T11870] vhci_hcd: connection reset by peer [ 155.253811][ T7334] vhci_hcd: stop threads [ 155.255580][ T7334] vhci_hcd: release socket [ 155.257439][ T7334] vhci_hcd: disconnect device [ 155.309629][T11986] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1807'. [ 155.404230][T11988] xt_hashlimit: size too large, truncated to 1048576 [ 155.481772][T11986] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1807'. [ 155.486856][T11994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1809'. [ 155.572098][T11996] xt_hashlimit: size too large, truncated to 1048576 [ 156.005873][T12018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5401 sclass=netlink_route_socket pid=12018 comm=syz.5.1816 [ 156.010999][T12018] ptrace attach of "/syz-executor exec"[8323] was attempted by "/syz-executor exec"[12018] [ 156.097261][T12023] loop2: detected capacity change from 0 to 7 [ 156.103951][T12023] loop2: [ 156.105472][T12023] loop2: partition table partially beyond EOD, truncated [ 156.392998][T12032] xt_hashlimit: size too large, truncated to 1048576 [ 156.482424][T12039] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1823'. [ 156.687381][T12041] syzkaller1: entered promiscuous mode [ 156.699199][T12041] syzkaller1: entered allmulticast mode [ 156.737347][T12044] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1826'. [ 156.742190][T12043] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1826'. [ 156.777317][T12046] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 156.951770][T12044] team0 (unregistering): Port device team_slave_0 removed [ 156.968883][T12044] team0 (unregistering): Port device team_slave_1 removed [ 157.224959][T12054] netlink: 'syz.3.1829': attribute type 21 has an invalid length. [ 157.227457][T12054] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1829'. [ 157.247192][T12058] syzkaller0: entered allmulticast mode [ 157.256629][T12058] syzkaller0 (unregistering): left allmulticast mode [ 157.453692][T12069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1833'. [ 157.624126][T12079] trusted_key: encrypted_key: master key parameter is missing [ 157.679445][ T836] vhci_hcd: vhci_device speed not set [ 157.759927][T12083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1837'. [ 157.762765][T12083] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1837'. [ 157.765702][T12083] netlink: 'syz.5.1837': attribute type 13 has an invalid length. [ 158.056441][T12099] random: crng reseeded on system resumption [ 158.304472][T12112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1846'. [ 158.311427][T12113] loop2: detected capacity change from 0 to 7 [ 158.314277][T12113] loop2: [ 158.315257][T12113] loop2: partition table partially beyond EOD, truncated [ 158.390433][T12115] ufs: You didn't specify the type of your ufs filesystem [ 158.390433][T12115] [ 158.390433][T12115] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 158.390433][T12115] [ 158.390433][T12115] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 158.400922][T12115] ufs: failed to set blocksize [ 158.493342][T12121] bond0: entered promiscuous mode [ 158.494950][T12121] bond_slave_0: entered promiscuous mode [ 158.496767][T12121] bond_slave_1: entered promiscuous mode [ 158.799900][ T40] kauditd_printk_skb: 1001 callbacks suppressed [ 158.799911][ T40] audit: type=1400 audit(1750168804.546:16249): avc: denied { getopt } for pid=12132 comm="syz.5.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 158.808606][ T40] audit: type=1400 audit(1750168804.546:16250): avc: denied { create } for pid=12132 comm="syz.5.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 158.818919][ T40] audit: type=1400 audit(1750168804.546:16251): avc: denied { create } for pid=12132 comm="syz.5.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 158.826979][ T40] audit: type=1400 audit(1750168804.546:16252): avc: denied { read write } for pid=5935 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.836644][ T40] audit: type=1400 audit(1750168804.546:16253): avc: denied { create } for pid=12132 comm="syz.5.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 158.850347][ T40] audit: type=1400 audit(1750168804.546:16254): avc: denied { read write open } for pid=5935 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.867327][ T40] audit: type=1400 audit(1750168804.546:16255): avc: denied { ioctl } for pid=5935 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.876593][ T40] audit: type=1400 audit(1750168804.546:16256): avc: denied { write } for pid=12132 comm="syz.5.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 158.882981][ T40] audit: type=1400 audit(1750168804.546:16257): avc: denied { read } for pid=12132 comm="syz.5.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 158.889235][ T40] audit: type=1400 audit(1750168804.546:16258): avc: denied { read } for pid=12132 comm="syz.5.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 158.931597][T12145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1856'. [ 159.284349][T12158] syzkaller1: entered promiscuous mode [ 159.284532][T12160] overlayfs: failed to resolve 'Ý ŸÇ×õ0Töj–': -2 [ 159.285428][T12161] overlayfs: failed to resolve 'Ý ŸÇ×õ0Töj–': -2 [ 159.286225][T12158] syzkaller1: entered allmulticast mode [ 159.712937][T12171] sp0: Synchronizing with TNC [ 160.038491][T12181] loop2: detected capacity change from 0 to 7 [ 160.043664][T12181] loop2: [ 160.044746][T12181] loop2: partition table partially beyond EOD, truncated [ 160.258050][T12193] syz.6.1867: attempt to access beyond end of device [ 160.258050][T12193] loop6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 160.351093][T12197] tmpfs: Invalid gid '0x00000000ffffffff' [ 160.357429][T12197] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.578227][T12214] ip6t_srh: unknown srh match flags 4000 [ 160.983189][T12240] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 161.112539][T12249] loop6: detected capacity change from 0 to 524287999 [ 161.159204][ T3339] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 161.333820][ T5947] Bluetooth: hci3: command 0x0405 tx timeout [ 161.343773][ T3339] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.347173][ T3339] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.352448][ T3339] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 161.356424][ T3339] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.361056][ T3339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.366139][ T3339] usb 6-1: config 0 descriptor?? [ 161.648012][T12257] sp0: Synchronizing with TNC [ 161.652298][T12257] [U] è [ 161.735214][T12257] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1888'. [ 161.738222][T12257] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1888'. [ 161.782562][ T3339] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 161.785927][ T3339] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 161.804009][ T3339] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 162.268710][T12276] netlink: 1136 bytes leftover after parsing attributes in process `syz.5.1892'. [ 162.444456][T12287] openvswitch: netlink: IPv4 tunnel dst address is zero [ 162.479035][T12289] batadv_slave_1: entered promiscuous mode [ 162.532986][T12292] netlink: 'syz.5.1896': attribute type 10 has an invalid length. [ 162.543563][T12293] vlan0: entered promiscuous mode [ 162.545219][T12293] bridge0: entered promiscuous mode [ 162.546936][T12293] vlan0: entered allmulticast mode [ 162.548604][T12293] bridge0: entered allmulticast mode [ 162.555898][T12293] batman_adv: batadv0: Interface deactivated: dummy0 [ 162.558056][T12293] batman_adv: batadv0: Removing interface: dummy0 [ 162.563772][T12293] bridge_slave_0: left allmulticast mode [ 162.565556][T12293] bridge_slave_0: left promiscuous mode [ 162.567404][T12293] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.575105][T12293] bridge_slave_1: left allmulticast mode [ 162.577273][T12293] bridge_slave_1: left promiscuous mode [ 162.579257][T12293] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.585237][T12293] bond0: (slave bond_slave_0): Releasing backup interface [ 162.594720][T12293] bond0: (slave bond_slave_1): Releasing backup interface [ 162.600132][T12293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.603191][T12293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.606542][T12293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.608966][T12293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.622146][T12293] bond0: (slave wlan1): Releasing backup interface [ 163.129278][ T3339] usb 6-1: reset high-speed USB device number 13 using dummy_hcd [ 163.254664][T12284] batadv_slave_1: left promiscuous mode [ 163.261553][T12285] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 163.264760][T12285] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 163.266741][T12285] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 163.276601][T12285] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 163.284760][T12285] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 163.443991][T12311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1902'. [ 163.464854][T12308] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 163.523170][T12315] tmpfs: Bad value for 'mpol' [ 163.600115][T12320] overlayfs: failed to resolve './file0': -2 [ 163.810617][ T40] kauditd_printk_skb: 828 callbacks suppressed [ 163.810628][ T40] audit: type=1400 audit(1750168809.556:17087): avc: denied { shutdown } for pid=12327 comm="syz.3.1910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 163.850751][ T40] audit: type=1400 audit(1750168809.596:17088): avc: denied { mount } for pid=12335 comm="syz.5.1911" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 163.867018][ T40] audit: type=1400 audit(1750168809.606:17089): avc: denied { read write } for pid=12337 comm="syz.6.1912" name="video0" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 163.875131][ T40] audit: type=1400 audit(1750168809.606:17090): avc: denied { read write open } for pid=12337 comm="syz.6.1912" path="/dev/video0" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 163.883238][ T40] audit: type=1400 audit(1750168809.606:17091): avc: denied { ioctl } for pid=12337 comm="syz.6.1912" path="/dev/video0" dev="devtmpfs" ino=956 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 163.891535][ T40] audit: type=1400 audit(1750168809.606:17092): avc: denied { map_create } for pid=12335 comm="syz.5.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 163.903385][ T40] audit: type=1400 audit(1750168809.606:17093): avc: denied { perfmon } for pid=12335 comm="syz.5.1911" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 163.910476][ T40] audit: type=1400 audit(1750168809.606:17094): avc: denied { map_read map_write } for pid=12335 comm="syz.5.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 163.918328][ T40] audit: type=1400 audit(1750168809.606:17095): avc: denied { map_create } for pid=12335 comm="syz.5.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 163.924755][ T40] audit: type=1400 audit(1750168809.606:17096): avc: denied { map_read map_write } for pid=12335 comm="syz.5.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 164.240169][ T5946] Bluetooth: hci3: Malformed LE Event: 0x0b [ 164.299435][ T5946] Bluetooth: hci3: Malformed LE Event: 0x0b [ 164.324009][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1919'. [ 164.433641][T12368] netlink: 'syz.1.1920': attribute type 30 has an invalid length. [ 164.436613][T12368] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 164.443471][T12368] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 164.514501][T12372] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 164.520494][T12372] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 164.540192][T12372] overlayfs: conflicting lowerdir path [ 164.541250][ T5946] Bluetooth: hci1: command 0x0c1a tx timeout [ 164.595491][T12376] overlayfs: failed to resolve './file1': -2 [ 164.680439][T12380] NILFS (nbd1): device size too small [ 164.694332][ T54] usb 6-1: USB disconnect, device number 13 [ 164.706991][T12383] nftables ruleset with unbound chain [ 164.756880][T12383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=12383 comm=syz.3.1928 [ 165.192519][T12392] cgroup: fork rejected by pids controller in /syz3 [ 165.243859][T12430] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1933'. [ 165.329470][ T5946] Bluetooth: hci3: command 0x0405 tx timeout [ 165.404322][T12440] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 165.817331][T12459] bond0: entered promiscuous mode [ 165.955118][T12470] overlayfs: failed to resolve './file1': -2 [ 166.080131][T12475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1942'. [ 166.188631][T12481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1945'. [ 166.332347][T12485] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.336494][T12485] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.409474][ T836] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 166.426152][T12485] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.430986][T12485] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.449388][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 166.534766][T12485] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.538125][T12485] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.549288][ T836] usb 6-1: device descriptor read/64, error -71 [ 166.631662][T12485] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.635014][T12485] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.741191][T12485] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.744795][T12485] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.757775][T12485] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.761868][T12485] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.769045][T12485] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.771709][T12485] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.780567][T12485] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.784136][T12485] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.809226][ T836] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 166.883390][T12499] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 166.969535][ T836] usb 6-1: device descriptor read/64, error -71 [ 166.985362][T12506] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 166.999681][T12503] overlayfs: failed to resolve 'metacopy=on': -2 [ 167.098901][ T836] usb usb6-port1: attempt power cycle [ 167.254546][T12520] usb 1-1: USB disconnect, device number 2 [ 167.409433][ T63] Bluetooth: hci3: command 0x0405 tx timeout [ 167.459248][ T836] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 167.491339][ T836] usb 6-1: device descriptor read/8, error -71 [ 167.551072][T12533] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1967'. [ 167.593848][T12539] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 167.729304][ T836] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 167.752395][ T836] usb 6-1: device descriptor read/8, error -71 [ 167.851222][T12553] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1972'. [ 167.854200][T12553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1972'. [ 167.860659][ T836] usb usb6-port1: unable to enumerate USB device [ 167.909285][ T5837] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 168.082681][ T5837] usb 10-1: too many configurations: 27, using maximum allowed: 8 [ 168.098125][ T5837] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 168.102475][ T5837] usb 10-1: can't read configurations, error -61 [ 168.229485][ T5837] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 168.390685][ T5837] usb 10-1: too many configurations: 27, using maximum allowed: 8 [ 168.406633][ T5837] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 168.409013][ T5837] usb 10-1: can't read configurations, error -61 [ 168.414578][ T5837] usb usb10-port1: attempt power cycle [ 168.769480][ T5837] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 168.793776][ T5837] usb 10-1: too many configurations: 27, using maximum allowed: 8 [ 168.802357][ T5837] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 168.804705][ T5837] usb 10-1: can't read configurations, error -61 [ 168.869980][ T40] kauditd_printk_skb: 973 callbacks suppressed [ 168.869992][ T40] audit: type=1400 audit(1750168814.616:18070): avc: denied { read write } for pid=10608 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 168.882760][ T40] audit: type=1400 audit(1750168814.616:18071): avc: denied { read write open } for pid=10608 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 168.890573][ T40] audit: type=1400 audit(1750168814.616:18072): avc: denied { ioctl } for pid=10608 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 168.898473][ T40] audit: type=1400 audit(1750168814.626:18073): avc: denied { ioctl } for pid=12541 comm="syz.5.1969" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 168.941288][ T5837] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 168.943362][ T40] audit: type=1400 audit(1750168814.686:18074): avc: denied { read write } for pid=5936 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 168.952624][ T40] audit: type=1400 audit(1750168814.686:18075): avc: denied { read write open } for pid=5936 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 168.960365][ T40] audit: type=1400 audit(1750168814.686:18076): avc: denied { ioctl } for pid=5936 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 168.963087][ T5837] usb 10-1: too many configurations: 27, using maximum allowed: 8 [ 168.969337][ T40] audit: type=1400 audit(1750168814.706:18077): avc: denied { ioctl } for pid=12541 comm="syz.5.1969" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 168.979091][ T40] audit: type=1400 audit(1750168814.706:18078): avc: denied { ioctl } for pid=12541 comm="syz.5.1969" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 168.986052][ T5837] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 168.987890][ T40] audit: type=1400 audit(1750168814.706:18079): avc: denied { ioctl } for pid=12541 comm="syz.5.1969" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 168.990064][ T5837] usb 10-1: can't read configurations, error -61 [ 168.999478][ T5837] usb usb10-port1: unable to enumerate USB device [ 169.002475][T12567] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:20004 [ 169.015816][T12569] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 169.231529][T12573] tmpfs: Bad value for 'mpol' [ 169.322962][ C2] IPv4: Oversized IP packet from 172.20.20.170 [ 169.326543][ C2] IPv4: Oversized IP packet from 172.20.20.170 [ 169.331891][ C2] IPv4: Oversized IP packet from 172.20.20.170 [ 169.334997][ C2] IPv4: Oversized IP packet from 172.20.20.170 [ 169.338277][ C2] IPv4: Oversized IP packet from 172.20.20.170 [ 169.343349][ C2] IPv4: Oversized IP packet from 172.20.20.170 [ 169.347593][ C2] IPv4: Oversized IP packet from 172.20.20.170 [ 169.351129][ C3] IPv4: Oversized IP packet from 172.20.20.170 [ 169.354550][ C3] IPv4: Oversized IP packet from 172.20.20.170 [ 169.361006][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 169.488583][T12585] netlink: 'syz.6.1984': attribute type 21 has an invalid length. [ 169.492700][T12585] netlink: 'syz.6.1984': attribute type 6 has an invalid length. [ 169.495130][T12585] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1984'. [ 169.702656][T12594] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1988'. [ 169.794363][T12594] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.800064][T12594] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.804545][T12594] bond0 (unregistering): Released all slaves [ 170.223735][T12614] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1991'. [ 170.390626][T12620] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 170.610033][T12634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1998'. [ 170.777627][ T63] Bluetooth: hci3: command 0x0405 tx timeout [ 170.789072][T12645] gtp0: entered promiscuous mode [ 170.794305][T12643] Invalid ELF header magic: != ELF [ 171.056322][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2005'. [ 171.059263][T12657] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2005'. [ 171.205359][T12662] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 171.319436][ T6008] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 171.490017][ T6008] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 171.493823][ T6008] usb 11-1: config 0 interface 0 has no altsetting 0 [ 171.504711][ T6008] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 171.507566][ T6008] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 171.512350][ T6008] usb 11-1: Product: syz [ 171.513728][ T6008] usb 11-1: Manufacturer: syz [ 171.515233][ T6008] usb 11-1: SerialNumber: syz [ 171.519497][ T6008] usb 11-1: config 0 descriptor?? [ 171.532452][ T6008] usb 11-1: selecting invalid altsetting 0 [ 171.801489][ T836] usb 11-1: USB disconnect, device number 3 [ 171.813973][T12681] loop2: detected capacity change from 0 to 7 [ 171.826905][T12681] loop2: [ 171.827915][T12681] loop2: partition table partially beyond EOD, truncated [ 171.861442][T12685] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 171.863960][T12685] UDF-fs: Scanning with blocksize 512 failed [ 171.866441][T12685] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 171.868795][T12685] UDF-fs: Scanning with blocksize 1024 failed [ 171.874213][T12685] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 171.876657][T12685] UDF-fs: Scanning with blocksize 2048 failed [ 171.879051][T12685] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 171.882320][T12685] UDF-fs: Scanning with blocksize 4096 failed [ 171.914697][T12685] syz.5.2017: attempt to access beyond end of device [ 171.914697][T12685] sr0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 171.972601][T12685] syz.5.2017: attempt to access beyond end of device [ 171.972601][T12685] sr0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 171.976658][T12685] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=256, location=256 [ 171.986881][T12685] syz.5.2017: attempt to access beyond end of device [ 171.986881][T12685] sr0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 171.991306][T12685] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=512, location=512 [ 171.994315][T12685] UDF-fs: warning (device sr0): udf_load_vrs: No anchor found [ 171.996683][T12685] UDF-fs: Scanning with blocksize 2048 failed [ 171.998950][T12685] syz.5.2017: attempt to access beyond end of device [ 171.998950][T12685] sr0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 172.083340][T12685] syz.5.2017: attempt to access beyond end of device [ 172.083340][T12685] sr0: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 172.087385][T12685] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=256, location=256 [ 172.091346][T12685] syz.5.2017: attempt to access beyond end of device [ 172.091346][T12685] sr0: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 172.095366][T12685] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=512, location=512 [ 172.098360][T12685] UDF-fs: warning (device sr0): udf_load_vrs: No anchor found [ 172.101410][T12685] UDF-fs: Scanning with blocksize 4096 failed [ 172.103468][T12685] UDF-fs: warning (device sr0): udf_fill_super: No partition found (1) [ 172.232242][T12697] Can't find ip_set type [ 172.292446][T12703] fuse: Unknown parameter ' [ 172.292446][T12703] x¢¼ìëôn‚¦}ßTMÖ/Ž‘A7qìUžÍYQIöR [ 172.292446][T12703] †›-ø˜˜Õû9^"ùÇS·VÏöz•DY0•s ©‘¬h÷fiÔ‰_Æ/–ô{avðÚѺ€7E”šÅyš)ìG×+Z¸ÃÄNÃË溎:×ámȆæ´' [ 172.415263][T12709] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 172.428599][T12709] netlink: 136 bytes leftover after parsing attributes in process `syz.6.2023'. [ 172.687347][T12715] loop2: detected capacity change from 0 to 7 [ 172.690750][T12715] loop2: [ 172.691740][T12715] loop2: partition table partially beyond EOD, truncated [ 172.764977][T12717] loop6: detected capacity change from 0 to 524287999 [ 172.852535][ T63] Bluetooth: hci3: command 0x0405 tx timeout [ 173.524257][T12728] /dev/nullb0: Can't open blockdev [ 173.534255][T12728] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 173.883794][ T40] kauditd_printk_skb: 820 callbacks suppressed [ 173.883806][ T40] audit: type=1400 audit(1750168819.626:18900): avc: denied { read write } for pid=5935 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.884952][ T40] audit: type=1400 audit(1750168819.626:18901): avc: denied { read write open } for pid=5935 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.886281][ T40] audit: type=1400 audit(1750168819.626:18902): avc: denied { ioctl } for pid=5935 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.938168][ T40] audit: type=1400 audit(1750168819.676:18903): avc: denied { write } for pid=12733 comm="syz.5.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 173.948766][ T40] audit: type=1400 audit(1750168819.676:18904): avc: denied { sys_module } for pid=12733 comm="syz.5.2032" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 173.969821][ T40] audit: type=1400 audit(1750168819.686:18905): avc: denied { module_request } for pid=12733 comm="syz.5.2032" kmod="batadv_slave_0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 173.969848][ T40] audit: type=1400 audit(1750168819.686:18906): avc: denied { connect } for pid=12733 comm="syz.5.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 173.969870][ T40] audit: type=1400 audit(1750168819.686:18907): avc: denied { name_connect } for pid=12733 comm="syz.5.2032" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 173.969893][ T40] audit: type=1400 audit(1750168819.706:18908): avc: denied { read write } for pid=10608 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.969917][ T40] audit: type=1400 audit(1750168819.706:18909): avc: denied { read write open } for pid=10608 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 174.130832][T12753] ata1.00: invalid multi_count 1 ignored [ 174.225174][T12755] tipc: Enabling not permitted [ 174.226865][T12755] tipc: Enabling of bearer rejected, failed to enable media [ 174.337799][T12758] netlink: 'syz.1.2041': attribute type 13 has an invalid length. [ 174.341527][T12758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2041'. [ 174.477389][T12770] xt_ipcomp: unknown flags 12 [ 174.689718][T12781] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 174.691891][T12781] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 174.697162][T12781] vhci_hcd vhci_hcd.0: Device attached [ 174.706975][T12781] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2049'. [ 174.711685][T12782] vhci_hcd: connection closed [ 174.713800][ T7360] vhci_hcd: stop threads [ 174.716634][ T7360] vhci_hcd: release socket [ 174.718050][ T7360] vhci_hcd: disconnect device [ 174.939333][ T63] Bluetooth: hci3: command 0x0405 tx timeout [ 174.989313][ T836] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 175.168219][ T836] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 175.172740][ T836] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 175.176554][ T836] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 175.181131][ T836] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 175.193662][ T836] usb 11-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 175.196517][ T836] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.199038][ T836] usb 11-1: Product: syz [ 175.200555][ T5837] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 175.202973][ T836] usb 11-1: Manufacturer: syz [ 175.204537][ T836] usb 11-1: SerialNumber: syz [ 175.210142][ T836] usb 11-1: config 0 descriptor?? [ 175.367484][ T5837] usb 10-1: Using ep0 maxpacket: 16 [ 175.381481][ T5837] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 175.397132][ T5837] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 175.401166][ T5837] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.403793][ T5837] usb 10-1: Product: syz [ 175.405218][ T5837] usb 10-1: Manufacturer: syz [ 175.406732][ T5837] usb 10-1: SerialNumber: syz [ 175.416821][ T5837] usb 10-1: config 0 descriptor?? [ 175.427712][ T5837] hub 10-1:0.0: bad descriptor, ignoring hub [ 175.431037][ T5837] hub 10-1:0.0: probe with driver hub failed with error -5 [ 175.433324][T12793] net_ratelimit: 20 callbacks suppressed [ 175.433333][T12793] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.435322][ T836] adutux 11-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 175.444695][ T5837] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input18 [ 175.574885][T12800] loop2: detected capacity change from 0 to 7 [ 175.577436][T12800] loop2: [ 175.578429][T12800] loop2: partition table partially beyond EOD, truncated [ 175.626615][T12785] usb 11-1: Couldn't submit interrupt_out_urb -90 [ 175.663793][T12785] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2050'. [ 175.710568][ T5983] usb 11-1: USB disconnect, device number 4 [ 175.929452][ T29] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 176.059407][ T29] usb 6-1: device descriptor read/64, error -71 [ 176.309667][ T29] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 176.439307][ T29] usb 6-1: device descriptor read/64, error -71 [ 176.505680][T12810] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2061'. [ 176.551159][ T29] usb usb6-port1: attempt power cycle [ 176.621916][T12811] netlink: 'syz.3.2060': attribute type 1 has an invalid length. [ 176.641072][T12811] 8021q: adding VLAN 0 to HW filter on device bond4 [ 176.665937][T12811] bond4: (slave gretap2): making interface the new active one [ 176.669062][T12811] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 176.686278][T12818] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2063'. [ 176.782179][T12823] openvswitch: netlink: Multiple metadata blocks provided [ 176.882381][T12827] loop2: detected capacity change from 0 to 7 [ 176.888335][ T6326] loop2: [ 176.892914][ T6326] loop2: partition table partially beyond EOD, truncated [ 176.897246][T12827] loop2: [ 176.898629][T12827] loop2: partition table partially beyond EOD, truncated [ 176.900017][ T29] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 176.922680][ T29] usb 6-1: device descriptor read/8, error -71 [ 177.179327][ T29] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 177.209244][ T29] usb 6-1: device descriptor read/8, error -71 [ 177.319493][ T29] usb usb6-port1: unable to enumerate USB device [ 177.611358][T12846] tipc: Started in network mode [ 177.613499][T12846] tipc: Node identity , cluster identity 4711 [ 177.616057][T12846] tipc: Failed to obtain node identity [ 177.618477][T12846] tipc: Enabling of bearer rejected, failed to enable media [ 177.831785][T12853] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2074'. [ 177.835068][T12853] ip_vti0: Master is either lo or non-ether device [ 177.926401][T12857] loop2: detected capacity change from 0 to 7 [ 177.930272][T12857] loop2: [ 177.931379][T12857] loop2: partition table partially beyond EOD, truncated [ 178.558921][T12878] loop2: detected capacity change from 0 to 7 [ 178.564912][T12878] loop2: [ 178.565915][T12878] loop2: partition table partially beyond EOD, truncated [ 178.671313][T12881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2085'. [ 178.773793][T12886] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2087'. [ 178.814786][T12887] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 178.898582][ T40] kauditd_printk_skb: 781 callbacks suppressed [ 178.898594][ T40] audit: type=1400 audit(1750168824.636:19691): avc: denied { allowed } for pid=12888 comm="syz.1.2089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 178.918713][ T40] audit: type=1400 audit(1750168824.646:19692): avc: denied { create } for pid=12888 comm="syz.1.2089" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 178.929657][ T40] audit: type=1400 audit(1750168824.656:19693): avc: denied { map } for pid=12888 comm="syz.1.2089" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=48291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 178.942297][ T40] audit: type=1400 audit(1750168824.656:19694): avc: denied { read write } for pid=12888 comm="syz.1.2089" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=48291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 178.952034][ T40] audit: type=1400 audit(1750168824.656:19695): avc: denied { map } for pid=12888 comm="syz.1.2089" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=48291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 178.962163][ T40] audit: type=1400 audit(1750168824.656:19696): avc: denied { read write } for pid=12888 comm="syz.1.2089" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=48291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 178.973556][ T40] audit: type=1400 audit(1750168824.696:19697): avc: denied { allowed } for pid=12890 comm="syz.3.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 178.984359][ T40] audit: type=1400 audit(1750168824.696:19698): avc: denied { create } for pid=12890 comm="syz.3.2090" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 179.000497][ T40] audit: type=1400 audit(1750168824.696:19699): avc: denied { map } for pid=12890 comm="syz.3.2090" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=48294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 179.010890][ T40] audit: type=1400 audit(1750168824.696:19700): avc: denied { read write } for pid=12890 comm="syz.3.2090" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=48294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 179.171474][T12902] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2093'. [ 179.192921][ T6008] usb 10-1: USB disconnect, device number 8 [ 179.257843][T12906] overlayfs: missing 'lowerdir' [ 179.349509][T12904] netlink: 'syz.3.2094': attribute type 1 has an invalid length. [ 179.352074][T12904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.627930][T12923] xt_hashlimit: max too large, truncated to 1048576 [ 179.961678][T12942] ip6gretap0: entered promiscuous mode [ 179.964320][T12942] macsec1: entered promiscuous mode [ 179.967453][T12942] macsec1: entered allmulticast mode [ 179.969102][T12942] ip6gretap0: entered allmulticast mode [ 179.976166][T12942] ip6gretap0: left allmulticast mode [ 179.977951][T12942] ip6gretap0: left promiscuous mode [ 180.106426][T12954] netlink: 136 bytes leftover after parsing attributes in process `syz.6.2109'. [ 180.110401][T12953] netlink: 136 bytes leftover after parsing attributes in process `syz.6.2109'. [ 180.206006][T12958] macvlan2: entered promiscuous mode [ 180.207701][T12958] macvlan2: entered allmulticast mode [ 180.216035][T12962] program syz.6.2113 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.323759][T12965] random: crng reseeded on system resumption [ 180.343709][T12965] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2114'. [ 180.393763][T12971] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 180.401747][ T29] hid-generic 0000:0006:0000.0008: unknown main item tag 0x0 [ 180.404084][ T29] hid-generic 0000:0006:0000.0008: unknown main item tag 0x0 [ 180.406463][ T29] hid-generic 0000:0006:0000.0008: unknown main item tag 0x0 [ 180.412549][ T29] hid-generic 0000:0006:0000.0008: hidraw0: HID v4.00 Device [syz0] on syz1 [ 180.756955][T12981] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 180.760970][T12981] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 181.196198][T12993] fuse: Bad value for 'fd' [ 181.320720][T12998] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2127'. [ 181.421581][T13003] xt_hashlimit: size too large, truncated to 1048576 [ 181.479907][T13002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6050 sclass=netlink_route_socket pid=13002 comm=syz.6.2129 [ 181.844375][T13019] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 181.847458][T13019] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 181.866527][T13021] tmpfs: Cannot change global quota limit on remount [ 182.347544][T13042] loop2: detected capacity change from 0 to 7 [ 182.360197][T13042] loop2: [ 182.361242][T13042] loop2: partition table partially beyond EOD, truncated [ 182.439973][T13044] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2141'. [ 183.119310][ T29] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 183.293794][ T29] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 183.297666][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.304328][ T29] usb 10-1: Product: syz [ 183.306174][ T29] usb 10-1: Manufacturer: syz [ 183.308113][ T29] usb 10-1: SerialNumber: syz [ 183.333944][ T29] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 183.403256][ T54] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 183.951919][ T40] kauditd_printk_skb: 838 callbacks suppressed [ 183.951931][ T40] audit: type=1400 audit(1750168829.696:20539): avc: denied { read write } for pid=10608 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 183.963120][ T40] audit: type=1400 audit(1750168829.696:20540): avc: denied { read write open } for pid=10608 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 183.970966][ T40] audit: type=1400 audit(1750168829.696:20541): avc: denied { ioctl } for pid=10608 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 183.993850][ T40] audit: type=1400 audit(1750168829.736:20542): avc: denied { create } for pid=13065 comm="syz.6.2148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 183.997010][T13066] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2148'. [ 184.000726][ T40] audit: type=1400 audit(1750168829.736:20543): avc: denied { write } for pid=13065 comm="syz.6.2148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 184.009789][ T40] audit: type=1400 audit(1750168829.736:20544): avc: denied { write } for pid=13065 comm="syz.6.2148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 184.016087][ T40] audit: type=1400 audit(1750168829.756:20545): avc: denied { read } for pid=13065 comm="syz.6.2148" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 184.023539][ T40] audit: type=1400 audit(1750168829.756:20546): avc: denied { read open } for pid=13065 comm="syz.6.2148" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 184.031095][ T40] audit: type=1400 audit(1750168829.756:20547): avc: denied { ioctl } for pid=13065 comm="syz.6.2148" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 184.038501][ T40] audit: type=1400 audit(1750168829.776:20548): avc: denied { create } for pid=13065 comm="syz.6.2148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 184.201658][T13068] loop2: detected capacity change from 0 to 7 [ 184.205030][T13068] loop2: [ 184.206341][T13068] loop2: partition table partially beyond EOD, truncated [ 184.459278][ T54] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 184.463307][ T54] ath9k_htc: Failed to initialize the device [ 184.491087][ T54] usb 10-1: ath9k_htc: USB layer deinitialized [ 184.545409][T13083] xt_CONNSECMARK: invalid mode: 0 [ 184.615160][T13086] netlink: 'syz.1.2154': attribute type 11 has an invalid length. [ 184.618556][T13086] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2154'. [ 184.711434][T13092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2155'. [ 184.728419][ T836] usb 10-1: USB disconnect, device number 9 [ 184.783992][T13095] geneve1: entered allmulticast mode [ 184.786742][T13092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2155'. [ 184.812279][T13092] xt_hashlimit: size too large, truncated to 1048576 [ 185.448823][T13121] xt_hashlimit: size too large, truncated to 1048576 [ 185.731398][T13136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2168'. [ 185.793953][ T6008] hid-generic 0000:0006:0000.0009: unknown main item tag 0x0 [ 185.797022][ T6008] hid-generic 0000:0006:0000.0009: unknown main item tag 0x0 [ 185.809241][ T6008] hid-generic 0000:0006:0000.0009: unknown main item tag 0x0 [ 185.822271][ T6008] hid-generic 0000:0006:0000.0009: hidraw0: HID v4.00 Device [syz0] on syz1 [ 186.204581][T13161] xfrm0 speed is unknown, defaulting to 1000 [ 186.211254][T13161] xfrm0 speed is unknown, defaulting to 1000 [ 186.216125][T13161] xfrm0 speed is unknown, defaulting to 1000 [ 186.315496][ T5983] xfrm0 speed is unknown, defaulting to 1000 [ 186.317979][T13161] infiniband syz1: set active [ 186.319761][T13161] infiniband syz1: added xfrm0 [ 186.350689][T13161] RDS/IB: syz1: added [ 186.352459][T13161] smc: adding ib device syz1 with port count 1 [ 186.359489][T13161] smc: ib device syz1 port 1 has pnetid [ 186.365891][T13168] loop2: detected capacity change from 0 to 7 [ 186.367397][ T54] xfrm0 speed is unknown, defaulting to 1000 [ 186.368253][T13168] loop2: [ 186.372219][T13168] loop2: partition table partially beyond EOD, truncated [ 186.378173][T13161] xfrm0 speed is unknown, defaulting to 1000 [ 186.500913][T13161] xfrm0 speed is unknown, defaulting to 1000 [ 186.658107][T13161] xfrm0 speed is unknown, defaulting to 1000 [ 186.752204][T13161] xfrm0 speed is unknown, defaulting to 1000 [ 186.843455][T13161] xfrm0 speed is unknown, defaulting to 1000 [ 186.909267][ T836] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 186.960155][T13160] delete_channel: no stack [ 187.059185][T13184] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 187.108306][ T836] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 187.111286][ T836] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.118020][ T836] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 187.122557][ T836] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 187.122579][ T836] usb 10-1: Manufacturer: syz [ 187.129414][ T836] usb 10-1: config 0 descriptor?? [ 187.249587][ T836] rc_core: IR keymap rc-hauppauge not found [ 187.251527][ T836] Registered IR keymap rc-empty [ 187.255161][ T836] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 187.260801][ T836] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input20 [ 187.346430][T13178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.354654][T13178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.365332][ T836] usb 10-1: USB disconnect, device number 10 [ 187.581112][ T5983] hid-generic 0000:0006:0000.000A: unknown main item tag 0x0 [ 187.583419][ T5983] hid-generic 0000:0006:0000.000A: unknown main item tag 0x0 [ 187.585710][ T5983] hid-generic 0000:0006:0000.000A: unknown main item tag 0x0 [ 187.590909][ T5983] hid-generic 0000:0006:0000.000A: hidraw0: HID v4.00 Device [syz0] on syz1 [ 187.698662][T13208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2187'. [ 187.770511][T13211] overlayfs: missing 'lowerdir' [ 187.965959][T13220] loop2: detected capacity change from 0 to 7 [ 187.968787][T13220] loop2: [ 187.976457][T13220] loop2: partition table partially beyond EOD, truncated [ 188.720955][T13255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13255 comm=syz.6.2203 [ 188.825380][T13261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2204'. [ 188.871480][ T5983] hid-generic 0000:0006:0000.000B: unknown main item tag 0x0 [ 188.873903][ T5983] hid-generic 0000:0006:0000.000B: unknown main item tag 0x0 [ 188.876117][ T5983] hid-generic 0000:0006:0000.000B: unknown main item tag 0x0 [ 188.876585][T13266] loop2: detected capacity change from 0 to 7 [ 188.894158][ T5983] hid-generic 0000:0006:0000.000B: hidraw0: HID v4.00 Device [syz0] on syz1 [ 188.898614][T13266] loop2: [ 188.899954][T13266] loop2: partition table partially beyond EOD, truncated [ 188.952197][T13261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2204'. [ 188.959967][ T40] kauditd_printk_skb: 957 callbacks suppressed [ 188.959977][ T40] audit: type=1400 audit(1750168834.706:21506): avc: denied { setopt } for pid=13260 comm="syz.1.2204" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 188.960314][T13267] xt_hashlimit: size too large, truncated to 1048576 [ 189.002068][ T40] audit: type=1400 audit(1750168834.746:21507): avc: denied { module_request } for pid=13260 comm="syz.1.2204" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 189.024537][ T40] audit: type=1326 audit(1750168834.766:21508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13270 comm="syz.5.2207" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fecf038e929 code=0x0 [ 189.127241][ T40] audit: type=1400 audit(1750168834.866:21509): avc: denied { read } for pid=13270 comm="syz.5.2207" name="ubi_ctrl" dev="devtmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 189.136107][ T40] audit: type=1400 audit(1750168834.866:21510): avc: denied { read open } for pid=13270 comm="syz.5.2207" path="/dev/ubi_ctrl" dev="devtmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 189.149053][ T40] audit: type=1400 audit(1750168834.866:21511): avc: denied { read } for pid=13270 comm="syz.5.2207" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 189.157609][ T40] audit: type=1400 audit(1750168834.876:21512): avc: denied { read open } for pid=13270 comm="syz.5.2207" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 189.166131][ T40] audit: type=1400 audit(1750168834.876:21513): avc: denied { ioctl } for pid=13270 comm="syz.5.2207" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 189.176378][ T40] audit: type=1400 audit(1750168834.876:21514): avc: denied { create } for pid=13270 comm="syz.5.2207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 189.187583][ T40] audit: type=1400 audit(1750168834.876:21515): avc: denied { setopt } for pid=13270 comm="syz.5.2207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 189.210933][T13275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8264 sclass=netlink_route_socket pid=13275 comm=syz.1.2208 [ 189.307442][T13277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2209'. [ 189.715985][T13283] netlink: 'syz.1.2211': attribute type 5 has an invalid length. [ 189.719908][T13283] netlink: 'syz.1.2211': attribute type 7 has an invalid length. [ 189.738468][T13283] : entered promiscuous mode [ 189.954127][ T63] Bluetooth: hci3: unknown advertising packet type: 0x82 [ 189.954180][ T63] Bluetooth: hci3: Dropping invalid advertising data [ 189.958694][ T63] Bluetooth: hci3: Malformed LE Event: 0x02 [ 190.127296][T13305] overlayfs: missing 'workdir' [ 190.347811][ T836] hid-generic 0000:0006:0000.000C: unknown main item tag 0x0 [ 190.351301][ T836] hid-generic 0000:0006:0000.000C: unknown main item tag 0x0 [ 190.354804][ T836] hid-generic 0000:0006:0000.000C: unknown main item tag 0x0 [ 190.361921][ T836] hid-generic 0000:0006:0000.000C: hidraw0: HID v4.00 Device [syz0] on syz1 [ 190.467635][T13319] xt_hashlimit: size too large, truncated to 1048576 [ 190.667867][T13324] loop2: detected capacity change from 0 to 7 [ 190.672792][T13324] loop2: [ 190.673751][T13324] loop2: partition table partially beyond EOD, truncated [ 190.810303][T13326] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2224'. [ 190.813958][T13326] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2224'. [ 190.833200][T13326] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2224'. [ 190.836387][T13327] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2224'. [ 191.009084][T13331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.013273][T13331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.269254][T13335] overlayfs: missing 'workdir' [ 191.489125][T13344] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2230'. [ 191.501860][T13344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2230'. [ 191.505831][T13344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2230'. [ 191.637798][T13347] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2232'. [ 191.678571][T13349] exFAT-fs (nullb0): invalid boot record signature [ 191.683347][T13349] exFAT-fs (nullb0): failed to read boot sector [ 191.686048][T13349] exFAT-fs (nullb0): failed to recognize exfat type [ 191.759935][T13352] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 192.099828][T13365] xt_CONNSECMARK: invalid mode: 0 [ 192.160695][T13369] netlink: 'syz.6.2240': attribute type 3 has an invalid length. [ 192.163162][T13369] netlink: 'syz.6.2240': attribute type 1 has an invalid length. [ 192.305679][T13373] syz.1.2242: attempt to access beyond end of device [ 192.305679][T13373] sr0: rw=0, sector=0, nr_sectors = 4 limit=0 [ 192.310887][T13373] (syz.1.2242,13373,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 192.313274][T13373] (syz.1.2242,13373,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 192.315616][T13373] (syz.1.2242,13373,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 192.318309][T13373] (syz.1.2242,13373,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 192.748790][T13385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13385 comm=syz.1.2247 [ 192.761308][T13385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2247'. [ 192.796351][T13387] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 192.800885][T13387] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 192.880999][T13385] team0: Port device team_slave_0 removed [ 193.095991][T13395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2249'. [ 193.104174][T13395] syzkaller0: entered allmulticast mode [ 193.114545][T13395] syzkaller0 (unregistering): left allmulticast mode [ 193.204788][T13400] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 193.214767][T13399] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 193.217747][T13399] ref_ctr increment failed for inode: 0x94d offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88803400eb80 [ 193.362288][ T5837] hid-generic 0000:0006:0000.000D: unknown main item tag 0x0 [ 193.364657][ T5837] hid-generic 0000:0006:0000.000D: unknown main item tag 0x0 [ 193.367123][ T5837] hid-generic 0000:0006:0000.000D: unknown main item tag 0x0 [ 193.375614][ T5837] hid-generic 0000:0006:0000.000D: hidraw0: HID v4.00 Device [syz0] on syz1 [ 193.765048][T13423] loop2: detected capacity change from 0 to 7 [ 193.767415][T13423] loop2: [ 193.768480][T13423] loop2: partition table partially beyond EOD, truncated [ 193.972408][ T40] kauditd_printk_skb: 769 callbacks suppressed [ 193.972420][ T40] audit: type=1400 audit(1750168844.716:22285): avc: denied { ioctl } for pid=5935 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 193.972760][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.985139][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.026374][ T40] audit: type=1400 audit(1750168844.766:22286): avc: denied { mounton } for pid=13434 comm="syz.1.2262" path="/569/file0" dev="tmpfs" ino=3043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 194.035939][ T40] audit: type=1400 audit(1750168844.776:22287): avc: denied { mount } for pid=13434 comm="syz.1.2262" name="/" dev="9p" ino=36831240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 194.044462][ T40] audit: type=1400 audit(1750168844.786:22288): avc: denied { mounton } for pid=13434 comm="syz.1.2262" path="/569/bus" dev="tmpfs" ino=3045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 194.051881][ T40] audit: type=1400 audit(1750168844.786:22289): avc: denied { unlink } for pid=13434 comm="syz.1.2262" name="#3a" dev="tmpfs" ino=3049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 194.055216][T13435] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 194.059059][ T40] audit: type=1400 audit(1750168844.796:22290): avc: denied { getattr } for pid=13434 comm="syz.1.2262" name="/" dev="9p" ino=36831240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 194.070250][T13435] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 194.077859][ T40] audit: type=1400 audit(1750168844.816:22291): avc: denied { mount } for pid=13434 comm="syz.1.2262" name="/" dev="overlay" ino=3044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 194.099388][ T40] audit: type=1400 audit(1750168844.836:22292): avc: denied { unmount } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 194.116689][ T40] audit: type=1400 audit(1750168844.856:22293): avc: denied { unmount } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 194.150949][ T40] audit: type=1400 audit(1750168844.896:22294): avc: denied { read write } for pid=8323 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.212142][T13437] syz.5.2264: attempt to access beyond end of device [ 194.212142][T13437] loop5: rw=0, sector=1, nr_sectors = 1 limit=0 [ 194.216239][T13437] qnx4: unable to read the superblock [ 194.231758][ T6008] hid-generic 0000:0006:0000.000E: unknown main item tag 0x0 [ 194.236063][ T6008] hid-generic 0000:0006:0000.000E: unknown main item tag 0x0 [ 194.241947][ T6008] hid-generic 0000:0006:0000.000E: unknown main item tag 0x0 [ 194.247793][ T6008] hid-generic 0000:0006:0000.000E: hidraw0: HID v4.00 Device [syz0] on syz1 [ 194.338954][T13443] fido_id[13443]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 194.542117][T13450] netlink: 'syz.5.2267': attribute type 7 has an invalid length. [ 194.708719][T13458] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 194.712619][T13458] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 195.095459][T13481] FAULT_INJECTION: forcing a failure. [ 195.095459][T13481] name failslab, interval 1, probability 0, space 0, times 0 [ 195.102170][T13481] CPU: 2 UID: 0 PID: 13481 Comm: syz.6.2278 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 195.102195][T13481] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 195.102207][T13481] Call Trace: [ 195.102212][T13481] [ 195.102219][T13481] dump_stack_lvl+0x16c/0x1f0 [ 195.102271][T13481] should_fail_ex+0x512/0x640 [ 195.102298][T13481] ? __kvmalloc_node_noprof+0x124/0x620 [ 195.102323][T13481] should_failslab+0xc2/0x120 [ 195.102348][T13481] __kvmalloc_node_noprof+0x137/0x620 [ 195.102371][T13481] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 195.102394][T13481] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 195.102420][T13481] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 195.102443][T13481] __kvm_mmu_topup_memory_cache+0x450/0x600 [ 195.102475][T13481] mmu_topup_memory_caches+0x25/0x170 [ 195.102498][T13481] kvm_mmu_load+0xd9/0x22a0 [ 195.102518][T13481] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 195.102545][T13481] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 195.102579][T13481] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 195.102596][T13481] ? __pfx_kvm_mmu_load+0x10/0x10 [ 195.102615][T13481] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 195.102640][T13481] ? kvm_check_and_inject_events+0x71c/0x1310 [ 195.102667][T13481] vcpu_run+0x34eb/0x5500 [ 195.102683][T13481] ? kvm_mmu_post_init_vm+0x269/0x370 [ 195.102708][T13481] ? __lock_acquire+0xb8a/0x1c90 [ 195.102741][T13481] ? __pfx_vcpu_run+0x10/0x10 [ 195.102765][T13481] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 195.102784][T13481] ? __local_bh_enable_ip+0xa4/0x120 [ 195.102810][T13481] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 195.102828][T13481] kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 195.102856][T13481] kvm_vcpu_ioctl+0x5eb/0x1690 [ 195.102879][T13481] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 195.102908][T13481] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 195.102935][T13481] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 195.102968][T13481] ? hook_file_ioctl_common+0x145/0x410 [ 195.102992][T13481] ? selinux_file_ioctl+0x180/0x270 [ 195.103014][T13481] ? selinux_file_ioctl+0xb4/0x270 [ 195.103038][T13481] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 195.103061][T13481] __x64_sys_ioctl+0x18b/0x210 [ 195.103084][T13481] do_syscall_64+0xcd/0x4c0 [ 195.103112][T13481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.103131][T13481] RIP: 0033:0x7f7bccd8e929 [ 195.103145][T13481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.103162][T13481] RSP: 002b:00007f7bcdc22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.103180][T13481] RAX: ffffffffffffffda RBX: 00007f7bccfb5fa0 RCX: 00007f7bccd8e929 [ 195.103191][T13481] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 195.103201][T13481] RBP: 00007f7bcdc22090 R08: 0000000000000000 R09: 0000000000000000 [ 195.103212][T13481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.103222][T13481] R13: 0000000000000000 R14: 00007f7bccfb5fa0 R15: 00007fff515ac728 [ 195.103247][T13481] [ 195.248148][ T5947] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 195.252941][ T5947] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 195.259232][ T5947] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 195.264889][ T5947] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 195.276051][ T5947] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 195.300472][ T7339] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.343193][T13490] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1542 sclass=netlink_tcpdiag_socket pid=13490 comm=syz.6.2281 [ 195.352213][T13490] netlink: 'syz.6.2281': attribute type 9 has an invalid length. [ 195.368864][T13487] xfrm0 speed is unknown, defaulting to 1000 [ 195.386437][ T7339] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.471299][ T7339] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.487868][T13494] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 195.492329][T13494] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 195.560010][ T7339] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.726282][T13487] chnl_net:caif_netlink_parms(): no params data found [ 195.854767][ T7339] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 195.858872][ T7339] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 195.861224][ T5983] hid (null): unknown global tag 0xd [ 195.863546][ T5983] hid (null): unknown global tag 0xc [ 195.866404][ T5983] hid-generic 0007:8001:0050.000F: unknown global tag 0xd [ 195.868628][ T5983] hid-generic 0007:8001:0050.000F: item 0 1 1 13 parsing failed [ 195.880910][ T5983] hid-generic 0007:8001:0050.000F: probe with driver hid-generic failed with error -22 [ 196.076371][ T7339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.081377][ T7339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.084961][ T7339] bond0 (unregistering): Released all slaves [ 196.133391][ T5983] hid-generic 0000:0006:0000.0010: unknown main item tag 0x0 [ 196.135803][ T5983] hid-generic 0000:0006:0000.0010: unknown main item tag 0x0 [ 196.138211][ T5983] hid-generic 0000:0006:0000.0010: unknown main item tag 0x0 [ 196.148238][ T5983] hid-generic 0000:0006:0000.0010: hidraw0: HID v4.00 Device [syz0] on syz1 [ 196.177739][ T7339] bond1 (unregistering): Released all slaves [ 196.353242][T13530] UHID_CREATE from different security context by process 1603 (syz.1.2290), this is not allowed. [ 196.378329][T13530] xt_cgroup: xt_cgroup: no path or classid specified [ 196.385124][T13487] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.387589][T13487] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.392272][T13487] bridge_slave_0: entered allmulticast mode [ 196.394940][T13487] bridge_slave_0: entered promiscuous mode [ 196.401779][T13487] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.404154][T13487] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.406570][T13487] bridge_slave_1: entered allmulticast mode [ 196.409373][T13487] bridge_slave_1: entered promiscuous mode [ 196.479340][T13487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.485854][T13487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.486890][T13532] __nla_validate_parse: 2 callbacks suppressed [ 196.486899][T13532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2291'. [ 196.543251][T13487] team0: Port device team_slave_0 added [ 196.545407][T13532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2291'. [ 196.552170][T13487] team0: Port device team_slave_1 added [ 196.557446][T13534] xt_hashlimit: size too large, truncated to 1048576 [ 196.608937][T13487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.612609][T13487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.621822][T13487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.642544][T13487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.647825][T13487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.656844][T13487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.762117][ T7339] hsr_slave_0: left promiscuous mode [ 196.766993][ T7339] hsr_slave_1: left promiscuous mode [ 196.770004][ T7339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.791870][ T7339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.077637][T13545] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 197.083354][T13546] futex_wake_op: syz.5.2294 tries to shift op by -1; fix this program [ 197.331486][ T63] Bluetooth: hci4: command tx timeout [ 197.570879][ T7339] team0 (unregistering): Port device team_slave_1 removed [ 197.646556][T13556] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 197.650115][T13556] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 197.688141][ T7339] team0 (unregistering): Port device team_slave_0 removed [ 197.912111][T13565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2300'. [ 197.966436][T13567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2300'. [ 198.400379][T13487] hsr_slave_0: entered promiscuous mode [ 198.403550][T13487] hsr_slave_1: entered promiscuous mode [ 198.406527][T13487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.409727][T13487] Cannot create hsr debugfs directory [ 198.668172][T13578] netlink: 165 bytes leftover after parsing attributes in process `syz.5.2301'. [ 198.700408][T13487] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 198.708420][T13487] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 198.717679][T13487] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 198.725431][T13487] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 198.787386][T13586] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2304'. [ 198.844620][T13586] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2304'. [ 198.852771][T13586] xt_hashlimit: size too large, truncated to 1048576 [ 198.881911][ T836] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 198.895276][T13487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.924300][T13487] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.937544][ T7365] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.940580][ T7365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.953150][ T7367] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.955712][ T7367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.007111][ T40] kauditd_printk_skb: 642 callbacks suppressed [ 199.007121][ T40] audit: type=1400 audit(1750168850.741:22937): avc: denied { module_request } for pid=13487 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 199.016464][ T40] audit: type=1400 audit(1750168850.741:22938): avc: denied { read write } for pid=10608 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.024883][ T40] audit: type=1400 audit(1750168850.751:22939): avc: denied { read write open } for pid=10608 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.033024][ T40] audit: type=1400 audit(1750168850.751:22940): avc: denied { ioctl } for pid=10608 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.051348][ T40] audit: type=1400 audit(1750168850.791:22941): avc: denied { ioctl } for pid=13572 comm="syz.1.2302" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 199.058735][ C2] ata1: illegal qc_active transition (00000000->00080000) [ 199.063131][ T40] audit: type=1400 audit(1750168850.791:22942): avc: denied { read write } for pid=13591 comm="syz.6.2305" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 199.070973][T13592] fuse: Bad value for 'group_id' [ 199.075101][T13592] fuse: Bad value for 'group_id' [ 199.076867][ T40] audit: type=1400 audit(1750168850.791:22943): avc: denied { ioctl } for pid=13572 comm="syz.1.2302" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 199.089283][ T40] audit: type=1400 audit(1750168850.791:22944): avc: denied { read write open } for pid=13591 comm="syz.6.2305" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 199.101533][ T836] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 199.104361][ T836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.106810][ T836] usb 6-1: Product: syz [ 199.109821][ T836] usb 6-1: Manufacturer: syz [ 199.111316][ T836] usb 6-1: SerialNumber: syz [ 199.114219][ T40] audit: type=1400 audit(1750168850.811:22945): avc: denied { ioctl } for pid=13572 comm="syz.1.2302" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 199.122771][ T836] usb 6-1: config 0 descriptor?? [ 199.125041][ T40] audit: type=1400 audit(1750168850.811:22946): avc: denied { read } for pid=13591 comm="syz.6.2305" dev="nsfs" ino=4026532991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 199.337614][T13487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.342584][ T836] usb 6-1: USB disconnect, device number 22 [ 199.380678][ T1111] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 199.383673][ T1111] ata1.00: configured for UDMA/100 [ 199.409546][ T63] Bluetooth: hci4: command tx timeout [ 199.436067][T13604] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2308'. [ 199.794969][T13619] bpq0: entered promiscuous mode [ 199.796613][T13619] bpq0: entered allmulticast mode [ 199.993529][T13487] veth0_vlan: entered promiscuous mode [ 200.013537][T13487] veth1_vlan: entered promiscuous mode [ 200.113072][T13487] veth0_macvtap: entered promiscuous mode [ 200.124144][T13487] veth1_macvtap: entered promiscuous mode [ 200.129378][ T6008] hid-generic 0000:0006:0000.0011: unknown main item tag 0x0 [ 200.131894][ T6008] hid-generic 0000:0006:0000.0011: unknown main item tag 0x0 [ 200.134474][ T6008] hid-generic 0000:0006:0000.0011: unknown main item tag 0x0 [ 200.144968][ T6008] hid-generic 0000:0006:0000.0011: hidraw0: HID v4.00 Device [syz0] on syz1 [ 200.156658][T13487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.174604][T13487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.207076][T13487] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.217942][T13487] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.228568][T13487] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.239244][T13487] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.374731][T13636] netlink: 830 bytes leftover after parsing attributes in process `syz.6.2315'. [ 200.461655][ T7367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.468120][ T7367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.497677][T13638] loop2: detected capacity change from 0 to 7 [ 200.501206][ T7347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.503962][ T7347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.508069][T13638] loop2: [ 200.509846][T13638] loop2: partition table partially beyond EOD, truncated [ 200.676955][T13643] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2279'. [ 200.682416][T13643] netlink: 'syz.7.2279': attribute type 19 has an invalid length. [ 200.858895][T13650] openvswitch: netlink: IP tunnel dst address not specified [ 200.872210][T13651] openvswitch: netlink: IP tunnel dst address not specified [ 201.032191][T13655] xt_hashlimit: size too large, truncated to 1048576 [ 201.489847][ T63] Bluetooth: hci4: command tx timeout [ 201.650654][ T3339] hid-generic 0000:0006:0000.0012: unknown main item tag 0x0 [ 201.659507][ T3339] hid-generic 0000:0006:0000.0012: unknown main item tag 0x0 [ 201.663132][ T3339] hid-generic 0000:0006:0000.0012: unknown main item tag 0x0 [ 201.668901][ T3339] hid-generic 0000:0006:0000.0012: hidraw0: HID v4.00 Device [syz0] on syz1 [ 202.533131][T13705] __nla_validate_parse: 3 callbacks suppressed [ 202.533143][T13705] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2335'. [ 202.759700][T13712] loop2: detected capacity change from 0 to 7 [ 202.763565][T13712] loop2: [ 202.764587][T13712] loop2: partition table partially beyond EOD, truncated [ 202.866070][T13714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2339'. [ 202.986884][T13722] netlink: 'syz.1.2342': attribute type 1 has an invalid length. [ 203.002749][T13722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.514791][T13731] kvm: user requested TSC rate below hardware speed [ 203.527993][T13733] kvm: pic: non byte write [ 203.579454][ T63] Bluetooth: hci4: command tx timeout [ 204.009241][ T40] kauditd_printk_skb: 10217 callbacks suppressed [ 204.009253][ T40] audit: type=1326 audit(1750168855.741:33149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13719 comm="syz.5.2341" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fecf038d3df code=0x50000 [ 204.018653][ T40] audit: type=1326 audit(1750168855.751:33150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13719 comm="syz.5.2341" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fecf038d3df code=0x50000 [ 204.027006][ T40] audit: type=1326 audit(1750168855.751:33151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13719 comm="syz.5.2341" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fecf038d3df code=0x50000 [ 204.037122][ T40] audit: type=1326 audit(1750168855.751:33152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13719 comm="syz.5.2341" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fecf038d3df code=0x50000 [ 204.045769][ T40] audit: type=1326 audit(1750168855.751:33153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13719 comm="syz.5.2341" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fecf038d3df code=0x50000 [ 204.053833][ T40] audit: type=1326 audit(1750168855.751:33154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13719 comm="syz.5.2341" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fecf038d3df code=0x50000 [ 204.061030][ T40] audit: type=1326 audit(1750168855.751:33155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13719 comm="syz.5.2341" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fecf038d3df code=0x50000 [ 204.068373][ T40] audit: type=1326 audit(1750168855.751:33156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13719 comm="syz.5.2341" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fecf038d3df code=0x50000 [ 204.075729][ T40] audit: type=1326 audit(1750168855.751:33157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13719 comm="syz.5.2341" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fecf038d3df code=0x50000 [ 204.083505][ T40] audit: type=1326 audit(1750168855.751:33158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13719 comm="syz.5.2341" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fecf038d3df code=0x50000 [ 204.362545][T13746] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2350'. [ 204.501473][T13749] loop2: detected capacity change from 0 to 7 [ 204.505551][T13749] loop2: [ 204.506853][T13749] loop2: partition table partially beyond EOD, truncated [ 204.709737][T13756] netlink: 810 bytes leftover after parsing attributes in process `syz.7.2353'. [ 204.843017][ T7947] syz_tun (unregistering): left promiscuous mode [ 204.874592][ T5947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 204.878230][ T5947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 204.882826][ T5947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 204.886854][ T5947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 204.890794][ T5947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 204.945869][T13759] xfrm0 speed is unknown, defaulting to 1000 [ 205.198454][T13765] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 205.201218][T13765] overlayfs: missing 'lowerdir' [ 205.279720][T13759] chnl_net:caif_netlink_parms(): no params data found [ 205.409758][T13759] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.411980][T13759] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.414271][T13759] bridge_slave_0: entered allmulticast mode [ 205.422869][T13759] bridge_slave_0: entered promiscuous mode [ 205.428894][T13759] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.434107][T13759] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.436652][T13759] bridge_slave_1: entered allmulticast mode [ 205.440185][T13759] bridge_slave_1: entered promiscuous mode [ 205.481574][T13759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.488870][T13759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.543361][T13759] team0: Port device team_slave_0 added [ 205.549601][T13759] team0: Port device team_slave_1 added [ 205.587663][T13759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.590690][T13759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.599059][T13759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.604528][T13759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.606638][T13759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.614496][T13759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.703363][T13759] hsr_slave_0: entered promiscuous mode [ 205.706003][T13759] hsr_slave_1: entered promiscuous mode [ 205.708498][T13759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.711155][T13759] Cannot create hsr debugfs directory [ 205.733312][ T836] hid-generic 0000:0006:0000.0013: unknown main item tag 0x0 [ 205.735946][ T836] hid-generic 0000:0006:0000.0013: unknown main item tag 0x0 [ 205.738631][ T836] hid-generic 0000:0006:0000.0013: unknown main item tag 0x0 [ 205.756370][ T836] hid-generic 0000:0006:0000.0013: hidraw0: HID v4.00 Device [syz0] on syz1 [ 205.971092][T13782] support for cryptoloop has been removed. Use dm-crypt instead. [ 206.015553][T13784] loop2: detected capacity change from 0 to 7 [ 206.018920][T13784] loop2: [ 206.021320][T13759] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.024853][T13784] loop2: partition table partially beyond EOD, truncated [ 206.126042][T13759] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.235402][T13759] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.350488][T13759] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.507177][T13759] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 206.514619][T13759] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 206.527471][T13759] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 206.535649][T13759] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 206.541765][T13811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13811 comm=syz.5.2369 [ 206.558507][T13811] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2369'. [ 206.584953][T13818] vivid-000: disconnect [ 206.586532][T13818] vivid-000: reconnect [ 206.755945][T13759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.757569][T13824] loop2: detected capacity change from 0 to 7 [ 206.760635][T13824] loop2: [ 206.761610][T13824] loop2: partition table partially beyond EOD, truncated [ 206.779559][T13759] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.789115][ T7339] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.791352][ T7339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.800526][ T7338] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.802773][ T7338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.904257][T13826] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2372'. [ 206.912885][T13826] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.930146][ T5947] Bluetooth: hci0: command tx timeout [ 207.005875][T13831] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2373'. [ 207.028630][T13831] afs: Unknown parameter '¾Å@G¯±;vá6Uœ-c™Qk!ìðhæÖÔ3Qá•{[{ËÉxQù' [ 207.276615][T13759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.325348][T13759] veth0_vlan: entered promiscuous mode [ 207.338115][T13759] veth1_vlan: entered promiscuous mode [ 207.373116][T13759] veth0_macvtap: entered promiscuous mode [ 207.380595][T13759] veth1_macvtap: entered promiscuous mode [ 207.400261][T13759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.412221][T13759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.420805][T13759] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.423479][T13759] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.426253][T13759] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.428888][T13759] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.540847][ T7367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.544026][ T7367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.553805][ T7367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.556968][ T7367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.680216][T13852] loop2: detected capacity change from 0 to 7 [ 207.688267][T13852] loop2: [ 207.690455][T13852] loop2: partition table partially beyond EOD, truncated [ 207.711104][T13853] max out of range [ 207.957700][T13862] xfrm0 speed is unknown, defaulting to 1000 [ 207.972368][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2383'. [ 207.976201][T13868] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2383'. [ 207.986419][T13868] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.990212][T13868] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.993828][T13868] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.997525][T13868] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.003232][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2383'. [ 208.006003][T13868] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2383'. [ 208.187876][T13880] ptrace attach of "/syz-executor exec"[13759] was attempted by "/syz-executor exec"[13880] [ 208.694705][T13895] xfrm0 speed is unknown, defaulting to 1000 [ 208.720203][ T836] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 208.885241][ T836] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 208.888497][ T836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.893770][ T836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.896643][ T836] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 208.905767][ T836] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 208.908497][ T836] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 208.911550][ T836] usb 6-1: Manufacturer: syz [ 208.917597][ T836] usb 6-1: config 0 descriptor?? [ 209.012710][ T5947] Bluetooth: hci0: command tx timeout [ 209.037763][ T40] kauditd_printk_skb: 14398 callbacks suppressed [ 209.037774][ T40] audit: type=1400 audit(1750168860.771:47554): avc: denied { read write } for pid=13487 comm="syz-executor" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 209.049678][ T40] audit: type=1400 audit(1750168860.791:47555): avc: denied { read write open } for pid=13487 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 209.057173][ T40] audit: type=1400 audit(1750168860.791:47556): avc: denied { ioctl } for pid=13487 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 209.092750][ T40] audit: type=1400 audit(1750168860.831:47557): avc: denied { create } for pid=13903 comm="syz.7.2397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 209.098983][ T40] audit: type=1400 audit(1750168860.831:47558): avc: denied { create } for pid=13903 comm="syz.7.2397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 209.105214][ T40] audit: type=1400 audit(1750168860.831:47559): avc: denied { write } for pid=13903 comm="syz.7.2397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 209.111587][ T40] audit: type=1400 audit(1750168860.831:47560): avc: denied { read } for pid=13903 comm="syz.7.2397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 209.118111][ T40] audit: type=1400 audit(1750168860.831:47561): avc: denied { read } for pid=13903 comm="syz.7.2397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 209.125610][ T40] audit: type=1400 audit(1750168860.831:47562): avc: denied { ioctl } for pid=13903 comm="syz.7.2397" path="socket:[55219]" dev="sockfs" ino=55219 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 209.133611][ T40] audit: type=1400 audit(1750168860.841:47563): avc: denied { create } for pid=13903 comm="syz.7.2397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 209.335158][ T836] appleir 0003:05AC:8243.0014: unknown main item tag 0x0 [ 209.337793][ T836] appleir 0003:05AC:8243.0014: No inputs registered, leaving [ 209.346808][ T836] appleir 0003:05AC:8243.0014: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 209.357658][ T836] usb 6-1: USB disconnect, device number 23 [ 209.496876][T13919] overlay: Bad value for 'workdir' [ 209.504519][T13916] fido_id[13916]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb6/report_descriptor': No such file or directory [ 209.599706][T13927] tmpfs: Unknown parameter 'grpquota_ÐÆode_hardlimit' [ 209.700783][T13929] loop6: detected capacity change from 0 to 63 [ 209.723720][ T5945] buffer_io_error: 9 callbacks suppressed [ 209.723729][ T5945] Buffer I/O error on dev loop6, logical block 0, async page read [ 209.729110][ T5945] Buffer I/O error on dev loop6, logical block 0, async page read [ 209.738324][ T5945] Buffer I/O error on dev loop6, logical block 0, async page read [ 209.746721][T13929] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 209.750646][T13929] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 209.753311][T13929] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 209.756002][T13929] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 209.758659][T13929] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 209.776272][T13929] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 209.780195][T13929] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 209.817419][T13936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2406'. [ 209.869921][T13929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64852 sclass=netlink_route_socket pid=13929 comm=syz.7.2404 [ 209.950269][T13938] ipt_REJECT: TCP_RESET invalid for non-tcp [ 210.023807][T13942] Bluetooth: MGMT ver 1.23 [ 210.621905][T13960] bad cache= option: none [ 210.621905][T13960] [ 210.624096][T13960] CIFS: VFS: bad cache= option: none [ 210.787262][T13964] SELinux: policydb version -510991774 does not match my version range 15-34 [ 210.792233][T13964] SELinux: failed to load policy [ 210.796292][T13964] kernel read not supported for file /policy (pid: 13964 comm: syz.1.2417) [ 210.891645][T13966] xt_hashlimit: max too large, truncated to 1048576 [ 210.894753][T13966] xt_bpf: check failed: parse error [ 211.021622][T13968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2419'. [ 211.089798][ T63] Bluetooth: hci0: command tx timeout [ 211.657333][T13990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2424'. [ 211.667108][ T6027] IPVS: starting estimator thread 0... [ 211.769231][T13992] IPVS: using max 42 ests per chain, 100800 per kthread [ 212.049340][ T5947] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 212.190644][T14001] xfrm0 speed is unknown, defaulting to 1000 [ 212.373471][T14001] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000005 [ 212.560042][T14016] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2431'. [ 212.564241][T14016] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2431'. [ 212.571308][T14014] loop2: detected capacity change from 0 to 7 [ 212.582810][ T6326] loop2: [ 212.583983][ T6326] loop2: partition table partially beyond EOD, truncated [ 212.587234][T14014] loop2: [ 212.588254][T14014] loop2: partition table partially beyond EOD, truncated [ 212.784768][T14019] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 212.868943][T14025] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2435'. [ 213.162041][T14039] ipt_rpfilter: unknown options [ 213.180096][ T5947] Bluetooth: hci0: command 0x0419 tx timeout [ 213.246809][T14043] IPVS: length: 213 != 8 [ 213.272076][T14040] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=256 sclass=netlink_tcpdiag_socket pid=14040 comm=syz.1.2440 [ 213.460569][T14053] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 213.681626][T14061] netlink: 'syz.7.2448': attribute type 1 has an invalid length. [ 213.684057][T14061] netlink: 'syz.7.2448': attribute type 2 has an invalid length. [ 213.727018][T14065] ------------[ cut here ]------------ [ 213.728840][T14065] WARNING: CPU: 0 PID: 14065 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 213.732442][T14065] Modules linked in: [ 213.734005][T14065] CPU: 0 UID: 0 PID: 14065 Comm: syz.1.2449 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 213.740233][T14065] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 213.744213][T14065] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 213.746447][T14065] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 83 6e 7a 0e 00 75 0b c6 05 7a 6e 7a 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 213.753449][T14065] RSP: 0018:ffffc900049df4f8 EFLAGS: 00010246 [ 213.755861][T14065] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 213.758404][T14065] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040dc0 [ 213.761029][T14065] RBP: 0000000400000000 R08: 0000000000000005 R09: 0000000000000000 [ 213.763613][T14065] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000016 [ 213.766124][T14065] R13: 1ffff9200093beb4 R14: 0000000400000000 R15: 0000000000000016 [ 213.768964][T14065] FS: 00007f1c43da46c0(0000) GS:ffff8880d6753000(0000) knlGS:0000000000000000 [ 213.771954][T14065] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.774581][T14065] CR2: 0000200000006000 CR3: 00000000584bd000 CR4: 0000000000352ef0 [ 213.777096][T14065] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 213.779705][T14065] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 213.782249][T14065] Call Trace: [ 213.783314][T14065] [ 213.784291][T14065] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 213.786283][T14065] ? rcu_is_watching+0x12/0xc0 [ 213.787857][T14065] ? trace_kmem_cache_alloc+0x28/0xc0 [ 213.789628][T14065] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 213.791461][T14065] ? hashtab_init+0x1b1/0x290 [ 213.793036][T14065] __alloc_pages_noprof+0xb/0x1b0 [ 213.794630][T14065] ___kmalloc_large_node+0x84/0x1e0 [ 213.796292][T14065] ? hashtab_init+0x1b1/0x290 [ 213.797807][T14065] __kmalloc_large_node_noprof+0x1c/0x70 [ 213.799625][T14065] ? __pfx_ebitmap_read+0x10/0x10 [ 213.801323][T14065] __kmalloc_noprof.cold+0xc/0x61 [ 213.803005][T14065] hashtab_init+0x1b1/0x290 [ 213.804500][T14065] ? __asan_memcpy+0x3c/0x60 [ 213.806183][T14065] policydb_read+0x7b4/0x3220 [ 213.808062][T14065] ? __pfx_policydb_read+0x10/0x10 [ 213.810670][T14065] security_load_policy+0x15c/0x12c0 [ 213.813004][T14065] ? irqentry_exit+0x3b/0x90 [ 213.814995][T14065] ? __pfx_security_load_policy+0x10/0x10 [ 213.817017][T14065] ? _copy_from_user+0x93/0xd0 [ 213.818558][T14065] sel_write_load+0x332/0x1bd0 [ 213.820219][T14065] ? __lock_acquire+0xb8a/0x1c90 [ 213.821887][T14065] ? __pfx_sel_write_load+0x10/0x10 [ 213.823614][T14065] ? __pfx_sel_write_load+0x10/0x10 [ 213.825346][T14065] vfs_write+0x2a0/0x1150 [ 213.826799][T14065] ? __pfx___mutex_lock+0x10/0x10 [ 213.828525][T14065] ? __pfx_vfs_write+0x10/0x10 [ 213.830080][T14065] ? __fget_files+0x20e/0x3c0 [ 213.831539][T14065] ksys_write+0x12a/0x250 [ 213.832976][T14065] ? __pfx_ksys_write+0x10/0x10 [ 213.834427][T14065] do_syscall_64+0xcd/0x4c0 [ 213.836031][T14065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.838675][T14065] RIP: 0033:0x7f1c42f8e929 [ 213.840418][T14065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.846209][T14065] RSP: 002b:00007f1c43da4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 213.848751][T14065] RAX: ffffffffffffffda RBX: 00007f1c431b5fa0 RCX: 00007f1c42f8e929 [ 213.851153][T14065] RDX: 000000000000606c RSI: 0000200000000000 RDI: 0000000000000003 [ 213.854090][T14065] RBP: 00007f1c43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 213.856502][T14065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.859004][T14065] R13: 0000000000000000 R14: 00007f1c431b5fa0 R15: 00007ffe5a756a18 [ 213.861538][T14065] [ 213.862706][T14065] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 213.865357][T14065] CPU: 0 UID: 0 PID: 14065 Comm: syz.1.2449 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 213.869040][T14065] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 213.872701][T14065] Call Trace: [ 213.873802][T14065] [ 213.874797][T14065] dump_stack_lvl+0x3d/0x1f0 [ 213.876337][T14065] panic+0x71c/0x800 [ 213.877635][T14065] ? __pfx_panic+0x10/0x10 [ 213.879072][T14065] ? show_trace_log_lvl+0x29b/0x3e0 [ 213.880801][T14065] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 213.882789][T14065] check_panic_on_warn+0xab/0xb0 [ 213.884465][T14065] __warn+0xf6/0x3c0 [ 213.885777][T14065] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 213.887732][T14065] report_bug+0x3c3/0x580 [ 213.889166][T14065] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 213.891124][T14065] handle_bug+0x184/0x210 [ 213.892563][T14065] exc_invalid_op+0x17/0x50 [ 213.894049][T14065] asm_exc_invalid_op+0x1a/0x20 [ 213.895628][T14065] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 213.897691][T14065] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 83 6e 7a 0e 00 75 0b c6 05 7a 6e 7a 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 213.903820][T14065] RSP: 0018:ffffc900049df4f8 EFLAGS: 00010246 [ 213.905805][T14065] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 213.908336][T14065] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040dc0 [ 213.910879][T14065] RBP: 0000000400000000 R08: 0000000000000005 R09: 0000000000000000 [ 213.913452][T14065] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000016 [ 213.915905][T14065] R13: 1ffff9200093beb4 R14: 0000000400000000 R15: 0000000000000016 [ 213.918405][T14065] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 213.920360][T14065] ? rcu_is_watching+0x12/0xc0 [ 213.921881][T14065] ? trace_kmem_cache_alloc+0x28/0xc0 [ 213.923978][T14065] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 213.925918][T14065] ? hashtab_init+0x1b1/0x290 [ 213.927627][T14065] __alloc_pages_noprof+0xb/0x1b0 [ 213.929500][T14065] ___kmalloc_large_node+0x84/0x1e0 [ 213.931244][T14065] ? hashtab_init+0x1b1/0x290 [ 213.932760][T14065] __kmalloc_large_node_noprof+0x1c/0x70 [ 213.934504][T14065] ? __pfx_ebitmap_read+0x10/0x10 [ 213.936079][T14065] __kmalloc_noprof.cold+0xc/0x61 [ 213.937671][T14065] hashtab_init+0x1b1/0x290 [ 213.939109][T14065] ? __asan_memcpy+0x3c/0x60 [ 213.940725][T14065] policydb_read+0x7b4/0x3220 [ 213.942219][T14065] ? __pfx_policydb_read+0x10/0x10 [ 213.943842][T14065] security_load_policy+0x15c/0x12c0 [ 213.945524][T14065] ? irqentry_exit+0x3b/0x90 [ 213.946994][T14065] ? __pfx_security_load_policy+0x10/0x10 [ 213.948811][T14065] ? _copy_from_user+0x93/0xd0 [ 213.950337][T14065] sel_write_load+0x332/0x1bd0 [ 213.951836][T14065] ? __lock_acquire+0xb8a/0x1c90 [ 213.953373][T14065] ? __pfx_sel_write_load+0x10/0x10 [ 213.954956][T14065] ? __pfx_sel_write_load+0x10/0x10 [ 213.956544][T14065] vfs_write+0x2a0/0x1150 [ 213.957935][T14065] ? __pfx___mutex_lock+0x10/0x10 [ 213.959531][T14065] ? __pfx_vfs_write+0x10/0x10 [ 213.961073][T14065] ? __fget_files+0x20e/0x3c0 [ 213.962577][T14065] ksys_write+0x12a/0x250 [ 213.963987][T14065] ? __pfx_ksys_write+0x10/0x10 [ 213.965544][T14065] do_syscall_64+0xcd/0x4c0 [ 213.966989][T14065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.968854][T14065] RIP: 0033:0x7f1c42f8e929 [ 213.970260][T14065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.976209][T14065] RSP: 002b:00007f1c43da4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 213.978791][T14065] RAX: ffffffffffffffda RBX: 00007f1c431b5fa0 RCX: 00007f1c42f8e929 [ 213.981182][T14065] RDX: 000000000000606c RSI: 0000200000000000 RDI: 0000000000000003 [ 213.983629][T14065] RBP: 00007f1c43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 213.986092][T14065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.988517][T14065] R13: 0000000000000000 R14: 00007f1c431b5fa0 R15: 00007ffe5a756a18 [ 213.990981][T14065] [ 213.992676][T14065] Kernel Offset: disabled [ 213.994017][T14065] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:56:43 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b9f55 RDI=ffffffff9b089360 RBP=ffffffff9b089320 RSP=ffffc900049dee60 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b089320 R15=ffffffff855b9ef0 RIP=ffffffff855b9f7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f1c43da46c0 ffffffff 00c00000 GS =0000 ffff8880d6753000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000006000 CR3=00000000584bd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffc000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c43011b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c43011b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c43011b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c43011b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c43011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c43011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000032647261632f 6972642f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000011475142400c 4a51470c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000070 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080080783 RBX=0000000000000000 RCX=ffff888029bb9070 RDX=000000000000009d RSI=ffffffff86a8a378 RDI=ffff888029bb92d0 RBP=0000000000000001 RSP=ffffc900006a0b60 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000001 R13=0000000000004e20 R14=ffff888029bb9070 R15=0000000000000001 RIP=ffffffff86a8a3bf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055557fc23500 ffffffff 00c00000 GS =0000 ffff8880d6853000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffd9d434e68 CR3=0000000024a1e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000044402 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa4401846a3 00007fa4401846a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd9d4375f0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557fc4acca 000055557fc4a220 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557fc36498 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557fc4e987 000055557fc4e300 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616e676973206e77 6f6e6b6e75000a29 7325203a6425206f 6e7272652820000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 444b424c56054b52 4a4b4e4b50000a0c 5600051f4100054a 4b5757400d05000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 034bb01000018004 0100000e08060601 7bcce20208018003 0010000108000100 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0102a010001e8004 4a08000288080001 00000008060a016c f000040020940304 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0400209003000488 001e980300048400 1e94030404001e90 030008001e800302 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80041881c390f408 0001000002080606 0116ec0610000290 0300080002880340 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8080800800028003 4bb0100001800401 00000e080606017b cce2020801800300 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080000001 RBX=0000000000000001 RCX=1ffffffff35b8c08 RDX=0000000000000000 RSI=ffffffff8c157960 RDI=0000000000000001 RBP=000000829a67a4e8 RSP=ffffc900043a7ac0 R8 =0000000000000001 R9 =0000000000019213 R10=ffff88816dd43bd7 R11=0000000000000010 R12=0000000000000002 R13=00000000000032c9 R14=0000000000000001 R15=000000009adfa601 RIP=ffffffff8189630e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6953000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2a192e56c0 CR3=000000003d674000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000010000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd3d814db0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a18611b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a18611b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a18611b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a18611b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a18611bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a18611c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=dffffc0000000000 RCX=ffffffff848f7f70 RDX=fffffbfff35e6dba RSI=0000000000000004 RDI=ffffffff9af36dc8 RBP=0000000000000000 RSP=ffffc90003207a18 R8 =0000000000000001 R9 =fffffbfff35e6db9 R10=ffffffff9af36dcb R11=0000000000000001 R12=0000000000000138 R13=0000000000000138 R14=0000000000000082 R15=0000000000000001 RIP=ffffffff848f7f8f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f9608b9b880 ffffffff 00c00000 GS =0000 ffff8880d6a53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2a1877e2d8 CR3=0000000050d27000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040008000 Opmask01=0000000000000001 Opmask02=000000000000ffdf Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055dc8732d790 000055dc8732d790 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055dc8732d780 000055dc8732d780 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff00ff000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff00ff00 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff00ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffff0000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e754f4645425d05 1a474f475a054149 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 454648051a041a4f 494b5a594f474b44 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d305b705d392d00 5d392d305b746f6f 625d392d305b6b6c 62630064696b6c62 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d105b505d190d00 5d190d105b544f4f 425d190d105b4b4c 42430044494b4c42 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a72737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6373002a69627500 2a646275002a6473 6164002a73736963 6300003077617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055dc87331a20 000055dc8733af80 000055dc8731d190 000055dc873241b0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055dc873231b0 000055dc870e8af0 000055dc87325560 000055dc87320710 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055dc873309f0 000055dc87330970 000055dc87336e70 000055dc87336df0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000