last executing test programs: 1m29.525567559s ago: executing program 0 (id=54): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000000c0)={0x1, 0x0, '\x00', 0x1}) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="03040000b500000001008aea0000feffd0ca678811498b16af26b92fb4"], 0xc8) dup3(r1, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000001c0)={[0x2, 0xa, 0x3, 0xa6, 0xb8, 0x9, 0xe, 0x7fffffff, 0x6, 0x2, 0x4, 0xf, 0x86, 0x8, 0x6, 0x1], 0x30000, 0x10000}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078005001500120000000800084000000090050005000a000000050001000600000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000002140)=0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480), 0x400000000000259, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xd0}}], 0x1, 0x810) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2cff7f0000", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@map, 0x11, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x53, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) 1m28.594963008s ago: executing program 0 (id=61): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) accept(r0, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @local}}, &(0x7f0000000100)=0x80) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @private1, 0xe}, 0x1c) r2 = accept(r0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)=""/207, 0xcf}], 0x1}}], 0x1, 0x12020, 0x0) 1m28.460598095s ago: executing program 0 (id=64): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) (async) sendmsg$802154_dgram(r0, &(0x7f000000b8c0)={&(0x7f000000b800)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f000000b880)={0x0}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) r1 = msgget$private(0x0, 0x2) msgrcv(r1, &(0x7f0000000500)={0x0, ""/209}, 0xd9, 0x3, 0x0) (async) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "90c7205b89c6ba79f201fb2a7ccdec3f092308bf4d1ae199", "11da928cceb7f2257669a73e935ab02244656cfe8638fefb94440b907850c38e"}}}}}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r4, 0x0) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x40, 0x7, 0x8000, 0x1, {{0xa, 0x4, 0x3, 0x2e, 0x28, 0x66, 0x0, 0x40, 0x4, 0x0, @multicast2, @loopback, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x79, [@loopback]}, @noop, @noop]}}}}}) sendmsg$nl_xfrm(r6, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x90040010}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=@getsadinfo={0x15c, 0x23, 0x400, 0x70bd2b, 0x25dfdbfd, 0x0, [@migrate={0x134, 0x11, [{@in=@local, @in=@remote, @in=@empty, @in=@loopback, 0x6c, 0x0, 0x0, 0x3503, 0x2}, {@in=@multicast2, @in6=@loopback, @in6=@loopback, @in6=@loopback, 0x6c, 0x0, 0x0, 0x3507, 0xa, 0xa}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in=@multicast1, 0xff, 0x1, 0x0, 0x34ff, 0xa, 0x2}, {@in=@remote, @in=@rand_addr=0x64010100, @in=@private=0xa010101, @in6=@rand_addr=' \x01\x00', 0x3c, 0x3, 0x0, 0x3506, 0xa, 0x2}]}, @etimer_thresh={0x8, 0xc, 0x2}, @offload={0xc, 0x1c, {r7}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8000}, 0xc4) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r3, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffbff}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x461d8d0d}]}, 0x48}}, 0x4c001) 1m28.458376883s ago: executing program 0 (id=65): r0 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000400)="1b", 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) (async) keyctl$read(0xb, r0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) epoll_create1(0x0) (async) epoll_create1(0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0xfffffd79) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_usb_connect$printer(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) (async) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) poll(&(0x7f0000000240)=[{r3, 0x10}], 0x1, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0xf) read(r1, 0x0, 0x0) (async) read(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40000000000000061119800000000000400000000f1ff009500000000000000515080146b6b2af738af9f3cd89c89eb016776626d2260465ef1c3a44f69eb21fd809006000560758e36acb1870681ab573e72ee393da10a290cb1f0833987bfa9011559f237e7a1836171e2e0f1e9cf5887b326bc3106a55c1a25a822a2d39d6d5ae6fa9a222cb4ff4f5cd8f42471170a3079cd8f526826efcdf0c01fdb5887799d0747723541d001ea9f33"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd0c, 0x10, &(0x7f0000000000), 0x76}, 0x48) r4 = syz_io_uring_setup(0x117, &(0x7f0000000140)={0x0, 0x9ee6, 0x1, 0x0, 0x358}, &(0x7f00000000c0), &(0x7f00000001c0)) io_uring_setup(0x29fd, &(0x7f0000000200)={0x0, 0xf0a, 0x400, 0x3, 0xf4, 0x0, r4}) socket(0x2d, 0x2, 0x0) (async) r5 = socket(0x2d, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000300)={0x2d, 0x0, 0x4001}, 0xc) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00857900000000000000e1000000b7080000010000f8ffffffbfa40000f0ffffff001800000300"/72, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000185700000a00000000000000000000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000000640)=""/195, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0xc, 0xa1ec, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_LEARNING={0x5}, @IFLA_BRPORT_UNICAST_FLOOD={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='\x00', 0x89901) (async) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='\x00', 0x89901) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x3, 0x3, 0x1c10a1, 0x0, 0x98}]}, &(0x7f0000003ff6)='GPL\x00', 0x8d9, 0xc3, &(0x7f0000000500)=""/211, 0x40f00, 0x9, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0xfffffffffffffd87, 0x0, r6}, 0x94) 1m27.044646301s ago: executing program 0 (id=87): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="001804004072072e19b168bb8445ee5ef46806001c0012800b00010067726574617000000c00028528000700ffffffff17a668c9a2a3671d8c79779ce8ad145f9296d98bf83c02fd476a83f383a49ac2a24e05d7288dff44daa237bec6ec66153bf488817d3a04c2743f7827a93b06023c4e0386d4abd639c5752e6effaa08532f2b6f17e3758151c825b5ea872518c458f0f369cd18e31cc7899d0dd980211de0861d01008e01f507724d2045d56342becc01bed298cacab94c8626c6514391c0", @ANYRES8=r0], 0x44}}, 0x8000) 1m21.766695269s ago: executing program 0 (id=153): arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000000)) msgrcv(0x0, 0x0, 0x0, 0x2, 0x4800) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 1m21.712325957s ago: executing program 32 (id=153): arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000000)) msgrcv(0x0, 0x0, 0x0, 0x2, 0x4800) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 39.282083097s ago: executing program 1 (id=654): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) (async, rerun: 64) r2 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r3) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) pwrite64(r2, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000100)={0xa00, 0xa0000}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x7, 0x0, 0xfd1, 0x5}, 0xffffff0c) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050008000000fcff393e987f000008000300", @ANYRES32=r10, @ANYBLOB="080005"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x4c, r7, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000052}, 0xc5) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a001501000000000000000002000000000000000000000008001900", @ANYRES32=0x0, @ANYBLOB="25839434cdaa8a72d64002dd050e87d9fa430a18e614c1e9d5cd93f901e237"], 0x24}}, 0x0) (async, rerun: 64) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000440)={0x1, 0x0, [{0x4b564d01, 0x0, 0x9}]}) (rerun: 64) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r11) sendmsg$ETHTOOL_MSG_FEATURES_SET(r11, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)={0x38, r12, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004801}, 0x40800) (async) r13 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ppoll(&(0x7f00000000c0)=[{r13, 0x600}, {r13, 0x9411}], 0x2, 0x0, 0x0, 0x0) 39.111112866s ago: executing program 1 (id=655): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) r0 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000f80)=0x3, 0x2) connect$bt_sco(r2, &(0x7f0000001000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) shutdown(r2, 0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendto(r1, &(0x7f0000000080)="ec301ac162090492b35b043e5133bfd159086b98677651aa7d3c4e239842a55e5fabdcc6b6cd6bf1d673e1e66ba3738f3cb54ddd63df5f440d62acd76e43c8e9d9e265be1b5b765750c26452c11987babacfc10bad7eb39f7baf9c5ef9315c64944abeb661a7d5f6df9a2e4c28ef079bc9e15e6a5e56bef0216fcd3884828845789c9e750255438a98192fb85e08294983d4304ac9cf76ca0f3a1c061eff30b4b0d6f6f884544a323e", 0xa9, 0x80, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @local}, 0x3, 0x3}}, 0x80) 37.923428967s ago: executing program 1 (id=663): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@cswp={0x58, 0x114, 0x7, {{0x6, 0x2}, 0x0, 0x0, 0x2, 0x9, 0x9, 0x9, 0x1c, 0x4}}], 0x58}, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 37.923070704s ago: executing program 1 (id=664): r0 = fsopen(&(0x7f0000000080)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b090c, 0x80, '\x00', @p_u32=0x0}}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r2, &(0x7f0000000240)='./file0\x00') mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) unlink(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) 37.837658499s ago: executing program 1 (id=665): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004882, 0x0) syz_clone(0x80000000, &(0x7f0000000500)="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", 0xb01, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x22, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) io_setup(0x1, &(0x7f00000004c0)) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8ea}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd2}]]}, 0x34}, 0x1, 0x0, 0x0, 0x20044815}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c004}, 0x40000) setresgid(0xee00, 0xee01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r10, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r12) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@delchain={0x40, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r13, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0x5}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xbfa34b42d03fc8a6}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r5, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 36.452303003s ago: executing program 1 (id=668): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x200000000, 0x40900) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x1, 0x4, 0x2, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x20000000, 0x40800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f0000000180)={r6, 0x3, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000380)={r2, r3, r6, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000200)={r7, 0x0, 0x0, 0x0, 0x1003, 0x0, 0x9336, 0x4, 0x3, 0xfffffffe, 0x5e, 0x800000}) 36.39927545s ago: executing program 33 (id=668): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x200000000, 0x40900) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x1, 0x4, 0x2, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x20000000, 0x40800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f0000000180)={r6, 0x3, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000380)={r2, r3, r6, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000200)={r7, 0x0, 0x0, 0x0, 0x1003, 0x0, 0x9336, 0x4, 0x3, 0xfffffffe, 0x5e, 0x800000}) 27.18766029s ago: executing program 5 (id=760): r0 = socket$inet6_sctp(0xa, 0x4, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x5ea, 0x4) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x10102) ioctl$int_in(r1, 0x5452, &(0x7f0000001840)=0x5d4) read$snddsp(r1, &(0x7f0000000280)=""/147, 0x93) 27.10433244s ago: executing program 5 (id=762): r0 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000680), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r1 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) linkat(r1, &(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000180)='./bus\x00', 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 27.038771639s ago: executing program 5 (id=765): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x7) (rerun: 32) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4c002bbd7000fbdbdf251900000008000300", @ANYRES32=r4, @ANYBLOB="1b001e00090000000000a20000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x10000) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, 0x0, 0x4004084) ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) (async) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x2, 0xfffffff9, 0x9, 0x7, 0x1, 0x358d, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0xc9, 0x7}, 0x50) (async) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f00000000c0)=@udp6=r6}, 0x20) (async) r7 = syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f0000000500)=0x0, &(0x7f0000000380)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async, rerun: 64) io_uring_enter(r7, 0xe7f, 0xe876, 0x3, 0x0, 0x0) (async, rerun: 64) io_uring_register$IORING_REGISTER_IOWQ_AFF(r7, 0x11, &(0x7f0000000100)='F', 0x1) (async) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r7, 0x12, 0x0, 0x0) (async, rerun: 64) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20) (rerun: 64) r9 = epoll_create(0x7) r10 = epoll_create1(0x0) (async) r11 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r11) getsockname$packet(r11, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r11, 0x84, 0x1e, &(0x7f0000000080)=0x21, 0x4) epoll_create(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000180)) 26.847231599s ago: executing program 5 (id=768): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x1095, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r5, r6, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES64=r4, @ANYRESHEX=r3, @ANYBLOB="c96a874b9bf3ece5c1b04ba70da2"], 0x50) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r7, 0x80c84d0a, 0x0) read$alg(r7, &(0x7f0000000700)=""/215, 0xd7) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000c40)) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000200)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmsg$kcm(r9, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="82d191863d838ec67d0695a00077021efcd08b9301932851c3f1bbdd88cfd00ad6", 0x21}], 0x1}, 0x80) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21}, 0x10) unshare(0x8000280) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = syz_pidfd_open(r11, 0x0) ioctl$EXT4_IOC_MIGRATE(r12, 0xff07) r13 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r13, 0x6, 0x1d, 0x0, &(0x7f0000000080)) 26.726350631s ago: executing program 5 (id=771): r0 = socket$unix(0x1, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec97000198"], 0xfdef) pivot_root(0x0, &(0x7f00000001c0)='./file0/../file0/../file0\x00') r4 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x484100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f00000002c0)=',,\x00', &(0x7f0000000300)='./file0\x00', 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) listen(r0, 0x0) connect$unix(r0, 0x0, 0x0) 26.430926141s ago: executing program 5 (id=787): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0xfff, 0x4b, 0x8009}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x24, 0x5, {0x0, 0x0, 0x0, '\x00', {0x9ca7a16b958dcf33, 0x8001, 0xffffffffffffffff, 0xfffffff3, 0x0, 0x0, 0x2000, '\x00', 0xfffffffffffffffe, 0x0, 0x8, 0x0, {0xfffffffffffffffd}, {0x5}, {}, {0x5}, 0x61, 0x0, 0x7fff}}}}) close_range(r1, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000300)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000000c0)={@local, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000280)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 26.335911152s ago: executing program 34 (id=787): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0xfff, 0x4b, 0x8009}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x24, 0x5, {0x0, 0x0, 0x0, '\x00', {0x9ca7a16b958dcf33, 0x8001, 0xffffffffffffffff, 0xfffffff3, 0x0, 0x0, 0x2000, '\x00', 0xfffffffffffffffe, 0x0, 0x8, 0x0, {0xfffffffffffffffd}, {0x5}, {}, {0x5}, 0x61, 0x0, 0x7fff}}}}) close_range(r1, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000300)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000000c0)={@local, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000280)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.184699006s ago: executing program 6 (id=1151): r0 = socket$nl_generic(0x10, 0x3, 0x10) acct(&(0x7f0000000000)='./file0\x00') (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="3800000040000701feffffff0000000001780000040042800c00018006000600800a0000140002800d001480040005"], 0x38}, 0x1, 0x0, 0x0, 0x488d5}, 0x400c000) 2.112120238s ago: executing program 6 (id=1155): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7fffffffffffffff, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000008c0)={&(0x7f0000000880)=[0x0, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000001b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x8}}, @enum64={0xa, 0x1, 0x0, 0x13, 0x1, 0x5969e95c6e3c70e4, [{0x1, 0xfffffffd, 0x2651202}]}, @union={0xd, 0x0, 0x0, 0x5, 0x1}]}, {0x0, [0x5e, 0x2e, 0x30, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e]}}, &(0x7f0000000a40)=""/4093, 0x5e, 0xffd, 0x0, 0x4, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@bloom_filter={0x1e, 0x7, 0x54c, 0x81, 0x1, r1, 0x9, '\x00', 0x0, r2, 0x1, 0x3, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000900)={0x0, @dev, @broadcast}, &(0x7f0000000940)=0xc) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x10001, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r5, &(0x7f0000000100)="822a0a65bd8c002b0304000e0580a7b6070d63e286a5cefede3562bf", 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtfilter={0x4c, 0x2c, 0x100, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xd, 0x3}, {0xfff2, 0x9}, {0x4, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xfa, 0x8}}, @TCA_RATE={0x6, 0x5, {0x6, 0xb}}, @TCA_CHAIN={0x8, 0xb, 0xffff0001}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x40, 0x3}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000580)) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x300, &(0x7f0000000180)=[0x6bd1a312, 0xec63, 0xff, 0x8, 0x98b9, 0x7ff, 0x0, 0x100000000000004, 0x10000, 0x100, 0x100, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3fc, 0x4, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x40006, 0x2, 0x6, 0x7, 0x93, 0x1, 0xffffffff00000000, 0x5, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x3, 0x4, 0x8, 0x6, 0x6, 0x8000003, 0xa3de, 0x4e, 0x8, 0x5c3e, 0x9, 0x3, 0xfffffffffffffff7, 0xfffffffffffffff8, 0x4, 0x400, 0x7, 0x0, 0x4, 0x200000000000101, 0x5, 0x100004, 0x63, 0x6, 0x5, 0x40000008, 0xfffffffeffffffff, 0xc, 0xd, 0x2, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x100000002, 0x2, 0x7, 0x7, 0x3, 0x2, 0x8, 0xfff, 0x101, 0x4, 0x4, 0xab6, 0x4, 0x4, 0x1, 0x6, 0xb, 0x139790, 0x6, 0xe, 0x5, 0x400000000008061d, 0x10000003, 0x8, 0x6, 0x4, 0x4, 0x200, 0xfffffffffffffffc, 0x7, 0x2c, 0x8, 0x2293332f, 0x6, 0x8c7, 0x0, 0xd, 0x3, 0x5, 0x1, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x4cb, 0x8, 0x3, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb690, 0x3ffc00000, 0x8, 0x3]}) lsm_get_self_attr(0x67, &(0x7f0000000000)={0x0, 0x0, 0x7f, 0x5f, ""/95}, &(0x7f00000000c0)=0x7f, 0x1) r6 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r7, 0x0, 0x0, 0x8010, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x6) write$binfmt_elf32(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0) preadv(r9, &(0x7f0000000300)=[{&(0x7f0000000140)=""/238, 0xee}], 0x1, 0xffffffff, 0x20000003) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) lsm_set_self_attr(0x65, &(0x7f0000000780)={0x68, 0xfffffffffffffffa, 0x43, 0x23, "c409a3453c0cd38de5722c466e188afef219d393f2eeaf88bf3c0c20b0ab764cd432b4"}, 0x43, 0x0) 2.045506902s ago: executing program 6 (id=1158): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)}, 0x20) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r0, r1, 0x2) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x1, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008814}, 0x8810) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x8c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x69, 0x6, "e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b01"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x89}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x5, 0x0, [{0x9a7, 0x0, 0x100}, {0xb65, 0x0, 0x2}, {0x37d, 0x0, 0x3}, {0x3f6, 0x0, 0x6}, {0x4b564d01, 0x0, 0x200}]}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xf3b8, 0x0, 0x8000001000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x140640}) 1.89407323s ago: executing program 6 (id=1162): r0 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000003440), 0x4000, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200400c4}, 0x4040) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x16, 0x1}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8080000}) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x84) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f0000000100)) 1.294364237s ago: executing program 2 (id=1174): r0 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000000), 0x4b8a80, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000040)={0xfffffff9, 0xe}) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000080)={0xfffffffc, 0x2}) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000100)) r2 = syz_io_uring_setup(0x31ca, &(0x7f0000000140)={0x0, 0x2c26, 0x20000, 0x1, 0x280}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000240)={0xf1e, r0, 0xe, {0xe, 0x8}, 0x10}, 0x1) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000280)={0x8}) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x8, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x4000}}, './file0\x00'}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000003c0)=@multiplanar_mmap={0x2, 0x2, 0x4, 0x20, 0x81e, {0x77359400}, {0x7, 0x2, 0x0, 0x3, 0x50, 0x3, "97956e1d"}, 0x5f, 0x1, {&(0x7f0000000300)=[{0xf62, 0x7, {0x9}, 0x65}, {0x4, 0x73d3, {0x8000000000000001}, 0x6}]}, 0xffffffff, 0x0, r4}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000440)) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r6, 0x20a, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x20008009) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000600), &(0x7f0000000640)={0x0, 0xfb, 0x102, 0x0, 0x4, "994490d1c9219f5c0f4672bcb71fce29", "af0ad38eaad1605f08c5391ed11f4e3ac40a4d372b7dd7765c053b57d1a89f344c12930f6749df3864e82e399078d0175c5642132883c811ecd94a2afc412b3bb99c9c6f39d39d5bac49358801913c529650a825a40b279bde6d29b39d91b32000d5a1bc506893cbb7fdec6e4267fb2e4025dc829af07f54d4bf06f79d07686cabda4a96c1138f20f2259b450b575d0f4625f7a2e21c7c1c6b502aadcfcf39e5ab749d8c855d30018548046f0ae7956a5de55e66b73c32713fda236da79461bb968185ca65665a24eb460d4e0e7c15a9d805f172c366f7177edbc4d95557afff21a96b1a0992ae03d3e7570dd7"}, 0x102, 0x2) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f00000009c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x1b8, 0x1, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TUPLE={0xb0, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1e}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_TUPLE={0xb0, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x24000084}, 0x20048000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r4) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r7, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc014}, 0x4000000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={r4, 0xffffffffffffffff}, 0x4) flistxattr(r8, &(0x7f0000000b80)=""/39, 0x27) ioctl$MEDIA_REQUEST_IOC_QUEUE(r5, 0x7c80, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000bc0)={0x4, 0x0, [{0x288, 0x0, 0x39eb}, {0xbb9, 0x0, 0x7}, {0xbea, 0x0, 0xa177}, {0xb5c, 0x0, 0xfffffffffffffff8}]}) sendmsg$NL80211_CMD_DEL_PMK(r4, &(0x7f0000000d00)={&(0x7f0000000c40), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x40, r7, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x20000044) r9 = add_key$keyring(&(0x7f0000000d40), &(0x7f0000000d80)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r9, 0xfffffffffffffff8) clock_gettime(0x0, &(0x7f0000000dc0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000e00)={{0x0, 0x3938700}, {r10, r11+60000000}}, &(0x7f0000000e40)) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000e80)={0x0, 0x0, 0xa5}, &(0x7f0000000ec0)={'enc=', 'raw', ' hash=', {'blake2s-224-x86\x00'}}, &(0x7f0000000f40), &(0x7f0000000f80)="b047eefeb678b78c4278648b4b8a18ee3a382c886c6ecd2b3ca613275239734bf73939e00370c3268341afcd75915038c8a88ea820d3aec30eadbdce4af9484b475fbd31a3302088bc09b513503b088cedb8d6bfd85bdb7b37ced6ee62c41402cad7fd2eeaa9d0f3035e53366565afc44197bae6fbb8a3b28d20b77c8d64c8c9245d485434741c4dd87f34861f7425514b968541f532cb39ad37be78a73528e7c511bfa93d") ioctl$VIDIOC_DBG_G_REGISTER(r4, 0xc0385650, &(0x7f0000001040)={{0x0, @addr=0x3}, 0x8, 0x800, 0x2be2}) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000001080)) 1.294051012s ago: executing program 6 (id=1175): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000340), 0x129202, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c00)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9daee93b50574d9}}, 0xb8}}, 0x4000080) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup(r3) (async) r4 = dup(r3) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0) io_uring_enter(r4, 0x107b, 0x1012, 0x0, &(0x7f0000000240)={[0x8]}, 0x8) write$binfmt_elf32(r0, 0x0, 0x4cd) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) (async) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000c4000000c400000006000000040000000000000a03000000030000000000000a000000000e00000002000006040000000e000000000000000600000002000000020000000000000a02000000050000000a000093030000000f0000000e0000000100000007000000070000000200000009010000d70700003a040000010000000600000057040000090000000010000000000000080000000100000071d3d96a0c000000ab00000094ac00000f000000ff7f0000000000000800000007000000000000000f00000008000000030000000030412e7100"], &(0x7f0000000100)=""/93, 0xe2, 0x5d, 0x0, 0x7, 0x10000, @value=r5}, 0x28) 1.293488748s ago: executing program 2 (id=1176): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0xb0, r3, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:sysfs_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:sendmail_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_virt_wifi\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xb0}}, 0x4004001) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x38, r3, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}]}, 0x38}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)={0x30, r5, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x30}}, 0x20004000) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000400), 0x4) (async) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) (async) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r6, 0x4004480f, &(0x7f0000000000)=0x3) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x196) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) (async) r7 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r7, 0x800455d1, 0xfffffffffffffffd) (async) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = epoll_create(0xffff8000) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r9, 0x8010661b, &(0x7f0000000000)) (async) r10 = socket$inet(0x2, 0x1, 0x0) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r11, r11, &(0x7f0000000000)=0x2eb4, 0x2000007ff) ioctl$USBDEVFS_GETDRIVER(r11, 0x41045508, &(0x7f0000000580)={0xdfba, "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"}) getsockopt$EBT_SO_GET_ENTRIES(r10, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0xfffffffffffffd0a, 0x0, 0x0}, &(0x7f0000000240)=0x108) (async) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000006800210500000000000000000200000001000000"], 0x18}}, 0x4020054) 1.177799584s ago: executing program 2 (id=1178): r0 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x208101) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, 0x0}) io_setup(0xffff7fff, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000680)={0x1, 0x1, 0x15, 0x1d, 0x191, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = semget(0x1, 0x2, 0x0) semctl$SEM_INFO(r2, 0x1, 0x13, &(0x7f0000000000)=""/101) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x93}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="14a3c898a652deff06530113000000090a0104000073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010000000114000380100000800c00018006000100d10300001400000011000100"/174], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4814) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0xe, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x0, 0xc000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x44, 0x7fff0001}]}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) semctl$SEM_INFO(r2, 0x0, 0x13, &(0x7f00000002c0)=""/29) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001400b59527bd7000ffdbdf250a4000ff", @ANYRES32=r9, @ANYBLOB="14000200000000000000001d009eabc59790523329d2d68abd708f4e"], 0x34}, 0x1, 0x0, 0x0, 0x2004c041}, 0x400c0c0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = semget$private(0x0, 0x4000000009, 0x208) semop(r10, &(0x7f00000002c0)=[{0x1, 0x8698, 0x1000}], 0x1) 1.102421183s ago: executing program 3 (id=1180): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x0, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048851}, 0x20000004) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00009b5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="f30fbd9e412b66b9640a000066b8e2ee000066ba00000000ba2100ec26f00fba7f1559b800078ec0baf80c66b9200a00000f32660f3a627768dfeff30f205b66b9800000c00f326635000800000f300f23c85bd621f8f835080030000f23f8ba4200ef440f20c0663501000000440f22c0", 0x71}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.038343389s ago: executing program 6 (id=1183): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x4000010) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYBLOB="f7"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 976.167736ms ago: executing program 3 (id=1184): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000060000000410000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x8) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f0000000040), 0x8010, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport}]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x18) (async) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) 975.540925ms ago: executing program 3 (id=1185): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x4, 0xd3d) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x1002, 0x8243}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x3}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 901.225529ms ago: executing program 3 (id=1186): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x146, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r2, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f00000001c0)=0x9, 0x4) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x3, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000004c0)=0x4, 0x4) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000180)=0x4) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r4, &(0x7f0000000040)=[{&(0x7f00000024c0)="00214717a7070075000003060000000000000000d35fecbfc83df141460817efaaa6087c309c981de05261a7164d20dc85552204aa8add", 0x37}], 0x1, 0x73a, 0x7) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000240012800900010069706970000000001400028005000900ff"], 0x44}}, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0x7f, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 761.625041ms ago: executing program 3 (id=1191): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c1bbdbe3160578f5aa421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e6405c0cf5329cb7f1821ec7ecca1d3ffb2d7144f29af11fe6557f8a74d923d12c43bc0000004d0012"], 0xb4}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x400}}, './file0\x00'}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r5}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl2\x00', 0x0, 0x4, 0x81, 0xa7, 0x2, 0x60, @empty, @mcast1, 0x20, 0x8000, 0x0, 0x28}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000880)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1b, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="180000006bdbac2200000000ff00000007a5090006000000184200000200000000000000000000009500000000000000"], &(0x7f0000000680)='GPL\x00', 0x0, 0x76, &(0x7f00000006c0)=""/118, 0x41100, 0x56, '\x00', r8, @fallback=0x20, r2, 0x8, &(0x7f0000000800)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0xc, 0x6, 0xda}, 0x10, r9, r2, 0x4, &(0x7f00000008c0)=[r2, r2, r2, r2, r2], &(0x7f0000000900)=[{0x4, 0x2, 0xa}, {0x3, 0x3, 0x9, 0x4}, {0x3, 0x4, 0x4}, {0x3, 0x1, 0xc, 0xb}], 0x10, 0x6}, 0x94) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000580)={0x601, 0x1, &(0x7f0000000180)=[r5], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r7, r6, r6], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000080)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x1, 0x3, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000340)={0x1, r6, r10}) r11 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000003c0)=[@wr_drn={0x68, 0x20, {0x1, 0x100}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @in_dx={0x69, 0x20, {0x174e, 0x1}}, @wr_crn={0x67, 0x20, {0x0, 0x5}}, @enable_nested={0x12c, 0x18}, @code={0xa, 0x52, {"c744240036010000c74424025d000000ff2c240f01cb67f3430fc7b000000000d9f92e650f01c2c46271bcaa00000000f20ff05d0cf20f2a2f0f01f8410fe17108"}}, @set_irq_handler={0xc8, 0x20, {0xc2}}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host32=0x4c00, 0x4, 0x1, 0x3}}, @wr_drn={0x68, 0x20, {0x3, 0x943}}, @set_irq_handler={0xc8, 0x20, {0x78}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x43d, 0x6, 0x3, 0x2}}], 0x1ca}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000180)={[0xffffffffffffff7b, 0x81, 0x3, 0x8000000000000001, 0x5, 0x37, 0x104, 0x9, 0xab32, 0x8, 0x7, 0x0, 0x3, 0x800, 0x1324, 0x7fff], 0x7000, 0x1000}) 654.852219ms ago: executing program 3 (id=1194): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001500192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010010418e01400004fcff", 0x58}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) io_setup(0x2e, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xfe, 0x4}]) r3 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r4 = dup(r3) read$eventfd(r4, 0x0, 0x0) r5 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f00000022c0)={[0x15]}, 0x8, 0x80000) ppoll(&(0x7f00000000c0)=[{r6, 0x200}], 0x1, 0x0, 0x0, 0x0) io_submit(r2, 0x6, &(0x7f0000002480)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfff6, r0, &(0x7f00000000c0)="1ac71ce78d350ef5aea20379938c282535445114f0290d5f9281c0e54246bb113b56f1632de74978755c5826ccd5ce47ba6cddefd1dcca209bdc09c308142b7bd6febce9b407eb04c05d3a9e9e42d80fa63eeea375c4fce77230b868f639a1265abdd97f421170ac118f6ee8e107d84d9e933797f39da11a1e6712112049c2b8298f553c487c7a808b724d75b9e415db289f2874d514d6af50e4285dcce8591130962a3fa201b13150c40f6ff6a87d7abdf6a97f54be", 0xb6, 0xd, 0x0, 0x7, r4}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x3, r0, &(0x7f0000000180)="189a1dd116e0397e", 0x8, 0xe, 0x0, 0x1}, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x2, 0x5, r0, &(0x7f00000002c0)="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", 0x1000, 0x80000000, 0x0, 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f00000012c0)="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", 0x1000, 0x2, 0x0, 0x3}, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x8, 0x8, r5, &(0x7f00000024c0)="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", 0x18c, 0x8e, 0x0, 0x0, r6}, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x7, 0x384d, r0, &(0x7f00000023c0)="f0fd77c983c075ad0bb28a0f315e89240836f816ce85b78f21f922bb51b9ced14cd8c32017f5ba9114c8217940ddfcc5bcb5d7deb27f5571c55e2e05d5c6fcf2994fb6", 0x43, 0x7}]) 235.347732ms ago: executing program 4 (id=1199): r0 = shmget(0x1, 0x3000, 0x4, &(0x7f0000ffc000/0x3000)=nil) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0x9a51, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x10, 0xfffffffffffffffd, 0x8, 0x4, 0x0, 0x6000, 0xf, r2, 0x0, 0x800004, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x3, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r2, r3, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x98, &(0x7f0000000380)={0x7, 0x8, 0x12}}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) r7 = gettid() rt_sigqueueinfo(r7, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) shmctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{0x0, 0xee00, 0xee00, 0xffffffffffffffff, r3, 0x0, 0xc1}, 0x4, 0x10, 0xffff, 0x3ff, r6, r7, 0x9}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d50633"], 0x6f4}}, 0x0) r11 = syz_open_procfs(r4, &(0x7f0000000500)='uid_map\x00') preadv(r11, &(0x7f0000000100)=[{&(0x7f0000000600)=""/56, 0x38}], 0x1, 0x3c, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r11, 0x65, 0x5, &(0x7f0000000200), 0x4) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r12, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_256={{0x303}, "895e10f134ce9b8b", "d195ccf052dc2fe1b8989ab059d7a9c050f4d62077524ac3a809e774bef01407", "3cce6a4f", "5de8b2bb38431e93"}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r11}, &(0x7f00000002c0), &(0x7f0000000300)=r11}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x18, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@cb_func={0x18, 0xc, 0x4, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0xec, 0x3, 0x9, 0x8, 0x7ff}, @jmp={0x5, 0x1, 0xc, 0x4, 0x4, 0xfffffffffffffff6, 0xfffffffffffffff0}, @alu={0x7, 0x0, 0xc, 0x8, 0xa, 0xfffffffffffffffc, 0xfffffffffffffff0}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x88}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x6dbe6b7308f7e58e}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x20}, 0x10}, 0x94) 234.702014ms ago: executing program 2 (id=1200): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100), &(0x7f0000000140)=@sha1={0x1, "f6b34d2aed699c092822df424fd1394d360e3cb5"}, 0x15, 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d3030303030303030307030303081000000000000002581af01a7303030302c75", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="50010000000000000300000000000000040000000000000003000000000000000080020000000000030000000000000009000000010001000600000000000000090000000000000004000000000000000b000000000000000600000000000000000000000000000006000000010000000600000000800000de000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0180000000000080000000000100000000000000010000000000000001000000940b5432000000000000000004000000000000000300000000000000ff07000000000000ffffffffffffbf7fff0f0000ff0700000300000000000000090000000000000003000000000000000600000000000000050000000000000002000000000000000200000006000000070000000080000000000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0100000003000000000000000000000000000000070000000000000001000000000300"/44], 0x0, 0x0, 0x0}) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$CDROMEJECT(r4, 0x5382) mount$overlay(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000080), 0x2024, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_off}], [{@fowner_lt={'fowner<', r2}}, {@subj_type={'subj_type', 0x3d, 'rootmode'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x8b$'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x10, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000002980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x6, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x4, 0x4, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000009500)=@newtaction={0xe68, 0x30, 0x0, 0x70bd27, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1f, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x401, 0x20000000, 0x1, 0x4}, 0x3c, 0x9}, [{0x10000, 0x80000001, 0x90b71e2, 0x6, 0x6, 0x9}, {0xb943, 0x0, 0x8, 0x7, 0x1, 0x6}, {0x4, 0x80000001, 0x9cb, 0x9, 0x4b, 0x3}, {0x80000000, 0x272f8ca0, 0x0, 0x400, 0x8, 0xde}, {0x9, 0x9, 0x1, 0xfffffff7, 0x9, 0x800000}, {0xa, 0xa, 0x1000, 0x7, 0x2, 0x2000}, {0x63, 0x1, 0x2, 0x1, 0x6, 0x301}, {0x4757, 0x5, 0x8, 0xbc64, 0x5b, 0x45ef}, {0x1f, 0xfffffffc, 0x1, 0x3, 0x2, 0x2}, {0x7ff, 0x400, 0x10000, 0x9, 0x1, 0x4}, {0x8, 0xa7, 0x40, 0x6, 0x2, 0x9}, {0x2, 0x6, 0x81, 0x7f, 0x2, 0xa}, {0x40, 0x1ff, 0xa, 0x3, 0x6, 0xbeba}, {0x8, 0x3ff, 0x0, 0x8, 0x7, 0x5}, {0x0, 0x4206, 0x7, 0x1, 0x9, 0xdf99caf9}, {0x1, 0x2, 0x9, 0xfffffffd, 0x8, 0x4}, {0xffff, 0x7, 0x9, 0xd, 0x7, 0xc}, {0x6, 0x6d4c, 0x2, 0x2, 0x7, 0x3}, {0x5, 0x8000, 0x3, 0xfffffff4, 0x0, 0x7}, {0x0, 0x424, 0x4, 0xffff0001, 0x2, 0x9}, {0x6d, 0x4, 0x3b79, 0x2, 0x4, 0x1007ff}, {0x90e9, 0xc1e8, 0x80, 0x15, 0x8, 0xc79}, {0x398, 0x4, 0x8, 0x9, 0x8b1, 0xd8}, {0xc9, 0x9, 0x6, 0xf, 0x0, 0x28}, {0xa9, 0x0, 0x81, 0x800, 0x100, 0x7}, {0xfffffff8, 0x7, 0x0, 0x0, 0xab}, {0xc10b, 0x2191, 0x6, 0x9, 0x0, 0xbe}, {0x80000000, 0x2c2d, 0x400, 0x2, 0x3, 0x7}, {0xfe, 0x9, 0x5bd5, 0x8, 0x7, 0x80}, {0x10000, 0x3, 0x7, 0x800, 0xffffffff, 0x1}, {0x7, 0x6, 0x7ffa328c, 0x2, 0x7b51, 0x8ce6}, {0x8, 0x212626f5, 0x2, 0x2, 0x8001, 0x2}, {0x7, 0x2, 0x7fff, 0x4, 0x7, 0x9}, {0x9, 0x9, 0x2, 0x4, 0x9, 0xe}, {0xfffffffe, 0x2, 0x354a657a, 0x7, 0x8, 0x8}, {0x1, 0x5, 0x9e2a, 0x0, 0x7, 0x3}, {0x7f, 0x5, 0x57b, 0x2, 0x0, 0x5}, {0x3, 0x3, 0x1, 0x3, 0x5, 0x9}, {0x102, 0x0, 0xfff, 0x8, 0x4, 0x9}, {0x2c, 0x2, 0x6, 0x10001, 0x2, 0x101}, {0x2, 0x0, 0x4, 0x6, 0x3, 0x10001}, {0xd, 0xfff, 0x5, 0x94, 0x2, 0x6}, {0x5d, 0x80, 0x4, 0x7, 0x11, 0x6}, {0x3, 0x5, 0xc8, 0x5, 0x18000000, 0x6}, {0xfffffffb, 0x7, 0x3, 0x9, 0x8001, 0x6}, {0x1, 0xb94, 0x800, 0xffffff4a, 0x5, 0x9}, {0x95d5, 0x8, 0x8, 0x9, 0x1, 0x89bc}, {0x24, 0x1000, 0x7, 0x400040, 0x1, 0x1}, {0x6, 0x800, 0x0, 0x400, 0x40010, 0x1}, {0x29a, 0x3, 0x4, 0x6, 0x7, 0x3}, {0x38000000, 0xbd4, 0x3e690dd2, 0x0, 0x49f, 0x8}, {0x9, 0x8, 0x7f, 0x9, 0x8, 0x8}, {0xfffffff6, 0x0, 0x2, 0x8, 0x1ff, 0x4}, {0xfffffff8, 0x6, 0xfffffffc, 0x7, 0x7, 0x1}, {0xc, 0x70c, 0xad8, 0x7, 0x355e7bd2, 0x7}, {0x5, 0x5, 0x1, 0xe3, 0x6ec, 0x3}, {0xff, 0x7, 0x66, 0xe, 0x9, 0x9}, {0x0, 0x0, 0x2, 0x1, 0x200, 0x8}, {0x32db, 0x1, 0x1, 0xffffffff, 0xe790, 0x9}, {0x2, 0x400, 0xfa, 0x9, 0x6, 0x1}, {0x7f, 0x1, 0x5, 0x8000, 0xffffffff, 0x8}, {0x1, 0xfff, 0x7f, 0x8000, 0xe, 0xc44}, {0x80000000, 0x9, 0x0, 0xf98, 0x9, 0x8}, {0x5, 0x1, 0x18, 0x0, 0x80000001, 0x9}, {0x0, 0x8, 0x3, 0x200, 0x5, 0x7}, {0x80000001, 0x2, 0x9, 0xc8, 0xfffffffc}, {0x5, 0x3b, 0x400, 0x4, 0x4, 0x3}, {0x7, 0x8, 0x1, 0x400, 0x9, 0x529}, {0x9, 0x16, 0x10001, 0x3, 0x1, 0xfffffffa}, {0x6, 0x74, 0xffffffff, 0x3, 0x1, 0x7ff}, {0x80000000, 0x9, 0x7, 0x0, 0x9}, {0xffffff97, 0xc, 0x9, 0x3, 0x1, 0x5}, {0xd, 0x4, 0xd, 0x3f, 0x2, 0x7}, {0xa, 0x4, 0x2, 0x3, 0x5}, {0x0, 0x283, 0x4, 0x6, 0x8, 0xee7}, {0x6, 0x7, 0x3, 0x0, 0xff, 0x9}, {0x8, 0xe, 0x100, 0x8, 0x4, 0x87}, {0x1, 0xfffffffc, 0x2, 0x4, 0x100, 0x80000001}, {0x4, 0xffff, 0x2a, 0xf24d, 0xffff8001, 0x5}, {0xd6b, 0x7b8c3976, 0x1, 0x0, 0xf7d9, 0x1}, {0xae9, 0x6, 0xfffffffe, 0x6e53de2f, 0x4, 0xe2758a}, {0x7, 0x8, 0x4, 0x9, 0x8, 0x7fff}, {0xff, 0x1, 0x4, 0x8, 0x1, 0x9}, {0x0, 0x3, 0x8a, 0x6, 0x10, 0x5}, {0x2, 0xe24, 0x5, 0x96, 0x7, 0xd859}, {0x6, 0x6, 0x7, 0x400, 0xfff, 0x2}, {0x3, 0xb, 0x6f70, 0x3, 0xe, 0x6}, {0x0, 0x8, 0xdd1d8af, 0xd1e, 0x4dd, 0x7}, {0x9, 0x1, 0x80009, 0x1000000, 0x4, 0x81}, {0xfffffffc, 0xad, 0x9, 0x7, 0x8000, 0x6}, {0x5, 0x6, 0x5, 0x2, 0x7f, 0x7}, {0x8, 0x6, 0xe79, 0x10f, 0x80, 0x3}, {0x9404, 0x4d, 0x8, 0xc63, 0x475, 0x9}, {0xc4c3, 0x4, 0x1, 0xfadc, 0xb, 0x5}, {0x4, 0x1, 0x3, 0x8, 0x10, 0xfffeffff}, {0x9, 0x5, 0x14, 0x1, 0x7, 0x1}, {0x9, 0xed40, 0x8000, 0x7cf, 0x10, 0xe}, {0x3, 0x0, 0x1c7b, 0x9fc3, 0x57c4, 0x800}, {0x5, 0xfffeffff, 0x4, 0x1, 0x0, 0x3}, {0x6, 0x9, 0x8, 0x3, 0x5, 0x7}, {0x6, 0x400, 0x4, 0x9, 0x7fff, 0x5}, {0x7fff, 0x8, 0x0, 0x9, 0xced, 0x80000000}, {0x7ff, 0x3, 0x6, 0x7fff, 0x9, 0xd}, {0x80000003, 0x5, 0xb, 0x8001, 0x9, 0x1}, {0x0, 0x2, 0x6, 0x2, 0x9, 0x8}, {0x0, 0x7, 0xae6ad9f, 0x0, 0x7, 0x6}, {0x6, 0x200, 0x81, 0xfffffff7, 0x6, 0x4}, {0x0, 0x4, 0x546, 0x6, 0x7, 0x1}, {0xad03, 0x81, 0x7, 0x6, 0x5, 0x9}, {0x4, 0xfff, 0x42, 0x3, 0x9, 0xd}, {0xe, 0x2d4, 0x5, 0x40, 0x1c7a3608, 0xcb2d}, {0x7, 0x9, 0x3, 0x2, 0x4, 0x7fffffff}, {0x0, 0x3, 0x3, 0x8, 0x6, 0x2}, {0x91, 0x8, 0xfffffffc, 0x8, 0xfffffffc, 0x1}, {0x9, 0x5, 0x8, 0x2, 0x7, 0x8d}, {0x4, 0xb, 0xfffff364, 0x4, 0x400, 0x4}, {0x81, 0x4, 0x1, 0x80000000, 0xbf1}, {0x8, 0x6, 0xd4, 0x1, 0x6, 0x1}, {0x3ff, 0x1, 0x1, 0x800, 0x800, 0xa4}, {0x8, 0x0, 0xfffffff7, 0xfffffffc, 0x4, 0xad5f}, {0x62, 0xe, 0x0, 0x7f7, 0x3, 0x3ff}, {0x100, 0xfffffff9, 0x5, 0xd, 0x84, 0xc20e}, {0xc, 0x6c, 0x2, 0x4, 0x7, 0xea}, {0x8, 0x0, 0x8, 0x0, 0xb2, 0x3}, {0x7, 0x3, 0xec, 0x5, 0x8, 0x1}, {0x8, 0x3000000, 0xffff, 0x81, 0xfffffff6, 0x9}, {0x1, 0xda, 0x5, 0x3, 0x6553, 0x4}, {0xfffffff9, 0x6, 0x7, 0x4, 0xa6, 0x50d8a0cf}], [{0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x3}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x6}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x3}, {0x3}, {0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x3}, {0x3}, {0x2}, {0x4, 0x1}, {}, {0x5}, {0xbc772ccd0a61e388, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {}, {}, {0x4}, {0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x2}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x3}, {0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2001, 0x8e) write$P9_RGETATTR(r9, &(0x7f00000003c0)={0xa0, 0x19, 0x2, {0x2008, {0x4, 0x2, 0x8}, 0x4c, r7, 0x0, 0x200000000000000, 0x9, 0xfa, 0x2, 0x5, 0x6, 0xfffffffffffffffa, 0x9c2, 0x792, 0x3, 0x5, 0x6, 0x5, 0x1, 0x7}}, 0xa0) close(r5) lseek(0xffffffffffffffff, 0x10001, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000380)={@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @mcast2, 0x5}}, {&(0x7f0000000240)=""/102, 0x66}, &(0x7f0000000340), 0x11}, 0xa0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="14efff001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a310000000028000480240001800b0001007470726f78790000140002800800024000000010080001400000000a0900020073797a3200000000140000001100010000000000000000000100000a5d088aeafeb3abf04abbcac3cb5e0bba05539ae6a039010aa8888a23244dde9583d8740039e64082f43a58dffdde80d0c088a453bc32c113f57968020007713d9013ed12d3549ef4eaf59704ebd9f38d0ef1047d4d57194d959b8f36e170233d24f2313dec6a5b104df61660d7c27b0617a7a1c1d9b87cbae65be63deac1595f5713ea04aebd52aa742add553f3045e13a98ab5388cf01e735418536c1613dff66535aea01077fe20b5c47f83e36ebf576ae96aa4fc2592286583e1aa574fe3d5d1379a67fa13eef5a7babcb75f4c842f4f4473d6c97d19852a54f68c0d485ed3f267a5f7dd045d26b4c03ad"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) 173.160545ms ago: executing program 4 (id=1201): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async, rerun: 64) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) r3 = fsmount(r1, 0x1, 0x0) fchdir(r3) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r4}, 0x18) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1715, 0x4b7bc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) 87.876113ms ago: executing program 4 (id=1202): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x88affda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) 83.296104ms ago: executing program 2 (id=1203): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fsmount(r2, 0x0, 0x81) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) write$selinux_attr(r2, &(0x7f0000000340)='system_u:object_r:fonts_t:s0\x00', 0x1d) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000180)) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, r5, &(0x7f0000000200)='./file0\x00') sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x24, 0x66, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0x0, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 82.577425ms ago: executing program 4 (id=1204): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20042, 0x0) (async, rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x82) pwritev2(r3, &(0x7f0000000140)=[{&(0x7f0000000000)='_', 0x1}], 0x1, 0x81, 0x0, 0x82) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xdfcd, 0x80000000, 0xc0, 0x2}}]}]}}}]}, 0x68}}, 0x80000) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r5, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000080)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @local}, 0x14) 1.134021ms ago: executing program 4 (id=1205): prlimit64(0x0, 0x9, &(0x7f0000000d80)={0x3, 0x1c88000000}, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x10) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000d80)={0x3, 0x1c88000000}, 0x0) (async) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) close(r0) (async) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) (async) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x10) (async) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0) (async) 835.16µs ago: executing program 2 (id=1206): r0 = socket(0x2c, 0x4, 0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc048aeca, &(0x7f0000000080)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000180)={0x0, 0xc000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x44, 0x7fff0001}]}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x400caed0, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xffffffff, 0x296d, 0x4, 0x6, 0x0, [{0x9, 0x5d, 0x7f, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0x3}, {0xf, 0x5, 0x2, '\x00', 0x13}, {0x3, 0x1e, 0x8, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0x4, 0xe3, 0x0, '\x00', 0xac}, {0x3, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xf7, 0x6, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x4, 0x43, '\x00', 0x9f}, {0xf, 0xc, 0x2, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x2, '\x00', 0xa6}, {0x8, 0x0, 0xc, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0xff, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0xa}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x9, 0xc, 0xc6, '\x00', 0x8}]}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x15, r8, 0x1, 0x0, 0x6, @random="4ed6ae8064a9"}, 0x14) close(r0) 0s ago: executing program 4 (id=1207): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') (async) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') r3 = syz_open_dev$loop(&(0x7f0000000140), 0x1, 0xc200) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r4], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) kernel console output (not intermixed with test programs): 4.602646][ T7799] unevictable 0 [ 94.604099][ T7799] hierarchical_memory_limit 314572800 [ 94.605849][ T7799] hierarchical_memsw_limit 9223372036854771712 [ 94.607941][ T7799] total_cache 302465024 [ 94.609287][ T7799] total_rss 94208 [ 94.610838][ T7799] total_rss_huge 0 [ 94.612467][ T7799] total_shmem 302460928 [ 94.616211][ T7799] total_mapped_file 0 [ 94.617535][ T7799] total_dirty 0 [ 94.618793][ T7799] total_writeback 0 [ 94.620069][ T7799] total_workingset_refault_anon 0 [ 94.621713][ T7799] total_workingset_refault_file 295 [ 94.623454][ T7799] total_swap 127995904 [ 94.631134][ T7799] total_swapcached 0 [ 94.632836][ T7799] total_pgpgin 182123 [ 94.636118][ T7799] total_pgpgout 108256 [ 94.638005][ T7799] total_pgfault 30975 [ 94.639853][ T7799] total_pgmajfault 18 [ 94.641537][ T7799] total_inactive_anon 162791424 [ 94.643702][ T7799] total_active_anon 139501568 [ 94.648472][ T7799] total_inactive_file 4096 [ 94.653475][ T7799] total_active_file 0 [ 94.655918][ T7799] total_unevictable 0 [ 94.657336][ T7799] anon_cost 0 [ 94.658536][ T7799] file_cost 0 [ 94.659715][ T7799] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.487,pid=7802,uid=0 [ 94.664666][ T7799] Memory cgroup out of memory: Killed process 7802 (syz.1.487) total-vm:49532kB, anon-rss:0kB, file-rss:30464kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 94.827578][ T7803] syz.1.487 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 94.893293][ T7803] CPU: 3 UID: 0 PID: 7803 Comm: syz.1.487 Tainted: G L syzkaller #0 PREEMPT(full) [ 94.893321][ T7803] Tainted: [L]=SOFTLOCKUP [ 94.893327][ T7803] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.893336][ T7803] Call Trace: [ 94.893343][ T7803] [ 94.893350][ T7803] dump_stack_lvl+0x16c/0x1f0 [ 94.893379][ T7803] dump_header+0x101/0x960 [ 94.893408][ T7803] oom_kill_process+0x176/0x910 [ 94.893435][ T7803] out_of_memory+0x350/0x1700 [ 94.893458][ T7803] ? __lock_acquire+0x436/0x2890 [ 94.893481][ T7803] ? __pfx_out_of_memory+0x10/0x10 [ 94.893512][ T7803] mem_cgroup_out_of_memory+0x118/0x130 [ 94.893530][ T7803] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 94.893552][ T7803] ? do_raw_spin_unlock+0x172/0x230 [ 94.893578][ T7803] try_charge_memcg+0x695/0xd30 [ 94.893605][ T7803] ? __pfx_try_charge_memcg+0x10/0x10 [ 94.893626][ T7803] ? __print_lock_name+0x81/0xe0 [ 94.893650][ T7803] ? rcu_read_unlock+0x17/0x60 [ 94.893679][ T7803] charge_memcg+0x8a/0x230 [ 94.893701][ T7803] __mem_cgroup_charge+0x2b/0x1e0 [ 94.893724][ T7803] shmem_alloc_and_add_folio+0x50c/0xc20 [ 94.893756][ T7803] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 94.893783][ T7803] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 94.893813][ T7803] shmem_get_folio_gfp+0x67f/0x1610 [ 94.893850][ T7803] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 94.893882][ T7803] shmem_write_begin+0x1a4/0x3b0 [ 94.893901][ T7803] ? __pfx_shmem_write_begin+0x10/0x10 [ 94.893917][ T7803] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 94.893938][ T7803] ? lockdep_hardirqs_on+0x7c/0x110 [ 94.893961][ T7803] generic_perform_write+0x3c4/0x900 [ 94.893992][ T7803] ? __pfx_generic_perform_write+0x10/0x10 [ 94.894018][ T7803] ? file_update_time_flags+0x35c/0x520 [ 94.894040][ T7803] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 94.894056][ T7803] shmem_file_write_iter+0x10e/0x140 [ 94.894077][ T7803] __kernel_write_iter+0x31a/0xb10 [ 94.894100][ T7803] ? __pfx___kernel_write_iter+0x10/0x10 [ 94.894117][ T7803] ? __up_read+0x2d1/0x700 [ 94.894142][ T7803] ? dump_user_range+0x756/0xb70 [ 94.894172][ T7803] dump_user_range+0x413/0xb70 [ 94.894201][ T7803] ? __pfx_dump_user_range+0x10/0x10 [ 94.894228][ T7803] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 94.894253][ T7803] ? __pfx_writenote+0x10/0x10 [ 94.894276][ T7803] elf_core_dump+0x29c3/0x3c10 [ 94.894306][ T7803] ? __pfx_elf_core_dump+0x10/0x10 [ 94.894321][ T7803] ? kasan_save_stack+0x33/0x60 [ 94.894337][ T7803] ? kasan_save_track+0x14/0x30 [ 94.894354][ T7803] ? __kasan_kmalloc+0xaa/0xb0 [ 94.894369][ T7803] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 94.894387][ T7803] ? vfs_coredump+0x1dd9/0x55e0 [ 94.894408][ T7803] ? arch_do_signal_or_restart+0x8f/0x7e0 [ 94.894430][ T7803] ? irqentry_exit+0x38a/0x8c0 [ 94.894449][ T7803] ? asm_exc_page_fault+0x26/0x30 [ 94.894469][ T7803] ? 0xffffffffff600000 [ 94.894526][ T7803] ? vfs_coredump+0x2b85/0x55e0 [ 94.894548][ T7803] vfs_coredump+0x2b85/0x55e0 [ 94.894582][ T7803] ? __pfx_vfs_coredump+0x10/0x10 [ 94.894603][ T7803] ? __lock_acquire+0x436/0x2890 [ 94.894627][ T7803] ? __lock_acquire+0x436/0x2890 [ 94.894647][ T7803] ? lock_acquire+0x179/0x330 [ 94.894671][ T7803] ? lock_acquire+0x179/0x330 [ 94.894707][ T7803] ? arch_stack_walk+0xa6/0x100 [ 94.894766][ T7803] ? stack_trace_save+0x8e/0xc0 [ 94.894786][ T7803] ? __pfx_stack_trace_save+0x10/0x10 [ 94.894805][ T7803] ? stack_depot_save_flags+0x29/0x9b0 [ 94.894836][ T7803] ? __lock_acquire+0x436/0x2890 [ 94.894858][ T7803] ? kasan_save_stack+0x42/0x60 [ 94.894916][ T7803] ? proc_coredump_connector+0x2d1/0x4f0 [ 94.894939][ T7803] ? __pfx_proc_coredump_connector+0x10/0x10 [ 94.894964][ T7803] ? rcu_is_watching+0x12/0xc0 [ 94.894984][ T7803] get_signal+0x22e1/0x26d0 [ 94.895018][ T7803] ? __pfx_get_signal+0x10/0x10 [ 94.895049][ T7803] arch_do_signal_or_restart+0x8f/0x7e0 [ 94.895072][ T7803] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 94.895102][ T7803] ? do_user_addr_fault+0x926/0x1370 [ 94.895128][ T7803] irqentry_exit+0x38a/0x8c0 [ 94.895151][ T7803] asm_exc_page_fault+0x26/0x30 [ 94.895167][ T7803] RIP: 0033:0x7f94b084f6b0 [ 94.895187][ T7803] Code: Unable to access opcode bytes at 0x7f94b084f686. [ 94.895194][ T7803] RSP: 002b:00007f94b1888138 EFLAGS: 00010246 [ 94.895207][ T7803] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007f94b098f7c9 [ 94.895217][ T7803] RDX: 00007f94b1888140 RSI: 00007f94b1888270 RDI: 000000000000000b [ 94.895229][ T7803] RBP: 00007f94b0a13f91 R08: 0000000000000000 R09: 0000000000000058 [ 94.895237][ T7803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.895246][ T7803] R13: 00007f94b0be6128 R14: 00007f94b0be6090 R15: 00007ffc7eb86278 [ 94.895271][ T7803] [ 94.895277][ T7803] memory: usage 307200kB, limit 307200kB, failcnt 24156 [ 95.000768][ T40] audit: type=1400 audit(1767161088.918:551): avc: denied { connect } for pid=8027 comm="syz.2.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 95.016465][ T7803] memory+swap: usage 432192kB, limit 9007199254740988kB, failcnt 0 [ 95.075075][ T7803] kmem: usage 11672kB, limit 9007199254740988kB, failcnt 0 [ 95.077837][ T7803] Memory cgroup stats for /syz1: [ 95.077906][ T7803] cache 302395392 [ 95.080807][ T7803] rss 94208 [ 95.081852][ T7803] rss_huge 0 [ 95.082974][ T7803] shmem 302391296 [ 95.085013][ T7803] mapped_file 0 [ 95.086149][ T7803] dirty 0 [ 95.087152][ T7803] writeback 0 [ 95.088223][ T7803] workingset_refault_anon 0 [ 95.089658][ T7803] workingset_refault_file 298 [ 95.091206][ T7803] swap 127995904 [ 95.092357][ T7803] swapcached 0 [ 95.093455][ T7803] pgpgin 186767 [ 95.102779][ T7803] pgpgout 112885 [ 95.104001][ T7803] pgfault 31266 [ 95.107823][ T7803] pgmajfault 21 [ 95.109013][ T7803] inactive_anon 180858880 [ 95.110393][ T7803] active_anon 121364480 [ 95.111768][ T7803] inactive_file 4096 [ 95.113143][ T7803] active_file 0 [ 95.135011][ T7803] unevictable 0 [ 95.136566][ T7803] hierarchical_memory_limit 314572800 [ 95.138457][ T7803] hierarchical_memsw_limit 9223372036854771712 [ 95.140430][ T7803] total_cache 302395392 [ 95.141742][ T7803] total_rss 94208 [ 95.142958][ T7803] total_rss_huge 0 [ 95.144476][ T7803] total_shmem 302391296 [ 95.145902][ T7803] total_mapped_file 0 [ 95.147338][ T7803] total_dirty 0 [ 95.149845][ T7803] total_writeback 0 [ 95.151154][ T7803] total_workingset_refault_anon 0 [ 95.152738][ T7803] total_workingset_refault_file 298 [ 95.154542][ T7803] total_swap 127995904 [ 95.155971][ T7803] total_swapcached 0 [ 95.157310][ T7803] total_pgpgin 186767 [ 95.158759][ T7803] total_pgpgout 112885 [ 95.160072][ T7803] total_pgfault 31266 [ 95.161344][ T7803] total_pgmajfault 21 [ 95.162682][ T7803] total_inactive_anon 180858880 [ 95.164276][ T7803] total_active_anon 121364480 [ 95.165775][ T7803] total_inactive_file 4096 [ 95.167236][ T7803] total_active_file 0 [ 95.168562][ T7803] total_unevictable 0 [ 95.176983][ T7803] anon_cost 0 [ 95.178133][ T7803] file_cost 0 [ 95.179309][ T7803] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.487,pid=7784,uid=0 [ 95.184256][ T7803] Memory cgroup out of memory: Killed process 7784 (syz.1.487) total-vm:49532kB, anon-rss:0kB, file-rss:28160kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 95.237838][ T40] audit: type=1400 audit(1767161089.133:552): avc: denied { set_context_mgr } for pid=8034 comm="syz.4.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 95.239497][ T8035] binder: 8034:8035 ioctl c0106407 2000000000c0 returned -22 [ 95.308171][ T8039] netlink: 52 bytes leftover after parsing attributes in process `syz.4.557'. [ 95.370768][ T7808] syz.1.487 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 95.445665][ T7808] CPU: 0 UID: 0 PID: 7808 Comm: syz.1.487 Tainted: G L syzkaller #0 PREEMPT(full) [ 95.445684][ T7808] Tainted: [L]=SOFTLOCKUP [ 95.445688][ T7808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.445694][ T7808] Call Trace: [ 95.445698][ T7808] [ 95.445702][ T7808] dump_stack_lvl+0x16c/0x1f0 [ 95.445719][ T7808] dump_header+0x101/0x960 [ 95.445737][ T7808] oom_kill_process+0x176/0x910 [ 95.445755][ T7808] out_of_memory+0x350/0x1700 [ 95.445776][ T7808] ? __lock_acquire+0x436/0x2890 [ 95.445792][ T7808] ? __pfx_out_of_memory+0x10/0x10 [ 95.445812][ T7808] mem_cgroup_out_of_memory+0x118/0x130 [ 95.445823][ T7808] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 95.445837][ T7808] ? do_raw_spin_unlock+0x172/0x230 [ 95.445854][ T7808] try_charge_memcg+0x695/0xd30 [ 95.445871][ T7808] ? __pfx_try_charge_memcg+0x10/0x10 [ 95.445885][ T7808] ? __print_lock_name+0x81/0xe0 [ 95.445901][ T7808] ? rcu_read_unlock+0x17/0x60 [ 95.445919][ T7808] charge_memcg+0x8a/0x230 [ 95.445933][ T7808] __mem_cgroup_charge+0x2b/0x1e0 [ 95.445949][ T7808] shmem_alloc_and_add_folio+0x50c/0xc20 [ 95.445970][ T7808] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 95.445988][ T7808] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 95.446008][ T7808] shmem_get_folio_gfp+0x67f/0x1610 [ 95.446027][ T7808] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 95.446048][ T7808] shmem_write_begin+0x1a4/0x3b0 [ 95.446059][ T7808] ? __pfx_shmem_write_begin+0x10/0x10 [ 95.446070][ T7808] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 95.446083][ T7808] ? lockdep_hardirqs_on+0x7c/0x110 [ 95.446098][ T7808] generic_perform_write+0x3c4/0x900 [ 95.446118][ T7808] ? __pfx_generic_perform_write+0x10/0x10 [ 95.446135][ T7808] ? file_update_time_flags+0x35c/0x520 [ 95.446148][ T7808] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 95.446159][ T7808] shmem_file_write_iter+0x10e/0x140 [ 95.446172][ T7808] __kernel_write_iter+0x31a/0xb10 [ 95.446187][ T7808] ? __pfx___kernel_write_iter+0x10/0x10 [ 95.446200][ T7808] ? __up_read+0x2d1/0x700 [ 95.446216][ T7808] ? dump_user_range+0x756/0xb70 [ 95.446235][ T7808] dump_user_range+0x413/0xb70 [ 95.446254][ T7808] ? __pfx_dump_user_range+0x10/0x10 [ 95.446271][ T7808] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 95.446286][ T7808] ? __pfx_writenote+0x10/0x10 [ 95.446300][ T7808] elf_core_dump+0x29c3/0x3c10 [ 95.446318][ T7808] ? __pfx_elf_core_dump+0x10/0x10 [ 95.446341][ T7808] ? kasan_save_stack+0x33/0x60 [ 95.446353][ T7808] ? kasan_save_track+0x14/0x30 [ 95.446363][ T7808] ? __kasan_kmalloc+0xaa/0xb0 [ 95.446374][ T7808] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 95.446385][ T7808] ? vfs_coredump+0x1dd9/0x55e0 [ 95.446400][ T7808] ? arch_do_signal_or_restart+0x8f/0x7e0 [ 95.446414][ T7808] ? irqentry_exit+0x38a/0x8c0 [ 95.446426][ T7808] ? asm_exc_page_fault+0x26/0x30 [ 95.446439][ T7808] ? 0xffffffffff600000 [ 95.446473][ T7808] ? vfs_coredump+0x2b85/0x55e0 [ 95.446487][ T7808] vfs_coredump+0x2b85/0x55e0 [ 95.446509][ T7808] ? __pfx_vfs_coredump+0x10/0x10 [ 95.446523][ T7808] ? __lock_acquire+0x436/0x2890 [ 95.446538][ T7808] ? __lock_acquire+0x436/0x2890 [ 95.446551][ T7808] ? lock_acquire+0x179/0x330 [ 95.446566][ T7808] ? lock_acquire+0x179/0x330 [ 95.446588][ T7808] ? arch_stack_walk+0xa6/0x100 [ 95.446606][ T7808] ? stack_trace_save+0x8e/0xc0 [ 95.446617][ T7808] ? __pfx_stack_trace_save+0x10/0x10 [ 95.446629][ T7808] ? stack_depot_save_flags+0x29/0x9b0 [ 95.446645][ T7808] ? __lock_acquire+0x436/0x2890 [ 95.446658][ T7808] ? kasan_save_stack+0x42/0x60 [ 95.446694][ T7808] ? proc_coredump_connector+0x2d1/0x4f0 [ 95.446708][ T7808] ? __pfx_proc_coredump_connector+0x10/0x10 [ 95.446724][ T7808] ? rcu_is_watching+0x12/0xc0 [ 95.446753][ T7808] get_signal+0x22e1/0x26d0 [ 95.446779][ T7808] ? __pfx_get_signal+0x10/0x10 [ 95.446798][ T7808] arch_do_signal_or_restart+0x8f/0x7e0 [ 95.446813][ T7808] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 95.446833][ T7808] ? do_user_addr_fault+0x926/0x1370 [ 95.446849][ T7808] irqentry_exit+0x38a/0x8c0 [ 95.446864][ T7808] asm_exc_page_fault+0x26/0x30 [ 95.446874][ T7808] RIP: 0033:0x7f94b084f6b0 [ 95.446886][ T7808] Code: Unable to access opcode bytes at 0x7f94b084f686. [ 95.446890][ T7808] RSP: 002b:00007f94b1888138 EFLAGS: 00010246 [ 95.446900][ T7808] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007f94b098f7c9 [ 95.446906][ T7808] RDX: 00007f94b1888140 RSI: 00007f94b1888270 RDI: 000000000000000b [ 95.446912][ T7808] RBP: 00007f94b0a13f91 R08: 0000000000000000 R09: 0000000000000058 [ 95.446917][ T7808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.446923][ T7808] R13: 00007f94b0be6128 R14: 00007f94b0be6090 R15: 00007ffc7eb86278 [ 95.446937][ T7808] [ 95.446963][ T7808] memory: usage 307200kB, limit 307200kB, failcnt 26143 [ 95.596862][ T40] audit: type=1400 audit(1767161089.395:553): avc: denied { write } for pid=8043 comm="syz.2.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 95.598045][ T7808] memory+swap: usage 423192kB, limit 9007199254740988kB, failcnt 0 [ 95.600870][ T40] audit: type=1400 audit(1767161089.413:554): avc: denied { getopt } for pid=8043 comm="syz.2.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 95.602262][ T7808] kmem: usage 11632kB, limit 9007199254740988kB, failcnt 0 [ 95.637526][ T7808] Memory cgroup stats for /syz1: [ 95.637608][ T7808] cache 297205760 [ 95.640538][ T7808] rss 94208 [ 95.641578][ T7808] rss_huge 0 [ 95.642636][ T7808] shmem 294432768 [ 95.643877][ T7808] mapped_file 2555904 [ 95.645184][ T7808] dirty 0 [ 95.646167][ T7808] writeback 0 [ 95.647328][ T7808] workingset_refault_anon 0 [ 95.648814][ T7808] workingset_refault_file 1036 [ 95.650618][ T7808] swap 127995904 [ 95.651954][ T7808] swapcached 0 [ 95.653080][ T7808] pgpgin 192178 [ 95.654221][ T7808] pgpgout 119594 [ 95.655519][ T7808] pgfault 31571 [ 95.656968][ T7808] pgmajfault 26 [ 95.658167][ T7808] inactive_anon 97943552 [ 95.659654][ T7808] active_anon 194953216 [ 95.661222][ T7808] inactive_file 0 [ 95.662467][ T7808] active_file 2772992 [ 95.663933][ T7808] unevictable 0 [ 95.665312][ T7808] hierarchical_memory_limit 314572800 [ 95.667139][ T7808] hierarchical_memsw_limit 9223372036854771712 [ 95.669177][ T7808] total_cache 297205760 [ 95.670884][ T7808] total_rss 94208 [ 95.674487][ T7808] total_rss_huge 0 [ 95.675854][ T7808] total_shmem 294432768 [ 95.677213][ T7808] total_mapped_file 2555904 [ 95.678935][ T7808] total_dirty 0 [ 95.680152][ T7808] total_writeback 0 [ 95.681434][ T7808] total_workingset_refault_anon 0 [ 95.683595][ T7808] total_workingset_refault_file 1036 [ 95.685306][ T7808] total_swap 127995904 [ 95.686633][ T7808] total_swapcached 0 [ 95.687943][ T7808] total_pgpgin 192178 [ 95.689250][ T7808] total_pgpgout 119594 [ 95.705843][ T7808] total_pgfault 31571 [ 95.707310][ T7808] total_pgmajfault 26 [ 95.708596][ T7808] total_inactive_anon 97943552 [ 95.710227][ T7808] total_active_anon 194953216 [ 95.711791][ T7808] total_inactive_file 0 [ 95.713060][ T7808] total_active_file 2772992 [ 95.725585][ T7808] total_unevictable 0 [ 95.726951][ T7808] anon_cost 0 [ 95.728032][ T7808] file_cost 0 [ 95.729164][ T7808] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.487,pid=7804,uid=0 [ 95.733916][ T7808] Memory cgroup out of memory: Killed process 7804 (syz.1.487) total-vm:49532kB, anon-rss:0kB, file-rss:36120kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 95.805669][ T8058] netlink: 40 bytes leftover after parsing attributes in process `syz.2.564'. [ 95.943081][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.565'. [ 95.997813][ T8068] netlink: 16 bytes leftover after parsing attributes in process `syz.4.565'. [ 97.691687][ T7806] syz.1.487 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 97.713500][ T7806] CPU: 1 UID: 0 PID: 7806 Comm: syz.1.487 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.713519][ T7806] Tainted: [L]=SOFTLOCKUP [ 97.713522][ T7806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.713528][ T7806] Call Trace: [ 97.713532][ T7806] [ 97.713536][ T7806] dump_stack_lvl+0x16c/0x1f0 [ 97.713553][ T7806] dump_header+0x101/0x960 [ 97.713572][ T7806] oom_kill_process+0x176/0x910 [ 97.713590][ T7806] out_of_memory+0x350/0x1700 [ 97.713607][ T7806] ? __lock_acquire+0x436/0x2890 [ 97.713622][ T7806] ? __pfx_out_of_memory+0x10/0x10 [ 97.713642][ T7806] mem_cgroup_out_of_memory+0x118/0x130 [ 97.713653][ T7806] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 97.713667][ T7806] ? do_raw_spin_unlock+0x172/0x230 [ 97.713684][ T7806] try_charge_memcg+0x695/0xd30 [ 97.713702][ T7806] ? __pfx_try_charge_memcg+0x10/0x10 [ 97.713716][ T7806] ? __print_lock_name+0x81/0xe0 [ 97.713731][ T7806] ? rcu_read_unlock+0x17/0x60 [ 97.713750][ T7806] charge_memcg+0x8a/0x230 [ 97.713764][ T7806] __mem_cgroup_charge+0x2b/0x1e0 [ 97.713793][ T7806] shmem_alloc_and_add_folio+0x50c/0xc20 [ 97.713814][ T7806] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 97.713832][ T7806] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 97.713852][ T7806] shmem_get_folio_gfp+0x67f/0x1610 [ 97.713872][ T7806] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 97.713890][ T7806] ? __pfx_timestamp_truncate+0x10/0x10 [ 97.713908][ T7806] shmem_write_begin+0x1a4/0x3b0 [ 97.713919][ T7806] ? __pfx_shmem_write_begin+0x10/0x10 [ 97.713929][ T7806] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 97.713946][ T7806] generic_perform_write+0x3c4/0x900 [ 97.713966][ T7806] ? __pfx_generic_perform_write+0x10/0x10 [ 97.713985][ T7806] ? generic_update_time+0xcf/0xf0 [ 97.713995][ T7806] ? mnt_put_write_access_file+0x45/0xf0 [ 97.714010][ T7806] ? file_update_time_flags+0x35c/0x520 [ 97.714022][ T7806] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 97.714033][ T7806] shmem_file_write_iter+0x10e/0x140 [ 97.714046][ T7806] __kernel_write_iter+0x31a/0xb10 [ 97.714061][ T7806] ? __pfx___kernel_write_iter+0x10/0x10 [ 97.714074][ T7806] ? __up_read+0x2d1/0x700 [ 97.714089][ T7806] ? dump_user_range+0x756/0xb70 [ 97.714104][ T7806] ? dump_user_range+0x2ee/0xb70 [ 97.714122][ T7806] dump_user_range+0x413/0xb70 [ 97.714141][ T7806] ? __pfx_dump_user_range+0x10/0x10 [ 97.714158][ T7806] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 97.714173][ T7806] ? __pfx_writenote+0x10/0x10 [ 97.714187][ T7806] elf_core_dump+0x29c3/0x3c10 [ 97.714205][ T7806] ? __pfx_elf_core_dump+0x10/0x10 [ 97.714214][ T7806] ? kasan_save_stack+0x33/0x60 [ 97.714225][ T7806] ? kasan_save_track+0x14/0x30 [ 97.714235][ T7806] ? __kasan_kmalloc+0xaa/0xb0 [ 97.714245][ T7806] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 97.714257][ T7806] ? vfs_coredump+0x1dd9/0x55e0 [ 97.714271][ T7806] ? arch_do_signal_or_restart+0x8f/0x7e0 [ 97.714285][ T7806] ? irqentry_exit+0x38a/0x8c0 [ 97.714298][ T7806] ? asm_exc_page_fault+0x26/0x30 [ 97.714311][ T7806] ? 0xffffffffff600000 [ 97.714344][ T7806] ? vfs_coredump+0x2b85/0x55e0 [ 97.714359][ T7806] vfs_coredump+0x2b85/0x55e0 [ 97.714380][ T7806] ? __pfx_vfs_coredump+0x10/0x10 [ 97.714395][ T7806] ? __lock_acquire+0x436/0x2890 [ 97.714410][ T7806] ? __lock_acquire+0x436/0x2890 [ 97.714423][ T7806] ? lock_acquire+0x179/0x330 [ 97.714438][ T7806] ? lock_acquire+0x179/0x330 [ 97.714459][ T7806] ? arch_stack_walk+0xa6/0x100 [ 97.714478][ T7806] ? stack_trace_save+0x8e/0xc0 [ 97.714489][ T7806] ? __pfx_stack_trace_save+0x10/0x10 [ 97.714500][ T7806] ? stack_depot_save_flags+0x29/0x9b0 [ 97.714516][ T7806] ? __lock_acquire+0x436/0x2890 [ 97.714529][ T7806] ? kasan_save_stack+0x42/0x60 [ 97.714565][ T7806] ? proc_coredump_connector+0x2d1/0x4f0 [ 97.714578][ T7806] ? __pfx_proc_coredump_connector+0x10/0x10 [ 97.714595][ T7806] ? rcu_is_watching+0x12/0xc0 [ 97.714606][ T7806] get_signal+0x22e1/0x26d0 [ 97.714627][ T7806] ? __pfx_get_signal+0x10/0x10 [ 97.714647][ T7806] arch_do_signal_or_restart+0x8f/0x7e0 [ 97.714662][ T7806] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 97.714681][ T7806] ? do_user_addr_fault+0x926/0x1370 [ 97.714697][ T7806] irqentry_exit+0x38a/0x8c0 [ 97.714731][ T7806] asm_exc_page_fault+0x26/0x30 [ 97.714741][ T7806] RIP: 0033:0x7f94b084f6b0 [ 97.714755][ T7806] Code: Unable to access opcode bytes at 0x7f94b084f686. [ 97.714760][ T7806] RSP: 002b:00007f94b1888138 EFLAGS: 00010246 [ 97.714768][ T7806] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007f94b098f7c9 [ 97.714775][ T7806] RDX: 00007f94b1888140 RSI: 00007f94b1888270 RDI: 000000000000000b [ 97.714781][ T7806] RBP: 00007f94b0a13f91 R08: 0000000000000000 R09: 0000000000000058 [ 97.714786][ T7806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.714792][ T7806] R13: 00007f94b0be6128 R14: 00007f94b0be6090 R15: 00007ffc7eb86278 [ 97.714806][ T7806] [ 97.883351][ C1] hpet: Lost 10 RTC interrupts [ 98.077398][ T7806] memory: usage 307148kB, limit 307200kB, failcnt 41088 [ 98.079671][ T7806] memory+swap: usage 432020kB, limit 9007199254740988kB, failcnt 0 [ 98.082386][ T7806] kmem: usage 11224kB, limit 9007199254740988kB, failcnt 0 [ 98.085530][ T7806] Memory cgroup stats for /syz1: [ 98.085608][ T7806] cache 302895104 [ 98.090731][ T7806] rss 32768 [ 98.093230][ T7806] rss_huge 0 [ 98.095687][ T7806] shmem 301838336 [ 98.098148][ T7806] mapped_file 724992 [ 98.103920][ T7806] dirty 0 [ 98.106288][ T7806] writeback 0 [ 98.108813][ T7806] workingset_refault_anon 0 [ 98.115518][ T7806] workingset_refault_file 2428 [ 98.117266][ T7806] swap 127995904 [ 98.118659][ T7806] swapcached 0 [ 98.119984][ T7806] pgpgin 206381 [ 98.131187][ T7806] pgpgout 132392 [ 98.132553][ T7806] pgfault 32432 [ 98.133906][ T7806] pgmajfault 44 [ 98.135310][ T7806] inactive_anon 157798400 [ 98.137161][ T7806] active_anon 142876672 [ 98.138639][ T7806] inactive_file 323584 [ 98.154744][ T7806] active_file 733184 [ 98.156187][ T7806] unevictable 0 [ 98.157516][ T7806] hierarchical_memory_limit 314572800 [ 98.159358][ T7806] hierarchical_memsw_limit 9223372036854771712 [ 98.161436][ T7806] total_cache 302895104 [ 98.174539][ T7806] total_rss 32768 [ 98.176055][ T7806] total_rss_huge 0 [ 98.187962][ T7806] total_shmem 301838336 [ 98.189784][ T7806] total_mapped_file 724992 [ 98.191348][ T7806] total_dirty 0 [ 98.192851][ T7806] total_writeback 0 [ 98.199733][ T7806] total_workingset_refault_anon 0 [ 98.201977][ T7806] total_workingset_refault_file 2428 [ 98.204250][ T7806] total_swap 127995904 [ 98.206344][ T7806] total_swapcached 0 [ 98.208034][ T7806] total_pgpgin 206381 [ 98.210248][ T7806] total_pgpgout 132392 [ 98.212038][ T7806] total_pgfault 32432 [ 98.213799][ T7806] total_pgmajfault 44 [ 98.215521][ T7806] total_inactive_anon 157798400 [ 98.218115][ T7806] total_active_anon 142876672 [ 98.220131][ T7806] total_inactive_file 323584 [ 98.222166][ T7806] total_active_file 733184 [ 98.224129][ T7806] total_unevictable 0 [ 98.226348][ T7806] anon_cost 0 [ 98.228183][ T7806] file_cost 0 [ 98.229620][ T7806] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.487,pid=7807,uid=0 [ 98.235402][ T7806] Memory cgroup out of memory: Killed process 7807 (syz.1.487) total-vm:49532kB, anon-rss:0kB, file-rss:33152kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 98.458142][ T7793] syz.1.487 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 98.492699][ T7793] CPU: 0 UID: 0 PID: 7793 Comm: syz.1.487 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.492735][ T7793] Tainted: [L]=SOFTLOCKUP [ 98.492740][ T7793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.492750][ T7793] Call Trace: [ 98.492755][ T7793] [ 98.492763][ T7793] dump_stack_lvl+0x16c/0x1f0 [ 98.492789][ T7793] dump_header+0x101/0x960 [ 98.492819][ T7793] oom_kill_process+0x176/0x910 [ 98.492847][ T7793] out_of_memory+0x350/0x1700 [ 98.492873][ T7793] ? __lock_acquire+0x436/0x2890 [ 98.492896][ T7793] ? __pfx_out_of_memory+0x10/0x10 [ 98.492927][ T7793] mem_cgroup_out_of_memory+0x118/0x130 [ 98.492945][ T7793] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 98.492966][ T7793] ? do_raw_spin_unlock+0x172/0x230 [ 98.492991][ T7793] try_charge_memcg+0x695/0xd30 [ 98.493015][ T7793] ? __pfx_try_charge_memcg+0x10/0x10 [ 98.493035][ T7793] ? __print_lock_name+0x81/0xe0 [ 98.493058][ T7793] ? rcu_read_unlock+0x17/0x60 [ 98.493086][ T7793] charge_memcg+0x8a/0x230 [ 98.493108][ T7793] __mem_cgroup_charge+0x2b/0x1e0 [ 98.493133][ T7793] shmem_alloc_and_add_folio+0x50c/0xc20 [ 98.493167][ T7793] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 98.493195][ T7793] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 98.493226][ T7793] shmem_get_folio_gfp+0x67f/0x1610 [ 98.493257][ T7793] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 98.493285][ T7793] ? __pfx_timestamp_truncate+0x10/0x10 [ 98.493314][ T7793] shmem_write_begin+0x1a4/0x3b0 [ 98.493332][ T7793] ? __pfx_shmem_write_begin+0x10/0x10 [ 98.493349][ T7793] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 98.493374][ T7793] generic_perform_write+0x3c4/0x900 [ 98.493406][ T7793] ? __pfx_generic_perform_write+0x10/0x10 [ 98.493430][ T7793] ? generic_update_time+0xcf/0xf0 [ 98.493445][ T7793] ? mnt_put_write_access_file+0x45/0xf0 [ 98.493468][ T7793] ? file_update_time_flags+0x35c/0x520 [ 98.493488][ T7793] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 98.493506][ T7793] shmem_file_write_iter+0x10e/0x140 [ 98.493526][ T7793] __kernel_write_iter+0x31a/0xb10 [ 98.493550][ T7793] ? __pfx___kernel_write_iter+0x10/0x10 [ 98.493570][ T7793] ? __up_read+0x2d1/0x700 [ 98.493595][ T7793] ? dump_user_range+0x756/0xb70 [ 98.493626][ T7793] dump_user_range+0x413/0xb70 [ 98.493656][ T7793] ? __pfx_dump_user_range+0x10/0x10 [ 98.493683][ T7793] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 98.493715][ T7793] ? __pfx_writenote+0x10/0x10 [ 98.493739][ T7793] elf_core_dump+0x29c3/0x3c10 [ 98.493770][ T7793] ? __pfx_elf_core_dump+0x10/0x10 [ 98.493785][ T7793] ? kasan_save_stack+0x33/0x60 [ 98.493802][ T7793] ? kasan_save_track+0x14/0x30 [ 98.493819][ T7793] ? __kasan_kmalloc+0xaa/0xb0 [ 98.493836][ T7793] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 98.493855][ T7793] ? vfs_coredump+0x1dd9/0x55e0 [ 98.493879][ T7793] ? arch_do_signal_or_restart+0x8f/0x7e0 [ 98.493901][ T7793] ? irqentry_exit+0x38a/0x8c0 [ 98.493943][ T7793] ? asm_exc_page_fault+0x26/0x30 [ 98.493965][ T7793] ? 0xffffffffff600000 [ 98.494024][ T7793] ? vfs_coredump+0x2b85/0x55e0 [ 98.494047][ T7793] vfs_coredump+0x2b85/0x55e0 [ 98.494081][ T7793] ? __pfx_vfs_coredump+0x10/0x10 [ 98.494105][ T7793] ? __lock_acquire+0x436/0x2890 [ 98.494130][ T7793] ? __lock_acquire+0x436/0x2890 [ 98.494153][ T7793] ? lock_acquire+0x179/0x330 [ 98.494179][ T7793] ? lock_acquire+0x179/0x330 [ 98.494216][ T7793] ? arch_stack_walk+0xa6/0x100 [ 98.494248][ T7793] ? stack_trace_save+0x8e/0xc0 [ 98.494267][ T7793] ? __pfx_stack_trace_save+0x10/0x10 [ 98.494286][ T7793] ? stack_depot_save_flags+0x29/0x9b0 [ 98.494313][ T7793] ? __lock_acquire+0x436/0x2890 [ 98.494335][ T7793] ? kasan_save_stack+0x42/0x60 [ 98.494395][ T7793] ? proc_coredump_connector+0x2d1/0x4f0 [ 98.494417][ T7793] ? __pfx_proc_coredump_connector+0x10/0x10 [ 98.494443][ T7793] ? rcu_is_watching+0x12/0xc0 [ 98.494462][ T7793] get_signal+0x22e1/0x26d0 [ 98.494494][ T7793] ? __pfx_get_signal+0x10/0x10 [ 98.494524][ T7793] arch_do_signal_or_restart+0x8f/0x7e0 [ 98.494548][ T7793] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 98.494580][ T7793] ? do_user_addr_fault+0x926/0x1370 [ 98.494604][ T7793] irqentry_exit+0x38a/0x8c0 [ 98.494628][ T7793] asm_exc_page_fault+0x26/0x30 [ 98.494642][ T7793] RIP: 0033:0x7f94b084f6b0 [ 98.494663][ T7793] Code: Unable to access opcode bytes at 0x7f94b084f686. [ 98.494670][ T7793] RSP: 002b:00007f94b1888138 EFLAGS: 00010246 [ 98.494683][ T7793] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007f94b098f7c9 [ 98.494693][ T7793] RDX: 00007f94b1888140 RSI: 00007f94b1888270 RDI: 000000000000000b [ 98.494730][ T7793] RBP: 00007f94b0a13f91 R08: 0000000000000000 R09: 0000000000000058 [ 98.494740][ T7793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.494750][ T7793] R13: 00007f94b0be6128 R14: 00007f94b0be6090 R15: 00007ffc7eb86278 [ 98.494775][ T7793] [ 98.791648][ T7793] memory: usage 307192kB, limit 307200kB, failcnt 44713 [ 98.794812][ T7793] memory+swap: usage 432004kB, limit 9007199254740988kB, failcnt 0 [ 98.798381][ T7793] kmem: usage 11280kB, limit 9007199254740988kB, failcnt 0 [ 98.801628][ T7793] Memory cgroup stats for /syz1: [ 98.801734][ T7793] cache 302583808 [ 98.806625][ T7793] rss 86016 [ 98.808148][ T7793] rss_huge 0 [ 98.809737][ T7793] shmem 302575616 [ 98.811410][ T7793] mapped_file 4096 [ 98.813083][ T7793] dirty 0 [ 98.814424][ T7793] writeback 0 [ 98.816105][ T7793] workingset_refault_anon 3 [ 98.818296][ T7793] workingset_refault_file 3663 [ 98.820677][ T7793] swap 127995904 [ 98.822310][ T7793] swapcached 0 [ 98.823855][ T7793] pgpgin 214369 [ 98.825467][ T7793] pgpgout 140475 [ 98.827936][ T7793] pgfault 32896 [ 98.829618][ T7793] pgmajfault 64 [ 98.831273][ T7793] inactive_anon 191471616 [ 98.833320][ T7793] active_anon 111165440 [ 98.835224][ T7793] inactive_file 0 [ 98.836926][ T7793] active_file 8192 [ 98.838584][ T7793] unevictable 0 [ 98.840213][ T7793] hierarchical_memory_limit 314572800 [ 98.842744][ T7793] hierarchical_memsw_limit 9223372036854771712 [ 98.845629][ T7793] total_cache 302583808 [ 98.847822][ T7793] total_rss 86016 [ 98.849562][ T7793] total_rss_huge 0 [ 98.851288][ T7793] total_shmem 302575616 [ 98.853176][ T7793] total_mapped_file 4096 [ 98.855196][ T7793] total_dirty 0 [ 98.856913][ T7793] total_writeback 0 [ 98.858780][ T7793] total_workingset_refault_anon 3 [ 98.861055][ T7793] total_workingset_refault_file 3663 [ 98.863457][ T7793] total_swap 127995904 [ 98.865334][ T7793] total_swapcached 0 [ 98.867211][ T7793] total_pgpgin 214369 [ 98.869535][ T7793] total_pgpgout 140475 [ 98.871420][ T7793] total_pgfault 32896 [ 98.873252][ T7793] total_pgmajfault 64 [ 98.875083][ T7793] total_inactive_anon 191471616 [ 98.877377][ T7793] total_active_anon 111165440 [ 98.880078][ T7793] total_inactive_file 0 [ 98.882031][ T7793] total_active_file 8192 [ 98.883893][ T7793] total_unevictable 0 [ 98.885712][ T7793] anon_cost 0 [ 98.887262][ T7793] file_cost 0 [ 98.888727][ T7793] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.487,pid=7794,uid=0 [ 98.895220][ T7793] Memory cgroup out of memory: Killed process 7794 (syz.1.487) total-vm:49532kB, anon-rss:0kB, file-rss:33320kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 98.949079][ T7796] syz.1.487 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 98.952224][ T7796] CPU: 3 UID: 0 PID: 7796 Comm: syz.1.487 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.952242][ T7796] Tainted: [L]=SOFTLOCKUP [ 98.952245][ T7796] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.952251][ T7796] Call Trace: [ 98.952255][ T7796] [ 98.952259][ T7796] dump_stack_lvl+0x16c/0x1f0 [ 98.952277][ T7796] dump_header+0x101/0x960 [ 98.952296][ T7796] oom_kill_process+0x176/0x910 [ 98.952314][ T7796] out_of_memory+0x350/0x1700 [ 98.952330][ T7796] ? __lock_acquire+0x436/0x2890 [ 98.952345][ T7796] ? __pfx_out_of_memory+0x10/0x10 [ 98.952365][ T7796] mem_cgroup_out_of_memory+0x118/0x130 [ 98.952377][ T7796] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 98.952390][ T7796] ? do_raw_spin_unlock+0x172/0x230 [ 98.952407][ T7796] try_charge_memcg+0x695/0xd30 [ 98.952424][ T7796] ? __pfx_try_charge_memcg+0x10/0x10 [ 98.952438][ T7796] ? __print_lock_name+0x81/0xe0 [ 98.952454][ T7796] ? rcu_read_unlock+0x17/0x60 [ 98.952473][ T7796] charge_memcg+0x8a/0x230 [ 98.952487][ T7796] __mem_cgroup_charge+0x2b/0x1e0 [ 98.952503][ T7796] shmem_alloc_and_add_folio+0x50c/0xc20 [ 98.952524][ T7796] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 98.952541][ T7796] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 98.952561][ T7796] shmem_get_folio_gfp+0x67f/0x1610 [ 98.952581][ T7796] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 98.952602][ T7796] shmem_write_begin+0x1a4/0x3b0 [ 98.952613][ T7796] ? __pfx_shmem_write_begin+0x10/0x10 [ 98.952623][ T7796] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 98.952636][ T7796] ? lockdep_hardirqs_on+0x7c/0x110 [ 98.952651][ T7796] generic_perform_write+0x3c4/0x900 [ 98.952671][ T7796] ? __pfx_generic_perform_write+0x10/0x10 [ 98.952689][ T7796] ? file_update_time_flags+0x35c/0x520 [ 98.952702][ T7796] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 98.952713][ T7796] shmem_file_write_iter+0x10e/0x140 [ 98.952726][ T7796] __kernel_write_iter+0x31a/0xb10 [ 98.952740][ T7796] ? __pfx___kernel_write_iter+0x10/0x10 [ 98.952753][ T7796] ? __up_read+0x2d1/0x700 [ 98.952768][ T7796] ? dump_user_range+0x756/0xb70 [ 98.952788][ T7796] dump_user_range+0x413/0xb70 [ 98.952807][ T7796] ? __pfx_dump_user_range+0x10/0x10 [ 98.952823][ T7796] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 98.952839][ T7796] ? __pfx_writenote+0x10/0x10 [ 98.952853][ T7796] elf_core_dump+0x29c3/0x3c10 [ 98.952870][ T7796] ? __pfx_elf_core_dump+0x10/0x10 [ 98.952879][ T7796] ? kasan_save_stack+0x33/0x60 [ 98.952890][ T7796] ? kasan_save_track+0x14/0x30 [ 98.952901][ T7796] ? __kasan_kmalloc+0xaa/0xb0 [ 98.952911][ T7796] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 98.952922][ T7796] ? vfs_coredump+0x1dd9/0x55e0 [ 98.952937][ T7796] ? arch_do_signal_or_restart+0x8f/0x7e0 [ 98.952951][ T7796] ? irqentry_exit+0x38a/0x8c0 [ 98.952968][ T7796] ? asm_exc_page_fault+0x26/0x30 [ 98.952981][ T7796] ? 0xffffffffff600000 [ 98.953014][ T7796] ? vfs_coredump+0x2b85/0x55e0 [ 98.953029][ T7796] vfs_coredump+0x2b85/0x55e0 [ 98.953049][ T7796] ? __pfx_vfs_coredump+0x10/0x10 [ 98.953064][ T7796] ? __lock_acquire+0x436/0x2890 [ 98.953079][ T7796] ? __lock_acquire+0x436/0x2890 [ 98.953092][ T7796] ? lock_acquire+0x179/0x330 [ 98.953107][ T7796] ? lock_acquire+0x179/0x330 [ 98.953128][ T7796] ? arch_stack_walk+0xa6/0x100 [ 98.953148][ T7796] ? stack_trace_save+0x8e/0xc0 [ 98.953159][ T7796] ? __pfx_stack_trace_save+0x10/0x10 [ 98.953171][ T7796] ? stack_depot_save_flags+0x29/0x9b0 [ 98.953187][ T7796] ? __lock_acquire+0x436/0x2890 [ 98.953200][ T7796] ? kasan_save_stack+0x42/0x60 [ 98.953236][ T7796] ? proc_coredump_connector+0x2d1/0x4f0 [ 98.953250][ T7796] ? __pfx_proc_coredump_connector+0x10/0x10 [ 98.953266][ T7796] ? rcu_is_watching+0x12/0xc0 [ 98.953278][ T7796] get_signal+0x22e1/0x26d0 [ 98.953299][ T7796] ? __pfx_get_signal+0x10/0x10 [ 98.953319][ T7796] arch_do_signal_or_restart+0x8f/0x7e0 [ 98.953334][ T7796] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 98.953353][ T7796] ? do_user_addr_fault+0x926/0x1370 [ 98.953369][ T7796] irqentry_exit+0x38a/0x8c0 [ 98.953384][ T7796] asm_exc_page_fault+0x26/0x30 [ 98.953394][ T7796] RIP: 0033:0x7f94b084f6b0 [ 98.953409][ T7796] Code: Unable to access opcode bytes at 0x7f94b084f686. [ 98.953413][ T7796] RSP: 002b:00007f94b1888138 EFLAGS: 00010246 [ 98.953422][ T7796] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007f94b098f7c9 [ 98.953428][ T7796] RDX: 00007f94b1888140 RSI: 00007f94b1888270 RDI: 000000000000000b [ 98.953446][ T7796] RBP: 00007f94b0a13f91 R08: 0000000000000000 R09: 0000000000000058 [ 98.953452][ T7796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.953458][ T7796] R13: 00007f94b0be6128 R14: 00007f94b0be6090 R15: 00007ffc7eb86278 [ 98.953472][ T7796] [ 98.953498][ T7796] memory: usage 307200kB, limit 307200kB, failcnt 46147 [ 99.127563][ T7796] memory+swap: usage 431508kB, limit 9007199254740988kB, failcnt 0 [ 99.130109][ T7796] kmem: usage 11488kB, limit 9007199254740988kB, failcnt 0 [ 99.132524][ T7796] Memory cgroup stats for /syz1: [ 99.132592][ T7796] cache 302358528 [ 99.135473][ T7796] rss 217088 [ 99.136620][ T7796] rss_huge 0 [ 99.137777][ T7796] shmem 300101632 [ 99.139039][ T7796] mapped_file 2015232 [ 99.140375][ T7796] dirty 0 [ 99.141363][ T7796] writeback 0 [ 99.142485][ T7796] workingset_refault_anon 3 [ 99.144003][ T7796] workingset_refault_file 4539 [ 99.145591][ T7796] swap 127995904 [ 99.146903][ T7796] swapcached 0 [ 99.148121][ T7796] pgpgin 222890 [ 99.149609][ T7796] pgpgout 148962 [ 99.151127][ T7796] pgfault 33466 [ 99.152584][ T7796] pgmajfault 72 [ 99.154055][ T7796] inactive_anon 169320448 [ 99.155863][ T7796] active_anon 130281472 [ 99.157691][ T7796] inactive_file 1720320 [ 99.159788][ T7796] active_file 192512 [ 99.161459][ T7796] unevictable 0 [ 99.163170][ T7796] hierarchical_memory_limit 314572800 [ 99.164951][ T7796] hierarchical_memsw_limit 9223372036854771712 [ 99.166783][ T7796] total_cache 302358528 [ 99.200445][ T7796] total_rss 217088 [ 99.201811][ T7796] total_rss_huge 0 [ 99.203050][ T7796] total_shmem 300101632 [ 99.204450][ T7796] total_mapped_file 2015232 [ 99.205972][ T7796] total_dirty 0 [ 99.207165][ T7796] total_writeback 0 [ 99.208452][ T7796] total_workingset_refault_anon 3 [ 99.210341][ T7796] total_workingset_refault_file 4539 [ 99.213700][ T7796] total_swap 127995904 [ 99.215609][ T7796] total_swapcached 0 [ 99.217310][ T7796] total_pgpgin 222890 [ 99.218772][ T7796] total_pgpgout 148962 [ 99.220367][ T7796] total_pgfault 33466 [ 99.224568][ T7796] total_pgmajfault 72 [ 99.226368][ T7796] total_inactive_anon 169320448 [ 99.228562][ T7796] total_active_anon 130281472 [ 99.230606][ T7796] total_inactive_file 1720320 [ 99.233185][ T7796] total_active_file 192512 [ 99.234901][ T7796] total_unevictable 0 [ 99.236260][ T7796] anon_cost 0 [ 99.237375][ T7796] file_cost 0 [ 99.238508][ T7796] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.487,pid=7808,uid=0 [ 99.248297][ T7796] Memory cgroup out of memory: Killed process 7808 (syz.1.487) total-vm:49532kB, anon-rss:0kB, file-rss:33104kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 99.426110][ T7793] syz.1.487 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 99.429782][ T7793] CPU: 1 UID: 0 PID: 7793 Comm: syz.1.487 Tainted: G L syzkaller #0 PREEMPT(full) [ 99.429800][ T7793] Tainted: [L]=SOFTLOCKUP [ 99.429803][ T7793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.429809][ T7793] Call Trace: [ 99.429813][ T7793] [ 99.429817][ T7793] dump_stack_lvl+0x16c/0x1f0 [ 99.429834][ T7793] dump_header+0x101/0x960 [ 99.429853][ T7793] oom_kill_process+0x176/0x910 [ 99.429871][ T7793] out_of_memory+0x350/0x1700 [ 99.429888][ T7793] ? __lock_acquire+0x436/0x2890 [ 99.429902][ T7793] ? __pfx_out_of_memory+0x10/0x10 [ 99.429922][ T7793] mem_cgroup_out_of_memory+0x118/0x130 [ 99.429933][ T7793] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 99.429947][ T7793] ? do_raw_spin_unlock+0x172/0x230 [ 99.429964][ T7793] try_charge_memcg+0x695/0xd30 [ 99.429984][ T7793] ? __pfx_try_charge_memcg+0x10/0x10 [ 99.429998][ T7793] ? __print_lock_name+0x81/0xe0 [ 99.430014][ T7793] ? rcu_read_unlock+0x17/0x60 [ 99.430033][ T7793] charge_memcg+0x8a/0x230 [ 99.430047][ T7793] __mem_cgroup_charge+0x2b/0x1e0 [ 99.430063][ T7793] shmem_alloc_and_add_folio+0x50c/0xc20 [ 99.430083][ T7793] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 99.430101][ T7793] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 99.430121][ T7793] shmem_get_folio_gfp+0x67f/0x1610 [ 99.430141][ T7793] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 99.430162][ T7793] shmem_write_begin+0x1a4/0x3b0 [ 99.430173][ T7793] ? __pfx_shmem_write_begin+0x10/0x10 [ 99.430183][ T7793] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 99.430196][ T7793] ? lockdep_hardirqs_on+0x7c/0x110 [ 99.430211][ T7793] generic_perform_write+0x3c4/0x900 [ 99.430231][ T7793] ? __pfx_generic_perform_write+0x10/0x10 [ 99.430248][ T7793] ? file_update_time_flags+0x35c/0x520 [ 99.430261][ T7793] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 99.430272][ T7793] shmem_file_write_iter+0x10e/0x140 [ 99.430285][ T7793] __kernel_write_iter+0x31a/0xb10 [ 99.430300][ T7793] ? __pfx___kernel_write_iter+0x10/0x10 [ 99.430312][ T7793] ? __up_read+0x2d1/0x700 [ 99.430328][ T7793] ? dump_user_range+0x756/0xb70 [ 99.430343][ T7793] ? __kernel_write_iter+0x48c/0xb10 [ 99.430358][ T7793] dump_user_range+0x413/0xb70 [ 99.430377][ T7793] ? __pfx_dump_user_range+0x10/0x10 [ 99.430394][ T7793] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 99.430409][ T7793] ? __pfx_writenote+0x10/0x10 [ 99.430423][ T7793] elf_core_dump+0x29c3/0x3c10 [ 99.430441][ T7793] ? __pfx_elf_core_dump+0x10/0x10 [ 99.430449][ T7793] ? kasan_save_stack+0x33/0x60 [ 99.430460][ T7793] ? kasan_save_track+0x14/0x30 [ 99.430471][ T7793] ? __kasan_kmalloc+0xaa/0xb0 [ 99.430481][ T7793] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 99.430493][ T7793] ? vfs_coredump+0x1dd9/0x55e0 [ 99.430507][ T7793] ? arch_do_signal_or_restart+0x8f/0x7e0 [ 99.430521][ T7793] ? irqentry_exit+0x38a/0x8c0 [ 99.430533][ T7793] ? asm_exc_page_fault+0x26/0x30 [ 99.430556][ T7793] ? 0xffffffffff600000 [ 99.430590][ T7793] ? vfs_coredump+0x2b85/0x55e0 [ 99.430604][ T7793] vfs_coredump+0x2b85/0x55e0 [ 99.430625][ T7793] ? __pfx_vfs_coredump+0x10/0x10 [ 99.430640][ T7793] ? __lock_acquire+0x436/0x2890 [ 99.430655][ T7793] ? __lock_acquire+0x436/0x2890 [ 99.430668][ T7793] ? lock_acquire+0x179/0x330 [ 99.430683][ T7793] ? lock_acquire+0x179/0x330 [ 99.430721][ T7793] ? arch_stack_walk+0xa6/0x100 [ 99.430741][ T7793] ? stack_trace_save+0x8e/0xc0 [ 99.430752][ T7793] ? __pfx_stack_trace_save+0x10/0x10 [ 99.430764][ T7793] ? stack_depot_save_flags+0x29/0x9b0 [ 99.430779][ T7793] ? __lock_acquire+0x436/0x2890 [ 99.430792][ T7793] ? kasan_save_stack+0x42/0x60 [ 99.430827][ T7793] ? proc_coredump_connector+0x2d1/0x4f0 [ 99.430841][ T7793] ? __pfx_proc_coredump_connector+0x10/0x10 [ 99.430858][ T7793] ? rcu_is_watching+0x12/0xc0 [ 99.430870][ T7793] get_signal+0x22e1/0x26d0 [ 99.430891][ T7793] ? __pfx_get_signal+0x10/0x10 [ 99.430910][ T7793] arch_do_signal_or_restart+0x8f/0x7e0 [ 99.430925][ T7793] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 99.430944][ T7793] ? do_user_addr_fault+0x926/0x1370 [ 99.430961][ T7793] irqentry_exit+0x38a/0x8c0 [ 99.430976][ T7793] asm_exc_page_fault+0x26/0x30 [ 99.430989][ T7793] RIP: 0033:0x7f94b084f6b0 [ 99.431002][ T7793] Code: Unable to access opcode bytes at 0x7f94b084f686. [ 99.431007][ T7793] RSP: 002b:00007f94b1888138 EFLAGS: 00010246 [ 99.431016][ T7793] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007f94b098f7c9 [ 99.431023][ T7793] RDX: 00007f94b1888140 RSI: 00007f94b1888270 RDI: 000000000000000b [ 99.431029][ T7793] RBP: 00007f94b0a13f91 R08: 0000000000000000 R09: 0000000000000058 [ 99.431035][ T7793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.431040][ T7793] R13: 00007f94b0be6128 R14: 00007f94b0be6090 R15: 00007ffc7eb86278 [ 99.431055][ T7793] [ 99.431059][ T7793] memory: usage 307200kB, limit 307200kB, failcnt 47988 [ 99.597576][ T7793] memory+swap: usage 432012kB, limit 9007199254740988kB, failcnt 0 [ 99.600643][ T7793] kmem: usage 11276kB, limit 9007199254740988kB, failcnt 0 [ 99.603071][ T7793] Memory cgroup stats for /syz1: [ 99.603148][ T7793] cache 301789184 [ 99.606130][ T7793] rss 212992 [ 99.607351][ T7793] rss_huge 0 [ 99.608467][ T7793] shmem 301789184 [ 99.609735][ T7793] mapped_file 0 [ 99.611053][ T7793] dirty 0 [ 99.612078][ T7793] writeback 0 [ 99.613371][ T7793] workingset_refault_anon 3 [ 99.615455][ T7793] workingset_refault_file 5694 [ 99.617047][ T7793] swap 127660032 [ 99.618357][ T7793] swapcached 4096 [ 99.619617][ T7793] pgpgin 235101 [ 99.620809][ T7793] pgpgout 161350 [ 99.622041][ T7793] pgfault 34178 [ 99.623256][ T7793] pgmajfault 86 [ 99.624473][ T7793] inactive_anon 88551424 [ 99.625893][ T7793] active_anon 213188608 [ 99.627322][ T7793] inactive_file 0 [ 99.628633][ T7793] active_file 0 [ 99.629833][ T7793] unevictable 0 [ 99.631493][ T7793] hierarchical_memory_limit 314572800 [ 99.633281][ T7793] hierarchical_memsw_limit 9223372036854771712 [ 99.635358][ T7793] total_cache 301789184 [ 99.636960][ T7793] total_rss 212992 [ 99.638291][ T7793] total_rss_huge 0 [ 99.639716][ T7793] total_shmem 301789184 [ 99.641126][ T7793] total_mapped_file 0 [ 99.642476][ T7793] total_dirty 0 [ 99.643698][ T7793] total_writeback 0 [ 99.644990][ T7793] total_workingset_refault_anon 3 [ 99.647140][ T7793] total_workingset_refault_file 5694 [ 99.648932][ T7793] total_swap 127660032 [ 99.650373][ T7793] total_swapcached 4096 [ 99.651795][ T7793] total_pgpgin 235101 [ 99.653148][ T7793] total_pgpgout 161350 [ 99.654555][ T7793] total_pgfault 34178 [ 99.655912][ T7793] total_pgmajfault 86 [ 99.657264][ T7793] total_inactive_anon 88551424 [ 99.658929][ T7793] total_active_anon 213188608 [ 99.660719][ T7793] total_inactive_file 0 [ 99.662573][ T7793] total_active_file 0 [ 99.663948][ T7793] total_unevictable 0 [ 99.665306][ T7793] anon_cost 0 [ 99.666458][ T7793] file_cost 0 [ 99.667691][ T7793] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.487,pid=7790,uid=0 [ 99.673464][ T7793] Memory cgroup out of memory: Killed process 7790 (syz.1.487) total-vm:49532kB, anon-rss:0kB, file-rss:33312kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 100.802380][ T8077] macsec0: entered promiscuous mode [ 100.804508][ T8077] macsec0: entered allmulticast mode [ 100.806210][ T8077] veth1_macvtap: entered allmulticast mode [ 100.827668][ T40] audit: type=1400 audit(1767161094.370:555): avc: denied { map } for pid=8076 comm="syz.4.568" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 100.935676][ T8098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.573'. [ 100.943289][ T8098] tipc: Started in network mode [ 100.945383][ T8098] tipc: Node identity 84e, cluster identity 4711 [ 100.948394][ T8098] tipc: Node number set to 2126 [ 100.980681][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'. [ 101.011743][ T8105] 9p: Could not find request transport: fdúâ [ 101.200610][ T40] audit: type=1400 audit(1767161094.716:556): avc: denied { create } for pid=8112 comm="syz.2.577" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.210031][ T40] audit: type=1400 audit(1767161094.716:557): avc: denied { read append open } for pid=8112 comm="syz.2.577" path="/150/file0/cpuset.effective_cpus" dev="9p" ino=71827921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 101.541821][ T6017] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 101.712862][ T6017] usb 6-1: Using ep0 maxpacket: 8 [ 101.716162][ T6017] usb 6-1: config 0 interface 0 has no altsetting 0 [ 101.718631][ T6017] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 101.722371][ T6017] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.728593][ T6017] usb 6-1: config 0 descriptor?? [ 101.803549][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'. [ 101.958594][ T40] audit: type=1400 audit(1767161095.418:558): avc: denied { getopt } for pid=8127 comm="syz.3.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 102.020547][ T8136] 9pnet_virtio: no channels available for device syz [ 102.027701][ T8136] 9pnet_virtio: no channels available for device syz [ 102.111362][ T40] audit: type=1400 audit(1767161095.567:559): avc: denied { setattr } for pid=8143 comm="syz.3.588" name="video1" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 102.120463][ T8146] Cannot find del_set index 4 as target [ 102.125357][ T8146] netlink: 68 bytes leftover after parsing attributes in process `syz.4.587'. [ 102.167908][ T6017] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 102.253226][ T40] audit: type=1400 audit(1767161095.698:560): avc: denied { execute } for pid=8158 comm="syz.2.593" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.378770][ T8116] netlink: 32 bytes leftover after parsing attributes in process `syz.1.578'. [ 102.382509][ T6019] usb 6-1: USB disconnect, device number 5 [ 102.469372][ T8178] comedi: No check for data length of config insn id 44177 is implemented [ 102.473441][ T8178] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 102.476641][ T8178] comedi: Assuming n=15 is correct [ 102.522982][ T40] audit: type=1400 audit(1767161095.951:561): avc: denied { getopt } for pid=8183 comm="syz.2.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.548018][ T8189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19984 sclass=netlink_route_socket pid=8189 comm=syz.2.605 [ 102.574570][ T8193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=255 sclass=netlink_route_socket pid=8193 comm=syz.2.606 [ 102.575005][ T8194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=255 sclass=netlink_route_socket pid=8194 comm=syz.2.606 [ 102.688599][ T8207] netlink: 20 bytes leftover after parsing attributes in process `syz.4.609'. [ 102.695684][ T1182] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.695756][ T8207] netlink: 20 bytes leftover after parsing attributes in process `syz.4.609'. [ 102.699649][ T1182] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.706945][ T1182] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.710098][ T1182] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.735913][ T8212] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.612'. [ 102.743785][ T40] audit: type=1400 audit(1767161096.156:562): avc: denied { append } for pid=8211 comm="syz.3.612" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 103.386833][ T8240] netlink: 16 bytes leftover after parsing attributes in process `syz.1.620'. [ 103.400361][ T8240] batman_adv: batadv0: Interface deactivated: gretap1 [ 103.402989][ T8240] batman_adv: batadv0: Removing interface: gretap1 [ 103.684045][ T8244] tap0: tun_chr_ioctl cmd 1074025675 [ 103.685911][ T8244] tap0: persist enabled [ 103.687896][ T8244] tap0: tun_chr_ioctl cmd 1074025675 [ 103.690251][ T8244] tap0: persist enabled [ 103.804349][ T8244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.622'. [ 103.818472][ T8244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.622'. [ 103.937486][ T8252] netlink: 36 bytes leftover after parsing attributes in process `syz.2.624'. [ 103.956411][ T40] audit: type=1400 audit(1767161097.288:563): avc: denied { setopt } for pid=8250 comm="syz.3.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 104.819644][ T8259] netlink: 'syz.1.627': attribute type 29 has an invalid length. [ 104.826922][ T8259] netlink: 'syz.1.627': attribute type 29 has an invalid length. [ 104.946959][ T40] audit: type=1400 audit(1767161098.214:564): avc: denied { create } for pid=8267 comm="syz.3.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 104.978093][ T8264] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 104.981462][ T8264] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 105.177727][ T8283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8283 comm=syz.1.635 [ 105.305303][ T40] audit: type=1326 audit(1767161098.551:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8291 comm="syz.2.638" exe="/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f4895b86667 code=0x0 [ 106.025333][ T8309] fuse: Bad value for 'fd' [ 106.074609][ T8313] overlayfs: missing 'lowerdir' [ 106.284157][ T40] audit: type=1400 audit(1767161099.467:566): avc: denied { accept } for pid=8328 comm="syz.2.647" laddr=fe80::13 lport=40852 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 106.300670][ T8331] netlink: 'syz.4.649': attribute type 10 has an invalid length. [ 106.332832][ T8331] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 106.337187][ T8331] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 107.716781][ T40] audit: type=1400 audit(1767161100.805:567): avc: denied { execute } for pid=8341 comm="syz.1.653" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 107.909735][ T8349] __nla_validate_parse: 7 callbacks suppressed [ 107.909751][ T8349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.655'. [ 107.917437][ T8349] chnl_net:caif_netlink_parms(): no params data found [ 108.145509][ T40] audit: type=1400 audit(1767161101.207:568): avc: denied { write } for pid=8351 comm="syz.3.656" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 108.153630][ T8352] binder: 8351:8352 ioctl c0306201 0 returned -14 [ 108.217020][ T40] audit: type=1400 audit(1767161101.282:569): avc: denied { read } for pid=8358 comm="syz.4.658" dev="nsfs" ino=4026533747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 108.243594][ T40] audit: type=1400 audit(1767161101.282:570): avc: denied { open } for pid=8358 comm="syz.4.658" path="net:[4026533747]" dev="nsfs" ino=4026533747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 108.342826][ T8372] syzkaller1: entered promiscuous mode [ 108.346541][ T8372] syzkaller1: entered allmulticast mode [ 108.432525][ T8373] support for cryptoloop has been removed. Use dm-crypt instead. [ 109.507609][ T8375] comedi comedi0: reset error (fatal) [ 109.846426][ T40] audit: type=1400 audit(1767161102.797:571): avc: denied { accept } for pid=8381 comm="syz.2.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 109.856309][ T40] audit: type=1400 audit(1767161102.797:572): avc: denied { map } for pid=8381 comm="syz.2.666" path="socket:[23430]" dev="sockfs" ino=23430 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 109.880286][ T8384] SELinux: Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped). [ 109.885123][ T40] audit: type=1400 audit(1767161102.834:573): avc: denied { relabelto } for pid=8383 comm="syz.2.667" name="cpu.stat" dev="tmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 109.897196][ T40] audit: type=1400 audit(1767161102.834:574): avc: denied { associate } for pid=8383 comm="syz.2.667" name="cpu.stat" dev="tmpfs" ino=943 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 109.908813][ T40] audit: type=1400 audit(1767161102.843:575): avc: denied { append } for pid=8383 comm="syz.2.667" path="/176/cpu.stat" dev="tmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 110.015004][ T8386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.667'. [ 110.595665][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.602127][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.843853][ T40] audit: type=1400 audit(1767161103.723:576): avc: denied { wake_alarm } for pid=8388 comm="syz.3.670" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 111.298615][ T8384] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 111.319548][ T8384] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.348019][ T8384] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.444262][ T40] audit: type=1400 audit(1767161104.293:577): avc: denied { unlink } for pid=5932 comm="syz-executor" name="cpu.stat" dev="tmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 111.458508][ T8396] netlink: 27 bytes leftover after parsing attributes in process `syz.4.671'. [ 111.820226][ T8414] fuse: Bad value for 'fd' [ 112.106951][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.110931][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.529195][ T8420] ufs: You didn't specify the type of your ufs filesystem [ 112.529195][ T8420] [ 112.529195][ T8420] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 112.529195][ T8420] [ 112.529195][ T8420] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 112.544384][ T8420] ufs: failed to set blocksize [ 112.804798][ T8389] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 112.817662][ T8423] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 112.818119][ T5944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 112.827847][ T5944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 112.833518][ T5944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 112.837839][ T5944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 112.841426][ T5944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.050208][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.683'. [ 113.073571][ T8442] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 113.135569][ T8390] chnl_net:caif_netlink_parms(): no params data found [ 113.168637][ T8456] mmap: syz.2.686 (8456) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 113.200310][ T8455] netlink: 'syz.4.685': attribute type 32 has an invalid length. [ 113.256373][ T8390] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.257175][ T8464] netlink: 88 bytes leftover after parsing attributes in process `syz.3.687'. [ 113.259626][ T8390] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.265725][ T8390] bridge_slave_0: entered allmulticast mode [ 113.269686][ T8390] bridge_slave_0: entered promiscuous mode [ 113.283438][ T8467] bond0: Error: Cannot enslave bond to itself. [ 113.286457][ T8390] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.289735][ T8390] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.293280][ T8390] bridge_slave_1: entered allmulticast mode [ 113.297245][ T8390] bridge_slave_1: entered promiscuous mode [ 113.324371][ T8390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.332149][ T8390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.385711][ T8472] geneve2: entered promiscuous mode [ 113.387438][ T8472] geneve2: entered allmulticast mode [ 113.405821][ T8390] team0: Port device team_slave_0 added [ 113.409251][ T8390] team0: Port device team_slave_1 added [ 113.424259][ T8390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.426543][ T8390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.434996][ T8390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.439380][ T8390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.441661][ T8390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.450033][ T8390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.471177][ T8390] hsr_slave_0: entered promiscuous mode [ 113.473461][ T8390] hsr_slave_1: entered promiscuous mode [ 113.475701][ T8390] debugfs: 'hsr0' already exists in 'hsr' [ 113.477586][ T8390] Cannot create hsr debugfs directory [ 113.568453][ T8390] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 113.581786][ T8390] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 113.590253][ T8390] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 113.600025][ T8390] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 113.632246][ T8390] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.635454][ T8390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.638688][ T8390] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.641787][ T8390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.691875][ T8390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.703916][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.710478][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.743822][ T8390] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.767757][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.771651][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.784120][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.787241][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.793177][ T1182] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.796257][ T1182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.926156][ T8390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.083448][ T8390] veth0_vlan: entered promiscuous mode [ 114.093848][ T8390] veth1_vlan: entered promiscuous mode [ 114.115855][ T8390] veth0_macvtap: entered promiscuous mode [ 114.121736][ T8390] veth1_macvtap: entered promiscuous mode [ 114.133144][ T8390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.143074][ T8390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.151257][ T1182] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.155333][ T1182] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.159113][ T1182] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.162754][ T1182] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.204445][ T7629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.207111][ T7629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.227742][ T1182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.230826][ T1182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.250533][ T40] audit: type=1400 audit(1767161106.921:578): avc: denied { mounton } for pid=8390 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 114.544270][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.692'. [ 114.551192][ T8512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=8512 comm=syz.2.691 [ 114.558777][ T8511] xt_socket: unknown flags 0xe4 [ 114.559921][ T8508] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 114.708633][ T8521] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 114.875270][ T54] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 114.899639][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.904210][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.950280][ T5944] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.035823][ T5944] Bluetooth: hci3: command tx timeout [ 115.057030][ T54] usb 9-1: Using ep0 maxpacket: 32 [ 115.060786][ T54] usb 9-1: unable to get BOS descriptor or descriptor too short [ 115.064680][ T54] usb 9-1: config 1 interface 0 altsetting 9 endpoint 0x1 has invalid maxpacket 1943, setting to 1024 [ 115.069307][ T54] usb 9-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1024 [ 115.072914][ T54] usb 9-1: config 1 interface 0 altsetting 9 endpoint 0x82 has invalid maxpacket 1544, setting to 1024 [ 115.077295][ T54] usb 9-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 1024 [ 115.083127][ T54] usb 9-1: config 1 interface 0 has no altsetting 0 [ 115.089239][ T54] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 115.092329][ T54] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.095708][ T54] usb 9-1: Product: syz [ 115.097189][ T54] usb 9-1: Manufacturer: syz [ 115.098989][ T54] usb 9-1: SerialNumber: syz [ 115.107776][ T8519] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 115.113198][ T8519] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 115.308681][ T40] audit: type=1326 audit(1767161107.912:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8500 comm="syz.5.690" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e538f7c9 code=0x7fc00000 [ 115.381757][ T13] bond0 (unregistering): (slave team0): Releasing backup interface [ 115.384980][ T13] tipc: Resetting bearer [ 115.389770][ T13] tipc: Resetting bearer [ 115.392250][ T13] bond0 (unregistering): Released all slaves [ 115.486441][ T13] tipc: Disabling bearer [ 115.499488][ T13] tipc: Left network mode [ 115.545364][ T40] audit: type=1400 audit(1767161108.128:580): avc: denied { ioctl } for pid=8566 comm="syz.3.708" path="socket:[21065]" dev="sockfs" ino=21065 ioctlcmd=0x89f9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 115.592904][ T40] audit: type=1400 audit(1767161108.174:581): avc: denied { read } for pid=8566 comm="syz.3.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 115.597260][ T8519] netlink: 128 bytes leftover after parsing attributes in process `syz.4.694'. [ 115.600565][ T40] audit: type=1400 audit(1767161108.174:582): avc: denied { shutdown } for pid=8518 comm="syz.4.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 115.604066][ T8519] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 115.618245][ T40] audit: type=1400 audit(1767161108.184:583): avc: denied { append } for pid=8518 comm="syz.4.694" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 115.649570][ T40] audit: type=1326 audit(1767161108.230:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8576 comm="syz.5.711" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e538f7c9 code=0x50000 [ 115.658451][ T40] audit: type=1326 audit(1767161108.230:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8576 comm="syz.5.711" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e538f7c9 code=0x50000 [ 115.667070][ T40] audit: type=1326 audit(1767161108.230:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8576 comm="syz.5.711" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e538f7c9 code=0x50000 [ 115.675707][ T40] audit: type=1326 audit(1767161108.230:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8576 comm="syz.5.711" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e538f7c9 code=0x50000 [ 115.684112][ T40] audit: type=1326 audit(1767161108.230:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8576 comm="syz.5.711" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e538f7c9 code=0x50000 [ 115.765189][ T8589] netlink: 28 bytes leftover after parsing attributes in process `syz.2.712'. [ 115.773550][ T8589] netlink: 28 bytes leftover after parsing attributes in process `syz.2.712'. [ 115.777302][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.712'. [ 115.794957][ T54] usblp 9-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 9 proto 2 vid 0x0525 pid 0xA4A8 [ 115.800352][ T54] usb 9-1: USB disconnect, device number 4 [ 115.811882][ T54] usblp0: removed [ 116.028005][ T8597] netlink: 32 bytes leftover after parsing attributes in process `syz.3.714'. [ 116.190560][ T13] hsr_slave_0: left promiscuous mode [ 116.192840][ T13] hsr_slave_1: left promiscuous mode [ 116.226933][ T13] veth1_macvtap: left promiscuous mode [ 116.229148][ T13] veth0_macvtap: left promiscuous mode [ 116.231326][ T13] veth1_vlan: left promiscuous mode [ 116.377029][ T8612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.719'. [ 116.389850][ T8612] tmpfs: Bad value for 'size' [ 116.446063][ T13] team0 (unregistering): Port device vlan0 removed [ 116.970321][ T8626] input: syz0 as /devices/virtual/input/input14 [ 117.103875][ T8628] netlink: 24 bytes leftover after parsing attributes in process `syz.3.724'. [ 117.108636][ T8630] netlink: 60 bytes leftover after parsing attributes in process `syz.4.725'. [ 117.116101][ T8630] netlink: 'syz.4.725': attribute type 1 has an invalid length. [ 117.259786][ T5944] Bluetooth: hci3: command tx timeout [ 117.292995][ T8636] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 117.651974][ T8645] netlink: 'syz.4.732': attribute type 1 has an invalid length. [ 117.662618][ T8645] netlink: 224 bytes leftover after parsing attributes in process `syz.4.732'. [ 117.709484][ T8645] netlink: 'syz.4.732': attribute type 12 has an invalid length. [ 117.713992][ T8645] netlink: 'syz.4.732': attribute type 29 has an invalid length. [ 117.798737][ T8659] : entered promiscuous mode [ 117.816300][ T8659] bridge0: port 3(erspan0) entered blocking state [ 117.819307][ T8659] bridge0: port 3(erspan0) entered disabled state [ 117.821634][ T8659] erspan0: entered allmulticast mode [ 117.824504][ T8659] erspan0: entered promiscuous mode [ 117.826705][ T8659] bridge0: port 3(erspan0) entered blocking state [ 117.829051][ T8659] bridge0: port 3(erspan0) entered forwarding state [ 117.866759][ T8661] tipc: Enabled bearer , priority 0 [ 117.925429][ T8660] tipc: Disabling bearer [ 118.069912][ T8667] Invalid ELF header magic: != ELF [ 118.271625][ T8681] openvswitch: netlink: Key type 51 is out of range max 32 [ 118.364863][ T8691] 9p: Bad value for 'rfdno' [ 118.366758][ T8692] tmpfs: Cannot change global quota limit on remount [ 118.903813][ T8711] netlink: 'syz.4.749': attribute type 1 has an invalid length. [ 118.908957][ T8711] netlink: 'syz.4.749': attribute type 1 has an invalid length. [ 118.986332][ T8722] overlayfs: missing 'lowerdir' [ 119.494607][ T5944] Bluetooth: hci3: command tx timeout [ 119.553397][ T8739] netlink: 'syz.2.756': attribute type 1 has an invalid length. [ 119.876074][ T8755] tipc: Started in network mode [ 119.878199][ T8755] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 119.882884][ T8755] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000 [ 119.890213][ T8755] tipc: Enabled bearer , priority 10 [ 119.970566][ T8759] xt_TCPMSS: Only works on TCP SYN packets [ 120.019286][ T8763] __nla_validate_parse: 14 callbacks suppressed [ 120.019302][ T8763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.766'. [ 120.251549][ T8775] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.768'. [ 120.316597][ T8788] netlink: 20 bytes leftover after parsing attributes in process `syz.4.773'. [ 120.323090][ T8788] netlink: 'syz.4.773': attribute type 1 has an invalid length. [ 120.436120][ T8804] netlink: 56 bytes leftover after parsing attributes in process `syz.2.777'. [ 120.529275][ T8811] netlink: 'syz.3.780': attribute type 15 has an invalid length. [ 120.529291][ T8811] netlink: 24 bytes leftover after parsing attributes in process `syz.3.780'. [ 120.612997][ T8820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.784'. [ 120.623618][ T8823] hfsplus: unable to find HFS+ superblock [ 120.623915][ T8824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.786'. [ 120.631339][ T8824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.786'. [ 120.673886][ T1201] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.766527][ T5945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 120.773704][ T5945] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 120.777032][ T5945] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 120.784865][ T5945] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 120.787850][ T5945] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 120.789947][ T1201] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.882375][ T8855] binder: Unknown parameter '' [ 120.882378][ T40] kauditd_printk_skb: 73280 callbacks suppressed [ 120.882393][ T40] audit: type=1400 audit(1767161113.122:73869): avc: denied { remount } for pid=8854 comm="syz.3.794" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 120.923148][ T1201] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.949699][ T40] audit: type=1400 audit(1767161113.178:73870): avc: denied { mounton } for pid=8856 comm="syz.2.795" path="/229/file0" dev="hugetlbfs" ino=21438 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 120.963767][ T8842] chnl_net:caif_netlink_parms(): no params data found [ 120.971294][ T1472] tipc: Node number set to 1 [ 121.007006][ T1201] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.057278][ T8842] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.060779][ T8842] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.063174][ T8842] bridge_slave_0: entered allmulticast mode [ 121.066099][ T8842] bridge_slave_0: entered promiscuous mode [ 121.076177][ T8842] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.080546][ T8842] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.084292][ T8842] bridge_slave_1: entered allmulticast mode [ 121.088095][ T8842] bridge_slave_1: entered promiscuous mode [ 121.098924][ T8872] netlink: 'syz.3.798': attribute type 4 has an invalid length. [ 121.101545][ T8872] netlink: 17 bytes leftover after parsing attributes in process `syz.3.798'. [ 121.124126][ T8842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.133828][ T8842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.135617][ T8872] netlink: 'syz.3.798': attribute type 4 has an invalid length. [ 121.172068][ T8842] team0: Port device team_slave_0 added [ 121.184384][ T8842] team0: Port device team_slave_1 added [ 121.197776][ T40] audit: type=1400 audit(1767161113.421:73871): avc: denied { execstack } for pid=8875 comm="syz.3.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 121.209436][ T8842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.211984][ T8842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.220327][ T8842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.229227][ T8842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.231641][ T8842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.240055][ T8842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.253688][ T1201] bridge_slave_1: left allmulticast mode [ 121.255694][ T1201] bridge_slave_1: left promiscuous mode [ 121.258321][ T1201] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.262828][ T1201] bridge_slave_0: left allmulticast mode [ 121.264743][ T1201] bridge_slave_0: left promiscuous mode [ 121.266667][ T1201] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.269925][ T8876] ufs: You didn't specify the type of your ufs filesystem [ 121.269925][ T8876] [ 121.269925][ T8876] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 121.269925][ T8876] [ 121.269925][ T8876] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 121.283650][ T8876] ufs: ufstype=old is supported read-only [ 121.286351][ T8876] ufs: ufs_fill_super(): bad magic number [ 121.342188][ T40] audit: type=1400 audit(1767161113.543:73872): avc: denied { map } for pid=8880 comm="syz.3.801" path="socket:[27740]" dev="sockfs" ino=27740 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 121.469626][ T8892] xt_nat: multiple ranges no longer supported [ 121.502081][ T40] audit: type=1400 audit(1767161113.702:73873): avc: denied { name_bind } for pid=8893 comm="syz.3.806" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 121.520129][ T1201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.525591][ T1201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.530693][ T1201] bond0 (unregistering): Released all slaves [ 121.552604][ T8842] hsr_slave_0: entered promiscuous mode [ 121.555109][ T8842] hsr_slave_1: entered promiscuous mode [ 121.557307][ T8842] debugfs: 'hsr0' already exists in 'hsr' [ 121.559371][ T8842] Cannot create hsr debugfs directory [ 121.707180][ T8842] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 121.712015][ T8842] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 121.716256][ T8842] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 121.732273][ T8842] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 121.794896][ T40] audit: type=1400 audit(1767161113.963:73874): avc: denied { unmount } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 121.803961][ T40] audit: type=1400 audit(1767161113.973:73875): avc: denied { unmount } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 121.830422][ T8842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.841024][ T8842] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.849232][ T7629] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.851623][ T7629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.858941][ T40] audit: type=1400 audit(1767161114.038:73876): avc: denied { bind } for pid=8907 comm="syz.2.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 121.872082][ T1201] hsr_slave_0: left promiscuous mode [ 121.874919][ T1201] hsr_slave_1: left promiscuous mode [ 121.877546][ T1201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.881930][ T1201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.885820][ T1201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.888882][ T1201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.905299][ T1201] veth1_macvtap: left promiscuous mode [ 121.907611][ T1201] veth0_macvtap: left promiscuous mode [ 121.909917][ T1201] veth1_vlan: left promiscuous mode [ 121.912856][ T1201] veth0_vlan: left promiscuous mode [ 122.127321][ T8929] Bluetooth: MGMT ver 1.23 [ 122.242631][ T1201] team0 (unregistering): Port device team_slave_1 removed [ 122.268090][ T1201] team0 (unregistering): Port device team_slave_0 removed [ 122.499170][ T8937] syzkaller1: entered promiscuous mode [ 122.501026][ T8937] syzkaller1: entered allmulticast mode [ 122.519319][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.522359][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.639775][ T40] audit: type=1400 audit(1767161114.768:73877): avc: denied { mounton } for pid=8956 comm="syz.3.819" path="/proc/596/cgroup" dev="proc" ino=27906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 122.664790][ T8842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.684919][ T40] audit: type=1400 audit(1767161114.805:73878): avc: denied { setopt } for pid=8958 comm="syz.2.820" lport=54868 faddr=::ffff:100.1.1.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 122.888077][ T8842] veth0_vlan: entered promiscuous mode [ 122.895958][ T8842] veth1_vlan: entered promiscuous mode [ 122.911158][ T8842] veth0_macvtap: entered promiscuous mode [ 122.918274][ T8842] veth1_macvtap: entered promiscuous mode [ 122.928833][ T8842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.936154][ T8842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.942774][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.948931][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.951818][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.954716][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.991000][ T5945] Bluetooth: hci3: command tx timeout [ 123.003512][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.006199][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.026544][ T1182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.029981][ T1182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.072480][ T9001] binder: 9000:9001 ioctl c00c6211 0 returned -14 [ 123.131188][ T9003] netlink: 'syz.3.829': attribute type 1 has an invalid length. [ 123.134670][ T9003] netlink: 'syz.3.829': attribute type 2 has an invalid length. [ 123.137678][ T9003] netlink: 'syz.3.829': attribute type 3 has an invalid length. [ 123.144856][ T9003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.829'. [ 123.154806][ T9007] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0 [ 123.156999][ T9007] binder: 9006:9007 ioctl 4018620d 2000000002c0 returned -1 [ 123.580187][ T9065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=9065 comm=syz.6.849 [ 123.668863][ T9075] openvswitch: netlink: Message has 592 unknown bytes. [ 123.672022][ T9075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.689205][ T9072] overlayfs: invalid origin (0000) [ 123.695649][ T9072] random: crng reseeded on system resumption [ 123.702753][ T9072] overlay: filesystem on ./file0 not supported as upperdir [ 123.736805][ T9088] ADFS-fs (nbd6): error: unable to read block 3, try 0 [ 123.942856][ T81] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 124.033379][ C0] hrtimer: interrupt took 70789 ns [ 124.947615][ T9145] ip6erspan0: entered promiscuous mode [ 124.974805][ T9147] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.125888][ T9170] trusted_key: encrypted_key: insufficient parameters specified [ 125.198732][ T9172] cgroup: subsys name conflicts with all [ 125.226558][ T5945] Bluetooth: hci3: command tx timeout [ 125.268531][ T9174] random: crng reseeded on system resumption [ 125.315020][ T9174] kvm: emulating exchange as write [ 125.534116][ T9180] kvm: pic: single mode not supported [ 125.534245][ T9180] kvm: pic: level sensitive irq not supported [ 125.536947][ T9180] kvm: pic: single mode not supported [ 125.628036][ T9183] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 125.635719][ T9183] overlayfs: failed to resolve './file0': -2 [ 125.764886][ T9189] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 125.806625][ T9194] __nla_validate_parse: 8 callbacks suppressed [ 125.806689][ T9194] netlink: 96 bytes leftover after parsing attributes in process `syz.4.887'. [ 125.834438][ T9194] bridge6: entered promiscuous mode [ 125.936130][ T9201] erofs (device nbd3): cannot find valid erofs superblock [ 125.959380][ T9203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.890'. [ 126.002017][ T9206] smc: net device bond0 applied user defined pnetid SYZ2 [ 126.005426][ T9206] netlink: 14 bytes leftover after parsing attributes in process `syz.4.891'. [ 126.040705][ T9206] smc: removing net device bond0 with user defined pnetid SYZ2 [ 126.046060][ T9206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.050953][ T9206] bond_slave_0: left allmulticast mode [ 126.058256][ T9206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.063430][ T9206] bond_slave_1: left allmulticast mode [ 126.069762][ T9206] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 126.074994][ T9206] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 126.089787][ T9206] bond0 (unregistering): Released all slaves [ 126.250515][ T40] kauditd_printk_skb: 93 callbacks suppressed [ 126.250531][ T40] audit: type=1400 audit(2000000003.122:73972): avc: denied { create } for pid=9215 comm="syz.3.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 126.261078][ T40] audit: type=1400 audit(2000000003.141:73973): avc: denied { write } for pid=9215 comm="syz.3.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 126.306391][ T54] usb 11-1: new low-speed USB device number 2 using dummy_hcd [ 126.311563][ T40] audit: type=1400 audit(2000000003.188:73974): avc: denied { ioctl } for pid=9218 comm="syz.3.895" path="socket:[27477]" dev="sockfs" ino=27477 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.313416][ T9219] netlink: 128 bytes leftover after parsing attributes in process `syz.3.895'. [ 126.368560][ T40] audit: type=1400 audit(2000000003.235:73975): avc: denied { allowed } for pid=9220 comm="syz.3.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 126.374075][ T9223] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 126.374109][ T6019] IPVS: starting estimator thread 0... [ 126.377194][ T40] audit: type=1400 audit(2000000003.235:73976): avc: denied { read write } for pid=9220 comm="syz.3.896" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 126.393547][ T40] audit: type=1400 audit(2000000003.235:73977): avc: denied { open } for pid=9220 comm="syz.3.896" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 126.426224][ T40] audit: type=1400 audit(2000000003.300:73978): avc: denied { read } for pid=9226 comm="syz.3.897" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 126.436571][ T40] audit: type=1400 audit(2000000003.300:73979): avc: denied { open } for pid=9226 comm="syz.3.897" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 126.465683][ T40] audit: type=1400 audit(2000000003.328:73980): avc: denied { create } for pid=9228 comm="syz.3.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 126.466956][ T9225] IPVS: using max 33 ests per chain, 79200 per kthread [ 126.469843][ T9230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9230 comm=syz.3.898 [ 126.469867][ T54] usb 11-1: config index 0 descriptor too short (expected 1307, got 27) [ 126.469882][ T54] usb 11-1: config 0 has an invalid interface number: 0 but max is -1 [ 126.469892][ T54] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 126.469907][ T54] usb 11-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 126.469924][ T54] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 126.469935][ T54] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 126.472202][ T54] usb 11-1: string descriptor 0 read error: -22 [ 126.472259][ T54] usb 11-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 126.472270][ T54] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.473723][ T54] usb 11-1: config 0 descriptor?? [ 126.474757][ T40] audit: type=1400 audit(2000000003.328:73981): avc: denied { write } for pid=9228 comm="syz.3.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 126.474786][ T9208] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 126.476462][ T54] hub 11-1:0.0: bad descriptor, ignoring hub [ 126.476484][ T54] hub 11-1:0.0: probe with driver hub failed with error -5 [ 126.478722][ T54] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input15 [ 126.654205][ T9238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.900'. [ 126.750698][ T9241] delete_channel: no stack [ 126.752666][ T9241] delete_channel: no stack [ 126.754268][ T9241] delete_channel: no stack [ 126.756473][ T9241] delete_channel: no stack [ 126.758554][ T9241] delete_channel: no stack [ 126.760149][ T9241] delete_channel: no stack [ 126.761739][ T9241] delete_channel: no stack [ 126.763429][ T9241] delete_channel: no stack [ 126.765086][ T9241] delete_channel: no stack [ 126.767132][ T9241] delete_channel: no stack [ 126.768737][ T9241] delete_channel: no stack [ 126.770368][ T9241] delete_channel: no stack [ 126.772019][ T9241] delete_channel: no stack [ 126.773640][ T9241] delete_channel: no stack [ 126.775465][ T9241] delete_channel: no stack [ 126.777260][ T9241] delete_channel: no stack [ 126.778951][ T9241] delete_channel: no stack [ 126.780575][ T9241] delete_channel: no stack [ 126.782146][ T9241] delete_channel: no stack [ 126.783747][ T9241] delete_channel: no stack [ 126.785312][ T9241] delete_channel: no stack [ 126.786986][ T9241] delete_channel: no stack [ 126.788838][ T9241] delete_channel: no stack [ 126.790498][ T9241] delete_channel: no stack [ 126.792061][ T9241] delete_channel: no stack [ 127.344097][ T9241] delete_channel: no stack [ 127.346380][ T9241] delete_channel: no stack [ 127.348622][ T9241] delete_channel: no stack [ 127.350812][ T9241] delete_channel: no stack [ 127.353208][ T9241] delete_channel: no stack [ 127.355665][ T9241] delete_channel: no stack [ 127.357928][ T9241] delete_channel: no stack [ 127.360294][ T9241] delete_channel: no stack [ 127.381409][ T9254] sctp: [Deprecated]: syz.3.904 (pid 9254) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.381409][ T9254] Use struct sctp_sack_info instead [ 127.440431][ T5945] Bluetooth: hci3: command tx timeout [ 127.870534][ T9305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.920'. [ 128.406529][ T9328] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 129.086795][ T9344] netlink: 'syz.4.930': attribute type 19 has an invalid length. [ 129.248583][ T54] usb 11-1: USB disconnect, device number 2 [ 129.640765][ T9349] cgroup: fork rejected by pids controller in /syz6 [ 129.664752][ T5945] Bluetooth: hci3: command tx timeout [ 130.038375][ T9408] netlink: 44 bytes leftover after parsing attributes in process `syz.4.934'. [ 130.074760][ T9412] fuse: Bad value for 'fd' [ 130.388394][ T9431] nvme_fabrics: missing parameter 'transport=%s' [ 130.391512][ T9431] nvme_fabrics: missing parameter 'nqn=%s' [ 130.490505][ T9424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.936'. [ 130.495017][ T9424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.936'. [ 130.672609][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.6.939'. [ 130.812069][ T9446] overlay: filesystem on ./bus is read-only [ 130.881422][ T9449] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 131.026611][ T9457] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 131.246735][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.949'. [ 131.364058][ T9466] SELinux: failed to load policy [ 131.507379][ T9479] gretap0: left allmulticast mode [ 131.541204][ T9479] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.545185][ T9479] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.665648][ T9479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.675157][ T9479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.810110][ T1182] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.814285][ T1182] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.818673][ T1182] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.822752][ T1182] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.830908][ T1182] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.835156][ T1182] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.846476][ T1182] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.849582][ T1182] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.894582][ T40] kauditd_printk_skb: 89 callbacks suppressed [ 131.894598][ T40] audit: type=1400 audit(2000000008.405:74071): avc: denied { read } for pid=9482 comm="syz.2.954" name="vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 131.907505][ T40] audit: type=1400 audit(2000000008.405:74072): avc: denied { open } for pid=9482 comm="syz.2.954" path="/dev/vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 132.020369][ T40] audit: type=1400 audit(2000000008.527:74073): avc: denied { read } for pid=9484 comm="syz.3.955" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 132.028086][ T40] audit: type=1400 audit(2000000008.527:74074): avc: denied { open } for pid=9484 comm="syz.3.955" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 132.037072][ T40] audit: type=1400 audit(2000000008.536:74075): avc: denied { ioctl } for pid=9484 comm="syz.3.955" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 132.045712][ T40] audit: type=1400 audit(2000000008.545:74076): avc: denied { set_context_mgr } for pid=9484 comm="syz.3.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 132.115215][ T40] audit: type=1400 audit(2000000008.620:74077): avc: denied { unmount } for pid=6568 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 132.178940][ T6031] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 132.223562][ T9496] binder_alloc: 9495: binder_alloc_buf, no vma [ 132.242215][ T40] audit: type=1400 audit(2000000008.704:74078): avc: denied { bind } for pid=9495 comm="syz.4.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 132.248781][ T40] audit: type=1400 audit(2000000008.714:74079): avc: denied { call } for pid=9495 comm="syz.4.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 132.270803][ T40] audit: type=1400 audit(2000000008.760:74080): avc: denied { create } for pid=9499 comm="syz.4.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 132.288689][ T9494] netlink: 'syz.3.957': attribute type 1 has an invalid length. [ 132.338510][ T6031] usb 7-1: device descriptor read/64, error -71 [ 132.433977][ T9516] netlink: 'syz.6.967': attribute type 4 has an invalid length. [ 132.445118][ T9516] netlink: 'syz.6.967': attribute type 4 has an invalid length. [ 132.504823][ T9526] loop6: detected capacity change from 0 to 134217728 [ 132.553670][ T9527] loop6: detected capacity change from 134217728 to 1 [ 132.561096][ T8583] Dev loop6: unable to read RDB block 1 [ 132.563761][ T8583] loop6: unable to read partition table [ 132.566835][ T8583] loop6: partition table beyond EOD, truncated [ 132.573643][ T9527] Dev loop6: unable to read RDB block 1 [ 132.577520][ T9527] loop6: unable to read partition table [ 132.580007][ T9527] loop6: partition table beyond EOD, truncated [ 132.582340][ T9527] loop_reread_partitions: partition scan of loop6 (‰u0v°Ï ) failed (rc=-5) [ 132.605686][ T5344] Dev loop6: unable to read RDB block 1 [ 132.608316][ T5344] loop6: unable to read partition table [ 132.610276][ T5344] loop6: partition table beyond EOD, truncated [ 132.616563][ T6031] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 132.639518][ T9532] netlink: 'syz.6.971': attribute type 29 has an invalid length. [ 132.648069][ T9532] vxlan0: entered promiscuous mode [ 132.656124][ T9532] vxlan0: entered allmulticast mode [ 132.660268][ T7629] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.664447][ T7629] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.668329][ T7629] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.672166][ T7629] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.766341][ T6031] usb 7-1: device descriptor read/64, error -71 [ 132.884607][ T6031] usb usb7-port1: attempt power cycle [ 133.258453][ T6031] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 133.280678][ T6031] usb 7-1: device descriptor read/8, error -71 [ 133.557829][ T6031] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 133.579766][ T6031] usb 7-1: device descriptor read/8, error -71 [ 133.684357][ T9564] netlink: 92 bytes leftover after parsing attributes in process `syz.3.980'. [ 133.687911][ T9564] netlink: 'syz.3.980': attribute type 5 has an invalid length. [ 133.708035][ T6031] usb usb7-port1: unable to enumerate USB device [ 133.958227][ T9566] netlink: 4 bytes leftover after parsing attributes in process `syz.6.981'. [ 134.227839][ T9577] syzkaller1: entered promiscuous mode [ 134.229805][ T9577] syzkaller1: entered allmulticast mode [ 134.243017][ T9579] affs: No valid root block on device nullb0 [ 134.272301][ T9579] team0 (unregistering): Port device team_slave_0 removed [ 134.279633][ T9579] team0 (unregistering): Port device team_slave_1 removed [ 134.730494][ T9594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=68 sclass=netlink_route_socket pid=9594 comm=syz.3.991 [ 135.227426][ T9601] netlink: 'syz.4.994': attribute type 21 has an invalid length. [ 135.230174][ T9601] netlink: 156 bytes leftover after parsing attributes in process `syz.4.994'. [ 135.323111][ T9603] syz.4.994 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 135.404349][ T9599] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 135.610273][ T9614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.998'. [ 135.611508][ T60] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 135.729600][ T9620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.999'. [ 135.771701][ T60] usb 9-1: Using ep0 maxpacket: 16 [ 135.776743][ T60] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 135.780236][ T60] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.784205][ T60] usb 9-1: Product: syz [ 135.786171][ T60] usb 9-1: Manufacturer: syz [ 135.788290][ T60] usb 9-1: SerialNumber: syz [ 135.795576][ T60] r8152-cfgselector 9-1: Unknown version 0x0000 [ 135.798496][ T60] r8152-cfgselector 9-1: config 0 descriptor?? [ 135.962307][ T9625] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1001'. [ 135.971690][ T9625] could not open pipe file descriptor [ 136.027448][ T60] r8152-cfgselector 9-1: Unknown version 0x0000 [ 136.031122][ T60] r8152-cfgselector 9-1: bad CDC descriptors [ 136.035769][ T60] r8152-cfgselector 9-1: USB disconnect, device number 5 [ 136.187602][ T9645] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 136.190301][ T9645] ALSA: mixer_oss: invalid index 1374389 [ 136.270951][ T9653] netlink: 'syz.6.1010': attribute type 3 has an invalid length. [ 136.275522][ T9653] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1010'. [ 136.720139][ T9694] binder: BINDER_SET_CONTEXT_MGR already set [ 136.724076][ T9694] binder: 9693:9694 ioctl 4018620d 200000000100 returned -16 [ 136.726710][ T9694] binder: BINDER_SET_CONTEXT_MGR already set [ 136.728677][ T9694] binder: 9693:9694 ioctl 4018620d 200000000100 returned -16 [ 136.732183][ T9694] binder: BINDER_SET_CONTEXT_MGR already set [ 136.734935][ T9694] binder: 9693:9694 ioctl 4018620d 200000000100 returned -16 [ 136.738283][ T9694] binder: BINDER_SET_CONTEXT_MGR already set [ 136.740429][ T9694] binder: 9693:9694 ioctl 4018620d 200000000100 returned -16 [ 136.742973][ T9694] binder: BINDER_SET_CONTEXT_MGR already set [ 136.745363][ T9694] binder: 9693:9694 ioctl 4018620d 200000000100 returned -16 [ 136.748826][ T9694] binder: BINDER_SET_CONTEXT_MGR already set [ 136.751449][ T9694] binder: 9693:9694 ioctl 4018620d 200000000100 returned -16 [ 136.754525][ T9694] binder: BINDER_SET_CONTEXT_MGR already set [ 136.757912][ T9694] binder: 9693:9694 ioctl 4018620d 200000000100 returned -16 [ 136.761239][ T9694] binder: BINDER_SET_CONTEXT_MGR already set [ 136.763917][ T9694] binder: 9693:9694 ioctl 4018620d 200000000100 returned -16 [ 136.768311][ T9694] binder: BINDER_SET_CONTEXT_MGR already set [ 136.771010][ T9694] binder: 9693:9694 ioctl 4018620d 200000000100 returned -16 [ 136.774282][ T9694] binder: BINDER_SET_CONTEXT_MGR already set [ 136.786489][ T9694] binder: 9693:9694 ioctl 4018620d 200000000100 returned -16 [ 136.791359][ T9694] binder: BINDER_SET_CONTEXT_MGR already set [ 136.793668][ T9694] binder: 9693:9694 ioctl 4018620d 200000000100 returned -16 [ 136.797568][ T9713] netlink: 'syz.6.1020': attribute type 4 has an invalid length. [ 136.799276][ T9694] binder: BINDER_SET_CONTEXT_MGR already set [ 136.808587][ T9694] binder: 9693:9694 ioctl 4018620d 200000000100 returned -16 [ 136.836164][ T60] hid-generic 0004:0006:0002.0007: item fetching failed at offset 1/2 [ 136.839050][ T60] hid-generic 0004:0006:0002.0007: probe with driver hid-generic failed with error -22 [ 136.891819][ T9721] netlink: 'syz.4.1023': attribute type 1 has an invalid length. [ 136.897261][ T9721] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1023'. [ 136.915873][ T9721] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 136.956098][ T9721] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 136.962547][ T9721] overlayfs: failed to look up (tracing) for ino (-66) [ 137.040415][ T9734] program syz.3.1028 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.140680][ T6001] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 137.222648][ T9751] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 137.227940][ T9752] netlink: 'syz.4.1031': attribute type 13 has an invalid length. [ 137.237541][ T9751] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1033'. [ 137.238587][ T9752] erspan0: refused to change device tx_queue_len [ 137.244450][ T9752] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 137.293003][ T40] kauditd_printk_skb: 61 callbacks suppressed [ 137.293019][ T40] audit: type=1400 audit(2000000013.454:74142): avc: denied { mounton } for pid=9754 comm="syz.4.1036" path="/231/bus" dev="tmpfs" ino=1237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 137.306320][ T9755] Mount JFS Failure: -22 [ 137.322726][ T6001] usb 11-1: Using ep0 maxpacket: 16 [ 137.334136][ T6001] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.341536][ T6001] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 137.346584][ T6001] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 137.353689][ T6001] usb 11-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 137.357851][ T40] audit: type=1400 audit(2000000013.520:74143): avc: denied { ioctl } for pid=9760 comm="syz.2.1037" path="socket:[31170]" dev="sockfs" ino=31170 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 137.360027][ T9756] SELinux: Context Ü is not valid (left unmapped). [ 137.368985][ T6001] usb 11-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 137.374313][ T6001] usb 11-1: Manufacturer: syz [ 137.378979][ T6001] usb 11-1: config 0 descriptor?? [ 137.387257][ T40] audit: type=1400 audit(2000000013.538:74144): avc: denied { mount } for pid=9762 comm="syz.3.1038" name="/" dev="ramfs" ino=33890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 137.430839][ T40] audit: type=1400 audit(2000000013.585:74145): avc: denied { getopt } for pid=9762 comm="syz.3.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 137.616711][ T6246] usb 11-1: USB disconnect, device number 3 [ 137.771786][ T40] audit: type=1400 audit(2000000013.903:74146): avc: denied { create } for pid=9781 comm="syz.6.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 137.793008][ T40] audit: type=1400 audit(2000000013.903:74147): avc: denied { listen } for pid=9781 comm="syz.6.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 137.800414][ T40] audit: type=1400 audit(2000000013.903:74148): avc: denied { accept } for pid=9781 comm="syz.6.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 137.828887][ T40] audit: type=1400 audit(2000000013.959:74149): avc: denied { map } for pid=9784 comm="syz.2.1044" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 137.838390][ T40] audit: type=1400 audit(2000000013.959:74150): avc: denied { execute } for pid=9784 comm="syz.2.1044" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 137.888051][ T9790] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1045'. [ 137.893927][ T40] audit: type=1400 audit(2000000014.015:74151): avc: denied { bind } for pid=9789 comm="syz.2.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 137.894787][ T9790] netlink: 'syz.2.1045': attribute type 10 has an invalid length. [ 137.905346][ T9790] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 137.908704][ T9790] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 137.912939][ T9790] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 138.094581][ T9810] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1052'. [ 138.098834][ T9810] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1052'. [ 138.156160][ T9814] xt_CT: No such helper "snmp_trap" [ 138.215642][ T9819] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 138.223918][ T9819] binder_alloc: 9817: binder_alloc_buf, no vma [ 138.234679][ T9823] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input16 [ 138.496787][ T9834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.500327][ T9834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.504489][ T9834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.507744][ T9834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.597153][ T6001] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 138.767674][ T6001] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 138.771311][ T6001] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 138.775145][ T6001] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 138.778509][ T6001] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.784460][ T9831] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 138.791604][ T6001] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 138.880594][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1061'. [ 138.947866][ T9851] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1062'. [ 139.020625][ T6001] usb 11-1: USB disconnect, device number 4 [ 139.232168][ T9831] IPv6: NLM_F_CREATE should be specified when creating new route [ 139.492392][ T9866] hpfs: Bad magic ... probably not HPFS [ 139.497009][ T9866] hpfs: Bad magic ... probably not HPFS [ 140.110423][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1071'. [ 140.328114][ T850] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 140.357256][ T9886] ref_ctr_offset mismatch. inode: 0x604 offset: 0x7 ref_ctr_offset(old): 0x200000000980 ref_ctr_offset(new): 0x24 [ 140.415510][ T9887] xt_NFQUEUE: number of total queues is 0 [ 140.512362][ T850] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.516774][ T850] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.522509][ T850] usb 11-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 140.526135][ T850] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.532086][ T850] usb 11-1: config 0 descriptor?? [ 140.753151][ T850] usbhid 11-1:0.0: can't add hid device: -71 [ 140.757396][ T850] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 140.761244][ T850] usb 11-1: USB disconnect, device number 5 [ 141.165800][ T9930] loop4: detected capacity change from 0 to 524288000 [ 141.323569][ T9939] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1088'. [ 141.461529][ T6246] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 141.621879][ T6246] usb 7-1: Using ep0 maxpacket: 16 [ 141.635944][ T6246] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 141.638918][ T6246] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.642130][ T6246] usb 7-1: Product: syz [ 141.644523][ T6246] usb 7-1: Manufacturer: syz [ 141.647372][ T6246] usb 7-1: SerialNumber: syz [ 141.667426][ T6246] r8152-cfgselector 7-1: Unknown version 0x0000 [ 141.670354][ T6246] r8152-cfgselector 7-1: config 0 descriptor?? [ 141.706380][ T9968] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1096'. [ 141.905196][ T9982] overlay: Unknown parameter 'measure' [ 141.922851][ T9984] random: crng reseeded on system resumption [ 142.441215][ T6246] r8152-cfgselector 7-1: Unknown version 0x0000 [ 142.444057][ T6246] r8152-cfgselector 7-1: bad CDC descriptors [ 142.449176][ T6246] r8152-cfgselector 7-1: USB disconnect, device number 12 [ 142.597093][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.819754][ T6246] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 142.981641][T10006] fuse: root generation should be zero [ 142.992306][ T6246] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 142.995685][ T6246] usb 7-1: config 0 has no interface number 0 [ 142.998123][ T6246] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 143.003915][ T6246] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 143.016727][ T6246] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 143.022331][ T6246] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 143.028056][ T6246] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 143.032717][ T6246] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 143.039006][ T6246] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 143.042888][ T6246] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.077076][ T6246] usb 7-1: config 0 descriptor?? [ 143.080092][T10002] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 143.083319][T10002] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 143.092944][ T6246] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 143.232519][T10030] __nla_validate_parse: 1 callbacks suppressed [ 143.232531][T10030] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1115'. [ 143.237912][T10030] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1115'. [ 143.341452][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 143.341470][ T40] audit: type=1400 audit(2000000019.111:74187): avc: denied { write } for pid=10032 comm="syz.4.1116" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 143.353785][ T40] audit: type=1400 audit(2000000019.111:74188): avc: denied { open } for pid=10032 comm="syz.4.1116" path="/252/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 143.365182][ T40] audit: type=1400 audit(2000000019.120:74189): avc: denied { ioctl } for pid=10032 comm="syz.4.1116" path="/252/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 143.378497][ T850] usb 7-1: USB disconnect, device number 13 [ 143.385619][ T850] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 143.442587][T10033] cdrom: dropping to single frame dma [ 143.548955][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1118'. [ 143.596159][ T40] audit: type=1400 audit(2000000019.345:74190): avc: denied { getopt } for pid=10042 comm="syz.4.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 143.682542][ T40] audit: type=1400 audit(2000000019.429:74191): avc: denied { setattr } for pid=10046 comm="syz.4.1121" name="/" dev="9p" ino=71827759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.790434][T10052] loop6: detected capacity change from 0 to 7 [ 143.796263][T10054] sctp: [Deprecated]: syz.4.1122 (pid 10054) Use of struct sctp_assoc_value in delayed_ack socket option. [ 143.796263][T10054] Use struct sctp_sack_info instead [ 143.797313][T10052] Dev loop6: unable to read RDB block 7 [ 143.804971][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1122'. [ 143.805655][T10052] loop6: unable to read partition table [ 143.809387][T10055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1122'. [ 143.811180][T10052] loop6: partition table beyond EOD, truncated [ 143.817211][T10052] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 143.845161][ T40] audit: type=1400 audit(2000000019.578:74192): avc: denied { create } for pid=10056 comm="syz.4.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 143.855615][ T40] audit: type=1400 audit(2000000019.588:74193): avc: denied { write } for pid=10056 comm="syz.4.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 143.936688][ T40] audit: type=1400 audit(2000000019.663:74194): avc: denied { view } for pid=10067 comm="syz.6.1127" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 143.998089][ T40] audit: type=1400 audit(2000000019.728:74195): avc: denied { listen } for pid=10077 comm="syz.2.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 144.057463][T10087] fuse: Invalid rootmode [ 144.059594][ T40] audit: type=1400 audit(2000000019.775:74196): avc: denied { create } for pid=10086 comm="syz.6.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 144.119585][T10091] CIFS mount error: No usable UNC path provided in device string! [ 144.119585][T10091] [ 144.123687][T10091] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 144.183077][T10099] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1135'. [ 144.250870][T10107] netlink: 'syz.6.1139': attribute type 3 has an invalid length. [ 144.278626][T10113] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1134'. [ 144.279461][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1140'. [ 144.298213][T10111] openvswitch: netlink: IP tunnel dst address not specified [ 144.542663][T10137] program syz.4.1147 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.842895][T10153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.901750][T10159] input: syz0 as /devices/virtual/input/input18 [ 144.975678][T10168] netlink: 212328 bytes leftover after parsing attributes in process `syz.6.1158'. [ 144.979574][T10168] netlink: ct family unspecified [ 145.009829][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1159'. [ 145.012958][T10170] netlink: 'syz.3.1159': attribute type 18 has an invalid length. [ 145.135424][T10178] overlayfs: unescaped trailing colons in lowerdir mount option. [ 145.143469][T10178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.384391][T10197] Cannot find del_set index 2 as target [ 145.388436][T10197] program syz.2.1166 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.392437][T10197] ata1.00: invalid command format 10 [ 145.972214][T10256] netlink: 'syz.4.1182': attribute type 12 has an invalid length. [ 145.975027][T10256] netlink: 'syz.4.1182': attribute type 29 has an invalid length. [ 145.983797][T10256] netlink: 'syz.4.1182': attribute type 2 has an invalid length. [ 145.987187][T10256] netlink: 'syz.4.1182': attribute type 3 has an invalid length. [ 145.990614][T10257] netlink: 'syz.4.1182': attribute type 12 has an invalid length. [ 145.993725][T10257] netlink: 'syz.4.1182': attribute type 29 has an invalid length. [ 146.002053][T10257] netlink: 'syz.4.1182': attribute type 2 has an invalid length. [ 146.004816][T10257] netlink: 'syz.4.1182': attribute type 3 has an invalid length. [ 146.015137][T10259] vcan1: entered allmulticast mode [ 146.033615][T10261] 9pnet_fd: p9_fd_create_tcp (10261): problem connecting socket to 127.0.0.1 [ 146.131654][T10267] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 146.134774][T10271] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in; [ 146.134774][T10271] program syz.4.1188 not setting count and/or reply_len properly [ 146.285155][ T6246] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 146.424646][ T6246] usb 11-1: device descriptor read/64, error -71 [ 146.702142][ T6246] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 146.823421][T10307] fuse: Bad value for 'rootmode' [ 146.843483][T10307] netlink: zone id is out of range [ 146.845805][T10307] netlink: zone id is out of range [ 146.848155][T10307] netlink: zone id is out of range [ 146.850562][T10307] netlink: zone id is out of range [ 146.853155][T10307] netlink: zone id is out of range [ 146.855791][T10307] netlink: zone id is out of range [ 146.857904][T10307] netlink: zone id is out of range [ 146.869025][ T6246] usb 11-1: device descriptor read/64, error -71 [ 146.869779][T10309] xt_hashlimit: max too large, truncated to 1048576 [ 146.880057][T10309] bridge9: entered promiscuous mode [ 146.881888][T10309] bridge9: entered allmulticast mode [ 146.980732][ T6246] usb usb11-port1: attempt power cycle [ 147.065577][T10327] smc: adding net device bond0 with user defined pnetid SYZ2 [ 147.078635][T10327] bond0: (slave geneve2): making interface the new active one [ 147.082935][T10327] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 147.086799][ T7649] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 147.089912][ T7649] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 147.092819][ T7649] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 147.095721][ T7649] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 147.109246][T10331] ------------[ cut here ]------------ [ 147.111942][T10331] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1b21/0x2490, CPU#1: syz.2.1206/10331 [ 147.118582][T10331] Modules linked in: [ 147.121123][T10331] CPU: 1 UID: 0 PID: 10331 Comm: syz.2.1206 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.125849][T10331] Tainted: [L]=SOFTLOCKUP [ 147.127721][T10331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 147.133969][T10331] RIP: 0010:__kvm_gpc_refresh+0x1b21/0x2490 [ 147.136525][T10331] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 67 09 00 00 48 8b 04 24 31 db 48 8b a8 10 01 00 00 e9 f2 ef ff ff e8 60 cd 85 00 90 <0f> 0b 90 e9 92 f7 ff ff e8 52 cd 85 00 48 85 db 0f 84 b4 04 00 00 [ 147.145569][T10331] RSP: 0018:ffffc9000d817268 EFLAGS: 00010283 [ 147.149994][T10331] RAX: 0000000000000710 RBX: ffffffffffffffff RCX: ffffc9000cb61000 [ 147.153711][T10331] RDX: 0000000000080000 RSI: ffffffff81391b60 RDI: 0000000000000000 [ 147.156975][T10331] RBP: ffffffffffffff01 R08: 0000000000000000 R09: 0000000000000001 [ 147.160268][T10331] R10: 0000000000000001 R11: ffff88803329d4b0 R12: ffff888000000000 [ 147.163778][T10331] R13: ffff888000000001 R14: ffff888000000000 R15: ffffc9000d817480 [ 147.166453][T10331] FS: 00007f4896a716c0(0000) GS:ffff8880d69f5000(0000) knlGS:0000000000000000 [ 147.170066][T10331] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.172232][T10331] CR2: 00007fac60db8c98 CR3: 000000002527a000 CR4: 0000000000352ef0 [ 147.174877][T10331] Call Trace: [ 147.175984][T10331] [ 147.176933][T10331] ? kvm_gpc_refresh+0x25/0x190 [ 147.178904][T10331] ? __pfx___mutex_lock+0x10/0x10 [ 147.180573][T10331] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 147.182318][T10331] kvm_gpc_refresh+0xec/0x190 [ 147.183972][T10331] kvm_xen_set_evtchn.part.0+0x19c/0x270 [ 147.185794][T10331] ? kvm_xen_set_evtchn.part.0+0x187/0x270 [ 147.188207][T10331] kvm_xen_hvm_evtchn_send+0x22f/0x290 [ 147.190494][T10331] ? __pfx_kvm_xen_hvm_evtchn_send+0x10/0x10 [ 147.194060][T10331] kvm_arch_vm_ioctl+0xfac/0x18b0 [ 147.196354][T10331] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 147.198793][T10331] ? __lock_acquire+0x436/0x2890 [ 147.200577][T10331] ? __lock_acquire+0x436/0x2890 [ 147.202191][T10331] ? __lock_acquire+0x436/0x2890 [ 147.203860][T10331] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 147.204815][ T5945] Bluetooth: hci3: command 0x0405 tx timeout [ 147.204948][ T6001] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 147.204985][ T6001] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 147.205936][T10331] ? is_bpf_text_address+0x94/0x1a0 [ 147.215129][T10331] ? kernel_text_address+0x8d/0x100 [ 147.217237][T10331] ? __kernel_text_address+0xd/0x40 [ 147.219160][T10331] ? unwind_get_return_address+0x59/0xa0 [ 147.220986][T10331] ? arch_stack_walk+0xa6/0x100 [ 147.222551][T10331] ? stack_trace_save+0x8e/0xc0 [ 147.224604][T10331] ? __pfx_stack_trace_save+0x10/0x10 [ 147.226439][T10331] ? stack_depot_save_flags+0x29/0x9b0 [ 147.228134][T10331] ? __lock_acquire+0x436/0x2890 [ 147.229642][T10331] ? kasan_save_stack+0x42/0x60 [ 147.231313][T10331] ? kasan_save_stack+0x33/0x60 [ 147.233255][T10331] ? kasan_save_track+0x14/0x30 [ 147.234866][T10331] ? kasan_save_free_info+0x3b/0x60 [ 147.236578][T10331] ? __kasan_slab_free+0x5f/0x80 [ 147.238216][T10331] ? kfree+0x2f8/0x6e0 [ 147.239545][T10331] ? tomoyo_path_number_perm+0x470/0x580 [ 147.241996][T10331] ? security_file_ioctl+0x9b/0x240 [ 147.244108][T10331] ? __x64_sys_ioctl+0xb7/0x210 [ 147.245713][T10331] ? do_syscall_64+0xcd/0xf80 [ 147.247373][T10331] kvm_vm_ioctl+0x1b03/0x4090 [ 147.249044][T10331] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 147.250805][T10331] ? kasan_quarantine_put+0x10a/0x240 [ 147.252531][T10331] ? lockdep_hardirqs_on+0x7c/0x110 [ 147.254337][T10331] ? find_held_lock+0x2b/0x80 [ 147.256371][T10331] ? tomoyo_path_number_perm+0x295/0x580 [ 147.258220][T10331] ? tomoyo_path_number_perm+0x18d/0x580 [ 147.260073][T10331] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 147.262025][T10331] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 147.263982][T10331] ? do_vfs_ioctl+0x128/0x14f0 [ 147.265580][T10331] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 147.267300][T10331] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 147.269589][T10331] ? hook_file_ioctl_common+0x144/0x410 [ 147.271887][T10331] ? selinux_file_ioctl+0x180/0x270 [ 147.273621][T10331] ? selinux_file_ioctl+0xb4/0x270 [ 147.275311][T10331] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 147.277338][T10331] __x64_sys_ioctl+0x18e/0x210 [ 147.279266][T10331] do_syscall_64+0xcd/0xf80 [ 147.280858][T10331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.282815][T10331] RIP: 0033:0x7f4895b8f7c9 [ 147.284337][T10331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.291253][T10331] RSP: 002b:00007f4896a71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.293970][T10331] RAX: ffffffffffffffda RBX: 00007f4895de6090 RCX: 00007f4895b8f7c9 [ 147.296525][T10331] RDX: 0000200000000980 RSI: 00000000400caed0 RDI: 0000000000000004 [ 147.299083][T10331] RBP: 00007f4895c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 147.301799][T10331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.305004][T10331] R13: 00007f4895de6128 R14: 00007f4895de6090 R15: 00007ffcc2416038 [ 147.307663][T10331] [ 147.308699][T10331] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 147.311040][T10331] CPU: 1 UID: 0 PID: 10331 Comm: syz.2.1206 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.314739][T10331] Tainted: [L]=SOFTLOCKUP [ 147.316263][T10331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 147.320430][T10331] Call Trace: [ 147.321675][T10331] [ 147.322856][T10331] dump_stack_lvl+0x3d/0x1f0 [ 147.324472][T10331] vpanic+0x640/0x6f0 [ 147.326015][T10331] ? __kvm_gpc_refresh+0x1b21/0x2490 [ 147.327942][T10331] panic+0xca/0xd0 [ 147.329225][T10331] ? __pfx_panic+0x10/0x10 [ 147.330827][T10331] check_panic_on_warn+0xab/0xb0 [ 147.332496][T10331] __warn+0x108/0x3c0 [ 147.333936][T10331] __report_bug+0x2a0/0x520 [ 147.335663][T10331] ? __kvm_gpc_refresh+0x1b21/0x2490 [ 147.337621][T10331] ? __pfx___report_bug+0x10/0x10 [ 147.339402][T10331] ? lockdep_unlock+0x64/0xd0 [ 147.341072][T10331] ? __lock_acquire+0x12c2/0x2890 [ 147.342989][T10331] ? __kvm_gpc_refresh+0x1b21/0x2490 [ 147.345288][T10331] report_bug+0xb2/0x220 [ 147.347082][T10331] ? __kvm_gpc_refresh+0x1b21/0x2490 [ 147.348926][T10331] handle_bug+0x127/0x260 [ 147.350537][T10331] exc_invalid_op+0x17/0x50 [ 147.352107][T10331] asm_exc_invalid_op+0x1a/0x20 [ 147.353782][T10331] RIP: 0010:__kvm_gpc_refresh+0x1b21/0x2490 [ 147.355847][T10331] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 67 09 00 00 48 8b 04 24 31 db 48 8b a8 10 01 00 00 e9 f2 ef ff ff e8 60 cd 85 00 90 <0f> 0b 90 e9 92 f7 ff ff e8 52 cd 85 00 48 85 db 0f 84 b4 04 00 00 [ 147.362639][T10331] RSP: 0018:ffffc9000d817268 EFLAGS: 00010283 [ 147.365226][T10331] RAX: 0000000000000710 RBX: ffffffffffffffff RCX: ffffc9000cb61000 [ 147.368671][T10331] RDX: 0000000000080000 RSI: ffffffff81391b60 RDI: 0000000000000000 [ 147.372080][T10331] RBP: ffffffffffffff01 R08: 0000000000000000 R09: 0000000000000001 [ 147.375326][T10331] R10: 0000000000000001 R11: ffff88803329d4b0 R12: ffff888000000000 [ 147.378613][T10331] R13: ffff888000000001 R14: ffff888000000000 R15: ffffc9000d817480 [ 147.381550][T10331] ? __kvm_gpc_refresh+0x1b20/0x2490 [ 147.383499][T10331] ? __kvm_gpc_refresh+0x1b20/0x2490 [ 147.385343][T10331] ? kvm_gpc_refresh+0x25/0x190 [ 147.387337][T10331] ? __pfx___mutex_lock+0x10/0x10 [ 147.389070][T10331] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 147.391062][T10331] kvm_gpc_refresh+0xec/0x190 [ 147.392737][T10331] kvm_xen_set_evtchn.part.0+0x19c/0x270 [ 147.394672][T10331] ? kvm_xen_set_evtchn.part.0+0x187/0x270 [ 147.396897][T10331] kvm_xen_hvm_evtchn_send+0x22f/0x290 [ 147.399182][T10331] ? __pfx_kvm_xen_hvm_evtchn_send+0x10/0x10 [ 147.401237][T10331] kvm_arch_vm_ioctl+0xfac/0x18b0 [ 147.402949][T10331] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 147.404751][T10331] ? __lock_acquire+0x436/0x2890 [ 147.406421][T10331] ? __lock_acquire+0x436/0x2890 [ 147.408045][T10331] ? __lock_acquire+0x436/0x2890 [ 147.409684][T10331] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 147.411719][T10331] ? is_bpf_text_address+0x94/0x1a0 [ 147.413474][T10331] ? kernel_text_address+0x8d/0x100 [ 147.415194][T10331] ? __kernel_text_address+0xd/0x40 [ 147.417091][T10331] ? unwind_get_return_address+0x59/0xa0 [ 147.419357][T10331] ? arch_stack_walk+0xa6/0x100 [ 147.421445][T10331] ? stack_trace_save+0x8e/0xc0 [ 147.423577][T10331] ? __pfx_stack_trace_save+0x10/0x10 [ 147.425867][T10331] ? stack_depot_save_flags+0x29/0x9b0 [ 147.428124][T10331] ? __lock_acquire+0x436/0x2890 [ 147.430182][T10331] ? kasan_save_stack+0x42/0x60 [ 147.432311][T10331] ? kasan_save_stack+0x33/0x60 [ 147.434170][T10331] ? kasan_save_track+0x14/0x30 [ 147.436127][T10331] ? kasan_save_free_info+0x3b/0x60 [ 147.437821][T10331] ? __kasan_slab_free+0x5f/0x80 [ 147.439530][T10331] ? kfree+0x2f8/0x6e0 [ 147.441263][T10331] ? tomoyo_path_number_perm+0x470/0x580 [ 147.443526][T10331] ? security_file_ioctl+0x9b/0x240 [ 147.445767][T10331] ? __x64_sys_ioctl+0xb7/0x210 [ 147.447932][T10331] ? do_syscall_64+0xcd/0xf80 [ 147.449919][T10331] kvm_vm_ioctl+0x1b03/0x4090 [ 147.451974][T10331] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 147.454125][T10331] ? kasan_quarantine_put+0x10a/0x240 [ 147.456373][T10331] ? lockdep_hardirqs_on+0x7c/0x110 [ 147.458489][T10331] ? find_held_lock+0x2b/0x80 [ 147.460117][T10331] ? tomoyo_path_number_perm+0x295/0x580 [ 147.462462][T10331] ? tomoyo_path_number_perm+0x18d/0x580 [ 147.465024][T10331] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 147.467655][T10331] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 147.470174][T10331] ? do_vfs_ioctl+0x128/0x14f0 [ 147.472045][T10331] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 147.474153][T10331] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 147.476922][T10331] ? hook_file_ioctl_common+0x144/0x410 [ 147.479287][T10331] ? selinux_file_ioctl+0x180/0x270 [ 147.481372][T10331] ? selinux_file_ioctl+0xb4/0x270 [ 147.483256][T10331] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 147.485057][T10331] __x64_sys_ioctl+0x18e/0x210 [ 147.486935][T10331] do_syscall_64+0xcd/0xf80 [ 147.488832][T10331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.491237][T10331] RIP: 0033:0x7f4895b8f7c9 [ 147.493020][T10331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.500752][T10331] RSP: 002b:00007f4896a71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.503803][T10331] RAX: ffffffffffffffda RBX: 00007f4895de6090 RCX: 00007f4895b8f7c9 [ 147.506845][T10331] RDX: 0000200000000980 RSI: 00000000400caed0 RDI: 0000000000000004 [ 147.509981][T10331] RBP: 00007f4895c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 147.513176][T10331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.515947][T10331] R13: 00007f4895de6128 R14: 00007f4895de6090 R15: 00007ffcc2416038 [ 147.519258][T10331] [ 147.521477][T10331] Kernel Offset: disabled [ 147.523298][T10331] Rebooting in 86400 seconds..