last executing test programs: 2m6.45672606s ago: executing program 32 (id=68): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r0, r1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{0x1000, 0x7, 0x5, 0x8001}, 0xe7526b800a4e7522, 0x7, &(0x7f0000000080)={{0x1ff, 0x0, 0x9, 0x10001}, &(0x7f0000000040)={{0x80000001, 0x2, 0x4, 0x6}}}, 0xffff, &(0x7f00000000c0)="74fabb9a9db25b2b6a679f4590e3a9018cd7b23c347b090cb0ac1dfdf7237052b89822725e21d18e5f6f90504a1c1bba4dcba6a1077c3346e5c2a18b3000942ce313e473c92e85c4325de7d2e73cfcd1f131c26c86f2dcf9e1cf19b3f8ffcdaea8c2c063052977ebb93c36c8aae43d222717bfa5e398dbf0400a0d04e8b00d3dc6ebc891ee1b36abaeb7627193a27c0ae15680e9cf80d131599d1e883992a70bba8444c0c77059687bf3525d2524114503ebd2231188b62aac107c73", 0x9}}) r2 = socket(0x2c, 0x2, 0x3) r3 = mq_open(&(0x7f0000000280)='\x00', 0x40, 0x6, &(0x7f00000002c0)={0x3, 0x5, 0x0, 0x8c69}) mq_timedsend(r3, &(0x7f0000000300)="60d5e00c8e73c9f8dc4ef703a3291bfa3133c97eaba329467138ab0479d610a2e9c6682ddda04b35e64cfdffb5e17dbb9d084bd004934a1dd8adb501e8c83875395f7499974b853f8b360730e8f1", 0x4e, 0x8000, &(0x7f0000000380)={0x0, 0x989680}) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f00000003c0)={@multicast2, @loopback}) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x17) fsetxattr$security_ima(r0, &(0x7f0000000400), &(0x7f0000000440)=@sha1={0x1, "f1ae5ac0a4c60440ea71fb3e36449db9b391ea34"}, 0x15, 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000480)={0x1, [0x0]}, &(0x7f00000004c0)=0x8) syz_open_dev$vim2m(&(0x7f0000000500), 0x2, 0x2) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000580), r4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r4, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '^'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_FIRMWARE_NAME={0xd, 0x14, ',]##]\'\'^+'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0xf, 0x14, '/dev/vim2m\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044010}, 0x4010) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000700), 0x4) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000740)={{0xf000, 0x8000000, 0xe, 0x9, 0x9, 0x3, 0x1a, 0x0, 0x1, 0xff, 0x1, 0x2e}, {0x1000, 0xeeef0000, 0x10, 0x4, 0x6, 0x3d, 0xff, 0x5, 0x5, 0x3c, 0xd8, 0x3}, {0x4, 0x0, 0x9, 0x4, 0x5d, 0x7f, 0x1, 0x15, 0x40, 0x1, 0x7, 0xfe}, {0x1000, 0x8080000, 0x0, 0x3, 0xf6, 0x80, 0x2, 0x8, 0x2, 0xf8, 0xa, 0x2}, {0xf000, 0x8000000, 0x9, 0x90, 0xc9, 0x9, 0x40, 0xfd, 0x1, 0x81, 0x6, 0x5}, {0x6000, 0x0, 0x10, 0x1, 0x1, 0x5, 0x7, 0x2, 0x3, 0x5, 0x2, 0x9}, {0xffff1000, 0xd000, 0xc, 0x5, 0x6a, 0x8, 0x60, 0xe4, 0x7, 0x15, 0x1, 0x3f}, {0xdddd0000, 0x500a, 0x3, 0x4, 0xf8, 0xf6, 0xdf, 0x18, 0x9, 0xff, 0x2, 0xf4}, {0x8000004, 0x73}, {0x2000, 0x7}, 0x20000000, 0x0, 0x5000, 0x2010, 0x5, 0x4501, 0x0, [0x7fffffff, 0x0, 0x10001, 0x1]}) ioctl$AUTOFS_IOC_PROTOVER(r7, 0x80049363, &(0x7f0000000880)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000008c0)='btrfs_set_extent_bit\x00', r7, 0x0, 0x4}, 0x18) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x815042}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x4c, r8, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_ACTIVATE_TARGET(r10, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, r5, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_PROTOCOLS={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x64000840) r11 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000c40)=@o_path={&(0x7f0000000c00)='./file0\x00', 0x0, 0x400c, r7}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000d80)={@ifindex, 0x16, 0x0, 0x3, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000cc0)=[0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r13 = openat$full(0xffffffffffffff9c, &(0x7f0000000e00), 0x10000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000dc0)={@fallback=r3, r11, 0x23, 0x10, 0x0, @void, @value=r13, @void, @void, r12}, 0x20) 1m44.972488307s ago: executing program 33 (id=393): io_uring_setup(0x664c, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x8000002}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='personality\x00') r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xf0f017, 0x2}) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0), 0x129202, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000100)='./file0\x00', r0}, 0x18) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x2000) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000002440)={'ip6tnl0\x00', r4, 0x29, 0x6, 0x5, 0xe2, 0x56, @remote, @dev={0xfe, 0x80, '\x00', 0x13}, 0x700, 0x700, 0x6, 0x1000}}) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x4000) pselect6(0x40, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x40, 0x8, 0x200, 0x1}, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2, 0x0, 0x0, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x35}}}}}) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f00000000c0)={0x0, 0x0, "08b835e249d6b6ad54f0527b7db2ae10"}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0xc0701, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r9) sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="0000000029bee535", @ANYRES16=r10, @ANYBLOB="01000000000000000000020000000800010003000000"], 0x1c}}, 0x4000880) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1m40.930720381s ago: executing program 0 (id=446): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_open_dev$vivid(&(0x7f0000000100), 0x1, 0x2) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fcdbdf253700000008000300", @ANYRES32=r4, @ANYBLOB="080026006c090000080057008000000024f0a232f0673924b9eb2da550e4583f05688f28a8a9b71011a87c396064a6231de900d6e2fdd16307f404ebdf4278a443b1965cab"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r2, 0x1, 0x0, 0x0, {{0x38}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}]}, 0x41}}, 0x0) mkdirat(r0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x8) r9 = open(&(0x7f00000003c0)='.\x00', 0x0, 0x0) renameat2(r8, &(0x7f0000000000)='./file0\x00', r9, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x2) 1m40.882570726s ago: executing program 0 (id=447): r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f00000008c0)={&(0x7f0000000140)=@in, 0x80, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/107, 0x6b}, {&(0x7f0000000080)=""/36, 0x24}, {&(0x7f0000000280)=""/65, 0x41}, {&(0x7f0000000300)=""/204, 0xcc}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/61, 0x3d}, {&(0x7f00000005c0)=""/215, 0xd7}, {&(0x7f00000006c0)=""/135, 0x87}, {&(0x7f0000000500)=""/5, 0x5}, {&(0x7f0000000780)=""/89, 0x59}], 0xa, &(0x7f0000000540)=""/31, 0x1f}, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) keyctl$set_timeout(0xf, r3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r4, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r4, 0x407, 0x7000000) fcntl$setpipe(r4, 0x407, 0x100000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x5}}]}, 0x38}}, 0x0) 1m40.822403992s ago: executing program 0 (id=449): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) (async, rerun: 64) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000180)={0xff, {0x24, 0x7, 0xa, 0xedde, 0x1}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 1m40.821893853s ago: executing program 0 (id=450): futex(&(0x7f0000000180), 0x6, 0x4, 0x0, &(0x7f0000004000)=0x10, 0x24000002) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x48802, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000580)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @buffer={0x29, 0x87, &(0x7f0000000d00)=""/135}, &(0x7f00000025c0)="8536b60bfad6", 0x0, 0x8, 0x10000, 0x1, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000600)={[{@mode={'mode', 0x3d, 0x1}}]}) r1 = socket$kcm(0x10, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x21, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB="0400000000ed000000000000e6c11380256c4f89dfaa04f5d0c4e782f1c7abaa43c4e1e01d8dedbc77ada25a6da7d8cb64aec8d1", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000c000000000000000000014000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="7ae0207a7ac9b8b32338381df20f64fbda342abdb53720016778e8a02c222c205cf1235be356d880aad49ad1994747cfe72cd91de9c3dd2e0d7fc9877903000000e2e4c5e38014f25c538ae3bf7438", @ANYRES64=0x0], 0x10) r8 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r6, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r8}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r4, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r8}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r3}, 0x20) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newlink={0xd8, 0x10, 0x20, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x100}, [@IFLA_PROP_LIST={0xb8, 0x34, 0x0, 0x1, [{0x14, 0x35, 'geneve1\x00'}, {0x14, 0x35, 'bond_slave_1\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'netpci0\x00'}, {0x14, 0x35, 'vlan1\x00'}, {0x14, 0x35, 'syz_tun\x00'}, {0x14, 0x35, 'vlan1\x00'}, {0x14, 0x35, 'pim6reg1\x00'}, {0x14, 0x35, 'veth1_to_hsr\x00'}]}]}, 0xd8}}, 0x0) fcntl$getflags(r1, 0x401) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x34}, 0x0, 0x2, [@rand_addr=0x64010100, @broadcast]}, 0x18) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x0, 0xffffff80, 0x178, 0x3b8, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0xffffffffffffff31, &(0x7f0000000000), 0x1, 0x0, 0x0, 0x2663}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = dup(r10) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000000206050000000000fffff0000000000005000100060000000900020073797a32000000000500040000000000140007800800124000080000080008400000000014000300686173683a69702c706f72742c6970000500050002"], 0x60}}, 0x0) 1m40.760615718s ago: executing program 0 (id=452): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x0, @multicast1, 0x15, 0x0, 'wrr\x00', 0x0, 0x8, 0x33}, 0x2c) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m40.56280644s ago: executing program 0 (id=454): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x8014) recvmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000014c0)=""/4097, 0x1001}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90424fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0x0, 0x720d, 0x148, 0xd0, 0x148, 0x1b0, 0x240, 0x240, 0x1b0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x4, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x0, 'veth1_macvtap\x00', 'pim6reg1\x00', {}, {}, 0x1d, 0x3, 0x49}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x0, 0x1, 0x3], 0x2}, {0xffffffffffffffff, [0x1, 0xb2cc575b459b5b33, 0x3, 0x2, 0x2]}}}}, {{@ip={@broadcast, @broadcast, 0xffffffff, 0x0, 'wlan0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x3, 0x50}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010900, 'pim6reg0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) syz_usbip_server_init(0x4) syz_usbip_server_init(0x4) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) 1m40.562505208s ago: executing program 34 (id=454): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x8014) recvmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000014c0)=""/4097, 0x1001}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90424fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0x0, 0x720d, 0x148, 0xd0, 0x148, 0x1b0, 0x240, 0x240, 0x1b0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x4, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x0, 'veth1_macvtap\x00', 'pim6reg1\x00', {}, {}, 0x1d, 0x3, 0x49}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x0, 0x1, 0x3], 0x2}, {0xffffffffffffffff, [0x1, 0xb2cc575b459b5b33, 0x3, 0x2, 0x2]}}}}, {{@ip={@broadcast, @broadcast, 0xffffffff, 0x0, 'wlan0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x3, 0x50}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010900, 'pim6reg0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) syz_usbip_server_init(0x4) syz_usbip_server_init(0x4) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) 1m39.601981685s ago: executing program 4 (id=465): r0 = syz_open_dev$sg(&(0x7f0000001480), 0xc09, 0x400) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f00000014c0)) (async) r1 = msgget$private(0x0, 0x200) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000080)=""/42) (async) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000000)=""/82) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default'], 0x2a, 0x0) (async) read(r0, &(0x7f00000001c0)=""/4096, 0x1000) (async) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 1m38.732784857s ago: executing program 4 (id=470): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000100000000000000001000084060000000000000001"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000380)={0x0, "2b71c4beada006e7ddcf8467aa022f54"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000001380)={r1, 0x3, 0x1, [0x3, 0x1d35, 0x18b7, 0x4, 0x6], [0x97ad, 0x9, 0x9e, 0x7, 0x5, 0x7, 0x9b, 0x5, 0x1, 0x2, 0x2eee9b48, 0x4, 0x100, 0x196, 0x1, 0x0, 0x4, 0xe3e7, 0x9, 0x9, 0xc9, 0x0, 0x45bb, 0xffffffffffffff81, 0x0, 0x4, 0x7, 0x8, 0x26f6, 0x401, 0x801, 0x1ff, 0x82, 0x9, 0xfffffffffffffe00, 0x40, 0x800, 0x3, 0x7, 0xe1, 0x1, 0x1ff, 0xfffffffffffffffd, 0x4, 0x8000000000000000, 0x6e4cdf40, 0x7f, 0x1, 0x6, 0xffffffff80000001, 0x3, 0x4, 0x1000, 0x3, 0x7ff, 0xfffffffffffffffe, 0x7, 0x56, 0x2, 0x11c7, 0x3, 0xfe6, 0x1fb, 0x100000000, 0x6, 0xc1a5, 0x0, 0x5, 0x0, 0x4, 0x7, 0x80000000, 0x7f, 0x8, 0x97b, 0x47f9509b, 0x3, 0x8000000000000000, 0x2, 0x4, 0x2, 0xa, 0x1, 0x100000001, 0x7ff, 0x5, 0x7, 0x8000000000000000, 0x8, 0x10000, 0x2, 0x8000, 0x7, 0x2, 0x8000, 0x81, 0xb, 0x5, 0x1c73b7d7, 0x7, 0xa8, 0xfffffffffffffff9, 0x1, 0x5, 0x2, 0xa, 0x23a, 0x1, 0x5, 0x2, 0xffffffffffffff4e, 0x0, 0x8, 0x6, 0x54a0, 0x100000000, 0xff, 0x3, 0xffff, 0x6, 0x1]}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8040, 0x1400}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0x2}]}}}]}, 0x38}}, 0x0) 1m38.325450721s ago: executing program 4 (id=472): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000202070250000000000202020c31a00fe01000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f00000019c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="972d4e595a34093f61ef69956c6a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0xb8, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x72, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x5, 0x3, '\n'}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xb8}}, 0x0) 1m38.324989462s ago: executing program 4 (id=474): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000340)='./file0/../file0/../file0/../file0\x00', &(0x7f00000003c0)='./file0\x00') setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) read$FUSE(r2, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x5, 0x0, 0x0, 0x200, 0x0, 0x0, 0xf24}}, 0x50) fchdir(r1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x202d02, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x5) ioctl$TCFLSH(r5, 0x8926, 0x20001114) open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r7, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xfffffffffffffd2a, &(0x7f0000000040), 0x3}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x700, 0x1, 0x7, 0x7fffffff, {{0x14, 0x4, 0x1, 0x8, 0x50, 0x66, 0x0, 0x1, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x1b, 0xb4, [@multicast2, @remote, @remote, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x43}, @rand_addr=0x64010101]}, @lsrr={0x83, 0x7, 0xb7, [@empty]}, @noop, @noop, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0x75, 0x3, 0x4, [{@rand_addr=0x64010101, 0x8}, {@broadcast, 0xa6}]}]}}}}}) 1m38.247000424s ago: executing program 4 (id=476): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x35ea, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x2, 0x3c5}, 0xfffffffffffffffe, 0x0) sendto$inet(r0, &(0x7f0000000680)="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", 0x1000, 0x20000000, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 1m37.922315644s ago: executing program 4 (id=483): r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0xfffffffe, 0x4) (async, rerun: 32) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) connect$can_bcm(r1, &(0x7f0000000140), 0x10) (async) sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000002d78"], 0x48}}, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\a'], 0x48}}, 0x20040001) sendto$inet6(r0, &(0x7f0000000000)="80", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) fchmod(r0, 0x60) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r4) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) 1m37.909016398s ago: executing program 35 (id=483): r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0xfffffffe, 0x4) (async, rerun: 32) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) connect$can_bcm(r1, &(0x7f0000000140), 0x10) (async) sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000002d78"], 0x48}}, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\a'], 0x48}}, 0x20040001) sendto$inet6(r0, &(0x7f0000000000)="80", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) fchmod(r0, 0x60) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r4) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) 1m36.70239625s ago: executing program 3 (id=502): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0x1000}}, 0x1050) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @local}}}}}}, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r4, 0x227a, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x24, r3, 0x20, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}}, 0x20000000) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x100800) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0502103, &(0x7f00000001c0)) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000040)={{0x3}}) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0x12) sendfile(r9, r8, 0x0, 0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000030a050000000000000000000200000008000b400000000008000a40000000040900010073797a310000000004000480140000001100010000000000000000000000000acceb0ecec9bd3aeb7911ac28254c764ab258f8b586a9400ab98eb387e83aa00a388319d87b342736409ff4cea10e9f1e5c60f76a30511be42018bf95cf3eccc96d466e3c4528ff1e55c1765a2ad049fc6ccd9d774398c165d4ba650eef9a43409d4bf8330bb08236a5a3570722c90917d551b094c4e0afeb70167ed8b4b7b0909af6b017cd218c47e29b"], 0x5c}}, 0x0) r11 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) writev(r11, &(0x7f00000000c0)=[{&(0x7f0000000180)='G', 0x1}], 0x1) 1m35.315737459s ago: executing program 3 (id=514): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x200, 0x0) syz_emit_ethernet(0xa6, &(0x7f00000001c0)=ANY=[@ANYBLOB="e90c630faca20180c20000000800450c009800640000032f9078ac141411640101028623000000030706fb6cd78a0108be29980a4fca010b561daf756330c60ad9070467c3018619000000020704600302020108a85f809c29130203d707020000000421880b0000000201000800090086dd080088be000000001302ff030100000000000007080022eb000000002505ca050200000000000008fd1719040800655800000002b8dbd91f5aaa08bc9289aea049cf0bb874f07270637aa3bcff6447896f63"], 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) getpeername$ax25(r0, 0x0, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='\x00', &(0x7f00000000c0)='qnx4\x00', 0x1000002, &(0x7f0000000180)='&[\\$,[\x00') mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 1m35.212467068s ago: executing program 3 (id=515): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0x0, 0x0, 0x34565559}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x3c, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "0000000200"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac08}]}]}, 0x3c}}, 0x8090) 1m35.212078973s ago: executing program 3 (id=516): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r0, &(0x7f00000007c0)=ANY=[], 0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0xc048aeca, &(0x7f00000043c0)={{0x3, 0x0, 0x80, {0x4003, 0xeeee0000}}, "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", "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"}) ioctl$KDDELIO(r1, 0x4b34, 0x3bf) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e00)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x3}, {0x4}}}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000507000000000007000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8}]}}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000480)={[{@noswap}]}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r8, &(0x7f0000002140)={0x2020}, 0x2100) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r10, 0x6, 0x17, &(0x7f00000000c0), 0x4) 1m34.932588994s ago: executing program 3 (id=522): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="48b8506e0000000000000f23c80f21f8350c00f0000f23f867460f239c48b800300000000000000f23c00f21f83501000f000f23f80f20d835200000000f22d8660f38810666b859008ee066ba2100b002eef2f4440f011966b8df008ed8", 0x5e}], 0x1, 0xe8, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000003d80)={0x2020}, 0x1a4e) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x2, 0x1}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c000280080001"], 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x70bd2b, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x11, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018086dd1700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000001580)={r10, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000280)={r10, 0x2, 0x30, 0x2f, 0x65f}, &(0x7f00000002c0)=0x18) 1m34.712530304s ago: executing program 3 (id=523): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="ffffff7f00000000ff0447000008000200", @ANYRES32, @ANYBLOB="100005800c00"/16], 0x3c}}, 0x10000) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6218}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x80}]}}}]}, 0x3c}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="05000000000000004800128008000100677265003c0002800400120004001200060011004e21000008001500b6c70300080007007f00000108000700e0000001080014000700000004001200040012000800050099a5e569f08ba03a8ff88e19c7cb6f4fb6e0926d35d09686faea18cada4a60f8093b1fae83b9f57102484af35c5d900e49f3e2c44f322b6091f06aacd2a7bb1e701c7ceef3c2344c7b3d9b6a633c3f77e02597144edb64393426f94962dd51a8847286f242aeb5480db7bc2f063ae2904dd6ede0d026b012f64fcb535d8f4cdabb17e488dbb0fc53ebfc259f57dcb1e54a5f76bffa5cf7741dfc2588e4770c677975373ba74b502e38383f9234f27f75348adf4dcbb7c5ac8b5e5323807a2228cff10fb6f670c198d7fd31226bbb61a898c280585bddd35398996bcb09a70c", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB], 0x78}}, 0x0) 1m34.712285232s ago: executing program 36 (id=523): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="ffffff7f00000000ff0447000008000200", @ANYRES32, @ANYBLOB="100005800c00"/16], 0x3c}}, 0x10000) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6218}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x80}]}}}]}, 0x3c}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB], 0x78}}, 0x0) 1m33.489043876s ago: executing program 7 (id=530): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mlockall(0x1) (async) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x9, 0x4, 0x1000000, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x2, 0x200}, 0x3}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000800}, 0xc0) 1m33.062439134s ago: executing program 7 (id=535): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r2, &(0x7f00000002c0)='0\x00', 0x1) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000082000040"]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x61]}}, &(0x7f0000001f80)=""/226, 0x1b, 0xe2, 0x2, 0x0, 0x0, @void, @value}, 0x28) 1m32.932063402s ago: executing program 7 (id=536): r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r3 = eventfd2(0xb0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000140)=r3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00'}) io_uring_enter(r0, 0x54, 0x4, 0x1, 0x0, 0x0) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_REGISTER(r4, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000180)={0x2, 0x4}, 0x2) 1m32.931136233s ago: executing program 7 (id=537): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000f49e327c0b6e511494466cec78650f0a6267"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$inet6(0xa, 0x803, 0x6) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x303}, "1cb670c25821a310", "09d91b4f905e8914181f9ca59b99a61b", "9ba27d14", "3b4afb91dde12e68"}, 0x28) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_vlan\x00', 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) semget$private(0x0, 0x4, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000793000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f00000000c0)="0f01c866b8010000000f01c1650f01c366b80500000066b9498943b20f01c166b9e70b000066b80a00000066ba000000000f30660f3882be0b002e70140f30660ff5420666b9800000c00f326635000100000f30", 0x54}], 0x1, 0x28, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r3, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000001c0)={r0}) 1m32.562633722s ago: executing program 7 (id=538): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000006d40)=[{{&(0x7f0000001540)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x10}}], 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file1\x00', 0x16) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87, r2}, './file0\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0xa, 0x9, 0x0, 0x1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r4, &(0x7f0000000080)="beac60f0195033a635ab43b10768192575069d76a6cd2776339d02068807dbf5fac3db21bb0fbdeaf53da01d7e9802d008acd7ddced14bfec30917e357712660238fb740ebcb37d8cff10d84daa5b0c164badf0e2409a8c4267492f33de4d664ee18584e5548b31a02c57ab2cdb267f4d8fb1908ba4bebb6cfa822b912e55c8a4a737b61db82a79ee1cc96dc8fd55701861504c14fe4aee4a5ea9d3475ee4aafd96b4ba79548b1df11eeb4b257cfeb98f64e383130627dbd3af018b940e1925139ae0094addec9", &(0x7f0000000180)=""/199}, 0x20) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) r9 = getuid() sendmsg$nl_xfrm(r7, &(0x7f0000000640)={&(0x7f0000000380), 0xc, &(0x7f0000000600)={&(0x7f0000000400)=@report={0x1ec, 0x20, 0x10, 0x70bd29, 0x25dfdbfe, {0x6c, {@in=@private=0xa010101, @in=@remote, 0x4e22, 0x2, 0x4e24, 0x8, 0xa, 0x0, 0x0, 0x0, r8, r9}}, [@encap={0x46, 0x4, {0xfffffffffffffffe, 0x4e24, 0x4e22, @in6=@remote}}, @algo_auth={0xc2, 0x1, {{'michael_mic\x00'}, 0x3d0, "0ee6ece7cd3482fce531ee0b99809ea6866fbbaf09e853d45ed78bcaf337499a731cf1da0001fb842df984f7c3dbf7c7f8a82fcafde0355e4d20df42a505a6b1c8b8a764c4de8a81ab5a10bd0a8b40ad54fcd2d308881626fc477a17ed5042e3a3fd28d50652b22278fa7126f7046d29da49725598859d6e48cd"}}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd2b, 0x2}}, @srcaddr={0x14, 0xd, @in6=@remote}, @algo_aead={0x9a, 0x12, {{'gcm_base(ecb-serpent-avx2,sha224-asm)\x00'}, 0x270, 0x0, "80c37c1b16cc18869c6867e339268ec70a7167045fe435cc6bc912a3686d7d159369c4d635a3e3ec001764b8f47c15bb2f2bdd1cd0d3d2714051bb4d4c4a0562650daa2d60ffa804a86997a80bcb"}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {r9}}, './file0\x00'}) getgroups(0x0, &(0x7f0000000680)) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in6=@private0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000bc0)=0xe8) getegid() read$FUSE(0xffffffffffffffff, &(0x7f0000003a40)={0x2020}, 0x2020) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000300)=0x36) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000c80)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000d80), &(0x7f0000000dc0)=0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000006d80)={0x2020}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000e00)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) 1m32.562167249s ago: executing program 7 (id=539): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = syz_open_dev$video(&(0x7f0000000280), 0x7fffffff, 0x129680) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x6, 0x7, 0x3}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) 1m25.482224648s ago: executing program 5 (id=628): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000001240)=0xffffffffffffffff) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0xf000000, 0x1, 0x0, r1, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u16=&(0x7f0000001280)=0x7480}}) syz_emit_ethernet(0x2e, &(0x7f0000001500)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x25, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e23, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000e80)="632a1eb3f0c0d7", 0x7}], 0x1}, 0x0) read$alg(r2, &(0x7f0000003780)=""/4096, 0x1000) r3 = socket$nl_audit(0x10, 0x3, 0x9) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001980)={0xb, {"a2e3ad214fc752f9182909094bf70e0dd038e7ff7fc6e5539b324c078b089b32353b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5d38300d074c0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) recvmsg(r3, &(0x7f0000001200)={&(0x7f0000000000)=@caif=@dgm, 0x80, &(0x7f0000001180)=[{&(0x7f0000000080)=""/16, 0x10}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001540)=""/4096, 0x1000}], 0x4, &(0x7f00000011c0)=""/24, 0x18}, 0x40) 1m25.372672515s ago: executing program 5 (id=631): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r1 = gettid() timer_create(0x2, &(0x7f0000000100)={0x0, 0x26, 0x0, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = eventfd(0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x20840, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x40086603, &(0x7f0000000040)) writev(r2, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="aba732e9970a72a4", 0x8}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x20, 0x0, 0x0) 1m22.862300055s ago: executing program 5 (id=645): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r2, r4, 0x1, 0x0, @void}, 0x10) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$key(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x2, 0x2, 0x5, 0x6, 0x3e, 0x0, 0x70bd29, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x4, 0x400, 0x8001, 0xfffffffffffffff9, 0x100000001}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e21, @private=0xa010102}, @in={0x2, 0x4e22, @loopback}}, @sadb_lifetime={0x4, 0x0, 0x1, 0x2, 0x7ff, 0x2}, @sadb_ident={0x2, 0xb, 0x1}, @sadb_x_policy={0x8, 0x12, 0x3, 0x1, 0x0, 0x6e6bb8, 0x0, {0x6, 0x32, 0x7, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@loopback}}, @sadb_key={0x21, 0x8, 0x7e0, 0x0, "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"}, @sadb_ident={0x2, 0xb, 0xdf1, 0x0, 0x9}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd28, 0x3500}]}, 0x1f0}}, 0x0) r7 = fcntl$dupfd(r1, 0x406, r6) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='tcp_cong_state_set\x00', r1}, 0x10) connect$unix(r7, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) 1m22.856624619s ago: executing program 5 (id=654): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101a02, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) io_pgetevents(0x0, 0x921, 0x0, 0x0, &(0x7f0000000040), 0x0) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) read$FUSE(r8, &(0x7f00000028c0)={0x2020}, 0x2020) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r9 = fanotify_init(0x0, 0x101000) r10 = epoll_create1(0x0) r11 = fcntl$dupfd(r9, 0x0, r10) fanotify_mark(r9, 0x21, 0x8000038, r11, 0x0) fanotify_mark(r9, 0x22, 0x103a, r11, 0x0) r12 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r12, 0x5452, &(0x7f0000000080)=0x6) sendto$inet6(r0, &(0x7f0000000140)="1101ccc3dc1c8bf80ac8da92cf72c91160806fae330e868034b442b0856d4d5720f476e7e0d9c8f9634b54f3dc043145930cec258b5346c78b6e6bac873da35f8066422663427033980ca415e81c73d4543d664ffaf24b749b564494c732d67b607f26e2c74ffa434fb7f8e8234fc2b196a42a3c93d00b14e7d77b2381764cacf294dfb2580c3d3b96f8b9d7c42bd4e2b015f9af2b2044b874d9d0bd239334d4a81cf9a45e590ea9dc6203ff1a9434705065b287227dc4dcec3adaed393bf00ba94d7f127dd6b1f9866c5580b695c4185c15282024a8f713c6a1c46706afed6b69fbda08f192d6f9ee201929886c0b15f136e4ded13e4cae", 0xf8, 0x20000000, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r14, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r13, &(0x7f0000000000)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) socket$can_raw(0x1d, 0x3, 0x1) 1m22.74962479s ago: executing program 5 (id=656): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x10) copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e45c, 0x700000000000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd70, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYRES32=r4], 0xffdd) r6 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[], 0xffdd) r7 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x20000000) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x22, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) recvmmsg(r7, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) lseek(r8, 0x101, 0x0) 1m22.682460101s ago: executing program 5 (id=657): r0 = syz_open_dev$midi(&(0x7f0000000300), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001b00), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r3, 0xc0485630, &(0x7f0000001b40)={0x1, "37789308fc1260d8fd2c1adacd15ed8a527046224be211027c50b56fd2247313", 0x2, 0x3, 0xdf50, 0x8, 0x8}) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000700)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, r4}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x1, 0xfa00, {&(0x7f0000000a00)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmsg$can_raw(r7, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000180)) 1m17.502658078s ago: executing program 37 (id=539): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = syz_open_dev$video(&(0x7f0000000280), 0x7fffffff, 0x129680) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x6, 0x7, 0x3}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) 1m14.224855144s ago: executing program 9 (id=696): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000007f40)) socket$nl_route(0x10, 0x3, 0x0) openat$uhid(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000024c0)={0xa, 0x4e22}, 0x1c) listen(r4, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20044015, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd000000100001000c080800418e00000004fcff", 0x58}], 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5d3bf4aa}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xffffffff}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x2}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x2}]}}]}, 0x50}}, 0x0) 1m14.155681304s ago: executing program 9 (id=720): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000380)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000640)={&(0x7f00000003c0)=[0x0], 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000700)={&(0x7f00000006c0)=[r1], 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket(0x1d, 0x800, 0xfc) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000200)=@req3={0xffffffff, 0x5, 0x1, 0xfffffff7, 0x200, 0xd, 0x5144}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg(r4, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_procfs(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) r10 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) read$hidraw(r10, 0x0, 0x49) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000540)={0x1, @vbi={0x18e, 0x2, 0xc205, 0x30395056, [0x0, 0xc9], [0xaa, 0xfffffffd], 0x2}}) ppoll(&(0x7f0000000080)=[{r4, 0x800a}, {r4, 0x220}, {r4, 0x200}, {r2, 0x80}], 0x4, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x6]}, 0x8) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000190001000000000000000000802000000011000500000000080001007f7b376dc980ec93ccea94104528a48e5a4972e1e7cca6419ba3462427055cc00b68c072698e638444f4af2dfe5acfbcab87ecefd0e169fbcf22f6cab1061a948800da936e40a46cef98c74edb5969d9a2238bb4dadb760163bd040000001a40e81aa869dc135229b6603184fd4591c1725c21995d87c6c8b401e9cc88100509488fe1270409e258019ff7a32d172610e3f78d1c9f620fa63ab2a3c6dfdc696fcf92c04015ba98adefb31a54647733dae6f223d57b8774b424a925a314d99f", @ANYRES32, @ANYBLOB="59e7af88b0899158ee3c45c86190ff2fb53850bb07d5a79c51b76086109f1ddb5fb562c33d5fb3f2c0bc04937572209d73"], 0x2c}}, 0x0) 1m13.241605943s ago: executing program 9 (id=732): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xe002, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) unlinkat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) unlinkat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000380)=r1, 0x1) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000380)=r1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}}, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r8, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r9 = getpid() process_vm_readv(r9, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) process_vm_readv(r9, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x34, 0x1, 0x9, 0x101, 0x0, 0x0, {0x4, 0x0, 0x2}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfffffff9}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7}}, @NFCTH_TUPLE={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) bind$nfc_llcp(r6, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x7, 0x0, 0x0, "edd0961fcbe3a714779b769277aa362003e40900661e12bcca7f88cd6d07f364ac21a4b612bf8bcc2e8ea25b96f8fffffffffffffffe700a13056afd600927", 0xffffffffffffffff}, 0x60) (async) bind$nfc_llcp(r6, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x7, 0x0, 0x0, "edd0961fcbe3a714779b769277aa362003e40900661e12bcca7f88cd6d07f364ac21a4b612bf8bcc2e8ea25b96f8fffffffffffffffe700a13056afd600927", 0xffffffffffffffff}, 0x60) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000010000580090001"], 0x48}}, 0x0) 1m13.072283353s ago: executing program 9 (id=734): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) listen(r1, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000140), &(0x7f0000000180)='%+9llu \x00'}, 0x20) mount(&(0x7f0000000080)=@md0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='smb3\x00', 0x208001, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r2, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x10, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) unshare(0x100) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r6) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000001840)=ANY=[@ANYBLOB="e8110000", @ANYRES16=r8, @ANYBLOB="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"], 0x11e8}}, 0x20000800) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001740), r7) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x1c, r9, 0x8, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40055) 1m13.071488028s ago: executing program 9 (id=735): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20054892) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x3) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x3, &(0x7f0000000080)={0x0, "7ea08680448ae1cd0313388152f6a5dcd36f82e3050721215ed97a9793ecd18a42"}}) ioctl$TIOCSTI(r4, 0x5412, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r10, 0x0, 0x0}, 0x20) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20d6, 0xcb17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a000000010000004000000023"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r12}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f0000000140)=""/83, &(0x7f0000000080), &(0x7f0000000080), 0x6, r12}, 0x38) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x8, "505c905e"}, @main=@item_012={0x1, 0x0, 0x0, "ec"}]}}, 0x0}, 0x0) r13 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x22002) ioctl$EVIOCGMASK(r13, 0x80104592, &(0x7f0000000040)={0x1, 0x1000, &(0x7f0000000240)="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"}) 1m7.529439005s ago: executing program 38 (id=657): r0 = syz_open_dev$midi(&(0x7f0000000300), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001b00), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r3, 0xc0485630, &(0x7f0000001b40)={0x1, "37789308fc1260d8fd2c1adacd15ed8a527046224be211027c50b56fd2247313", 0x2, 0x3, 0xdf50, 0x8, 0x8}) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000700)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, r4}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x1, 0xfa00, {&(0x7f0000000a00)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmsg$can_raw(r7, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000180)) 53.387500565s ago: executing program 39 (id=735): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20054892) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x3) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x3, &(0x7f0000000080)={0x0, "7ea08680448ae1cd0313388152f6a5dcd36f82e3050721215ed97a9793ecd18a42"}}) ioctl$TIOCSTI(r4, 0x5412, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r10, 0x0, 0x0}, 0x20) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20d6, 0xcb17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a000000010000004000000023"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r12}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f0000000140)=""/83, &(0x7f0000000080), &(0x7f0000000080), 0x6, r12}, 0x38) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x8, "505c905e"}, @main=@item_012={0x1, 0x0, 0x0, "ec"}]}}, 0x0}, 0x0) r13 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x22002) ioctl$EVIOCGMASK(r13, 0x80104592, &(0x7f0000000040)={0x1, 0x1000, &(0x7f0000000240)="8dc91889fd4ab8bfb43668b083fbad03ce13b2952c2afebc4ecec93afbe1ac7212e61f8cdb4af28b485518d19b7488d627e6a5b80265ff28147269f57f1f7a02d561603821ad2d2973874d870194fd46fdc790547feb57aed0b3ecc33bc701d15baddcbc2d54b8eb8bf4d0929b7fb93a35877bcf32898f774e01d2c6a935a163ccf807902ef966ee8441c022cb5233118e2dea5a7c907e2bc41fadcffc25c67c26dbf1a29dc755c6b78133689250d2b1f17dced2afe536e26295cfb8fd8c8aa7e466d8d4a29fadd71eb7b121887eba7f9d8b65cb2a3e8875d9f2fdaaa8ca3664db79a44d894d7089fe4423a67b3f6c1ba35ac9873b48a3c5e33345b6e1c5311a7fca802cbc2d04d2bc6f4d8a9d2af0d31c62f2845e515644bef0cb22298870420aa7caaec364043e91c012306ec6d72483eb1a6b68ea702c19c530eee963a2995cb44c37718aa1ac56c598f46db255d8abc250e3e34ebd1183bff04de90f41295a74726a339e9f7d5ac04b943e853834bcb261b3c1c179eff3c5178dd3f48f34e8d5c5712d84d31011944f71bb3508a306ff3e3a070c69e821e603298b5734e8b9bfc69b42d60816b684f85c5d851026fbc2ffe72cc75179a3893e0d540948f727afe8c0194f6ec83aa5652c97ced28680e23ef569eed969001e74b5a186189314f2a87934975828f5af1c700ca7838b74b35315fb422717a4f5214342cbe4cc2fad411e934383d019c7f29c69e6d2b9029153ae0944e678a18105d73f1affb3655953075c2de1b5a991bc909cbae4f778c9b4ee83d7996435b085ef0705ea280e21833b0011b9b59f1721cd0372b899adfe3dbe97f78f7472aa60c42c3c55e3a1c44c4e2d9c0d7247ec7073489613103d0c099e95325bee4c24fa4775ebf74b1bdc3f3cfeb44cc1450b97b2025bcab71b8e8dc7d62dace8837b8ace903537dd0467385fe73435dd706f6d04bd889d31b04a1446879a85d9caa34834245e566cd3d77e2c3ce4b2dc6d741cd98c0e447e7ea27f1a49a9c7bcca0c6c0f6239319e7e88726deecfdd5daac0414008d598a7c0fe4d2409b3c31c48a37e1996d323a9666655f1dc5009de98d75eb393147dd649fd80f103ca25e665e87fef29f38eb71fda65f54eb71b052f52a38e56f9999c3fcb247d46e5a3baa7a63c655ad21fc0711c173e3bf36197a95956002f73208d82d8a8bf83a4d69de9e4cd0392358c37632d2bf9ec9bca4ce4c034feef1c0f72459449aaa083e1cc62130e99fbb8d81eb708bbcd039970ecae5e54690d4c0f7b373547a7266ee0668776fa8016a4f5276b67c6ff5178da02ae1b6ff781e60ee3a0554a1cada545b99d60bc5713ffb2f7a522b448e42618df99153787ba5d93131e348b3feeb6d4a6a28502efcd1c422d534414ad9e1dbad950197d27456adc389ebdc2797958b8fe44aeeacc973cbe5266869a90fb12c97aa14100db9ea6f91f6c654e82b82ec9ad68d7e5b2bddb0ba48632be99417193608bcb1517befb7a0e995ecfcfe427211b23a40744156e8dae8fe74559159e0e9969c417480cde5d9373c4321280630b058dcb9c98cc1440503bc4f63b020774f064db8137e965ee8fc8b6dc353dd3146bcdea977319eed075cb989ca5d881398a5d1fa3aa54e0af51e76bf63ea49dfea69c334e5b6ef7741e9cba7047b9e0247f7ea843fef3ce3ea226a8265df7e1ec4cad0ee09c34d7c9afa7eca378b9bb178da60ed405ee270ff004afc1497a40146404945cad72b2a8aeef5d708af43a781ab23938044b98d35ebce10beada4b053d55dbe80e5c7c48e19fd61ca9aeaf36286db1b2a855356d6e9c7bcd212a81ec931dea75243af513ccf7ea928b676b0a372185b072c102598a47054c0742082d5d6df7db7751ef9af9970cccbd9ec184ccdc64e40f19ae154daddc0c4e0cd9bb563ce7ddad1b3088c4fac9b60f638a41a4ddeb7e2fad4aea894dbbb6f90628edd9d8e4cbab2a771c0e692eac2aec58d843bd7078ed6db38b0f40f016e28b7b3ce1309a84fe7d73a0206effa932320635a7fff3347dcf8f85f7f6457af4eb907d0e644cabd5338005a2d051a113f9c12dd10de10dd0b943490e43f09744fb9a877aa0b4a7cfbdc745c6f8bf7cc5e3eb2dc2c258fe6af9812ddfe4360597f8d4a1ff90acba4ea940bf3ec582e15d62b44eb359c4d36af46a5fe836eaf3ca4ff369d4892a09c6a7082d139051c3b247426086a954712f82cd083100832a80413b12acbc23757e8e0430adce5bb2eb25fde27e77eb1f20e12e2738b65986451657c0c87ac6317c4bd7007cd4476d0861d6535d983dc37c54144ff429484b6f3d2d37aa7bc29e3c0bb9ef70bb0b55f76b998878a4edfc89a6a586b66c39fd90510d74fce8c5b48e5cfa611bf786492c819914a5a547e391dcda0713e5a0122a953d0bc2729b8b01910fdfc1bced817cfb6080e2e9e583953b210fce58ac87dfe60d2cfabba55526be89b815a7df966fc53425e59a435ffcb06d182c32eefe2162e191caf611b46c616e9fca9a557ebe781d5420a8d3aaad1de7e3e6e6ece0d83e4f01fbc23a610741bd1a06d5da62ac8567810fe25d2ff7edb6f831c3529b3ef25ca6651a0602e3e22a7cf78f710d1ebbb955c4e6f528c0176262ec8eda468d362b3a375a60f97c9d2a0fc70fd20334f54c802d7a2c6f87b1b9469df7a16897894d6a70470d61fe7167e147debcd3b2db4764582f2c345f3f644436750813980098f7f57080654e79419e1dc338f79c51d6d95161cdd5ce3c72480ef803d556053cef518d83f5fec1649e02dd9caf75b4d7e1e8aef1cb394b7c992d7c72e687a4e83a58c7b591ae0d582f79fd05d77338be51ea6b3493c3da4a98f905bec221ea0115557f1f41dc70508e862cdc213027978991bd2b8f84fce766960f1549694ef52bb96c54a9dd2d2389b33788ffd9996b210fddd00a1a4a8bcc5ef66c1e5d470de121c48a2decbe327df0f13f177e291f1f69bd1970fb650f0a602d940906f35db9e671a043d101d7a0286f6f37a94184df94fc2dcaede7fd1346b1029c52285e20095784f21690decdd7efbb53b0daead314c5b83de4cb7999e2ca083d15eeedf4217ca4abc2636f12139227f33995e2176ee08fa0477ca07a5476497e0df4119f5318934921a63def1d56650c362d589a888e51ff4a131159c84a280beca3eb815daa4c2ed6f23aec5539d16a51202c61de46c43e3753930e9bb2fb952881adbb3ab020c2efbe3b65907f4fea43baffa7bb9d63b01eb7776474273e06b66e325afb2c492c2193dca92283909145caced8159fefeae5ff3df1e260be67e5e7c666ddb432f7c9a302a0743e8cdce4926cf27b652486dd5ad65fafdfef617a5fbbe9157b7286d26a05daa5b6ab538123477d62ba1c4d60b9e5bd87144f4876f9437fa2cf5d340cab0104e82013af22b9a96e0266877be0cd880f90298af9460c814fee1ac79c1f0e48702853d727f8cf44b2da16a465c224c65ca0edd9b42a64d01a71ced90c3e718b6889277a7d7359743f1a80871bfadaecdbe7bebffc958497c9e196f04f70b1f45938851edbe6340744b189dfac6d3a3770615d4d696bea1721d25fab12b879f1b1d2d4aa97e6ff5bfe1c0785efff62064a5d9454a5f080aa50353f93617283567a4110d7b4bb8d501b09edf782779d2c0925956a17352d0427a0ca309df73d2eb6efe73732a0a438b1d21147f6d1133cfba63200aec6e6a8c2729aa700f62de85d8b8b01208811e94da7410af682b9d09beabaff15a1774f00eab664fa7b834398f50f1428e2e21a535c72d9777f977860fb553f71f62f9bca328c937339124a7900cf410823652bea0d078ac3012f19a89ebd5dde1a56892a247b5a766799c5eecb102582f6ae4364169f99c7f33b84d2198cc4cca5d27a7e979e739dabd9a8c4caa2126fd77f57ab8f99d4d41bea4ad62341c234c9d42929c15634a110dd4c4a03895186ff4e02860262fff38e59f346281b53b78bf89faf16b050a6953c5123a0c2a08ad2491a32df873edd7584dc1ec46a1bc357a70fadc6561bce75b1898242f7ffbc38628fe36e640967f08b4cca69ea7d5fb44d607361f2d436b40d78cc7bf51d4468c68e645fd54bc5b86e925d84ca92b78fbb6ce57af06d2b8a5e63f21f7b4c44df704f649fdaa049f9b87525f8b477fa0fa849f7078f6aa31b8238ec9e883123046222172f561371ce1072f959f031bb68df4f41657f8d5c2d070abf5e4a10de0262d3ebe540c9bb304c574d031a589b7b3a2ee63373d3a573f5406df22d3be7864e407ce51e19536a34e838ed549b597c58ce46c65635f4e3635a732afb68bb030d86044065bbf6c6d639ed38dc3d7beacf687455db6e3e641ac17c6ea299c6110037b92f9dcb4b81821838e25fbf350e6a12fcc8d0d7af8f6add14a4e34502f85febc036a5028908ac22ebdf8f616ba6508461421a76c1e1e23c1e9e1382635f0f4b7d7ae7e1d399bb58d660cf9b0ec51216c3a3f337be480ee8d46d5b7f4d45dfd775d27172e5c8b767888789938172e498f02ecf779886276f650d2fe6179f485a1b094e863cb6577ede1f9f36f809ad2494b2d7570a9fb76dfd855a10b9cd512cf68270761016fea3f47a5e5fb2555162bea2493b443f73e54c5c17433a7e968d8b580deb533deb553bc3329f31162119720979915366b5ade9082e5dbfbfa742db4d501a3723fd0cf93188d982118c38aa7f9adc23908cc405fe5d5f342a2e337e13eea36179e9ecdb09326f3e998b7fce58a33b76242946e2daf5cf96b56616a2959ca4f299da41015566170ed62189ac176b47136655f62674311660b9a9d786c3420d051ad4296539f1ca0e5cfebe622dcb8e7710eadff89801596e57e045f64be1d0ac42252dad3e891fd7f4548d9dccee40e8975239aa808745cbe402c7075438376823d3f1d84f8a8f9b64ffbbbc0ddd853b492f24f9d43de49ebe9811846afd9c0f793114f2c817129f753936a6e7f09b016e79f0c26fc6a33f23a5b60298439234fdb599dd00d41253e3c78e941bc3b006d575d8f4c3f555a494383949c81dea6063d8ae07d939eac59e0ee9a85bdbac483e2ebc6b434166dbe4e5781deb48550c6fe7d9c82057f9db6f581467f2e7931656b957df094419f68dd90864ed71f7a6aa0d623436764e4bef83acdcf9cb908856f44d6bfdbe211b1c5d25c912d3620ee9a0432e03b2ad002f211d2c6232807220db519707d2b8dc0f94b7ee00f9170ff92822c258583668d86adc0dc622915f16203ad191838b1836e015c442ce774994b93d193ae2f2ec1c68630921caf9194b60f190ebd2eeefaab07c36a4efb11ef6a10585c86f4baab1d55cb478a1bce51e6205814d4764577f4caf091859d564b8d602784c02481623bc95e4d20fdb195c6d1aa70de7ecb19c3ee297e3a1ff675e5354f893f9ee5f51b9cdeb2020278917d1d63362eaf3b717ca056c18d2ebc346e12336caa2f4bc2d47a31b67268d9480543436e063927771fce46d75dd3ad002acf51b11a8763018a74c12dd7ec55d5b58f76a6394350ef3315ff92d1303b48563ed7ef4d64033a85507a564eff6f29aaea5418c62e6d72f63a0311a0594fa5c0cb75aca771151678e630f913b6f3b39400afdb727efebceef0c72aa6b142a3957228f38a9926239c08d2c2f89e2de9e8be0b14b5043ac95f3ee274b2fd014ed74c52b82b6e04bed6912aa013266c109d69a9e8622dda28af7cba796484eff0b4c10430a6d1f59ab0ce97bf858426cb6f2818300"}) 26.772075202s ago: executing program 1 (id=1205): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) clock_getres(0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) 26.77129238s ago: executing program 1 (id=1206): syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbb2ac7fd5d244d86dd603f00e700102c00fe880000000000000000000001ff0200"], 0x0) r0 = socket$inet6(0xa, 0x1, 0x5) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2, 0x5, 0x6, 0x0, 0x40, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, 0x80, 0x40, 0xffffff7c, 0x10}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@remote, @loopback, @mcast2, 0x4, 0x7, 0x3, 0x100, 0x7, 0xc80000, r1}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000880)={0x7, 'vlan1\x00', {0x7}, 0x5}) madvise(&(0x7f00002c3000/0x4000)=nil, 0x4000, 0x15) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x12, 0x0, &(0x7f00000001c0)="ba30a945e46b03d7dd459192252b6e3c518d"}) r4 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') getdents64(r4, &(0x7f00000041c0)=""/4111, 0x100f) prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0) eventfd2(0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000780)={0x6, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f00000007c0)={r5}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xc0002, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000100)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fsopen(&(0x7f0000000000)='msdos\x00', 0x0) r8 = syz_usbip_server_init(0x4) write$usbip_server(r8, &(0x7f0000001540)=ANY=[@ANYBLOB="0000000300000001"], 0x30) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYRES64], 0x50}, 0x1, 0x0, 0x0, 0x8054}, 0x10044000) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000940)=ANY=[@ANYBLOB="54010000101b351fb23392b54eb73c0013070000000000200000fe80000000000000000000000000000100000000000000000000000000000052", @ANYRESDEC=r1, @ANYRES64=r0, @ANYRESOCT=r8], 0x154}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4010000) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x29e5be39, @remote, 0x3}, 0x1c) write$tun(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x570) 26.500029739s ago: executing program 1 (id=1209): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000e53a3705e84f5500", @ANYRES16=r0, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="0400080105003400f5000000080026006c090000"], 0x30}}, 0x40000) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x10040, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x17, 0x0, 0x4f}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800, 0x0) ioctl$SNDCTL_SEQ_SYNC(r5, 0x5101) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ENABLE(r6, 0x40086432, &(0x7f00000000c0)=0x1) 20.440097228s ago: executing program 1 (id=1209): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000e53a3705e84f5500", @ANYRES16=r0, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="0400080105003400f5000000080026006c090000"], 0x30}}, 0x40000) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x10040, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x17, 0x0, 0x4f}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800, 0x0) ioctl$SNDCTL_SEQ_SYNC(r5, 0x5101) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ENABLE(r6, 0x40086432, &(0x7f00000000c0)=0x1) 18.29196328s ago: executing program 2 (id=1324): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r0 = socket(0x22, 0x2, 0x24) r1 = openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x4) open(0x0, 0x283fe, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0xfffffffffffffffc, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x10, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="851666ce20db", 0x0, 0x10, 0x39, 0x0, 0x0}) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="20c13d101b", 0x5) statx(0xffffffffffffff9c, &(0x7f0000001740)='./cgroup.cpu/cgroup.procs\x00', 0x4000, 0x7ff, &(0x7f00000046c0)) 18.291062129s ago: executing program 2 (id=1325): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f000000a7c0), 0x8000, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000080)='./cgroup\x00', 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f000000a800)) setxattr$incfs_id(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs/file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 18.220281444s ago: executing program 2 (id=1326): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x40046103, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r3, 0x8b32, &(0x7f0000000040)) getgroups(0x27, &(0x7f0000002540)) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000040)=0x5) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000200)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000700)='9', 0x1}]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000500010073797a30000000003c000000090a000000000007000000000000000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000003c0000000e0a00000000000000000000000000000900020073797a32000000000900010073797a3000000000100003800c000080080001"], 0xc0}}, 0x2004c850) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f0000000300)={0x0, 0x4, 0xfffb, 0x8, 0x13, "c41419adc818ba33"}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b0007010000000000000000027c00000400000014000180060006"], 0x2c}}, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) memfd_secret(0x0) write$UHID_CREATE2(r9, &(0x7f0000000600)=ANY=[@ANYRES32=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) r10 = syz_open_pts(r5, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="540100001000130700000000000000007f000001000000000000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x154}}, 0x0) dup3(r10, r5, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000240)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="a7bda8880000000024001280080001006772650018000280050013000000000004001200080004000200000008000a00", @ANYRES32=r12, @ANYBLOB="8280064dd79f91f1c8f68f6a72740483547911b2ea005e943ce444d1c5b621893c17b10b6736dca6d6888dac47a61740a81fae7776621469af3c6e39dc1a2a9cc555a472ca0513b2ce37e19b1e078fdd62154fe3eaeb6f98c84e51c4687a08564321"], 0x4c}}, 0x0) 17.251215223s ago: executing program 2 (id=1334): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x8080000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000240)="26670fae4d0065260f01cf363e0fc73f3edf94dcfbd9eb2e660fc7b59c6a0f20d86635080000000f22d80f38008100800fc7ad0900baf80c66b8fa59ef8366efbafc0cb8f3ffef", 0x47}], 0x1, 0x0, 0x0, 0x0) socket(0x2a, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r4, 0x5, 0x80000001, 0xa849}) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) lstat(&(0x7f0000000000)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r1) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x8080000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000240)="26670fae4d0065260f01cf363e0fc73f3edf94dcfbd9eb2e660fc7b59c6a0f20d86635080000000f22d80f38008100800fc7ad0900baf80c66b8fa59ef8366efbafc0cb8f3ffef", 0x47}], 0x1, 0x0, 0x0, 0x0) (async) socket(0x2a, 0x2, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r4, 0x5, 0x80000001, 0xa849}) (async) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) lstat(&(0x7f0000000000)='./file0\x00', 0x0) (async) 17.05068452s ago: executing program 2 (id=1337): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000b00)={0x8, @raw_data="22482429a01c9a8a151201154550990063b0b061b01c8f72d1f55afe0a977745f33f3bd9b970d3dae50b088c2a326c1f63b33edfd5b761e464a281adbbdfa039fe7692493f68e57b71802c142d6a32d38408124cf2983a5ff14f3089b5388cfc0d6645e5506056983b408a62f1c59137d2a0fa53fb9b41668a01e548baa5e5794fb9d4552dbfc32e8703ce5f44cecfcb4f227b8aeec9afc862c8067eba1b5c3be93e5e93ff2ed3b943072325695df8b2127365f3d750c811291ebc2f4778112d05a0b4e402128614"}) (async) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='pids.current\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async) io_uring_enter(r0, 0x780a, 0x3d18, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r5 = socket$unix(0x1, 0x2, 0x0) (async) r6 = socket$packet(0x11, 0x2, 0x300) (async) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f00000000c0)={0x11, 0xf8, r8, 0x1, 0x0, 0x6, @local}, 0x14) (async) bind$packet(r7, &(0x7f0000000100)={0x11, 0x4, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000040)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in6=@mcast2, 0x4e21, 0x1, 0x4e20, 0x0, 0xa, 0x0, 0x20, 0x0, r8, r9}, {0x6, 0x200, 0x5, 0xfffffffffffffbff, 0x3, 0x3, 0x7, 0x2}, {0xfffffffffffffffd, 0x101, 0x0, 0xfc}, 0x5, 0x6e6bb0, 0x0, 0x0, 0x0, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x3c}, 0x2, @in6=@private0, 0x3503, 0x3, 0x1, 0x5, 0x0, 0x7, 0x6}}, 0xe8) (async) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 32) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (rerun: 32) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, 0x4, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x22000000}, 0x810) (async, rerun: 32) syz_clone3(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x3}, 0x58) (rerun: 32) 17.05019327s ago: executing program 2 (id=1339): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) listen(r0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) sendto$inet6(r0, 0x0, 0x0, 0x20044091, 0x0, 0x0) 11.080927255s ago: executing program 1 (id=1209): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000e53a3705e84f5500", @ANYRES16=r0, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="0400080105003400f5000000080026006c090000"], 0x30}}, 0x40000) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x10040, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x17, 0x0, 0x4f}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800, 0x0) ioctl$SNDCTL_SEQ_SYNC(r5, 0x5101) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ENABLE(r6, 0x40086432, &(0x7f00000000c0)=0x1) 5.279289479s ago: executing program 1 (id=1209): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000e53a3705e84f5500", @ANYRES16=r0, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="0400080105003400f5000000080026006c090000"], 0x30}}, 0x40000) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x10040, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x17, 0x0, 0x4f}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800, 0x0) ioctl$SNDCTL_SEQ_SYNC(r5, 0x5101) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ENABLE(r6, 0x40086432, &(0x7f00000000c0)=0x1) 3.671452824s ago: executing program 8 (id=1401): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x26218}}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 2.81120379s ago: executing program 8 (id=1410): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="0d0200000000feffffff4400000008000300", @ANYRES32=r2, @ANYBLOB="2c0023800500060006000000060010003f000000050013"], 0x48}, 0x1, 0x0, 0x0, 0x40045}, 0x0) 2.81048719s ago: executing program 8 (id=1411): r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x83, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x90, [], 0x0, 0x0, 0x1000000000000}, &(0x7f00000000c0)=0x108) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(r1, &(0x7f00000020c0)="5b095762e4ceba7d280612b7511913c90df9e94f4e38e6e5dd2dac0bd4683a92d758ad90f9e2842073d15a2d5baa4db0b69c47e278e3f50f394189dd7fce63890ce3ed1f24e67a79c1cbc5eae3984e9d3e8759a9229593ad412b129b68928ed908711b6d1213f9355ff80c2579fa58ced926b267a2264063dd3fdea384c58f4ac5bf66c361e8ec046ddf824495c5b6947ebab4e24257d117313fd45b6873262073e64e3da2431276466d75447ae3eb562d00423b8edb3729fa059a5f004010d551edb43813821d27006eb0eefa536590139123f218b3b0e2d994953269636885ffa849a905e62cfe5f64cd04940568809738ed7306e2430d382667d87f54013a5cee43dae2ee75111ed33350d86c757a8362a81375befca2d0f555cfcc58af87c184bf154694ebb8f0b6ef09f13370833a44cedd5b3091768bbbbfa1d0859a114ea6b4d9f25c11d9f3f45db19fa5586d36bb6a8a15f9d55210caaeb983f1d2e6688e107b6de6cca9d9c640afab7620dc440e93f9d5e920e8fe7e74bbf8754a7195110fedcd8269be84a945305ee09de4997a5a2796f5090d2f9ee3bc0b2228c389ecb6468c24d2c5699dc30e2c9ad71ab272e16a4a645516458bb1f2a92b6ff06bf697503a43205473baf112ffe468a9c727ace967ad603d335ac634db4534540ef15611f113ca28c3a3cbc7f6c96945bdf291cf39a5bae0277b51e959dcd26d1117ff63f1bf748c845b7641905f83f6a0e468c75f88fd74d36ca638e5fb055dbd55c14fe30813e2518e390dc65db7372755306779d7fb13fb9403578fe91422cdb8dc8db0cbbc986369ff7780afab5755a039b37364347d73835c96389288b3768e1d4e59cf77fd58228100d397badfdf52dd5eb453ccaad785d21418e509f734f19e8cdb5a0993ba59abcf654625000eddf387d0c291a3000e87c4fec269a9c787997e0d106fcbd9f488c75559c0664be295d8dc20d214f17c392ba0bb73df8bcde0f47e449ab40f51b02bec01fa48171e5e39777aa7fd94525e76d78e2f2e692eea0ed254b2ce1db59e5cfa91d9b30ec2d39868c32afc6797ff333b1ce9dd2c0b3034124b1c004d9dc0cbcd4432006d54528e3e28e96e911eba7681a035d4e4551c7b497cb0fde2845ba18c4b8b19efe147d90394ebed77e7c0a3702fe2b6df71ff354ea5d55a77c899975df86aab5abb2ce370f3d8f4bfcb417ecb82ea0746997a1ca1e9765251a6d33402ad0c0c151fa1930d557248f2aef24e59821f7c649f6824f3a00cbc60c78fc3478969443b03cff9bd6dd1944f79fa7b55005874a7c3b6e6e4e19c84975dbf266a572fa0653111af78e2637f9588ae0cb8283f29f55b5e03bfa9caabdb322be5a2c097b8ed1fc6b5de9e2d9833840da9a036738f5a260b2bbbe0392ba7d982bd567573c9a8c3558103dc62e16c0072a97e2355629fc50960bc3b89949a2aa52bce12379c500e767a986762628cff8f69f73d359ef604a48dd15e7d5c298330ba5be94afcfc913f8329aabae358a9b936e6c19f9a0a45f239eccebcae9143aeb66dda74a0a9714038db0986fcd6c8b2f27330657cc35a1e1da3e4805d4f360cd2de4f798bebaf60daa49e5e4abef7dfb930080bc962d66f859c2138c3d72cbbb8ab11ba47d19406e2fbefb30751631e1fad5cab36fc18907fc4790534fe4ef07b2b0058ae14e0762a4a185f1008f4f4f7b8f30aa62f83806a7ff0e0bca2178981a472071f7bd2ba12578b53a131ad4643caacb8cba98caca210e732e7f2df5373f0c637826c4daedcee4d8439392e9e817fc01f3b504142639273a73cd6f5c8c8033e8aa145359ee6808e4f7b10d35646e642f1c2693002f4bf321c72b33d2a7c6bf1864cbc543d1b07785c12ae87f908498a18b32be69f11d8db79d899f605b4c8bf74ae5cdedd5bfd17cb24469076e9d357b7a0abd9a55384f70ad49997948037a630d2d016e85d468c53127b09ac8d7314245ee0082aaa56559c41ce1a986b04bc21fbabaab0731a870eb0aa98d02ce78ec899b8d1ca5488d0492ad0eafb7c17170806f229fb01739d6ec50040cdbcfe16089e478ffc1713c06bb0b7db29f6a5c5ff20c5d1168ec0f138d36a9465e304c3ef6bbee4f6adb26348b469c0718ecd34f0f4ce7886690fe17c8160ec5ba873483ade45233392be8ad11c97f95509d8ae60846c62f0ba45f5f23cc4840280f043677ffda3385d8f4a3a2bad3bb8f9077dfadfe230e6e093eccb4ff6c0e7cab3df81e073c880f9fc41a404ec3144507ebc53c0778068a3ed3abce5d90ba084d71d221373663e9a9686ab654eecbc45fb0bf308ae22543ebbe65996d329018bbd6d4426d774a4babcc3e97c95acc40877bd1120f0208b54541138f4eb88517e2ca4562b409de39c41d636a0f3594f3d065c2e710af90aa55d0ecd20f383dd6fac7c93cc6011469fe5f4fabefc0c12ac0b77a1f44da769a1b6720a29a7969459feb18f61f73457b2aff8b410ff264d10f4be0ac000c4c6f29d656b9a1887df1eeb786bed0c5ff84be315167ad0506786a9cbf64fbebb4d7eab1d9bd9108bf10dfce2559007edcd6fab26b195534e06a6f3f862e351b7b68fe9e3eb6bd9f47f83a6bf49a36c8ed2f6c8c5d3bd2f4a33d791ea61ee2e21a46e46807add328bb3c3109ef7a402b9e3fa16957693dba1d4a4c361bf6848114cbe29e601bb38a532a387edcd5c39b1171471d8590dd4fda56c7d43b9007b1490ab3219d598048fb50d9290713c079031642fcee9d2ebf03c193ea152b30a1ef9e1b30cfb7c3069432295befdd94bb04c8e9d67e367b787031515dc4f64e3496e8c2c390676c7a89a85c02fd681fc7851c0f652b3d9444002991620ac3a0ba7a77139bea95fa8d053359fbc58c392cb194ec3e6903b841404f735f37e5d1608606be851db16bb9d0d659cb16a3edebbd3613f16cd52b5398196d3fc031a611e7b8d61e4f91c2ab9310a6ae26321c7486568f23298552b4a824cb797b3171bf2f7e2d8444734aa8af3a720cbc8a61161b462f9189c11d687948b7271226406f37429ef09d13b17dd21c4e72be1bc0b816fdc096312aff7f19f3a2181ccb08d1f92aa003c284fcebcc8584cfe242dc8fb0e8cedd71dc2ca48df33c9e650e8bc6f331f9eecb4c2de8b75133760b4c51948b990675e724a68ecae3f2d88c7abfc9bee0875f7feb691b813c1825a0326d887032b5016b69c228cb01243d150c6a188cca6d22f469e6195bf2f3d6d4cedd8ef43e9486f5e9cb9f70e5a92cd2e62bd9c70775d900784bf6283b074c9c0df6e5da7465fe30fd723cd4918dd3da6b7e5475c89d34a4075e94a938047625efa4fb8d02b8616f4f84378ca26c875a364e68e3a02ce5dccb0dc0b686ec52384c076133ddbf7eebf178411109c72171a87625ee0607f94f1ad9dc795906ec7012a51d3621f4fa19f25891d8415bc4a0e3273c21159bff5ceeba3767445fa6a24383e5f165a6fd4fa579a02935943aded524f6d6a540d67b44f4d7d0cefd1c08a53a1a06a4ab5157f8f64b22f3875f6c9fdd76507e277691aaaef9a90352cfbe5005d13b35fe0ce04d3b3362590053c5a7e3b6932364426aeba2bd79943a2b50d5856d3ecfc74bc02318f9eaffdd08f20560bd1d0f7f643ec8e05fc19a3188fa77913092b0ddf40f8be0cc278998dc32da328ddead37f6659d780bd530a48b4bfa230370853db872385b5ece3a9a1f39c69a2f7290ae92f769cc996ad69e22038352fffddfde95f9951c4e0029e6244809bc8d77f262cd3057ab49277ad4edc55f94235c01f774de6a7e61f5e688d71e26348cd61c30348bdc9debb28eff7206bd67bd92b038b584afa3526c32cdcad81402b3642ee9fb608a4e18da9b4250c54feb404cf636caa798bd7e1087f60f424904616c959548650976d8577176356b2d47f46417f00000000000000b1b7f9ac7220efbdb49c081dd38f7c8f718f2969237a49f6200d62e879030b0b6229f39dcac78af38be9287fe0bd04b2e65e8555399ec5613856688d547bb43b472ce03ba3190112a004def789771f83faf390ea062a2b093aea35027c6331d097db997a612bfddeda832226851a751b2116ede07459e6e1717a47cb2f93d7f140361183f5d2a0773b8ef0e458b3489176672223eff9701ddf0a3caa2848feaa54ebf4943b409fbe9369b8c2d0f27a9fa6caeb6c321b19f9e7daf7410142a8e1f1649a855165b6dbfa61570926069d94894f616ef85469113add5fce8db6f22a1bcc3f93b75d94644ff75e5716536c727747621e7664a93519faf3acdab5f29b346172892697909f01051474bb8811d4cf1bdb32ead2364a2d89965fb7d523d5d31f7c7bb891e49d0387c2b235f610fadc23b4463f6a31d4a8a068b8e392ed3d27dd27832c9fa6a7d9a170137cef0bea684311e098b6cc60f36e09b1abc09cb089364e0e256f5d624e6098f02e53fc74724ce9f1d13517fa53968554b523c973ecb03643ec452addd7b566d6d12cad7a0acfdd8a97fffeae567c87aff01b2be11e3a95c54bcce3449c4564132be69c08f309ab97c57349f29a1b8d3d78bcd623409966550e294523e21750930b97f012c4129dd0b55142b4c559fba8cd07083cf6cdd0fd36cfd38f3e0de2da821f2d9f79f82239d6ec1db4dc9dde063e35b1d5ffe929c56744c56c3862b8bd8b95dee19254cd480500c2942b594f0eaae14c3eb07d9d1c5d201425e9e3923b41457fd7fbdf747b2fbc61480aad014d8917ff8f5bd048458c55348b292ff00026690a04a07e90fc0373e1b6ed62ba81af0bc4bda161ef8400887481fcfb8cdc4127500e3fb2a071896f657d6fb04912f3395e5f9e66eab3b85c28a2e37b156511bad5b0d2720670e2b1a762333f42ba528668fda6ea0a80a398129eb3347310260f9f26d5ae249bef77d51d2ed248e0775cb634e48c830cc2c2512376bc411258edd8f73a2d7adbaef40ab79d2ae37f27e2893048d59693a355c87e43b53d545c16997fa318f1bff6a7edb29a7ab80a2381ca828b6d8c5d7976abb11d955faef8b8d5589fea555be1803eac4730a4b9ff3477cf462dda1fadbbdbbcf6826276144875d58e12eb9670c6324f0249b220f1336f9ba43b732bd8c421b040680417a1f68977d6beefbfa9358a4d861cdbcab618043e661208b6939313e2bb01d77509c1df93d87d94da5737d2a10a935b44b264fd232dbc2e59036e0d690431627e0903343b8352ac291eea31d1424c34f9f8fff7fd8df9f6330f88598004a353bfaa5e71d039b8caa33770f9050dbce61ed1c2c0285d23bd4a0b4cd9237ec7c2773474d02881cd7d5541dabca4bafb11f7362160c4a871716720d8d2e26c0400b4abd45c93ff25602d93a1031ffaca642d6f88f8b7ba38de3d8cdaeb89f8fe8de3f0c089bd8b360552d1c26845ccabd2d86acedb16f20640648527a420c497c4af51ef463ce1e3fd8f70f06fa016f12b307e1d846ca35e0f22654456705ce42334401fd2e993c6744918f578fe4d1e6e434d53cb8960008357036ea2c3b03ed9676094fa9693345b0db656273e350b10815755ff9010769af2fb6c5cbc859cce9c8a313cf802a2375d1664b61716067fec9609928f0ccb97397f52765a00334c5a620203977c1df6f9a6f13e46e3be2503ca6e1b1332293dcb2babf2f6019a99274621d0ffdafd9447ba70c948d4c8d9b5b093d36f8e6b8136b16a7da020cf6022b10cd13237aee15319c83b0522aebf523b13ca037d0aa604c5a53fb6536edb8a3d0fafcd66dfd4cdb461f8195c41df043fa6f46e490f43c71422e6de020dbe2ac543c516446ce1ee5890df424ba716eb91da1f8e127777a0e4396fb35654468747179d2884951e06c952f7f1ea15ee46b60aa15e562023eebfc3a79693adcd67fb23ab6b74b55b65d8421be9f454f8d89bd76340c46d5309c892121dc19f8124cacd2b8da3fc0c0ab92dbb5e0537bdbfcffacce03376cd10223815f7801b1e20e32080694dfc8a416e0aa0fc76dcfd037366406aaa84d48a8cbad3fa48ba342ec4aa02f391c6039403fd4dfd8a5cdf4b8c4345febc085798b5c7dace7a3646e2b9e4cf57c13b959f21e33bbfec54c85922a8095f2c2de1f1db72493fa9756d69b0ace403bc48adde75bfaa4d723a8dac4dfd370cf02329df1a8e8576e11fb8137910cf753cc76585a2d1c7a0da1304f44c26076d87b5d402c72a724b464b5cc2c0ee6d1fb472a40a41e858697dbb82b6103fce576063d2aae0b4dcefef78f8de0640c82d955c72f5b1280973410100000000000000b419e18c7c62e080b8034ac7e1134524c1fcc4f93833280fecd0ff424e39cfecb21e714e0f9e1843296cfddea2e35fa6a7bfe6069b366316ef5e6b73aea9e069d1538eaf11cd503b50435e976dfdd39e05918be1b4f91005583c8b84c33b13692bb8ff005fb9d29958f9697cc83c48a0f3666dfc6cdff0d5f923ddeb4c74db22597414f1973d3cf339af2b5b2640857c232788e21ab92cfecf7938d7ccc0162cf913d88967b5abe80c61d3ce1efd120a856ae450e4d7593ebad568a74c7f5ee1bdfd17ef1f72e7703b36b5001e593f1c6908edcb023095fa059e97d68af2ea295b766aaf819eacd85946bfc5bf0c35363530870cd8ce3931ce7c3885fbae123dd924871797070b80ff914b7bfaed7d0a54a372716bbead8797a49524e77025bd9b62e1fd69ec8a7d55741716df76be640ab8e7c44600882d316f220780013a80ca957fa9ad31c910e3565a8e1e1a1e96c5362bd0cbfac2a53328df35fbadc141f10e5a1ef3d1bbaf877d0659b051de0f7636712cbbbebf095718c96349a96fbe6e0389a511635f0cf31906fd6bb6c2d7ad9be31e9293b418f13c22929c90eb0950aeb343b61401e632fe3de3dabf51dd308d17d6d6643f08c757ee17131cb91b611d20ab2ab35190859d8e4d76a44199765c1efa2bdf5e3c3994585e0a7d866dfe5be4601442da0b686f4f44ba8dae33d639ec2a5acf11e6650593bdfdcbfc5860144a15734eaf58e9e2f5495471ead9a25ec659df37e11e84f4dd7283687533de576a9de4b705f9e35964849206259862a5a4c956d26945ff0b8456e536d72136b4989ca135f00026107662cfae9696f2bf46a8b3207330961c8b31c8bb8dd2b0a6c3a833ab7b7aa97df0c14941d1833db60892511ce0a77f87bf54927f3d912de88581cbd301e87554f76b46a850177e550924db74794f6b5f8db5a74c1f932b3b4bf4ece2cf045c4fd490906f2ff09bdc8f683cc61a5923be82011fed297c962f8d7690a9fe980130d4b6545cbdad82ce198c8a1b884bb36288dac252c69b0d8a4eb53767d297eb64ef7e9f90faa994863efe194040a984a1461b04d1baa746afc353e006b71d4839d4b2ba10d681c344642fedeb8d6a2d518a42c9b252a7d6ba4ee5cbc7a81d543af5fccbc284df3ccc226dcd79b20b987b30ef767d2f810fcc55266802abc38cbed144621a6c0c52bec0706bda66bf7d5e957210e2eb6fba79d7deafbea073c1e298861f46c6e17523182f67e133121f3ea2d8316ffe6de51fb3717edc99361c979e9ecb51e3474a15accb8254003358975b786d81281bacfdffb655a5855da5c5edabcfc5e3e5ca570c16efae87032d3b85cf3d52b020fef5fa8339f776a2d629173252fefc9fb2085b49354fb255b0ca941d60c41a2cb10c742af0ea277b65b960f49184297336f1a8e049eb80c3d40ef78b0e8a9a4b5848caf5131b2773a7c18421db56afea355d869ab81f0f7e753651e8ce742c379ee4f08fe23e7c1307bb9f00e60a4cc804f4b47ac42903e1b1ad99ff795130833a202c36afa8851a7ae7c0eb7d25b006bafbf6b0f579e910c9207bce105f73cd219dd352af1b3250a273a7eae3fbbb8ece80d2b61591dd25679e541bef9579a538e0c0fde66ddb176c84c235de570860128ae90a44e8219841a1ed84d5a3721afce3b24e0173542644cffa2b2603171bdbf3a5b2d7c9d51b7a31f7b6675d98938c8e003fc26a2931811dfcce100fd5eed707884c9f1a9ff629967eaab2908f2988378a271c373828a9a836dbc6b1db9881bb30509f693a92daf26f0741b01855af81e594c318f0dd13a89e87fb3d7b3527e7b007bb2e744a322ac3a40e05d24619c3d41643b6b811af49eda5448c21af06b8707baa6b8a2f7690966152ada65a5253aaece296c1ef46a12b399074fbc40a791f4677f05109bbc103c5bd37ccf7b67e4fd6b6ad97314a9dd236dee6e1371186ccc03d4d8560a22cb6709c35a391481d659d7ebeae325f5c9a20de7374b6715b4d8e77997873929d7339b20ed8172d68b0510defabae5712e5509e41afc5d8bc531e296832d285d9410a0d1173d194b3d15571773c97fd12b817fc2d3e0eb6a4bd6720f57d487023f52e3e0f7dbb0e8a7807283951bc8dc7344afb95d8d93f34020d7b1d6b90bf0520a35cefcc8895807286f624c7df58c89d3fcc2495e3acbb98d4424b1c1d199878dcd9ac5e7a2b216aeaff32d04b74495d16a20aa5854e750c0a66f60c69db44674d695eb8d3bb7ae36065d1e6efe9d68527e57c21dc4bfb33f4d8625a95fe3d2d3ac42abf540dd46e32619e63f9cb40e2de1b6c2102553c1907f6c62c0c689c85a1aa0b1e801b0115aeffb9618d1b412d9d7be9fda786fc9729c6819f60dff95c14720ef7afd69e92fd36fcb3f25b5388f15e621593132418a5caf60074ced3e1f6b0120fd162ac0e13395cb8d4462dc32406c9a04252666ae7e74e9da335522da7ac76d377ee77a1a4d4fb0ceacc3259d486466f8f45f795bcf04ad2935d7a4b0aed6eafd4bcf1830480d044af5fba3146a7730aa87b3b33494fcc3f4111507f059c65b82171acfb5a3f6c7c9d3b156788ecaf9b3581b36d0a059e28fae2f3f40fa631342dbdd89c28429e1eb511121f2dff45f73a8eebca82caa064c1e158dec6d8fed2d05e3090f70cc8406d3d9cc429783f60e63bbddb2a61d6e995238ee4f0e3eeb23bc529535dbdafd7db565541ca2dccba24388c7cbf1989e9d71eb2a3804b224350fa30e979c08871e5010a32ec886ed30128f6e509ed87056fb45e1845282b5acb1262fbcf5361284a12a009c0dc914a20572e6c4c61bfbc5a01fd9e605aa95ae85fb704e8a59580fc00d0720c1b212c44d33c05193d4c6f9f87406c0be25e5d9cf7f548a2ab9cf829a543cbea4c9d338790100fac6cb3a3c989a1c53f581b459e5b4d90a4c08b633d54c9687b33da736ec62f141b50bcb4ecc13044a598696ba9c0f9bb9644565ab5c2163df0a47f0b7362c0e51746ad2fdebb31b57c1ccbcd8dbb0071c0a69280bd8a7e97abeb6ee17e8cf704d24229e55905b5799ed5d7b98b08a6a7da5c31225edf80a487fb897301b0d134b953c918b320bda3ab29e69f759f1bece2910079d3aea3da89fd6cff8e4c2e24c1dc1a1d6f222f45f61747c2e0d5962846a85180d0b0963d33b24a2daf082b69f2957f6e90e69841b4cbfa1166226cdd6c06c24dd89c2e9b1a495851e1e5f7e1cb6944f660f65ce5e41b12d003e365393b15f13fcaf21031ca6ef8f270c0109b1298ac11c6fc87397bfd5b6e96339f2449082488e9f74cc5cb08f85d9705c53477f25d2f988f817014f2065261e568d3e8175da7811f1a05cbeb07f9b0a156b6abe016e9b8300e212b5e5453c765e5c466e88a5d8f98ec785df0267349c8ee49c18de6d3910d09843310a390522b8751433ebfc6206f6c3e654e710d3a3f76b1ac79842c0451d4904bb82fb631d94dfa7658727f2ac53feaa2f120202d616a9db782f5c25a2b8c6ab387cf3c5dbfdc2631891d875a0ce758bd35772efd9eb1c18a1d92e7a45f958721216585f2d85b8826a16c5bc4e528626e80851f49f29e2cf7f6ef9a6b8b3faee63c8da84b12ce71a153db2af86b29496e52ef13f9f9c86f05001b61f3290b565af6c8c404d2bbdfee74c1f623660647150d487bc5c4a0ec8509c47e89e795ad207463e1bd4f0aadda0d735a2f69028e8b361e4b259eeb81113587fc2fc28c26e82949a3f0a6e9f86247d8408ffbfbf96dc892dce4d8759130198b54e6305d2cd07835c5cf9659920a4cf024285b7584b70e831256813fa3a200f3ab8851b411d6cfb91bce34fb0cf503d439ee1b8fc434cac3a318f1bf65402487503b5c7bbb076ebeaddb2ed22b444902b24cd9c3375621684dc854c4af685b6f768c1085862e94ef0337a4458b1dbb3ff0c724041c82aa956636c40d15dbf0ba1f7b8188d48b5520fbbe65df81bdf86fc2480f65c8ac523b1cf57a37904ebb704b4c27b01f60b514cfe990220f187943ec138a673e08a52477cc2f3cad746ee251ddbba7ba13101eae9d32a20df248569d1ab882aff778c544c7b530d5171f04d3518b4ee6a99e07212f8bd72697037551ef3ff35794e01cba640041fc910e599e3d163577f6c837280f84fdbf9a54a1744b32f62834c9d5cdcb94cbd184687b89b3a9cb8a76be61e5f8bf5528baffa774cba2577ffddec869bc24eaa6ec0cec8c6afc3cba22891e8b09fdb5254dca8117e927d4d8ac2ee20775ca7793b82a1d94c0555df748fab1ba794fa608ed282190e5f84eebd49fa12943ad56f205a2e843429bb550d5b160c74083be846d4d70e4e5bb6c2bc5ac764e5c29029604b2bac9eed579184f7b8f98dbd1a168196b42cb57347f6e55d8e4126e9a51ac2daa61e74ba71188606e2a175028b8634fe1c9a636061e163b993068a13c5e9904e1e2c128596768eb842111569526d128f249fc3f7ad4bc3999b1001af8faffe9b264697bfa964e4d5ca4218d1fe0307052057c04435e4a853f44fdedb07083c85fd32a5ce0e0179d97ab921cd541a5def8c3aaf2b63857c195098783e340675e41fbd73657c83fa94781b910a61d4ceec44d7b8865f5a983b56503647f8fe63fd81f67484753a550e1f3b19ecf5c82e0a84e45ef36da1506cb0c083cb8f24808e1d4a9e2990a25ba8dbb6f5d3eb94bf5d9dcd65ed15fea1a995578b8ffe8ffa8f59eab41607774998459527c2f5447e0076506a3b10dd03ab7c858ed9f800ac489e1cedbddbaae0245dc1bb7b3256e686c9b280c50c49333f6d461db5d3e945309014528bfdbaa6b5c94efce80be1b9174a42bd08d2113bb26a0168c8d25758c993e9623ef9a35724e689a903c0712792d9e76f3e2399ff371d47151c9cd559f53a3e338acfe715ba3ede12f8fbe62cb1ffceee3de90d78f63db72474caa58c4e2cc1436419de2f6c8b738125b0ad76ad393eb162aae5d1fc501e6ba51a2ae5a47628a92bdddec71bbde7587613e293be04d6a9a3e6f886f25aebf4569a0e1ea5b3102efbbc051d368b005c791e0ad48b0569f4c3918080383f7789447e5a658e26646d39a8c827339255e766e2535ca2a0c87d3153823a27b8ccf1cf4c30c71fd9b265b00a955caeb7241a894a86e32e51ac7c729c98f4ea46e1fc90da62b1150afdec4c1a0994594bd14e59ae2abe2c4eee60194eba156e1aaf118d017c2ce4b3e92004aa6718e4abf7ce72df63fe0ce6496cba35df00d5760d634e1e934bd", 0x2000, &(0x7f0000006e40)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0xf38b03}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r2, &(0x7f00000020c0)={0x2020}, 0x2020) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r4, 0x331, 0x0, 0xa6ff, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x44}, r5}, 0xc) 2.740977676s ago: executing program 8 (id=1412): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ufs\x00', 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendfile(r2, r1, 0x0, 0x80009) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000000206010000dd000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a300000000028000780180002801400024000000000000000000000ffffac1e00010c00018008000140e000000105000500020000000500010006000000"], 0x70}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) signalfd4(r5, &(0x7f0000000000)={[0x3]}, 0x8, 0x80000) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000300)={0xe0001, 0x0, [0xfffffffffffffffc, 0x0, 0x2, 0x800, 0x400000000000, 0x2, 0x7, 0x3]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x4040850) 1.725999931s ago: executing program 40 (id=1339): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) listen(r0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) sendto$inet6(r0, 0x0, 0x0, 0x20044091, 0x0, 0x0) 1.114301718s ago: executing program 8 (id=1416): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r1, 0x0, 0x0}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000700)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "df1d00", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x14}}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r0, 0xfff) (async) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r1, 0x0, 0x0}, 0x10) (async) syz_emit_ethernet(0x4a, &(0x7f0000000700)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "df1d00", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x14}}}}}}}, 0x0) (async) 1.110683822s ago: executing program 8 (id=1417): r0 = socket$inet6(0xa, 0x6, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6218}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x80}]}}}]}, 0x3c}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES8=r1, @ANYBLOB="0000000000000000280012800a00010076786c616e", @ANYBLOB="4105d1760edee7a7cd485cf4b00730f2de3413b1eebd8e91f9b7eb91ca0411d4d66f9c17ed4108b540550998cfa42a5e59f8abae98b912da10c514984ef07ea1a8083309f8863c28e7efbe0e0803161d0af43701c70f0931fe0daf212a56b1990506436f2fdb931458c53a1554db28"], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000206050000000000000000000000000005000400000000000900020073797a31000000000c000780050014006ad40000050005000200000005000100060000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000a9500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f0000000340)={0x80, 0x0, 0x5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448dd, &(0x7f0000000240)={0x0, 0x0, "957008"}) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r8, &(0x7f0000000bc0)="be", 0x1) syz_usb_disconnect(r7) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) write$char_usb(r8, &(0x7f0000000500)="d115bf0568196d3805002b4a36a05fcf9d3e262023a796b70b37b937708114713ab9d09dc03bd524364932e7fe5c10d84f891ef0d2007cf512c582379bd4aab14ef52c77fef08548aaae1c72efa0c02cf1cedc1b6f337bc279afd9b3da0551707ea7d7f999c91370d7b2b57693310d3a225d09251550df198d52df23f11dde7261dbf5461cd780ee4d157d7abfafcbc99ba91df7bd0610608993d6326f14f1456e217916889155c712578c28d1493d2ed012891e69ab9fecc3396f31befe96ba8e3335b8b2317ca5173d914f3e6b930728a39614249f", 0xd6) 331.495192ms ago: executing program 6 (id=1424): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x1, 0x66c, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000080)) write$sndseq(r0, 0x0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x9d) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 129.838542ms ago: executing program 6 (id=1425): add_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)="4eecb8154e68660cee097a6c3196c6faee81d78479a12d40f10c5c48b067d21052", 0x21, 0xfffffffffffffffb) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x1ff, 0x4, 0x1, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 129.424491ms ago: executing program 6 (id=1426): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x3, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x61, 0x61, 0x0, 0x5f, 0x2e, 0x30, 0x61]}}, &(0x7f0000000140)=""/79, 0x2d, 0x4f, 0x0, 0x7e612973, 0x10000, @value}, 0x28) r2 = timerfd_create(0x8, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "e0f502", 0x54, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@hopopts={0x5e, 0x1, '\x00', [@generic={0x1}, @jumbo={0xc2, 0x4, 0xffff}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x0, {{0x2, 0x1, 0x3, 0x1, 0x0, 0x3, 0x6, 0x36}, 0x1, {0xd5}}}, {0x8, 0x22eb, 0x0, {{0x4, 0x2, 0x0, 0x1, 0x0, 0x2, 0x5, 0x8}, 0x2, {0x7, 0x5, 0x2, 0x8, 0x1, 0x1, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) timerfd_settime(r2, 0x3, &(0x7f00000000c0)={{}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r2, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESHEX=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x200080) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000680), 0x20340, 0x0) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000006c0), 0x428601, 0x0) r7 = accept$inet6(r0, 0x0, &(0x7f0000001b00)) ppoll(&(0x7f0000001b40)=[{r3, 0x1}, {0xffffffffffffffff, 0x2000}, {r0, 0xb08c}, {r0, 0x8027}, {r4, 0x40a0}, {r5, 0x4011}, {0xffffffffffffffff, 0x300}, {r6, 0x20}, {r7, 0x404}], 0x9, &(0x7f0000001bc0), &(0x7f0000001c00)={[0x8]}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51764b5750db1af8, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0}}, 0x10) syz_emit_ethernet(0x1392, &(0x7f0000000740)={@local, @local, @val={@val={0x88a8, 0x7, 0x0, 0x2}, {0x8100, 0x0, 0x1, 0x2}}, {@mpls_uc={0x8847, {[{0x9, 0x0, 0x1}, {0x800, 0x0, 0x1}, {0x1}, {0xf0000}, {0x5a, 0x0, 0x1}, {0x6}, {0xffff7}, {0x8}], @ipv6=@icmpv6={0x8, 0x6, "0e23e2", 0x1334, 0x3a, 0x0, @loopback, @local, {[@srh={0x2f, 0x8, 0x4, 0x4, 0x8, 0x38, 0xc, [@local, @remote, @private1, @mcast2]}, @fragment={0x33, 0x0, 0x0, 0x0, 0x0, 0x16, 0x68}], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x1a, 0x11, "345e5798586bd9a409075a2fc9d8d59dc4a0f37fd3ebc09ead0c68a9fe2bd381085da4e4e6d0c61a3a9cd8e63a1e751fcf2d7f1bf04106cb24b661f0268b5017d38bceb69c6487bddee923748ebafc017b14200ec401a43f0662f0ba50f1fb956f0e92b9b3a6aa5bd5553b445c3455367f0ba22c880a08b96051c5cf8998f866681e1917abff37fe446d"}, {0x4, 0x1f, "da0c02ebcb53d9aca92b028eaa70251cfcf42c9ec7d6c728a05ba1373a5644c495e4a04b43d9fa8e0e4fcf9af8e1c4f2d479866196ccf218ba61cca58f566063e14cdf352b7f69f5b5645b9f04ef9465673e83c7a2143ab4e36d669503657088cc148345bf5dcaff0260e2731c61e58364b144c70619d7802e8d573fcc70d6d56418c380244569ac62a657ad607e741927d07aea45f298804608e4c8d6966ae8fed2f6be82414bd9adf1f4f4d2e24e27fb85ebf33b0e78597a33f8166b2d09987863127c276ecb78e38db6818254e85d8532ec0904bd080591376641a54c3dcb612e02802f2d1379a5c6eff5fbdd2408448b02ffe649ff"}, {0x22, 0xc, "9f16c14ea8b08066071a218912a0d6eaf3e6934c1b676d86e44895d4050f6fed04fa50bd8c1f391045a96336f493880d0ed44b3738720b77f0f92366b084408ab676164e1edcc6fd64bfb5becaf36fb9f4bbb803b56a20db461763a10ecc3bf147fb367842"}, {0x22, 0x1d, "e659db1ae27c801e33e5839367d9dd11ff6cf71c464f456bf8d796f7c5a278453729d801cca35445dd07454c3eb8919ab1773226d8d8a893d55f0d4f45c6471e17f798022c8d8d020f24b5cd00c305cbfeb440271dd2b82e1fe7f31f0efd3f79e16a2693f887b83df6d0fc6ae80012d5803ebc7f5958f1adfe79b1bff5c55cb512f9e0656c79ce46290512e950f5484e157eac2a1470fdf335c3a7f240ec142490fc3f8bcbb5b6ea4c1c5f4de5eec5f90bac862f90e7f462a86c2a2c6e2a234ff7c4c06061e8996a5e5045d3dfbaa07fb87238efbd63455357da64fa1680aa59742b800ed9831cdf35683687"}, {0x2, 0x200, "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"}]}}}}}}}, &(0x7f0000000500)={0x0, 0x3, [0x393, 0x82f, 0x7a2, 0xea9]}) r8 = syz_open_dev$evdev(&(0x7f00000001c0), 0x34, 0x101000) ioctl$EVIOCGSND(r8, 0x8040451a, &(0x7f00000003c0)=""/197) 61.523844ms ago: executing program 6 (id=1427): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32, @ANYBLOB="200001"], 0x38}, 0x1, 0x200000000000000}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000003600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003640)={0x44, r4, 0xdad7910243f6aa75, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}}, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x60, r5, 0x400, 0x70bd29, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r1}, {0x23, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r1}}}]}}]}, 0x60}, 0x1, 0xf000}, 0x40080) 949.316µs ago: executing program 6 (id=1428): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x5}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vim2m(0x0, 0x6, 0x2) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "0d64bc", 0x0, 0x3b, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x4003b9, 'syz0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'virt_wifi0\x00', 'pimreg\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a31000000032c000000030a010200000000000000000100000009000300732271e505ed5b69c100010073797a31000000002c000000050a01020000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001140000001100010000000000000000000000000a"], 0xc8}}, 0x0) 0s ago: executing program 6 (id=1429): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63d, 0x1, 0x2, 0xd59f83, 0x19f2, 0x3b, 0x19ef, 0x2800, 0x4, 0x2800, 0x2800, 0x2, 0xba2, 0x0, 0x1a, {0x8, 0xffffffff}, 0xd1, 0x9}}) kernel console output (not intermixed with test programs): 36007.703:826): avc: denied { accept } for pid=10526 comm="syz.8.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 126.040916][T10533] netlink: 48 bytes leftover after parsing attributes in process `syz.2.989'. [ 126.235250][T10546] netlink: 'syz.2.994': attribute type 12 has an invalid length. [ 126.306460][ T5939] block nbd1: Receive control failed (result -32) [ 126.306479][ T5946] block nbd1: Receive control failed (result -32) [ 126.306906][T10494] block nbd1: shutting down sockets [ 126.657931][T10563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.998'. [ 126.887628][T10572] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1001'. [ 126.933848][ T7791] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 127.085332][ T7791] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 127.087894][ T7791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.091078][ T7791] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 127.093340][ T7791] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 127.102011][ T7791] usb 6-1: Manufacturer: syz [ 127.113339][ T7791] usb 6-1: config 0 descriptor?? [ 127.154285][ T7791] rc_core: IR keymap rc-hauppauge not found [ 127.156139][ T7791] Registered IR keymap rc-empty [ 127.157933][ T7791] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 127.161296][ T7791] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input14 [ 127.384608][ T8088] usb 6-1: USB disconnect, device number 5 [ 127.462350][T10617] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 127.543774][ T64] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 127.734307][ T64] usb 11-1: Using ep0 maxpacket: 32 [ 127.739526][ T64] usb 11-1: config index 0 descriptor too short (expected 156, got 27) [ 127.741618][ T64] usb 11-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 127.744574][ T64] usb 11-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 127.747397][ T64] usb 11-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 127.750696][ T64] usb 11-1: config 0 interface 0 has no altsetting 0 [ 127.754607][ T64] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 127.756913][ T64] usb 11-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 127.759554][ T64] usb 11-1: Product: syz [ 127.761057][ T64] usb 11-1: Manufacturer: syz [ 127.762715][ T64] usb 11-1: SerialNumber: syz [ 127.764965][ T64] usb 11-1: config 0 descriptor?? [ 127.767294][ T64] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 127.770342][ T64] ldusb 11-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 127.965745][T10646] binder_alloc: 10644: binder_install_single_page failed to insert page at offset 0 with -14 [ 127.968016][ T64] usb 11-1: USB disconnect, device number 12 [ 127.969332][T10646] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 127.973917][ T64] ldusb 11-1:0.0: LD USB Device #0 now disconnected [ 127.977063][T10646] netlink: 'syz.1.1021': attribute type 46 has an invalid length. [ 128.255495][T10657] siw: device registration error -23 [ 128.518160][T10692] __nla_validate_parse: 8 callbacks suppressed [ 128.518170][T10692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1036'. [ 128.672257][T10702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1038'. [ 128.674919][T10702] netlink: 'syz.1.1038': attribute type 3 has an invalid length. [ 128.683140][T10702] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.685455][T10702] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.688031][T10702] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.690429][T10702] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.692726][T10702] vxlan0: entered promiscuous mode [ 128.751786][T10708] Bluetooth: MGMT ver 1.23 [ 128.758239][T10708] binder: 10707:10708 unknown command 2128716201 [ 128.759968][T10708] binder: 10707:10708 ioctl c0306201 20000480 returned -22 [ 128.928712][ T8] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 129.074170][ T8] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 129.076974][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.079233][ T8] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.082023][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 129.084739][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.087153][ T8] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.089928][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 129.092326][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.094896][ T8] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.098052][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 129.100469][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.102733][ T8] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.105824][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 129.108224][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.110575][ T8] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.113323][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 129.116142][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.118586][ T8] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.121366][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 129.123780][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.126077][ T8] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.128979][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 129.131539][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.134004][ T8] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.136823][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 129.139939][ T8] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 129.142257][ T8] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 129.144449][ T8] usb 7-1: Product: syz [ 129.145541][ T8] usb 7-1: Manufacturer: syz [ 129.146737][ T8] usb 7-1: SerialNumber: syz [ 129.148859][ T8] usb 7-1: config 0 descriptor?? [ 129.152547][ T8] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 129.353205][ T8088] usb 7-1: USB disconnect, device number 10 [ 129.355922][ T8088] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 129.476179][T10733] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1048'. [ 129.478219][T10733] netlink: 'syz.1.1048': attribute type 1 has an invalid length. [ 129.480027][T10733] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1048'. [ 129.705664][T10763] xt_l2tp: wrong L2TP version: 0 [ 129.803878][ T4487] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 129.811010][T10766] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 129.812744][T10766] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 129.817189][T10766] vhci_hcd vhci_hcd.0: Device attached [ 129.826443][T10767] vhci_hcd: unknown pdu 2 [ 129.827704][ T1237] vhci_hcd: stop threads [ 129.828022][T10770] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1058'. [ 129.828834][ T1237] vhci_hcd: release socket [ 129.832281][ T1237] vhci_hcd: disconnect device [ 129.880895][T10772] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1059'. [ 129.883223][T10772] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1059'. [ 129.885954][T10772] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1059'. [ 129.958995][ T4487] usb 7-1: config 11 has an invalid interface number: 143 but max is 1 [ 129.961188][ T4487] usb 7-1: config 11 has an invalid interface number: 2 but max is 1 [ 129.963240][ T4487] usb 7-1: config 11 has an invalid interface number: 61 but max is 1 [ 129.965390][ T4487] usb 7-1: config 11 has an invalid descriptor of length 225, skipping remainder of the config [ 129.968073][ T4487] usb 7-1: config 11 has 3 interfaces, different from the descriptor's value: 2 [ 129.970308][ T4487] usb 7-1: config 11 has no interface number 0 [ 129.971916][ T4487] usb 7-1: config 11 has no interface number 1 [ 129.973550][ T4487] usb 7-1: config 11 interface 143 altsetting 0 endpoint 0x1 has invalid maxpacket 1048, setting to 8 [ 129.977543][ T4487] usb 7-1: config 11 interface 143 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 13 [ 129.981993][ T4487] usb 7-1: config 11 interface 2 altsetting 161 endpoint 0x6 has invalid maxpacket 1024, setting to 8 [ 129.985034][ T4487] usb 7-1: config 11 interface 2 altsetting 161 has a duplicate endpoint with address 0x6, skipping [ 129.987855][ T4487] usb 7-1: config 11 interface 2 altsetting 161 endpoint 0x4 has invalid maxpacket 32, setting to 8 [ 129.990592][ T4487] usb 7-1: config 11 interface 2 altsetting 161 endpoint 0xC has invalid maxpacket 1024, setting to 8 [ 129.993394][ T4487] usb 7-1: config 11 interface 2 altsetting 161 endpoint 0xA has invalid maxpacket 512, setting to 8 [ 129.996254][ T4487] usb 7-1: config 11 interface 2 altsetting 161 endpoint 0xE is Bulk; changing to Interrupt [ 129.998869][ T4487] usb 7-1: config 11 interface 2 altsetting 161 has a duplicate endpoint with address 0xC, skipping [ 130.001443][ T4487] usb 7-1: config 11 interface 2 altsetting 161 endpoint 0x2 has invalid maxpacket 16, setting to 8 [ 130.004167][ T4487] usb 7-1: config 11 interface 2 altsetting 161 has an invalid descriptor for endpoint zero, skipping [ 130.006841][ T4487] usb 7-1: config 11 interface 2 altsetting 161 endpoint 0xD has invalid maxpacket 1088, setting to 8 [ 130.009626][ T4487] usb 7-1: config 11 interface 61 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 130.013352][ T4487] usb 7-1: config 11 interface 2 has no altsetting 0 [ 130.015243][ T4487] usb 7-1: config 11 interface 61 has no altsetting 0 [ 130.019328][ T4487] usb 7-1: Dual-Role OTG device on HNP port [ 130.021146][ T4487] usb 7-1: New USB device found, idVendor=046d, idProduct=092c, bcdDevice=2b.bc [ 130.023493][ T4487] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.025631][ T4487] usb 7-1: Product: ࠝ [ 130.026739][ T4487] usb 7-1: Manufacturer: ⠊ [ 130.028092][ T4487] usb 7-1: SerialNumber: 鍌鐎偩翗쐸壢칡䏳઺隐롐⸜딒금巧鱧걟槳᭳떶ᨆಫ쁎臵䅘癗絆㩿쀞充诐剆퉗ⱬ﹔嚶㊈Ѭ㦀鈚甛ﯠ翨鶞⒱뷁舫鲍帻ⴑ溇쭡닣᪉歍埛奈鰲촣姝┦ [ 130.242427][T10794] delete_channel: no stack [ 130.243796][T10794] delete_channel: no stack [ 130.245057][T10794] delete_channel: no stack [ 130.246283][T10794] delete_channel: no stack [ 130.247495][T10794] delete_channel: no stack [ 130.248703][T10794] delete_channel: no stack [ 130.267245][ T4487] usb 7-1: USB disconnect, device number 11 [ 130.277334][T10802] overlayfs: missing 'lowerdir' [ 130.279084][T10803] overlayfs: missing 'lowerdir' [ 130.297525][ T39] kauditd_printk_skb: 97 callbacks suppressed [ 130.297535][ T39] audit: type=1400 audit(1731236012.063:924): avc: denied { read } for pid=10805 comm="syz.8.1068" name="blkio.bfq.io_serviced" dev="9p" ino=36837410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 130.307085][ T39] audit: type=1400 audit(1731236012.063:925): avc: denied { map } for pid=10805 comm="syz.8.1068" path="/190/file0/blkio.bfq.io_serviced" dev="9p" ino=36837410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 130.324962][T10806] tipc: Enabled bearer , priority 10 [ 130.390166][T10814] batman_adv: batadv0: Adding interface: dummy0 [ 130.391793][T10814] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.398331][T10814] batman_adv: batadv0: Interface activated: dummy0 [ 130.402628][ T39] audit: type=1400 audit(1731236012.163:926): avc: denied { ioctl } for pid=10813 comm="syz.1.1073" path="socket:[38195]" dev="sockfs" ino=38195 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 130.406840][T10814] batadv0: mtu less than device minimum [ 130.411462][T10814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.415119][T10814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.418461][T10814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.421805][T10814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.425280][T10814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.428653][T10814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.432004][T10814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.435346][T10814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.438578][T10814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.767804][ T39] audit: type=1400 audit(1731236012.533:927): avc: denied { write } for pid=10824 comm="syz.2.1075" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 130.808834][T10827] input: syz1 as /devices/virtual/input/input15 [ 130.824923][ T39] audit: type=1326 audit(1731236012.593:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10829 comm="syz.1.1077" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a5f7e719 code=0x7ffc0000 [ 130.831219][ T39] audit: type=1326 audit(1731236012.593:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10829 comm="syz.1.1077" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a5f7e719 code=0x7ffc0000 [ 130.838906][ T39] audit: type=1326 audit(1731236012.593:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10829 comm="syz.1.1077" exe="/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa9a5f7e719 code=0x7ffc0000 [ 130.845060][ T39] audit: type=1326 audit(1731236012.593:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10829 comm="syz.1.1077" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa9a5f7e753 code=0x7ffc0000 [ 130.850860][ T39] audit: type=1326 audit(1731236012.593:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10829 comm="syz.1.1077" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa9a5f7e753 code=0x7ffc0000 [ 130.856912][ T39] audit: type=1326 audit(1731236012.593:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10829 comm="syz.1.1077" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a5f7e719 code=0x7ffc0000 [ 130.961960][T10835] syzkaller0: entered promiscuous mode [ 130.963477][T10835] syzkaller0: entered allmulticast mode [ 130.988476][T10839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.994396][T10839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.202671][T10842] tmpfs: Bad value for 'huge' [ 131.205325][T10842] netlink: 'syz.6.1081': attribute type 1 has an invalid length. [ 131.207377][T10842] netlink: 9116 bytes leftover after parsing attributes in process `syz.6.1081'. [ 131.209903][T10842] netlink: 'syz.6.1081': attribute type 1 has an invalid length. [ 131.211908][T10842] netlink: 217 bytes leftover after parsing attributes in process `syz.6.1081'. [ 131.248840][ T30] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 131.283556][T10849] fuse: Unknown parameter ' ]0x0000000000000003' [ 131.413945][ T30] usb 7-1: Using ep0 maxpacket: 8 [ 131.416510][ T30] usb 7-1: no configurations [ 131.417682][ T30] usb 7-1: can't read configurations, error -22 [ 131.553768][ T30] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 131.714610][ T30] usb 7-1: Using ep0 maxpacket: 8 [ 131.725256][ T5939] Bluetooth: hci0: command tx timeout [ 131.727107][ T30] usb 7-1: no configurations [ 131.728354][ T30] usb 7-1: can't read configurations, error -22 [ 131.730071][ T30] usb usb7-port1: attempt power cycle [ 132.073848][ T30] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 132.104219][ T30] usb 7-1: Using ep0 maxpacket: 8 [ 132.120038][ T30] usb 7-1: no configurations [ 132.121299][ T30] usb 7-1: can't read configurations, error -22 [ 132.264265][ T30] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 132.284641][ T30] usb 7-1: Using ep0 maxpacket: 8 [ 132.285767][ T30] usb 7-1: no configurations [ 132.285778][ T30] usb 7-1: can't read configurations, error -22 [ 132.285973][ T30] usb usb7-port1: unable to enumerate USB device [ 132.446078][ T1410] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.450364][ T1410] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.598797][T10886] netlink: 'syz.1.1092': attribute type 5 has an invalid length. [ 132.826554][T10906] 9pnet_fd: Insufficient options for proto=fd [ 132.828470][T10906] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10906 comm=syz.1.1099 [ 132.862071][T10908] loop7: detected capacity change from 0 to 16384 [ 132.937167][T10908] blk_print_req_error: 57 callbacks suppressed [ 132.937178][T10908] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.941354][T10908] buffer_io_error: 31 callbacks suppressed [ 132.941362][T10908] Buffer I/O error on dev loop7, logical block 0, async page read [ 132.945404][T10909] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.947961][T10908] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.950309][T10908] Buffer I/O error on dev loop7, logical block 0, async page read [ 132.952367][T10908] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.954896][T10908] Buffer I/O error on dev loop7, logical block 0, async page read [ 132.957160][T10908] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.959591][T10908] Buffer I/O error on dev loop7, logical block 0, async page read [ 132.961648][T10908] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.964341][T10908] Buffer I/O error on dev loop7, logical block 0, async page read [ 132.966433][T10908] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.968863][T10908] Buffer I/O error on dev loop7, logical block 0, async page read [ 132.970936][T10908] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.973232][T10908] Buffer I/O error on dev loop7, logical block 0, async page read [ 132.976371][T10908] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.979199][T10908] Buffer I/O error on dev loop7, logical block 0, async page read [ 132.981277][T10908] ldm_validate_partition_table(): Disk read failed. [ 132.982990][T10908] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.985868][T10908] Buffer I/O error on dev loop7, logical block 0, async page read [ 132.988256][T10908] Buffer I/O error on dev loop7, logical block 0, async page read [ 132.990564][T10908] Dev loop7: unable to read RDB block 0 [ 132.992540][T10908] loop7: unable to read partition table [ 132.994624][T10908] loop_reread_partitions: partition scan of loop7 (K>i) /480# $qZI[u@3bj!5MM]z) failed (rc=-5) [ 133.511091][T10928] ipvlan1: entered allmulticast mode [ 133.512927][T10928] veth0_vlan: entered allmulticast mode [ 133.663728][T10932] __nla_validate_parse: 2 callbacks suppressed [ 133.663739][T10932] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1105'. [ 133.993040][T10958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1112'. [ 134.010347][T10958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1112'. [ 134.016746][T10962] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 134.018655][T10962] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 134.024240][T10962] vhci_hcd vhci_hcd.0: Device attached [ 134.031717][T10963] vhci_hcd: unknown pdu 2 [ 134.034181][ T1135] vhci_hcd: stop threads [ 134.035741][ T1135] vhci_hcd: release socket [ 134.037357][ T1135] vhci_hcd: disconnect device [ 134.050548][T10968] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1115'. [ 134.392048][T10977] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 134.396271][T10977] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1117'. [ 134.409939][T10977] netlink: 'syz.1.1117': attribute type 10 has an invalid length. [ 134.414591][T10977] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.416618][T10977] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.422008][T10977] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.423915][T10977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.425886][T10977] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.427738][T10977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.430965][T10977] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 134.455285][ T11] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex [ 134.576576][T10991] fuse: Unknown parameter 'root' [ 134.637589][T11002] UHID_CREATE from different security context by process 572 (syz.6.1124), this is not allowed. [ 134.891072][T11031] libceph: resolve ' [ 134.891072][T11031] -&fYǝa2i [ 134.891072][T11031] .?&*&' (ret=-3): failed [ 134.954818][T11042] tipc: Enabling not permitted [ 134.963113][T11042] tipc: Enabling of bearer rejected, failed to enable media [ 134.978263][T11044] tipc: Enabling not permitted [ 134.979738][T11044] tipc: Enabling of bearer rejected, failed to enable media [ 135.187309][T11064] vlan3: entered allmulticast mode [ 135.188702][T11064] bridge_slave_0: entered allmulticast mode [ 135.194287][T11064] bridge_slave_0: left allmulticast mode [ 135.386973][T11076] lo speed is unknown, defaulting to 1000 [ 135.658921][T11088] Bluetooth: (null): Too short H5 packet [ 135.777320][ T1237] Bluetooth: (null): Invalid header checksum [ 135.779114][ T1237] Bluetooth: (null): Invalid header checksum [ 135.892805][ T1131] Bluetooth: (null): Invalid header checksum [ 135.913008][ T39] kauditd_printk_skb: 68 callbacks suppressed [ 135.913024][ T39] audit: type=1400 audit(135.815:1002): avc: denied { create } for pid=11092 comm="syz.6.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 135.923491][ T39] audit: type=1400 audit(135.825:1003): avc: denied { setopt } for pid=11092 comm="syz.6.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 135.930706][ T39] audit: type=1400 audit(135.835:1004): avc: denied { write } for pid=11092 comm="syz.6.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 135.935741][ T39] audit: type=1400 audit(135.845:1005): avc: denied { connect } for pid=11092 comm="syz.6.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 135.995741][ T1135] Bluetooth: (null): Invalid header checksum [ 136.104570][ T1135] Bluetooth: (null): Invalid header checksum [ 136.195920][ T39] audit: type=1400 audit(136.105:1006): avc: denied { getopt } for pid=11094 comm="syz.1.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 136.225171][ T45] Bluetooth: (null): Invalid header checksum [ 136.252526][ T39] audit: type=1400 audit(136.155:1007): avc: denied { create } for pid=11097 comm="syz.1.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 136.258731][ T39] audit: type=1400 audit(136.165:1008): avc: denied { map } for pid=11097 comm="syz.1.1151" path="socket:[37694]" dev="sockfs" ino=37694 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 136.265057][ T39] audit: type=1400 audit(136.165:1009): avc: denied { read } for pid=11097 comm="syz.1.1151" path="socket:[37694]" dev="sockfs" ino=37694 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 136.287280][T11098] lo speed is unknown, defaulting to 1000 [ 136.345773][ T1135] Bluetooth: (null): Invalid header checksum [ 136.457826][ T39] audit: type=1400 audit(136.365:1010): avc: denied { getopt } for pid=11103 comm="syz.1.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 136.848460][T11117] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 136.850914][T11117] netlink: 87028 bytes leftover after parsing attributes in process `syz.2.1156'. [ 137.224631][T11122] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1159'. [ 137.282543][T11131] befs: (nbd6): No write support. Marking filesystem read-only [ 137.291847][T11131] syz.6.1159: attempt to access beyond end of device [ 137.291847][T11131] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 137.295275][T11131] befs: (nbd6): unable to read superblock [ 137.368538][T11122] hsr_slave_1 (unregistering): left allmulticast mode [ 137.386279][T11122] hsr_slave_1 (unregistering): left promiscuous mode [ 137.415039][T11138] dlm: no local IP address has been set [ 137.417732][T11138] dlm: cannot start dlm midcomms -107 [ 137.420310][ T39] audit: type=1400 audit(137.325:1011): avc: denied { bind } for pid=11135 comm="syz.2.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 137.467087][T11143] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1166'. [ 137.512326][T11150] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 137.530555][T11152] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1169'. [ 137.533077][T11152] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1169'. [ 137.549316][T11152] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 137.559218][T11156] net_ratelimit: 10 callbacks suppressed [ 137.559228][T11156] ebtables: ebtables: counters copy to user failed while replacing table [ 137.657508][T11164] nbd: device at index 2 is going down [ 137.777269][T11179] cgroup: fork rejected by pids controller in /syz2 [ 137.933206][T11013] syz.8.1126: vmalloc error: size 3268608, failed to allocated page array size 6384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz8,mems_allowed=0-1 [ 137.937803][T11013] CPU: 1 UID: 0 PID: 11013 Comm: syz.8.1126 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 137.940550][T11013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 137.943312][T11013] Call Trace: [ 137.944199][T11013] [ 137.944981][T11013] dump_stack_lvl+0x16c/0x1f0 [ 137.946232][T11013] warn_alloc+0x24d/0x3a0 [ 137.947371][T11013] ? __pfx_warn_alloc+0x10/0x10 [ 137.948651][T11013] ? __get_vm_area_node+0x190/0x2d0 [ 137.950002][T11013] ? __get_vm_area_node+0x1bc/0x2d0 [ 137.951359][T11013] __vmalloc_node_range_noprof+0x114a/0x15a0 [ 137.952939][T11013] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 137.954550][T11013] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 137.956187][T11013] ? __get_vm_area_node+0x190/0x2d0 [ 137.957536][T11013] ? __get_vm_area_node+0x1bc/0x2d0 [ 137.958897][T11013] __vmalloc_node_range_noprof+0xd85/0x15a0 [ 137.960430][T11013] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 137.962037][T11013] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 137.963641][T11013] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 137.965254][T11013] ? rcu_is_watching+0x12/0xc0 [ 137.966525][T11013] ? rcu_is_watching+0x12/0xc0 [ 137.967766][T11013] ? trace_kmalloc+0x2d/0xe0 [ 137.968971][T11013] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 137.970448][T11013] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 137.972030][T11013] __kvmalloc_node_noprof+0x14f/0x1a0 [ 137.973437][T11013] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 137.975037][T11013] __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 137.976592][T11013] vivid_update_format_cap+0x127b/0x2530 [ 137.978055][T11013] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 137.979612][T11013] ? v4l2_match_dv_timings+0x1df/0x1010 [ 137.981049][T11013] vivid_vid_cap_s_dv_timings+0xc0f/0xfb0 [ 137.982537][T11013] vidioc_s_dv_timings+0xa5/0xc0 [ 137.983828][T11013] ? v4l_stub_s_dv_timings+0x1b/0x60 [ 137.985201][T11013] __video_do_ioctl+0xaf0/0xf00 [ 137.986477][T11013] ? __pfx___video_do_ioctl+0x10/0x10 [ 137.987867][T11013] ? __might_fault+0xe3/0x190 [ 137.989097][T11013] video_usercopy+0x4ce/0x1600 [ 137.990354][T11013] ? __pfx___video_do_ioctl+0x10/0x10 [ 137.991748][T11013] ? __pfx_video_usercopy+0x10/0x10 [ 137.993116][T11013] v4l2_ioctl+0x1ba/0x250 [ 137.994252][T11013] ? __pfx_v4l2_ioctl+0x10/0x10 [ 137.995517][T11013] __x64_sys_ioctl+0x18f/0x220 [ 137.996774][T11013] do_syscall_64+0xcd/0x250 [ 137.997958][T11013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.999501][T11013] RIP: 0033:0x7f917557e719 [ 138.000666][T11013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.005604][T11013] RSP: 002b:00007f91763e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.007760][T11013] RAX: ffffffffffffffda RBX: 00007f9175735f80 RCX: 00007f917557e719 [ 138.009809][T11013] RDX: 0000000020000040 RSI: 00000000c0845657 RDI: 0000000000000004 [ 138.011854][T11013] RBP: 00007f91755f139e R08: 0000000000000000 R09: 0000000000000000 [ 138.013895][T11013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.015941][T11013] R13: 0000000000000000 R14: 00007f9175735f80 R15: 00007ffc9f5a0f78 [ 138.017983][T11013] [ 138.019296][T11013] Mem-Info: [ 138.020141][T11013] active_anon:6894 inactive_anon:0 isolated_anon:0 [ 138.020141][T11013] active_file:4707 inactive_file:47923 isolated_file:0 [ 138.020141][T11013] unevictable:1767 dirty:130 writeback:0 [ 138.020141][T11013] slab_reclaimable:9749 slab_unreclaimable:80958 [ 138.020141][T11013] mapped:17985 shmem:2521 pagetables:1198 [ 138.020141][T11013] sec_pagetables:316 bounce:0 [ 138.020141][T11013] kernel_misc_reclaimable:0 [ 138.020141][T11013] free:414673 free_pcp:8269 free_cma:0 [ 138.031515][T11013] Node 0 active_anon:27576kB inactive_anon:0kB active_file:18820kB inactive_file:191692kB unevictable:3532kB isolated(anon):0kB isolated(file):0kB mapped:71940kB dirty:516kB writeback:0kB shmem:6548kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13520kB pagetables:4792kB sec_pagetables:1264kB all_unreclaimable? no [ 138.039847][T11013] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? yes [ 138.047445][T11013] Node 0 DMA free:14460kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:452kB local_pcp:292kB free_cma:0kB [ 138.054377][T11013] lowmem_reserve[]: 0 1214 0 0 0 [ 138.055697][T11013] Node 0 DMA32 free:78092kB boost:0kB min:27636kB low:34544kB high:41452kB reserved_highatomic:0KB active_anon:27576kB inactive_anon:0kB active_file:18820kB inactive_file:191692kB unevictable:3532kB writepending:516kB present:2080628kB managed:1272196kB mlocked:0kB bounce:0kB free_pcp:2820kB local_pcp:356kB free_cma:0kB [ 138.063245][T11013] lowmem_reserve[]: 0 0 0 0 0 [ 138.064586][T11013] Node 1 Normal free:1566140kB boost:0kB min:39600kB low:49500kB high:59400kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:29772kB local_pcp:11412kB free_cma:0kB [ 138.071979][T11013] lowmem_reserve[]: 0 0 0 0 0 [ 138.073250][T11013] Node 0 DMA: 3*4kB (UM) 9*8kB (UM) 7*16kB (UM) 6*32kB (UM) 8*64kB (UM) 8*128kB (UM) 9*256kB (UM) 6*512kB (UM) 3*1024kB (U) 2*2048kB (U) 0*4096kB = 14468kB [ 138.077440][T11013] Node 0 DMA32: 150*4kB (UME) 180*8kB (UME) 207*16kB (ME) 139*32kB (UME) 73*64kB (ME) 29*128kB (ME) 21*256kB (UME) 14*512kB (ME) 16*1024kB (UM) 9*2048kB (UM) 3*4096kB (UM) = 77832kB [ 138.082225][T11013] Node 1 Normal: 18*4kB (UE) 25*8kB (UME) 63*16kB (UME) 142*32kB (UME) 73*64kB (UME) 36*128kB (UME) 19*256kB (UE) 18*512kB (UM) 11*1024kB (U) 15*2048kB (UME) 365*4096kB (UM) = 1566208kB [ 138.087020][T11013] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 138.089469][T11013] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 138.091882][T11013] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 138.094878][T11013] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 138.097265][T11013] 55152 total pagecache pages [ 138.098555][T11013] 0 pages in swap cache [ 138.099650][T11013] Free swap = 123944kB [ 138.100730][T11013] Total swap = 124996kB [ 138.101818][T11013] 1048443 pages RAM [ 138.102810][T11013] 0 pages HighMem/MovableOnly [ 138.104112][T11013] 281073 pages reserved [ 138.105166][T11013] 0 pages cma reserved [ 138.236687][ T5946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 138.240963][ T5946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 138.244637][ T5946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 138.248873][ T5946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 138.252324][ T5946] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 138.257965][ T5946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 138.273532][T11183] lo speed is unknown, defaulting to 1000 [ 138.348666][T11183] chnl_net:caif_netlink_parms(): no params data found [ 138.381442][T11189] syz.8.1179 (11189): attempted to duplicate a private mapping with mremap. This is not supported. [ 138.428909][T11193] PKCS7: Unknown OID: [5] 2.28.108.101.114.49.0.0.0.0.0.0.1.8448.0.0.0.0.0. [ 138.431163][T11193] PKCS7: Only support pkcs7_signedData type [ 138.465445][T11183] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.467449][T11183] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.469411][T11183] bridge_slave_0: entered allmulticast mode [ 138.471586][T11183] bridge_slave_0: entered promiscuous mode [ 138.474572][T11183] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.476461][T11183] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.478404][T11183] bridge_slave_1: entered allmulticast mode [ 138.480379][T11183] bridge_slave_1: entered promiscuous mode [ 138.511443][T11183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.516421][T11183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.560002][T11183] team0: Port device team_slave_0 added [ 138.562752][T11183] team0: Port device team_slave_1 added [ 138.613488][ T45] bridge_slave_1: left allmulticast mode [ 138.615076][ T45] bridge_slave_1: left promiscuous mode [ 138.616566][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.619327][ T45] bridge_slave_0: left allmulticast mode [ 138.620793][ T45] bridge_slave_0: left promiscuous mode [ 138.622317][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.653764][ T6014] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 138.833762][ T6014] usb 13-1: Using ep0 maxpacket: 8 [ 138.836315][ T6014] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 138.839236][ T6014] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 138.841623][ T6014] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.852781][ T6014] usb 13-1: config 0 descriptor?? [ 138.886546][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.889790][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.892685][ T45] bond0 (unregistering): Released all slaves [ 138.899876][T11183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.901701][T11183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.908319][T11183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.913357][T11183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.915490][T11183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.922723][T11183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.946652][T11183] hsr_slave_0: entered promiscuous mode [ 138.957498][T11183] hsr_slave_1: entered promiscuous mode [ 138.964492][T11183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.966465][T11183] Cannot create hsr debugfs directory [ 139.060643][ T6014] iowarrior 13-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 139.166387][T11227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11227 comm=syz.6.1188 [ 139.169786][T11227] netlink: 'syz.6.1188': attribute type 1 has an invalid length. [ 139.178496][T11227] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.185294][T11227] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 139.188503][T11227] bond1: (slave batadv1): making interface the new active one [ 139.191198][T11227] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 139.221046][T11232] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 139.231318][ T45] hsr_slave_0: left promiscuous mode [ 139.233493][ T45] hsr_slave_1: left promiscuous mode [ 139.235459][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.239368][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.382262][ T8] usb 13-1: USB disconnect, device number 9 [ 139.385598][ T8] iowarrior 13-1:0.0: I/O-Warror #0 now disconnected [ 139.460824][ T5939] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 139.915170][ T45] team0 (unregistering): Port device team_slave_1 removed [ 139.997462][ T45] team0 (unregistering): Port device team_slave_0 removed [ 140.284195][ T5939] Bluetooth: hci2: command tx timeout [ 140.596801][T11244] netlink: 'syz.6.1192': attribute type 21 has an invalid length. [ 140.598923][T11244] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1192'. [ 140.601611][T11249] netlink: 'syz.8.1193': attribute type 39 has an invalid length. [ 140.726847][T11264] Error parsing options; rc = [-22] [ 140.729928][T11264] befs: Invalid gid -1, using default [ 140.731363][T11264] befs: (nullb0): No write support. Marking filesystem read-only [ 140.734842][T11264] befs: (nullb0): invalid magic header [ 140.873831][T11279] netlink: 160 bytes leftover after parsing attributes in process `syz.6.1200'. [ 140.876237][T11279] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1200'. [ 140.879184][T11279] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1200'. [ 140.890978][T11282] xt_CT: No such helper "snmp" [ 140.893996][T11183] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 140.903367][T11183] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 140.918657][T11183] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 140.925419][T11183] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 140.975608][T11183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.987188][T11183] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.991751][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.993681][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.998466][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.000315][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.105175][T11183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.122294][T11183] veth0_vlan: entered promiscuous mode [ 141.126485][T11183] veth1_vlan: entered promiscuous mode [ 141.137277][T11183] veth0_macvtap: entered promiscuous mode [ 141.139030][T11307] binfmt_misc: register: failed to install interpreter file ./file0 [ 141.140388][T11183] veth1_macvtap: entered promiscuous mode [ 141.146903][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.149522][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.151950][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.155118][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.157550][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.160116][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.162537][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.165444][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.169498][T11183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.176725][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.179893][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.182287][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.185154][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.187567][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.190149][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.192557][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.195228][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.198310][T11183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.202041][T11183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.205364][T11183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.207539][T11183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.209698][T11183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.245578][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.247924][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.272206][ T45] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.275182][ T45] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.292380][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.294835][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.303120][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 141.303129][ T39] audit: type=1400 audit(141.205:1019): avc: denied { mounton } for pid=11183 comm="syz-executor" path="/syzkaller.klsEJM/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=41383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 141.344578][T11321] 9pnet: p9_errstr2errno: server reported unknown error @΂(QhQI [ 141.366012][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 141.370482][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 141.373170][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 141.377813][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 141.387625][ T45] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.388025][ T5946] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 141.390324][ T45] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.395313][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 141.421276][T11322] lo speed is unknown, defaulting to 1000 [ 141.489753][ T45] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.492492][ T45] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.497808][T11322] chnl_net:caif_netlink_parms(): no params data found [ 141.533811][T11322] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.535747][T11322] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.537615][T11322] bridge_slave_0: entered allmulticast mode [ 141.539829][T11322] bridge_slave_0: entered promiscuous mode [ 141.542478][T11322] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.547665][T11322] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.549581][T11322] bridge_slave_1: entered allmulticast mode [ 141.551558][T11322] bridge_slave_1: entered promiscuous mode [ 141.573208][ T45] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.575981][ T45] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.592348][T11322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.596954][T11322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.618819][T11322] team0: Port device team_slave_0 added [ 141.629646][T11322] team0: Port device team_slave_1 added [ 141.652488][T11322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.655313][T11322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.661814][T11322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.666278][T11322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.668060][T11322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.674653][T11322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.703605][T11322] hsr_slave_0: entered promiscuous mode [ 141.706954][T11322] hsr_slave_1: entered promiscuous mode [ 141.708742][T11322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.710719][T11322] Cannot create hsr debugfs directory [ 141.739156][ T45] bridge_slave_1: left allmulticast mode [ 141.740685][ T45] bridge_slave_1: left promiscuous mode [ 141.742152][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.747941][ T45] bridge_slave_0: left allmulticast mode [ 141.749544][ T45] bridge_slave_0: left promiscuous mode [ 141.751054][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.784799][ T9062] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 141.922435][ T45] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 142.067970][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.072368][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.079285][ T45] bond0 (unregistering): Released all slaves [ 142.083881][ T45] bond1 (unregistering): Released all slaves [ 142.301672][T11360] batman_adv: batadv0: Adding interface: dummy0 [ 142.303258][T11360] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.311475][T11362] overlayfs: missing 'workdir' [ 142.311635][T11360] batman_adv: batadv0: Interface activated: dummy0 [ 142.366423][T11360] batadv0: mtu less than device minimum [ 142.368577][T11360] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 142.372349][T11360] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 142.373815][ T5946] Bluetooth: hci2: command tx timeout [ 142.375905][T11360] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 142.380354][T11360] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 142.383803][T11360] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 142.387168][T11360] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 142.390520][T11360] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 142.393998][T11360] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 142.428724][ T45] hsr_slave_0: left promiscuous mode [ 142.432563][ T45] hsr_slave_1: left promiscuous mode [ 142.435709][ T45] batman_adv: batadv0: Interface deactivated: dummy0 [ 142.437483][ T45] batman_adv: batadv0: Removing interface: dummy0 [ 142.439605][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.441797][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.447345][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.449466][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.472768][ T45] veth1_macvtap: left promiscuous mode [ 142.474435][ T45] veth0_macvtap: left promiscuous mode [ 142.476113][ T45] veth1_vlan: left promiscuous mode [ 142.477525][ T45] veth0_vlan: left promiscuous mode [ 142.580242][ T39] audit: type=1400 audit(142.485:1020): avc: denied { ioctl } for pid=11374 comm="syz.8.1224" path="socket:[38869]" dev="sockfs" ino=38869 ioctlcmd=0x8942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 143.221573][ T45] team0 (unregistering): Port device team_slave_1 removed [ 143.275259][T11388] FAULT_INJECTION: forcing a failure. [ 143.275259][T11388] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 143.281748][T11388] CPU: 0 UID: 0 PID: 11388 Comm: syz.6.1227 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 143.285493][T11388] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 143.288388][T11388] Call Trace: [ 143.289470][T11388] [ 143.290458][T11388] dump_stack_lvl+0x16c/0x1f0 [ 143.291893][T11388] should_fail_ex+0x497/0x5b0 [ 143.293372][T11388] _copy_from_user+0x2e/0xd0 [ 143.294572][T11388] do_ipt_set_ctl+0xa73/0xc30 [ 143.296176][T11388] ? trace_contention_end+0xea/0x140 [ 143.297688][T11388] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 143.299400][T11388] ? __pfx___mutex_lock+0x10/0x10 [ 143.300809][T11388] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 143.302766][T11388] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 143.304434][T11388] nf_setsockopt+0x8a/0xf0 [ 143.305503][T11388] ip_setsockopt+0xcb/0xf0 [ 143.306701][T11388] udp_setsockopt+0x7d/0xd0 [ 143.307878][T11388] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 143.309314][T11388] do_sock_setsockopt+0x222/0x480 [ 143.310630][T11388] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 143.312014][T11388] ? fdget+0x176/0x210 [ 143.313033][T11388] __sys_setsockopt+0x1a4/0x270 [ 143.314234][T11388] ? __pfx___sys_setsockopt+0x10/0x10 [ 143.315553][T11388] ? fput+0x30/0x390 [ 143.316516][T11388] ? ksys_write+0x1ad/0x260 [ 143.317622][T11388] ? __pfx_ksys_write+0x10/0x10 [ 143.318861][T11388] __x64_sys_setsockopt+0xbd/0x160 [ 143.320156][T11388] ? do_syscall_64+0x91/0x250 [ 143.321326][T11388] ? lockdep_hardirqs_on+0x7c/0x110 [ 143.322609][T11388] do_syscall_64+0xcd/0x250 [ 143.323712][T11388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.325158][T11388] RIP: 0033:0x7f9cb677e719 [ 143.326249][T11388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.330930][T11388] RSP: 002b:00007f9cb7510038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 143.332991][T11388] RAX: ffffffffffffffda RBX: 00007f9cb6935f80 RCX: 00007f9cb677e719 [ 143.334952][T11388] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 143.336820][T11388] RBP: 00007f9cb7510090 R08: 00000000000003e0 R09: 0000000000000000 [ 143.338692][T11388] R10: 0000000020000e40 R11: 0000000000000246 R12: 0000000000000001 [ 143.340718][T11388] R13: 0000000000000000 R14: 00007f9cb6935f80 R15: 00007ffc7a85b1d8 [ 143.342642][T11388] [ 143.369130][T11390] libceph: resolve ' [ 143.369130][T11390] -&fYǝa2i [ 143.369130][T11390] .?&*&' (ret=-3): failed [ 143.380334][ T45] team0 (unregistering): Port device team_slave_0 removed [ 143.483765][ T5946] Bluetooth: hci0: command tx timeout [ 143.484900][ T39] audit: type=1400 audit(143.395:1021): avc: denied { bind } for pid=11392 comm="syz.6.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 143.490280][ T39] audit: type=1400 audit(143.395:1022): avc: denied { read } for pid=11392 comm="syz.6.1229" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 143.495561][ T39] audit: type=1400 audit(143.395:1023): avc: denied { listen } for pid=11392 comm="syz.6.1229" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 143.513772][ T39] audit: type=1326 audit(143.415:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11395 comm="syz.6.1230" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cb677e719 code=0x0 [ 144.140213][T11322] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 144.144192][T11322] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 144.147120][T11322] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 144.149956][T11322] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 144.185585][T11322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.208589][T11322] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.214125][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.216054][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.221144][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.223032][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.306996][T11322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.322633][T11322] veth0_vlan: entered promiscuous mode [ 144.327290][T11322] veth1_vlan: entered promiscuous mode [ 144.339816][T11322] veth0_macvtap: entered promiscuous mode [ 144.342863][T11322] veth1_macvtap: entered promiscuous mode [ 144.349581][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.352268][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.354992][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.357664][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.360176][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.362844][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.365913][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.368583][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.371737][T11322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.375954][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.378656][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.381144][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.383939][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.386441][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.389091][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.391583][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.394693][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.397773][T11322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.402331][T11322] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.404702][T11322] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.406948][T11322] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.409162][T11322] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.438168][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.441195][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.443759][ T5946] Bluetooth: hci2: command tx timeout [ 144.456269][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.458354][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.463954][ T58] usb 13-1: new full-speed USB device number 10 using dummy_hcd [ 144.491380][ T39] audit: type=1400 audit(144.395:1025): avc: denied { getopt } for pid=11425 comm="syz.2.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 144.588977][T11438] FAULT_INJECTION: forcing a failure. [ 144.588977][T11438] name failslab, interval 1, probability 0, space 0, times 0 [ 144.595172][T11438] CPU: 0 UID: 0 PID: 11438 Comm: syz.6.1237 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 144.598009][T11438] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.600748][T11438] Call Trace: [ 144.601599][T11438] [ 144.602353][T11438] dump_stack_lvl+0x16c/0x1f0 [ 144.603596][T11438] should_fail_ex+0x497/0x5b0 [ 144.604830][T11438] ? fs_reclaim_acquire+0xae/0x150 [ 144.606189][T11438] should_failslab+0xc2/0x120 [ 144.607433][T11438] __kmalloc_node_noprof+0xd1/0x430 [ 144.608801][T11438] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 144.610248][T11438] __kvmalloc_node_noprof+0xad/0x1a0 [ 144.611636][T11438] xt_alloc_entry_offsets+0x3a/0x60 [ 144.613026][T11438] translate_table+0x22e/0x1710 [ 144.614318][T11438] ? __might_fault+0x13b/0x190 [ 144.615590][T11438] ? __pfx_lock_release+0x10/0x10 [ 144.616919][T11438] ? trace_lock_acquire+0x14a/0x1d0 [ 144.618308][T11438] ? __pfx_translate_table+0x10/0x10 [ 144.619695][T11438] ? __might_fault+0xe3/0x190 [ 144.620948][T11438] do_ipt_set_ctl+0x605/0xc30 [ 144.622217][T11438] ? trace_contention_end+0xea/0x140 [ 144.623609][T11438] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 144.624988][T11438] ? __pfx___mutex_lock+0x10/0x10 [ 144.626324][T11438] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 144.627906][T11438] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 144.629484][T11438] nf_setsockopt+0x8a/0xf0 [ 144.630679][T11438] ip_setsockopt+0xcb/0xf0 [ 144.631863][T11438] udp_setsockopt+0x7d/0xd0 [ 144.633090][T11438] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 144.634683][T11438] do_sock_setsockopt+0x222/0x480 [ 144.636012][T11438] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 144.637404][T11438] ? fdget+0x176/0x210 [ 144.638499][T11438] __sys_setsockopt+0x1a4/0x270 [ 144.639786][T11438] ? __pfx___sys_setsockopt+0x10/0x10 [ 144.641218][T11438] ? fput+0x30/0x390 [ 144.642264][T11438] ? ksys_write+0x1ad/0x260 [ 144.643455][T11438] ? __pfx_ksys_write+0x10/0x10 [ 144.644722][T11438] __x64_sys_setsockopt+0xbd/0x160 [ 144.646044][T11438] ? do_syscall_64+0x91/0x250 [ 144.647298][T11438] ? lockdep_hardirqs_on+0x7c/0x110 [ 144.648631][T11438] do_syscall_64+0xcd/0x250 [ 144.649828][T11438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.651315][T11438] RIP: 0033:0x7f9cb677e719 [ 144.652476][T11438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.657192][T11438] RSP: 002b:00007f9cb7510038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 144.659358][T11438] RAX: ffffffffffffffda RBX: 00007f9cb6935f80 RCX: 00007f9cb677e719 [ 144.661401][T11438] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 144.663449][T11438] RBP: 00007f9cb7510090 R08: 00000000000003e0 R09: 0000000000000000 [ 144.665482][T11438] R10: 0000000020000e40 R11: 0000000000000246 R12: 0000000000000001 [ 144.667538][T11438] R13: 0000000000000000 R14: 00007f9cb6935f80 R15: 00007ffc7a85b1d8 [ 144.669592][T11438] [ 144.695109][ T58] usb 13-1: config 0 has an invalid interface number: 55 but max is 0 [ 144.697367][ T58] usb 13-1: config 0 has no interface number 0 [ 144.699027][ T58] usb 13-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 144.701916][ T58] usb 13-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 144.705106][ T58] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 144.707993][ T58] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 144.710833][ T58] usb 13-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 144.714451][ T58] usb 13-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 144.716875][ T58] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.722437][ T58] usb 13-1: config 0 descriptor?? [ 144.724575][T11410] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 144.728952][ T58] ldusb 13-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 144.756294][ T39] audit: type=1400 audit(144.665:1026): avc: denied { listen } for pid=11451 comm="syz.2.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 144.766056][ T39] audit: type=1400 audit(144.675:1027): avc: denied { bind } for pid=11451 comm="syz.2.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 144.982288][ T58] usb 13-1: USB disconnect, device number 10 [ 144.987492][ T58] ldusb 13-1:0.55: LD USB Device #0 now disconnected [ 145.013542][ T39] audit: type=1400 audit(144.915:1028): avc: denied { mounton } for pid=11468 comm="syz.8.1247" path="/219/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 145.032536][T11473] FAULT_INJECTION: forcing a failure. [ 145.032536][T11473] name failslab, interval 1, probability 0, space 0, times 0 [ 145.040508][T11473] CPU: 2 UID: 0 PID: 11473 Comm: syz.2.1248 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 145.043179][T11473] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 145.045858][T11473] Call Trace: [ 145.046726][T11473] [ 145.047455][T11473] dump_stack_lvl+0x16c/0x1f0 [ 145.048612][T11473] should_fail_ex+0x497/0x5b0 [ 145.049798][T11473] ? fs_reclaim_acquire+0xae/0x150 [ 145.051147][T11473] should_failslab+0xc2/0x120 [ 145.052379][T11473] __kmalloc_node_noprof+0xd1/0x430 [ 145.053832][T11473] ? __nf_register_net_hook+0x184/0x730 [ 145.055278][T11473] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 145.056667][T11473] __kvmalloc_node_noprof+0xad/0x1a0 [ 145.058030][T11473] nf_hook_entries_grow+0x282/0x810 [ 145.059389][T11473] __nf_register_net_hook+0x1cd/0x730 [ 145.060786][T11473] nf_register_net_hook+0x109/0x160 [ 145.062153][T11473] nf_register_net_hooks+0x5d/0xd0 [ 145.063495][T11473] nf_defrag_ipv4_enable+0xb8/0x120 [ 145.064858][T11473] nf_ct_netns_do_get+0x31f/0x620 [ 145.066184][T11473] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 145.067624][T11473] ? __pfx_lock_release+0x10/0x10 [ 145.068954][T11473] ? rcu_is_watching+0x12/0xc0 [ 145.070217][T11473] ? trace_contention_end+0xea/0x140 [ 145.071596][T11473] nf_ct_netns_get+0x39/0x150 [ 145.072846][T11473] xt_nat_checkentry_v0+0xbe/0x150 [ 145.074195][T11473] ? __pfx_xt_nat_checkentry_v0+0x10/0x10 [ 145.075684][T11473] xt_check_target+0x272/0xa30 [ 145.076945][T11473] ? __pfx_xt_check_target+0x10/0x10 [ 145.078336][T11473] ? pcpu_alloc_noprof+0x1f5/0x1690 [ 145.079702][T11473] ? xt_find_target+0x1ee/0x290 [ 145.080989][T11473] find_check_entry.constprop.0+0x7d6/0x9d0 [ 145.082466][T11473] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 145.084114][T11473] ? kvfree+0x47/0x50 [ 145.085168][T11473] translate_table+0xc93/0x1710 [ 145.086464][T11473] ? __pfx_translate_table+0x10/0x10 [ 145.087848][T11473] ? __might_fault+0xe3/0x190 [ 145.089091][T11473] do_ipt_set_ctl+0x605/0xc30 [ 145.090345][T11473] ? trace_contention_end+0xea/0x140 [ 145.091737][T11473] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 145.093100][T11473] ? __pfx___mutex_lock+0x10/0x10 [ 145.094462][T11473] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 145.096029][T11473] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 145.097597][T11473] nf_setsockopt+0x8a/0xf0 [ 145.098767][T11473] ip_setsockopt+0xcb/0xf0 [ 145.099926][T11473] udp_setsockopt+0x7d/0xd0 [ 145.101082][T11473] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 145.102577][T11473] do_sock_setsockopt+0x222/0x480 [ 145.103901][T11473] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 145.105264][T11473] ? fdget+0x176/0x210 [ 145.106348][T11473] __sys_setsockopt+0x1a4/0x270 [ 145.107578][T11473] ? __pfx___sys_setsockopt+0x10/0x10 [ 145.108929][T11473] ? fput+0x30/0x390 [ 145.109903][T11473] ? ksys_write+0x1ad/0x260 [ 145.111112][T11473] ? __pfx_ksys_write+0x10/0x10 [ 145.112402][T11473] __x64_sys_setsockopt+0xbd/0x160 [ 145.113750][T11473] ? do_syscall_64+0x91/0x250 [ 145.114947][T11473] ? lockdep_hardirqs_on+0x7c/0x110 [ 145.116310][T11473] do_syscall_64+0xcd/0x250 [ 145.117516][T11473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.119078][T11473] RIP: 0033:0x7f5fa877e719 [ 145.120260][T11473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.125252][T11473] RSP: 002b:00007f5fa95d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 145.127426][T11473] RAX: ffffffffffffffda RBX: 00007f5fa8935f80 RCX: 00007f5fa877e719 [ 145.129485][T11473] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 145.131501][T11473] RBP: 00007f5fa95d6090 R08: 00000000000003e0 R09: 0000000000000000 [ 145.133568][T11473] R10: 0000000020000e40 R11: 0000000000000246 R12: 0000000000000001 [ 145.135633][T11473] R13: 0000000000000000 R14: 00007f5fa8935f80 R15: 00007ffd66671d88 [ 145.137709][T11473] [ 145.195388][T11478] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11478 comm=syz.2.1249 [ 145.206869][T11477] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1250'. [ 145.557316][T11494] overlayfs: overlapping lowerdir path [ 145.753110][ T5946] Bluetooth: hci1: unexpected event for opcode 0x080c [ 145.877654][T11523] netlink: 'syz.8.1263': attribute type 10 has an invalid length. [ 145.883511][T11523] team0: Device hsr_slave_0 failed to register rx_handler [ 146.075891][T11542] loop7: detected capacity change from 0 to 16384 [ 146.130721][T11543] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1268'. [ 146.133879][T11542] loop7: detected capacity change from 16384 to 16383 [ 146.533790][ T5946] Bluetooth: hci2: command tx timeout [ 146.757071][T11555] FAULT_INJECTION: forcing a failure. [ 146.757071][T11555] name failslab, interval 1, probability 0, space 0, times 0 [ 146.761718][T11555] CPU: 1 UID: 0 PID: 11555 Comm: syz.6.1271 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 146.765246][T11555] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.768082][T11555] Call Trace: [ 146.768929][T11555] [ 146.769678][T11555] dump_stack_lvl+0x16c/0x1f0 [ 146.770908][T11555] should_fail_ex+0x497/0x5b0 [ 146.772187][T11555] ? fs_reclaim_acquire+0xae/0x150 [ 146.773491][T11555] should_failslab+0xc2/0x120 [ 146.774728][T11555] __kmalloc_node_noprof+0xd1/0x430 [ 146.776030][T11555] ? __nf_register_net_hook+0x184/0x730 [ 146.777413][T11555] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 146.778774][T11555] __kvmalloc_node_noprof+0xad/0x1a0 [ 146.780101][T11555] nf_hook_entries_grow+0x282/0x810 [ 146.781421][T11555] ? __call_rcu_common.constprop.0+0x36e/0x7a0 [ 146.783522][T11555] __nf_register_net_hook+0x1cd/0x730 [ 146.785057][T11555] nf_register_net_hook+0x109/0x160 [ 146.786357][T11555] nf_register_net_hooks+0x5d/0xd0 [ 146.787642][T11555] nf_ct_netns_do_get+0x38b/0x620 [ 146.788911][T11555] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 146.790305][T11555] ? __pfx_lock_release+0x10/0x10 [ 146.791586][T11555] ? rcu_is_watching+0x12/0xc0 [ 146.792782][T11555] ? trace_contention_end+0xea/0x140 [ 146.794234][T11555] nf_ct_netns_get+0x39/0x150 [ 146.795444][T11555] xt_nat_checkentry_v0+0xbe/0x150 [ 146.796764][T11555] ? __pfx_xt_nat_checkentry_v0+0x10/0x10 [ 146.798218][T11555] xt_check_target+0x272/0xa30 [ 146.799452][T11555] ? __pfx_xt_check_target+0x10/0x10 [ 146.800799][T11555] ? pcpu_alloc_noprof+0x1f5/0x1690 [ 146.802436][T11555] ? xt_find_target+0x1ee/0x290 [ 146.804202][T11555] find_check_entry.constprop.0+0x7d6/0x9d0 [ 146.805736][T11555] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 146.807412][T11555] ? kvfree+0x47/0x50 [ 146.808461][T11555] translate_table+0xc93/0x1710 [ 146.809734][T11555] ? __pfx_translate_table+0x10/0x10 [ 146.811106][T11555] ? __might_fault+0xe3/0x190 [ 146.812370][T11555] do_ipt_set_ctl+0x605/0xc30 [ 146.813611][T11555] ? trace_contention_end+0xea/0x140 [ 146.815004][T11555] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 146.816337][T11555] ? __pfx___mutex_lock+0x10/0x10 [ 146.817649][T11555] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 146.819220][T11555] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 146.820740][T11555] nf_setsockopt+0x8a/0xf0 [ 146.822128][T11555] ip_setsockopt+0xcb/0xf0 [ 146.823758][T11555] udp_setsockopt+0x7d/0xd0 [ 146.825083][T11555] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 146.826590][T11555] do_sock_setsockopt+0x222/0x480 [ 146.827892][T11555] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 146.829302][T11555] ? fdget+0x176/0x210 [ 146.830349][T11555] __sys_setsockopt+0x1a4/0x270 [ 146.831701][T11555] ? __pfx___sys_setsockopt+0x10/0x10 [ 146.833189][T11555] ? fput+0x30/0x390 [ 146.834516][T11555] ? ksys_write+0x1ad/0x260 [ 146.836068][T11555] ? __pfx_ksys_write+0x10/0x10 [ 146.837461][T11555] __x64_sys_setsockopt+0xbd/0x160 [ 146.838775][T11555] ? do_syscall_64+0x91/0x250 [ 146.839948][T11555] ? lockdep_hardirqs_on+0x7c/0x110 [ 146.841297][T11555] do_syscall_64+0xcd/0x250 [ 146.842870][T11555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.844730][T11555] RIP: 0033:0x7f9cb677e719 [ 146.845984][T11555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.850927][T11555] RSP: 002b:00007f9cb7510038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 146.853459][T11555] RAX: ffffffffffffffda RBX: 00007f9cb6935f80 RCX: 00007f9cb677e719 [ 146.855465][T11555] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 146.857413][T11555] RBP: 00007f9cb7510090 R08: 00000000000003e0 R09: 0000000000000000 [ 146.859437][T11555] R10: 0000000020000e40 R11: 0000000000000246 R12: 0000000000000001 [ 146.861411][T11555] R13: 0000000000000000 R14: 00007f9cb6935f80 R15: 00007ffc7a85b1d8 [ 146.864149][T11555] [ 146.865046][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.098526][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 147.098537][ T39] audit: type=1400 audit(147.005:1034): avc: denied { append } for pid=11563 comm="syz.8.1274" name="nbd8" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.263997][T11565] nbd8: detected capacity change from 0 to 131072 [ 147.272039][T11564] block nbd8: shutting down sockets [ 147.284043][ T55] blk_print_req_error: 9 callbacks suppressed [ 147.284054][ T55] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 147.288175][ T55] buffer_io_error: 23 callbacks suppressed [ 147.288182][ T55] Buffer I/O error on dev nbd8, logical block 0, async page read [ 147.294846][ T9556] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 147.297206][ T9556] Buffer I/O error on dev nbd8, logical block 0, async page read [ 147.299263][ T9556] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 147.302285][ T9556] Buffer I/O error on dev nbd8, logical block 0, async page read [ 147.305550][ T9556] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 147.307790][ T9556] Buffer I/O error on dev nbd8, logical block 0, async page read [ 147.309697][ T9556] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 147.312002][ T9556] Buffer I/O error on dev nbd8, logical block 0, async page read [ 147.315483][ T9556] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 147.317817][ T9556] Buffer I/O error on dev nbd8, logical block 0, async page read [ 147.319999][ T9556] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 147.323127][ T9556] Buffer I/O error on dev nbd8, logical block 0, async page read [ 147.326512][ T9556] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 147.328847][ T9556] Buffer I/O error on dev nbd8, logical block 0, async page read [ 147.331170][ T9556] ldm_validate_partition_table(): Disk read failed. [ 147.332902][ T9556] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 147.336813][ T9556] Buffer I/O error on dev nbd8, logical block 0, async page read [ 147.338913][ T9556] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 147.341742][ T9556] Buffer I/O error on dev nbd8, logical block 0, async page read [ 147.345673][ T9556] Dev nbd8: unable to read RDB block 0 [ 147.347726][ T9556] nbd8: unable to read partition table [ 147.354398][ T9556] ldm_validate_partition_table(): Disk read failed. [ 147.356340][ T9556] Dev nbd8: unable to read RDB block 0 [ 147.357900][ T9556] nbd8: unable to read partition table [ 147.405495][ T1237] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.480029][T11575] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1276'. [ 147.482371][T11575] net_ratelimit: 11 callbacks suppressed [ 147.482378][T11575] openvswitch: netlink: Key type 29 is not supported [ 147.487085][ T5952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 147.491595][ T5952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 147.496063][ T5952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.498636][ T5952] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.501473][ T5952] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 147.503525][ T5952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.529686][T11576] lo speed is unknown, defaulting to 1000 [ 147.555413][T11582] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 147.565769][T11582] kvm: pic: non byte read [ 147.567908][T11582] kvm: pic: level sensitive irq not supported [ 147.568137][T11582] kvm: pic: non byte read [ 147.571949][T11582] kvm: pic: level sensitive irq not supported [ 147.572184][T11582] kvm: pic: non byte read [ 147.578801][T11582] kvm: pic: level sensitive irq not supported [ 147.579717][T11582] kvm: pic: non byte read [ 147.584043][T11576] chnl_net:caif_netlink_parms(): no params data found [ 147.648435][T11576] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.650428][T11576] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.652286][T11576] bridge_slave_0: entered allmulticast mode [ 147.659022][T11576] bridge_slave_0: entered promiscuous mode [ 147.661608][T11576] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.663470][T11576] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.673761][T11576] bridge_slave_1: entered allmulticast mode [ 147.675681][T11576] bridge_slave_1: entered promiscuous mode [ 147.688044][T11601] 9pnet_fd: Insufficient options for proto=fd [ 147.702016][T11576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.708955][T11603] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1283'. [ 147.711711][T11603] batman_adv: batadv0: Interface deactivated: dummy0 [ 147.721325][T11603] batman_adv: batadv0: Removing interface: dummy0 [ 147.731617][T11576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.761328][T11576] team0: Port device team_slave_0 added [ 147.764179][T11576] team0: Port device team_slave_1 added [ 147.791536][T11576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.793393][T11576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.805508][T11576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.809062][T11576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.810908][T11576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.821508][T11576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.854095][T11576] hsr_slave_0: entered promiscuous mode [ 147.856127][T11576] hsr_slave_1: entered promiscuous mode [ 147.861049][T11576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.863236][T11576] Cannot create hsr debugfs directory [ 147.869578][T11616] netfs: Couldn't get user pages (rc=-14) [ 147.978878][T11622] netlink: 'syz.8.1290': attribute type 13 has an invalid length. [ 147.980758][T11622] netlink: 80 bytes leftover after parsing attributes in process `syz.8.1290'. [ 148.007339][T11624] input: syz0 as /devices/virtual/input/input17 [ 148.095701][ T39] audit: type=1400 audit(148.005:1035): avc: denied { mounton } for pid=11627 comm="syz.6.1293" path="/265/file0/bus" dev="bpf" ino=42750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 148.097601][T11628] overlayfs: upper fs does not support tmpfile. [ 148.191022][T11646] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 148.241538][ T39] audit: type=1400 audit(148.145:1036): avc: denied { map } for pid=11657 comm="syz.8.1302" path="socket:[45539]" dev="sockfs" ino=45539 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 148.278533][ T39] audit: type=1400 audit(148.185:1037): avc: denied { setopt } for pid=11662 comm="syz.2.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 148.284930][T11663] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 148.287399][ T39] audit: type=1400 audit(148.185:1038): avc: denied { ioctl } for pid=11662 comm="syz.2.1303" path="socket:[44463]" dev="sockfs" ino=44463 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 148.290713][T11663] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 148.296182][T11663] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 148.298470][T11663] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 148.307873][ T39] audit: type=1400 audit(148.215:1039): avc: denied { map } for pid=11668 comm="syz.8.1304" path="socket:[45550]" dev="sockfs" ino=45550 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 148.363996][T11677] No such timeout policy "syz0" [ 148.540748][T11681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11681 comm=syz.2.1308 [ 148.788173][T11693] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1312'. [ 148.852839][ T1237] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.856786][T11695] Bluetooth: MGMT ver 1.23 [ 148.953402][T11702] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 148.959258][ T1237] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.021905][ T5939] Bluetooth: hci2: command 0x0405 tx timeout [ 149.044838][ T1237] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.262107][ T1237] bridge_slave_1: left allmulticast mode [ 149.262124][ T1237] bridge_slave_1: left promiscuous mode [ 149.262208][ T1237] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.268191][ T1237] bridge_slave_0: left allmulticast mode [ 149.272133][ T1237] bridge_slave_0: left promiscuous mode [ 149.272219][ T1237] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.396410][ T39] audit: type=1400 audit(149.305:1040): avc: denied { setopt } for pid=11726 comm="syz.6.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 149.457478][T11727] kvm: kvm [11726]: vcpu0, guest rIP: 0x1b Unhandled WRMSR(0xc1) = 0xd [ 149.460560][T11727] kvm: kvm [11726]: vcpu0, guest rIP: 0x1d Unhandled WRMSR(0xc1) = 0xd [ 149.476577][ T39] audit: type=1400 audit(149.385:1041): avc: denied { setopt } for pid=11732 comm="syz.2.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 149.481692][T11732] delete_channel: no stack [ 149.531561][T11738] QAT: failed to copy from user. [ 149.565881][ T5946] Bluetooth: hci0: command tx timeout [ 149.602436][ T1237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.606546][ T1237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.610270][ T1237] bond0 (unregistering): Released all slaves [ 149.623956][T11729] mkiss: ax0: crc mode is auto. [ 149.644823][T11738] openvswitch: netlink: Unknown key attributes 2 [ 149.813915][ T5946] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 149.816445][ T5946] Bluetooth: hci1: Injecting HCI hardware error event [ 149.820322][ T5946] Bluetooth: hci1: hardware error 0x00 [ 150.043726][ T5939] Bluetooth: hci3: command 0x0c1a tx timeout [ 150.043894][ T8273] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 150.047383][ T8273] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 150.253826][ T8088] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 150.436641][ T8088] usb 13-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 150.439027][ T8088] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.441085][ T8088] usb 13-1: Product: syz [ 150.442313][ T8088] usb 13-1: Manufacturer: syz [ 150.443613][ T8088] usb 13-1: SerialNumber: syz [ 150.447538][ T8088] usb 13-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 150.460964][ T8088] usb 13-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 150.572243][T11801] lo speed is unknown, defaulting to 1000 [ 150.664186][T11773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.666483][T11773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.675839][ T7791] usb 13-1: USB disconnect, device number 11 [ 150.699127][ T39] audit: type=1400 audit(150.605:1042): avc: denied { create } for pid=11809 comm="syz.8.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 150.703965][ T39] audit: type=1400 audit(150.605:1043): avc: denied { lock } for pid=11809 comm="syz.8.1338" path="socket:[43938]" dev="sockfs" ino=43938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 150.777239][T11810] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 150.779101][T11810] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 150.790021][T11810] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 150.800891][T11810] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 150.802587][T11810] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 150.819171][T11810] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 150.859145][T11576] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 150.862853][T11576] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 150.873872][T11576] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 150.877026][T11576] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 150.905499][T11576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.915601][T11576] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.922050][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.923997][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.927638][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.929422][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.941454][T11576] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 150.944417][T11576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.019003][T11576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.035400][T11576] veth0_vlan: entered promiscuous mode [ 151.040292][T11576] veth1_vlan: entered promiscuous mode [ 151.051829][T11576] veth0_macvtap: entered promiscuous mode [ 151.055958][T11576] veth1_macvtap: entered promiscuous mode [ 151.061981][T11576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.065591][T11576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.068147][T11576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.070839][T11576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.074745][T11576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.077315][T11576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.079708][T11576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.082330][T11576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.084980][T11576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.087732][T11576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.090953][T11576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.096441][T11576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.099133][T11576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.101625][T11576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.104796][T11576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.107269][T11576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.109878][T11576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.112325][T11576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.115561][T11576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.118099][T11576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.120782][T11576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.123989][T11576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.127707][T11576] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.130094][T11576] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.132345][T11576] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.134830][T11576] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.178766][T11846] ebt_limit: overflow, try lower: 570423552/2483027968 [ 151.269917][T11848] ip6t_srh: unknown srh match flags 4000 [ 151.272199][T11851] netlink: 'syz.6.1348': attribute type 10 has an invalid length. [ 151.496533][ T8088] ath9k_htc 13-1:1.0: ath9k_htc: Target is unresponsive [ 151.498421][ T8088] ath9k_htc: Failed to initialize the device [ 151.500155][ T7791] usb 13-1: ath9k_htc: USB layer deinitialized [ 151.884313][ T5946] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 152.843935][ T5946] Bluetooth: hci0: command 0x040f tx timeout [ 152.843985][ T5952] Bluetooth: hci2: command 0x0405 tx timeout [ 152.847677][ T8273] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 152.849421][ T8273] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 154.923892][ T5952] Bluetooth: hci0: command 0x040f tx timeout [ 154.923967][ T8273] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 154.926897][ T8273] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 154.984409][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.986947][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.008115][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.008809][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 155.008819][ T39] audit: type=1400 audit(154.915:1045): avc: denied { execstack } for pid=11865 comm="syz.8.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 155.011389][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.040906][ T1237] hsr_slave_0: left promiscuous mode [ 155.042812][ T39] audit: type=1400 audit(154.945:1046): avc: denied { accept } for pid=11872 comm="syz.8.1354" laddr=::ffff:172.20.20.10 lport=34457 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 155.050597][ T1237] hsr_slave_1: left promiscuous mode [ 155.051039][ T39] audit: type=1400 audit(154.955:1047): avc: denied { write } for pid=11872 comm="syz.8.1354" laddr=::ffff:172.20.20.10 lport=34457 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 155.058745][ T39] audit: type=1400 audit(154.955:1048): avc: denied { setopt } for pid=11872 comm="syz.8.1354" laddr=::ffff:172.20.20.10 lport=34457 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 155.065927][ T1237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.068073][ T1237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.076532][ T1237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.078534][ T1237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.107243][ T1237] veth1_macvtap: left promiscuous mode [ 155.108832][ T1237] veth0_macvtap: left promiscuous mode [ 155.110312][ T1237] veth1_vlan: left promiscuous mode [ 155.111676][ T1237] veth0_vlan: left promiscuous mode [ 155.143487][T11879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=11879 comm=syz.8.1356 [ 155.838481][ T1237] team0 (unregistering): Port device team_slave_1 removed [ 155.923477][ T1237] team0 (unregistering): Port device team_slave_0 removed [ 156.832252][ T5939] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 156.833725][ T4487] usb 11-1: new full-speed USB device number 13 using dummy_hcd [ 156.836866][ T5939] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 156.839414][ T5939] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 156.842187][ T5939] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 156.844993][ T5939] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 156.847005][ T5939] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.863135][T11910] lo speed is unknown, defaulting to 1000 [ 156.922949][T11910] chnl_net:caif_netlink_parms(): no params data found [ 156.993415][ T1237] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.998896][ T4487] usb 11-1: not running at top speed; connect to a high speed hub [ 157.002909][T11910] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.003464][ T4487] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 157.005420][T11910] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.008976][ T4487] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.009212][T11910] bridge_slave_0: entered allmulticast mode [ 157.011305][ T4487] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.014276][T11910] bridge_slave_0: entered promiscuous mode [ 157.015340][ T4487] usb 11-1: Product: syz [ 157.017672][T11910] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.017731][T11910] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.019320][ T4487] usb 11-1: Manufacturer: 、 [ 157.021308][T11910] bridge_slave_1: entered allmulticast mode [ 157.022806][ T4487] usb 11-1: SerialNumber: syz [ 157.024819][T11910] bridge_slave_1: entered promiscuous mode [ 157.049013][T11910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.053103][T11910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.080006][T11910] team0: Port device team_slave_0 added [ 157.083164][T11910] team0: Port device team_slave_1 added [ 157.119730][ T1237] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.125994][T11910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.127770][T11910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.134578][T11910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.138249][T11910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.139976][T11910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.146489][T11910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.185265][ T1237] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.191090][T11910] hsr_slave_0: entered promiscuous mode [ 157.192909][T11910] hsr_slave_1: entered promiscuous mode [ 157.194830][T11910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.196816][T11910] Cannot create hsr debugfs directory [ 157.229567][ T4487] cdc_ncm 11-1:1.0: bind() failure [ 157.232090][ T4487] cdc_ncm 11-1:1.1: CDC Union missing and no IAD found [ 157.233977][ T4487] cdc_ncm 11-1:1.1: bind() failure [ 157.237496][ T4487] usb 11-1: USB disconnect, device number 13 [ 157.285382][ T1237] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.383118][ T1237] bridge_slave_1: left allmulticast mode [ 157.385118][ T1237] bridge_slave_1: left promiscuous mode [ 157.387051][ T1237] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.390825][ T1237] bridge_slave_0: left allmulticast mode [ 157.392253][ T1237] bridge_slave_0: left promiscuous mode [ 157.394072][ T1237] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.656332][ T1237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.660112][ T1237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.663491][ T1237] bond0 (unregistering): Released all slaves [ 158.035407][ T1237] hsr_slave_0: left promiscuous mode [ 158.046333][ T1237] hsr_slave_1: left promiscuous mode [ 158.053527][ T1237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.063710][ T1237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.067470][ T1237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.069398][ T1237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.099974][ T1237] veth1_macvtap: left promiscuous mode [ 158.101513][ T1237] veth0_macvtap: left promiscuous mode [ 158.105307][ T1237] veth1_vlan: left promiscuous mode [ 158.107210][ T1237] veth0_vlan: left promiscuous mode [ 158.846483][ T5952] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 158.846688][ T5946] Bluetooth: hci0: command 0x1003 tx timeout [ 158.923817][ T5952] Bluetooth: hci4: command tx timeout [ 158.941806][ T1237] team0 (unregistering): Port device team_slave_1 removed [ 159.039303][ T1237] team0 (unregistering): Port device team_slave_0 removed [ 159.768064][T11956] binder: 11955:11956 ioctl c018620c 20000080 returned -22 [ 159.770031][T11957] binder: 11955:11957 ioctl c018620c 20000080 returned -22 [ 159.799088][T11910] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 159.812221][T11910] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 159.816224][T11910] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 159.819454][T11910] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 159.864776][T11910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.871562][ T39] audit: type=1400 audit(159.775:1049): avc: denied { connect } for pid=11962 comm="syz.6.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 159.872353][T11910] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.877305][ T39] audit: type=1400 audit(159.785:1050): avc: denied { read } for pid=11962 comm="syz.6.1371" laddr=172.20.20.170 lport=6 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 159.881208][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.885084][ T39] audit: type=1400 audit(159.795:1051): avc: denied { getopt } for pid=11962 comm="syz.6.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 159.886085][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.894543][ T39] audit: type=1326 audit(159.805:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11962 comm="syz.6.1371" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cb677e719 code=0x0 [ 159.895633][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.902260][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.989867][T11910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.008255][T11910] veth0_vlan: entered promiscuous mode [ 160.012930][T11910] veth1_vlan: entered promiscuous mode [ 160.023565][T11910] veth0_macvtap: entered promiscuous mode [ 160.026940][T11910] veth1_macvtap: entered promiscuous mode [ 160.032986][T11910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.035983][T11910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.038563][T11910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.041292][T11910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.045968][T11910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.048578][T11910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.051073][T11910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.054236][T11910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.057427][T11910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.063588][T11910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.067200][T11910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.069737][T11910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.072447][T11910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.075029][T11910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.077731][T11910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.080277][T11910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.083691][T11910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.087024][T11910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.090876][T11910] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.093256][T11910] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.095723][T11910] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.098023][T11910] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.132783][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.137903][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.147893][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.149974][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.751159][T11984] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 161.793131][T11988] smc: net device bond0 applied user defined pnetid SYZ0 [ 161.796634][T11988] netlink: 'syz.6.1380': attribute type 10 has an invalid length. [ 161.799472][T11988] syz_tun: entered promiscuous mode [ 161.804251][T11988] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 161.829456][ T39] audit: type=1400 audit(161.735:1053): avc: denied { append } for pid=11989 comm="syz.6.1381" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 161.934823][ T39] audit: type=1400 audit(161.835:1054): avc: denied { mount } for pid=11999 comm="syz.6.1384" name="/" dev="hugetlbfs" ino=46480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 162.011521][ T39] audit: type=1400 audit(161.915:1055): avc: denied { unmount } for pid=7781 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 162.123465][T12006] netlink: 'syz.6.1386': attribute type 10 has an invalid length. [ 162.129379][T12006] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 162.133218][ T39] audit: type=1326 audit(162.035:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.6.1386" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cb677e719 code=0x0 [ 162.532510][ T45] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.992978][T12012] xt_hashlimit: size too large, truncated to 1048576 [ 163.054552][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 163.055080][ T39] audit: type=1326 audit(162.965:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12016 comm="syz.8.1390" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f917557e719 code=0x0 [ 163.063494][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 163.068201][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 163.071530][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 163.073945][ T5946] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 163.076145][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 163.092129][T12018] lo speed is unknown, defaulting to 1000 [ 163.110518][ T39] audit: type=1400 audit(163.015:1058): avc: denied { bind } for pid=12016 comm="syz.8.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 163.123599][ T39] audit: type=1400 audit(163.025:1059): avc: denied { execute } for pid=12016 comm="syz.8.1390" path="/271/file0/cpu.stat" dev="9p" ino=36837412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 163.151577][T12018] chnl_net:caif_netlink_parms(): no params data found [ 163.210221][T12018] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.212816][T12018] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.216012][T12018] bridge_slave_0: entered allmulticast mode [ 163.219952][T12018] bridge_slave_0: entered promiscuous mode [ 163.223894][T12018] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.225843][T12018] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.227782][T12018] bridge_slave_1: entered allmulticast mode [ 163.229829][T12018] bridge_slave_1: entered promiscuous mode [ 163.252237][T12018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.256623][T12018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.287072][T12018] team0: Port device team_slave_0 added [ 163.290258][T12018] team0: Port device team_slave_1 added [ 163.308789][T12018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.311271][T12018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.318370][T12018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.322297][T12018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.325017][T12018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.331533][T12018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.357343][T12018] hsr_slave_0: entered promiscuous mode [ 163.359261][T12018] hsr_slave_1: entered promiscuous mode [ 163.361171][T12018] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.363110][T12018] Cannot create hsr debugfs directory [ 163.845099][T12037] fuse: Bad value for 'rootmode' [ 163.866601][T12043] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1394'. [ 163.919438][T12046] binfmt_misc: register: failed to install interpreter file ./file0 [ 163.997561][T12060] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1399'. [ 163.999984][T12060] 3: renamed from bridge_slave_1 [ 164.150884][T12075] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1401'. [ 164.226442][ T45] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.299781][ T45] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.389677][ T45] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.416440][T12085] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1406'. [ 164.483397][ T45] bridge_slave_1: left allmulticast mode [ 164.485353][ T45] bridge_slave_1: left promiscuous mode [ 164.486916][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.492607][ T45] bridge_slave_0: left allmulticast mode [ 164.494413][ T45] bridge_slave_0: left promiscuous mode [ 164.495916][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.518550][ T39] audit: type=1400 audit(164.425:1060): avc: denied { mount } for pid=12092 comm="syz.6.1409" name="/" dev="pstore" ino=5101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 164.763921][ T8273] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 164.766672][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.771115][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.774855][ T45] bond0 (unregistering): Released all slaves [ 164.913916][ T8273] usb 11-1: Using ep0 maxpacket: 8 [ 164.917413][ T8273] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 164.919494][ T8273] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 164.922005][ T8273] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 164.925387][ T8273] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 164.928069][ T8273] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.931386][ T8273] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 164.934058][ T8273] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.016277][T12112] ufs: You didn't specify the type of your ufs filesystem [ 165.016277][T12112] [ 165.016277][T12112] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 165.016277][T12112] [ 165.016277][T12112] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 165.027365][T12112] ufs: ufstype=old is supported read-only [ 165.031195][T12112] ufs: ufs_fill_super(): bad magic number [ 165.060697][ T45] hsr_slave_0: left promiscuous mode [ 165.062563][ T45] hsr_slave_1: left promiscuous mode [ 165.068459][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.070414][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.072756][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.074916][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.084313][ T5946] Bluetooth: hci0: command tx timeout [ 165.101292][ T45] veth1_macvtap: left promiscuous mode [ 165.103123][ T45] veth0_macvtap: left promiscuous mode [ 165.105582][ T45] veth1_vlan: left promiscuous mode [ 165.107399][ T45] veth0_vlan: left promiscuous mode [ 165.138584][ T8273] usb 11-1: usb_control_msg returned -32 [ 165.140130][ T8273] usbtmc 11-1:16.0: can't read capabilities [ 165.508927][T12116] usbtmc 11-1:16.0: INITIATE_ABORT_BULK_IN returned e [ 165.516216][T12116] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 165.518419][ T39] audit: type=1400 audit(165.425:1061): avc: denied { mounton } for pid=12092 comm="syz.6.1409" path="/336/bus" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 165.712636][ T5984] usb 11-1: USB disconnect, device number 14 [ 165.844479][ T45] team0 (unregistering): Port device team_slave_1 removed [ 165.931804][ T45] team0 (unregistering): Port device team_slave_0 removed [ 166.152854][ T5952] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 166.170035][ T5952] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 166.180049][ T5952] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 166.188502][ T5952] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 166.193300][ T5952] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 166.195455][ T5952] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 166.227999][ T39] audit: type=1400 audit(166.135:1062): avc: denied { unmount } for pid=7781 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 166.538846][T12127] serio: Serial port ptm2 [ 166.586684][T12112] netlink: 'syz.8.1412': attribute type 10 has an invalid length. [ 166.597765][T12112] bond0: (slave team0): Releasing backup interface [ 166.600607][T12112] batman_adv: batadv0: Adding interface: team0 [ 166.602260][T12112] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.608929][T12112] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 166.665895][T12118] lo speed is unknown, defaulting to 1000 [ 166.720949][T12118] chnl_net:caif_netlink_parms(): no params data found [ 166.773274][T12018] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 166.795151][T12018] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 166.814700][T12018] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 166.850634][T12018] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 166.887088][T12118] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.889421][T12118] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.891777][T12118] bridge_slave_0: entered allmulticast mode [ 166.894837][T12118] bridge_slave_0: entered promiscuous mode [ 166.898656][T12118] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.900596][T12118] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.902425][T12118] bridge_slave_1: entered allmulticast mode [ 166.905300][T12118] bridge_slave_1: entered promiscuous mode [ 166.930885][T12118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.937881][T12118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.961419][T12118] team0: Port device team_slave_0 added [ 166.965254][T12118] team0: Port device team_slave_1 added [ 166.987227][T12118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.988966][T12118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.995469][T12118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.999224][T12118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.001015][T12118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.007940][T12118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.033778][ T30] usb 13-1: new high-speed USB device number 12 using dummy_hcd [ 167.039915][T12118] hsr_slave_0: entered promiscuous mode [ 167.041795][T12118] hsr_slave_1: entered promiscuous mode [ 167.043535][T12118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.050203][T12118] Cannot create hsr debugfs directory [ 167.058863][T12018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.110049][T12018] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.113671][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.115469][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.141608][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.143551][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.163780][ T5946] Bluetooth: hci0: command tx timeout [ 167.185079][ T30] usb 13-1: Using ep0 maxpacket: 32 [ 167.190088][ T30] usb 13-1: config index 0 descriptor too short (expected 156, got 27) [ 167.192257][ T30] usb 13-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 167.199672][ T30] usb 13-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 167.202586][ T30] usb 13-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 167.206378][ T30] usb 13-1: config 0 interface 0 has no altsetting 0 [ 167.214036][ T30] usb 13-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 167.216429][ T30] usb 13-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 167.218799][ T30] usb 13-1: Product: syz [ 167.220186][ T30] usb 13-1: Manufacturer: syz [ 167.221437][ T30] usb 13-1: SerialNumber: syz [ 167.225040][ T30] usb 13-1: config 0 descriptor?? [ 167.249424][ T30] ldusb 13-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 167.254993][ T30] ldusb 13-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 167.258944][T12184] netlink: 'syz.6.1422': attribute type 7 has an invalid length. [ 167.290081][T12190] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1423'. [ 167.292457][T12190] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1423'. [ 167.299622][T12190] erspan0: entered promiscuous mode [ 167.301537][T12190] batadv_slave_1: entered promiscuous mode [ 167.339451][T12191] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 167.339502][T12197] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 167.341799][T12191] overlayfs: missing 'lowerdir' [ 167.345213][T12197] overlayfs: missing 'lowerdir' [ 167.412560][T12018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.428668][T12018] veth0_vlan: entered promiscuous mode [ 167.432445][T12018] veth1_vlan: entered promiscuous mode [ 167.446909][T12018] veth0_macvtap: entered promiscuous mode [ 167.449823][T12018] veth1_macvtap: entered promiscuous mode [ 167.456896][T12018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.459595][T12018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.462079][T12018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.465640][T12018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.468144][T12018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.470812][T12018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.473208][T12018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.476188][T12018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.479297][T12018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.484996][ T5984] usb 13-1: USB disconnect, device number 12 [ 167.486646][ C2] ldusb 13-1:0.0: usb_submit_urb failed (-19) [ 167.488238][T12149] ldusb 13-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 167.492078][ T5984] ldusb 13-1:0.0: LD USB Device #0 now disconnected [ 167.537587][T12018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.540298][T12018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.542788][T12018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.548114][T12018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.550619][T12018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.553172][T12018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.555938][T12018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.558617][T12018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.561761][T12018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.565715][T12018] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.567949][T12018] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.570099][T12018] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.572328][T12018] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.601496][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.608080][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.622284][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.624404][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.683060][T12118] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 167.695362][T12118] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 167.700454][T12118] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 167.703383][T12118] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 167.714415][T12149] ldusb: No device or device unplugged -19 [ 167.738845][T12118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.742410][T12232] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1428'. [ 167.747156][T12118] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.751438][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.753355][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.759494][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.761389][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.783849][T12236] ------------[ cut here ]------------ [ 167.785457][T12236] WARNING: CPU: 3 PID: 12236 at mm/util.c:670 __kvmalloc_node_noprof+0x180/0x1a0 [ 167.788154][T12236] Modules linked in: [ 167.789200][T12236] CPU: 3 UID: 0 PID: 12236 Comm: syz.6.1429 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 167.793122][T12236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 167.796235][T12236] RIP: 0010:__kvmalloc_node_noprof+0x180/0x1a0 [ 167.798322][T12236] Code: e9 1c ff ff ff e8 d0 96 bf ff 41 81 e4 00 20 00 00 31 ff 44 89 e6 e8 ff 98 bf ff 45 85 e4 0f 85 3b ff ff ff e8 b1 96 bf ff 90 <0f> 0b 90 31 ed e9 ed fe ff ff 48 c7 c7 28 58 5f 90 e8 aa 20 21 00 [ 167.803563][T12236] RSP: 0018:ffffc9000302fa68 EFLAGS: 00010283 [ 167.805320][T12236] RAX: 00000000000017d0 RBX: 00000000c5c4de00 RCX: ffffc90007764000 [ 167.807552][T12236] RDX: 0000000000040000 RSI: ffffffff81cde49f RDI: 0000000000000005 [ 167.809599][T12236] RBP: 0000000000000400 R08: 0000000000000005 R09: 0000000000000000 [ 167.811638][T12236] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 167.813742][T12236] R13: 00000000ffffffff R14: 0000000000000002 R15: dffffc0000000000 [ 167.815792][T12236] FS: 00007f9cb75106c0(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000 [ 167.818645][T12236] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 167.820622][T12236] CR2: 0000000000000000 CR3: 0000000059e44000 CR4: 0000000000352ef0 [ 167.821241][T12145] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 167.822670][T12236] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 167.826503][T12236] DR3: 0000000000000007 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 167.828740][T12236] Call Trace: [ 167.829550][T12236] [ 167.830297][T12236] ? __warn+0xea/0x3d0 [ 167.831313][T12236] ? __kvmalloc_node_noprof+0x180/0x1a0 [ 167.832745][T12236] ? report_bug+0x3c0/0x580 [ 167.833951][T12236] ? handle_bug+0x54/0xa0 [ 167.834997][T12236] ? exc_invalid_op+0x17/0x50 [ 167.836222][T12236] ? asm_exc_invalid_op+0x1a/0x20 [ 167.837875][T12236] ? __kvmalloc_node_noprof+0x17f/0x1a0 [ 167.839884][T12236] ? __kvmalloc_node_noprof+0x180/0x1a0 [ 167.841302][T12236] ? __kvmalloc_node_noprof+0x17f/0x1a0 [ 167.842723][T12236] __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 167.844251][T12236] vivid_update_format_cap+0x127b/0x2530 [ 167.845657][T12236] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 167.847203][T12236] ? v4l2_match_dv_timings+0x1df/0x1010 [ 167.848617][T12236] vivid_vid_cap_s_dv_timings+0xc0f/0xfb0 [ 167.850053][T12236] vidioc_s_dv_timings+0xa5/0xc0 [ 167.851324][T12236] ? v4l_stub_s_dv_timings+0x1b/0x60 [ 167.852745][T12236] __video_do_ioctl+0xaf0/0xf00 [ 167.854257][T12236] ? __pfx___video_do_ioctl+0x10/0x10 [ 167.855675][T12236] ? __might_fault+0xe3/0x190 [ 167.857103][T12236] video_usercopy+0x4ce/0x1600 [ 167.858921][T12236] ? __pfx___video_do_ioctl+0x10/0x10 [ 167.860553][T12236] ? __pfx_video_usercopy+0x10/0x10 [ 167.861962][T12236] v4l2_ioctl+0x1ba/0x250 [ 167.863232][T12236] ? __pfx_v4l2_ioctl+0x10/0x10 [ 167.864611][T12236] __x64_sys_ioctl+0x18f/0x220 [ 167.865890][T12236] do_syscall_64+0xcd/0x250 [ 167.867129][T12236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.868697][T12236] RIP: 0033:0x7f9cb677e719 [ 167.869898][T12236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.874945][T12236] RSP: 002b:00007f9cb7510038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.877236][T12236] RAX: ffffffffffffffda RBX: 00007f9cb6935f80 RCX: 00007f9cb677e719 [ 167.880078][T12236] RDX: 0000000020000040 RSI: 00000000c0845657 RDI: 0000000000000003 [ 167.882235][T12236] RBP: 00007f9cb67f139e R08: 0000000000000000 R09: 0000000000000000 [ 167.886305][T12236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.888520][T12236] R13: 0000000000000000 R14: 00007f9cb6935f80 R15: 00007ffc7a85b1d8 [ 167.890606][T12236] [ 167.891428][T12236] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 167.893233][T12236] CPU: 3 UID: 0 PID: 12236 Comm: syz.6.1429 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 167.895948][T12236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 167.899395][T12236] Call Trace: [ 167.900290][T12236] [ 167.901068][T12236] dump_stack_lvl+0x3d/0x1f0 [ 167.902252][T12236] panic+0x71d/0x800 [ 167.903255][T12236] ? __pfx_panic+0x10/0x10 [ 167.904405][T12236] ? show_trace_log_lvl+0x29d/0x3d0 [ 167.905708][T12236] ? __kvmalloc_node_noprof+0x180/0x1a0 [ 167.907274][T12236] check_panic_on_warn+0xab/0xb0 [ 167.908573][T12236] __warn+0xf6/0x3d0 [ 167.909601][T12236] ? __kvmalloc_node_noprof+0x180/0x1a0 [ 167.911023][T12236] report_bug+0x3c0/0x580 [ 167.912160][T12236] handle_bug+0x54/0xa0 [ 167.913298][T12236] exc_invalid_op+0x17/0x50 [ 167.914489][T12236] asm_exc_invalid_op+0x1a/0x20 [ 167.915745][T12236] RIP: 0010:__kvmalloc_node_noprof+0x180/0x1a0 [ 167.917630][T12236] Code: e9 1c ff ff ff e8 d0 96 bf ff 41 81 e4 00 20 00 00 31 ff 44 89 e6 e8 ff 98 bf ff 45 85 e4 0f 85 3b ff ff ff e8 b1 96 bf ff 90 <0f> 0b 90 31 ed e9 ed fe ff ff 48 c7 c7 28 58 5f 90 e8 aa 20 21 00 [ 167.923137][T12236] RSP: 0018:ffffc9000302fa68 EFLAGS: 00010283 [ 167.924708][T12236] RAX: 00000000000017d0 RBX: 00000000c5c4de00 RCX: ffffc90007764000 [ 167.926756][T12236] RDX: 0000000000040000 RSI: ffffffff81cde49f RDI: 0000000000000005 [ 167.928659][T12236] RBP: 0000000000000400 R08: 0000000000000005 R09: 0000000000000000 [ 167.930676][T12236] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 167.932622][T12236] R13: 00000000ffffffff R14: 0000000000000002 R15: dffffc0000000000 [ 167.934586][T12236] ? __kvmalloc_node_noprof+0x17f/0x1a0 [ 167.935984][T12236] ? __kvmalloc_node_noprof+0x17f/0x1a0 [ 167.937700][T12236] __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 167.939713][T12236] vivid_update_format_cap+0x127b/0x2530 [ 167.941353][T12236] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 167.942888][T12236] ? v4l2_match_dv_timings+0x1df/0x1010 [ 167.944315][T12236] vivid_vid_cap_s_dv_timings+0xc0f/0xfb0 [ 167.945730][T12236] vidioc_s_dv_timings+0xa5/0xc0 [ 167.947037][T12236] ? v4l_stub_s_dv_timings+0x1b/0x60 [ 167.948412][T12236] __video_do_ioctl+0xaf0/0xf00 [ 167.949673][T12236] ? __pfx___video_do_ioctl+0x10/0x10 [ 167.951068][T12236] ? __might_fault+0xe3/0x190 [ 167.952310][T12236] video_usercopy+0x4ce/0x1600 [ 167.953555][T12236] ? __pfx___video_do_ioctl+0x10/0x10 [ 167.954952][T12236] ? __pfx_video_usercopy+0x10/0x10 [ 167.956348][T12236] v4l2_ioctl+0x1ba/0x250 [ 167.957735][T12236] ? __pfx_v4l2_ioctl+0x10/0x10 [ 167.959468][T12236] __x64_sys_ioctl+0x18f/0x220 [ 167.961204][T12236] do_syscall_64+0xcd/0x250 [ 167.962900][T12236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.964530][T12236] RIP: 0033:0x7f9cb677e719 [ 167.965688][T12236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.970604][T12236] RSP: 002b:00007f9cb7510038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.972748][T12236] RAX: ffffffffffffffda RBX: 00007f9cb6935f80 RCX: 00007f9cb677e719 [ 167.974790][T12236] RDX: 0000000020000040 RSI: 00000000c0845657 RDI: 0000000000000003 [ 167.976890][T12236] RBP: 00007f9cb67f139e R08: 0000000000000000 R09: 0000000000000000 [ 167.979686][T12236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.981708][T12236] R13: 0000000000000000 R14: 00007f9cb6935f80 R15: 00007ffc7a85b1d8 [ 167.983765][T12236] [ 167.985168][T12236] Kernel Offset: disabled [ 167.986362][T12236] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:54:09 Registers: info registers vcpu 0 CPU#0 RAX=fffff52000ad5e34 RBX=ffff888025f92f92 RCX=1ffffffff2dc6e80 RDX=dffffc0000000000 RSI=ffff888025f92f70 RDI=ffff888025f92440 RBP=ffffc900056af2b0 RSP=ffffc900056af170 R8 =0000000000000000 R9 =fffffbfff2dc5d8a R10=ffffffff96e2ec57 R11=0000000000000000 R12=0000000000000000 R13=ffff888025f92f70 R14=0000000000000008 R15=1ffff92000ad5e34 RIP=ffffffff816a4955 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f867e713108 CR3=000000004e668000 CR4=00352ef0 DR0=fffffffffffffffc DR1=0000000000000000 DR2=0000000000000002 DR3=0000000000000800 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=1ffffd40002a823b RBX=0000000000000000 RCX=ffffffff81d609ca RDX=ffff888028052440 RSI=ffffffff81d609d8 RDI=0000000000000007 RBP=8000000055047025 RSP=ffffc9000356f898 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=dffffc0000000000 R13=0000000000000000 R14=ffff88802be08000 R15=ffffea00015411c0 RIP=ffffffff81d60a10 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2fb5467d60 CR3=000000000df7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fb490c6a3 00007f2fb490c6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff91a1bd30 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555563559490 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555635d6aee 00005555635d5830 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff91a1c1a4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80041888a2d9ae08 0001000000080606 0126940000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010180041888a2d9 ae08000100000008 0606012694000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000001ffffffff ffffffffa30802a4 0312020002a20303 a2020002a0031fff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffe0800029803 1008000290033408 0002880300080002 80032ec4080001f8 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000187fd9 RBX=0000000000000002 RCX=ffffffff8b237429 RDX=0000000000000000 RSI=ffffffff8b6cd040 RDI=ffffffff8bd1b3c0 RBP=ffffed1003b5b000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d507025 R10=ffff88806a83812b R11=0000000000000000 R12=0000000000000002 R13=ffff88801dad8000 R14=ffffffff905f58c8 R15=0000000000000000 RIP=ffffffff8b23880f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffd6e603078 CR3=000000000df7c000 CR4=00352ef0 DR0=fffffffffffffffc DR1=0000000000000000 DR2=0000000000000002 DR3=0000000000000800 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fdc0c0d0 Opmask01=000000000000001c Opmask02=000000000000001f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000100000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000008888 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a002075676f0087 868a898482818388 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 14f4f00000000000 000031000000006f 6863650000000000 883d746c75736572 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 14c9cd0000000000 00000c0000000052 555e580000000000 88004951484e584f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00733d6e6f682d5f 66690064636c6166 3d2f645f66630031 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000006c RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850b8b85 RDI=ffffffff9aaebc40 RBP=ffffffff9aaebc00 RSP=ffffc9000302f3c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000006c R14=ffffffff850b8b20 R15=0000000000000000 RIP=ffffffff850b8baf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f9cb75106c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000059e44000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000007 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffe00 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cb67f223b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cb67f2248 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cb67f2242 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cb67f2256 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cb67f22dc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cb67f23ba ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 6962762f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000017 4a41550c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000