last executing test programs: 2m14.748590303s ago: executing program 0 (id=1050): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000600)={0x1, 0x0, 0x0, 0x3}) (async) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = socket(0x80000000000000a, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x3, 0x81) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_TUNER(r5, 0x4054561e, &(0x7f0000001700)={0x0, "be814426899cfe6b5cbf12ac156f23db1fd39035a78093d809a0359fc42fdc76", 0x5, 0x20, 0x5, 0xd55b, 0x4, 0x0, 0x5, 0x7fff}) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e20, 0x0, 0x4e24, 0x5, 0x2, 0x0, 0x0, 0x67}, {0x2000000000, 0x67b0, 0x1, 0x0, 0xfffffffffffffffb, 0x6, 0xfffffffffffffffe, 0x7}, {0x6, 0x80000ffffffffe, 0x4053e5, 0x20}, 0x20004, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in=@broadcast, 0x40000002, 0x32}, 0x2, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x4, 0xfffffffd, 0x2}}, 0xe8) (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x9df}, 0x1c) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newnexthop={0x2c, 0x68, 0x1, 0x70bd29, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008010}, 0x4000) (async) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x2, 0x4}, {0x9, 0x6}}}}, 0x11) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xc}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x4008, 0x4]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x200008c0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xa7}}]}}) clock_gettime(0x3, &(0x7f0000000400)) (async) close(r2) 2m14.538181647s ago: executing program 0 (id=1051): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) (rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000001) (async) timer_create(0x0, &(0x7f0000000400)={0x0, 0x38, 0x2, @thr={&(0x7f0000000280)="be8e2a51d9e23405da6fa2bcad3e955211e4916902db9b1d8cfbda7144bd2a7ea93e3bec30e9ff57a642ea437da344ba4f638b297706683b597ab0f5dad4e4c4d472aabf16d5fa50e1c9fd34568861d337d040e692f171bcefa705014ea3f34481efed13c620d98d48f4bb786570a239ea950d55ebe544a769b703d9f1ec2c41bd302de9e8833716ddfcdeb8d492b31a677811dda352492415e26f9a196d0129270ef9f06d57b823010e3588288550da25968ea0bb9c0f12de3b193ee0297bca4a07f76221f755c596", &(0x7f0000000380)="4d335292ba75c3a79d628b43078dff3244e1810484a3c0c35254f751bf83f98f201e23a47d99c27e1ca07330e8009e3efc940b70cb39fe1f4480f16117b765b8ab4160774e28d393b915921d15634b37fa9200f54b7ef9ecce5f5e8e7ec50dcc6b898761642b1300d94935325cc0598f89696695d1ef14369c591508"}}, &(0x7f0000000440)) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "10322aa8c701fd04a49433fadbc157bcfcb636b3a4999e5d2e403d846911b92d"}]}, 0x38}}, 0x881) (async, rerun: 64) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000580), r0) (async, rerun: 64) r8 = openat$nci(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$nci(r8, &(0x7f0000000600)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x0, 0x2, 0x1, 0x9, {0x0, 0x6, 0x6, 0xe0fa, 0x10, 0xf1, 0x9, 0x9, 0x1d, "feddca0f80ace5df5992b6a551e2c8df7750efcaefafd5740017eb5a44"}}, 0x2e) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000680), r0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r10, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x240204d0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000007c0)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r9, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, r7, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40891}, 0x20000001) (async, rerun: 32) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000900)={0x8, {{0x2, 0x4e22, @local}}, 0x0, 0x3, [{{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e21, @empty}}, {{0x2, 0x4e21, @rand_addr=0x64010101}}]}, 0x210) (async, rerun: 32) r12 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r12, &(0x7f0000000b40)=""/32, 0x20, 0x0, &(0x7f0000000b80)={0x2, 0x0, @remote}, 0x10) (async) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x44, r1, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4040040) (async) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000d00)) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001100), r9) (async) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000001140), r9) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000001240)={&(0x7f0000001180), 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x20, r13, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xd}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x5) (async, rerun: 64) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x54, r13, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2357}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1962aa9d}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8000000000000001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000068}, 0x20000800) (async, rerun: 64) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001400), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x58, r14, 0x1320, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r9, &(0x7f00000016c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001680)={&(0x7f00000015c0)={0x98, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:udev_tbl_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_SECCTX={0x35, 0x7, 'system_u:object_r:systemd_passwd_agent_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}]}, 0x98}, 0x1, 0x0, 0x0, 0x840}, 0x4040080) 2m14.535967554s ago: executing program 0 (id=1052): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000a80)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @remote}}]}, 0x110) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) r1 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000140)={0x980902, 0xa}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x4004) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000140), 0x4) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r5], 0x6c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000000)={0x59, 0xa, 0x0, "05fcff410400001bf9585253b800c495f2000500"}) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01"], 0x3c}}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000080)='ip6tnl0\x00', 0x10) connect$inet(r10, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) syz_emit_ethernet(0xba, &(0x7f0000000240)={@local, @random="6a2ddcf6177a", @void, {@ipv4={0x800, @tcp={{0x22, 0x4, 0x0, 0x0, 0xac, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp={0x44, 0x18, 0x1b, 0x0, 0xd, [0x3, 0x8000, 0x76, 0x10, 0x1ff]}, @end, @timestamp={0x44, 0x20, 0xba, 0x0, 0x8, [0x80000001, 0x2, 0x6, 0x8000, 0x3, 0x800, 0x9]}, @lsrr={0x83, 0x13, 0xc7, [@multicast2, @multicast2, @multicast1, @multicast1]}, @ssrr={0x89, 0x7, 0x4d, [@broadcast]}, @noop, @noop, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0x10, [@local, @empty, @local, @local, @loopback, @empty]}]}}, {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0x86, 0x2, 0x0, 0x9, {[@window={0x3, 0x3, 0x3a}, @exp_fastopen={0xfe, 0xa, 0xf989, "412b6ea1afc4"}, @eol]}}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000580)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "04c2ad", 0x10, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x4e21, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 2m14.448633116s ago: executing program 0 (id=1053): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) read(r1, &(0x7f0000000080)=""/4101, 0x1005) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x8000004, 0x601) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000001180)={0x0, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x101000) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000540)={0x0, 0x400, 0x1890, 0x400, 0x2, [], [0x9, 0x569a, 0x5, 0x2], [0x9, 0x7, 0x2ba, 0x2], [0x10005, 0x400, 0x8, 0x9]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000001240)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000300)={r5, 0x0, 0x9, 0x0, 0x0, [0x0], [0x9, 0x0, 0x0, 0x8], [0x3, 0x0, 0x100, 0xd], [0x1000000000000, 0x0, 0xfffffffffffffffd, 0x80000000]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000004, 0x13, r7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r8 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r8, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f00000011c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) unlinkat(r8, &(0x7f0000000000)='./file1\x00', 0x0) unlink(&(0x7f0000000040)='./file1\x00') open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r9, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_clone(0x0, 0x0, 0xfffffffffffffe7b, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000001140)={&(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, r5}) 2m14.396923636s ago: executing program 0 (id=1054): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x8, 0x1, 0x4, 0x20, 0x81, {0x0, 0x2710}, {0x5, 0x1, 0xd9, 0x2, 0x9, 0xe, "3736e375"}, 0x2, 0x2, {0x0}, 0x8}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)={0x34, r5, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x34}}, 0x1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x884}, 0x1) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r5, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x46}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xfb, 0x3}}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x4}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044050}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007001700000000000c000180060006008e"], 0x30}}, 0xc000) 2m14.338344431s ago: executing program 0 (id=1057): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_emit_ethernet(0xe, &(0x7f0000001500)={@local, @local, @void, {@generic={0x8863}}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x4, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f00000001c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x9, @v={0x1, 0x2, 0x2, 0x6, 0x7, 0x3, 0x7e, {0xfc, 0x9, "30ea56c4f61cab1d"}, 0xf, 0xf3, 0xff, 0x4, 0x1, "eb"}}, 0x1a) 2m14.275846148s ago: executing program 32 (id=1057): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_emit_ethernet(0xe, &(0x7f0000001500)={@local, @local, @void, {@generic={0x8863}}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x4, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f00000001c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x9, @v={0x1, 0x2, 0x2, 0x6, 0x7, 0x3, 0x7e, {0xfc, 0x9, "30ea56c4f61cab1d"}, 0xf, 0xf3, 0xff, 0x4, 0x1, "eb"}}, 0x1a) 2m14.01869505s ago: executing program 3 (id=1067): r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000280)={{}, 0x10}) (async) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000280)={{}, 0x10}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000080)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) write$binfmt_register(r1, &(0x7f0000000040)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x9, 0x3a, '}/', 0x3a, '^{', 0x3a, './file0', 0x3a, [0x4f, 0x50, 0x50]}, 0x2e) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x14) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x14) 2m13.788800667s ago: executing program 3 (id=1068): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x20, r1, 0x1, 0x70bd2a, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000040)=0x1, 0x4) 2m13.788589967s ago: executing program 3 (id=1069): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x2, 0x101}) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000040)='./file0\x00') (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) symlink(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00') (async) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {r0, r1/1000+10000}}) 2m13.728789524s ago: executing program 3 (id=1070): r0 = openat$kvm(0x0, &(0x7f00000001c0), 0x1a080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x25a, 0x0, 0x0, 0xffffffffffffffff, 0x5}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='mo\x01e\x00', &(0x7f0000000140)='\x00', 0x0) (async) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f0000000200)={0x8, 'pimreg\x00', {'veth1_to_bond\x00'}, 0x2}) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x6b) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 64) setresgid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x4000}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 2m13.728468743s ago: executing program 3 (id=1071): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r0, 0xedaa7000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x24, &(0x7f0000000080)=0x80, 0x4) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) ppoll(&(0x7f0000001740)=[{0xffffffffffffffff, 0x4008}, {r2, 0x4140}, {0xffffffffffffffff, 0x81}], 0x3, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x3, &(0x7f0000000000)=0x8, 0x4) listen(r1, 0x6) 2m13.678293484s ago: executing program 3 (id=1072): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000780)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x428}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x44b, 0x7fffffff, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x84}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) write(r3, &(0x7f0000000000)="3f000000010000", 0x7) read$FUSE(r2, &(0x7f0000003940)={0x2020}, 0x2020) 1m58.428451159s ago: executing program 33 (id=1072): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000780)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x428}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002cc0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000fef7ff7a0af0fff80000ff79a4f0ff00000000b7060000efffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ba2300850000002b000000b70000000000000095000000000000006f88300eaa171100756695acf0af839ec5300a584fe44c80de0b061417e9ade22cecede58ee094518a5800000082c81ddfe3960a29ea15fa7e22f0f3e51416b698f6da6fe8af496d22585ffab3af24974fae00d824313ffef788c6983945dd3663f79f67e78a48b24a4bcdc33b38c5f86e96111199f0f0af9f42099a0f54041889b971cf394bd43473a5ac2acab9768cbc52ff7f000000000000711727c4a32a6b7ecdae05d2b3fed4572eb0d88976d2adda68000010000000c47b18cf93996a43f5e080f57fadf535d8b3078ebe16b10160fad64474a7b558f7a56f41022feec18e013abd8fda2b96779e534d0675fbcc13ba9f9eb96319fd5b49521d5cb2ced401d7b6fce658f203a9c2da91116d986730da1be85b0000829512099df32814820fbf7be91cd13b77f4e4e599f8bbca388247856073472312a9ff4273b9cd08000000000000616e888cda842c661577818c2069cb41aa3b4b7fc28882cad315db3fffc5183deca7a32838e80ad70d4f55382c1879b71ec504d2f3e3883428ee350123a5cad346f6d517f6fcea5b6bc4fcffffffffffff03f419a6e45fd98e77da4a8202ebbdafe6b2e38c9d7e506f5da2958cf7f0d9b31ca3275e64e29d39d158cebe43308cf8760588001172e19685e9a334aec76530861b772a1da96f0a227514bd0bc26df2b50a45e4eceae1ddfe88d58879d12afdb295ce2edecb253e0471714fa124211203000000000000001f502b6c760655ffb20ae13a1a94f7ae229fbf5da7cae4f994ee82fc98c864c3e352ad16f98208cf1469dd6c1212582a3687f7dbdf708929643f3f0f4e947c40742452685ec044fc71eaca9ac692145677e14054331801b1412b39049ed782742f9a1b6aca9123b243c1a68c047f2db79701b62c8cc0d2f608c7f62d107ebc68df9f8d296721c9d465dad604bc0dc500000000000000020000000000000000000000000568a4997dd54fa83aacd2d209f66de2e26dc2fd862a0b8ee149c148197176745fc8ff1dd5bd6611daa882298a37b041b34668d4662ea8fbe2e787dfc4c8bef2124f0439b2d18ec83361da5cc7324000b0a528db31b90bc1405b6d5301c34319ccae29b1d6034b665c79baeeeac5e71d24e2e3b6ffc5bc2dcb600e645c0048b45e286a4900000000000000035d9c00e08525207e33505226fdda16e6da6dd31f7a1736029b87e8d6a05bcb356298d7dccd7de2af0885bd4939ff96ab74da3871b077e4058c8752ba4994eafed8b239d781638fa339fa0f7dd135c74d0f95d36cf02670cf27d205a45d4702f97b8b7c57b180c50b2b370dfb35dc895e8f05d6e71829f36150b2cde31469c4aea0c64850eb3f3e0dc35f8cdd76bdde2018366c3201307c370433762676f72e68c962430a0000000000000000000000000000e737dc2e1a3fdebbb510c663d24f72b954965201f775b3739c14dd4832647c028be09f2809fd396fa26532a30a37737e95f0f41dd024b7bf8a6bf807c9fd9b8c7a39717729339dc3054117cb95693bdd61edcc2860b66545e194a961bdc5457d76ae1a87050e12ead896f333735a000000000000000000400000602bfd2f1ace65f2e74dc9c1709cb73a37f40362b7904e8a0ea8d2d9805c924f9985d22972031a1223afa1288af3f48c93fcdb11963d0b748287448f722dc180e87637b662b11effabf45beda2e3a7e1adf8f94b619fa152b33440f2358a745848caf7000eb305c936d26964a2a85e133d01368b8d228d02f96064de261cf02c9632a0eb4ab259e8f4dd63d8b6d2d6b2a0c297bab7d04d73a381c29eaf344655b64e12f216fbc646cc6bd60ca773d187f2fd317f6cb2309d1a13526a44b7d9b2bf93947dc3ac3340a7a114051d33d152310574f0d784910dc1a8403f9200a8f5bbf3610c544437626236458f285196161496389b02ba46a72da0149b4ddfdd55f7862a07395752a37cb0244e94e1310e0c0a148a9a48b149bf2f345f3f89813c9eb05160f63f0b363deee5cb77ea6e951857e1942e5c56d72d724af7aa24a8aadb512f3302972c53b0eb7a693e0b0c775b21aed72995cfe9e9347a07d43ce3db9f22d461e86416ffff6f2e4e36306630052a2b03ee36ec52af0d684fabd5f38adffaa6c5a7a8100d1aefaf8576b363690b76e2eb96b07ab790cf63cfc334b7469b5b5b397c622f7c3ee064f9272443bcb928b6f7a2450cd33550a42843b0b5ac9e37134c81bd56b72e1030b05a5b3ac47b5af22a9dff0700004adacc71db2b15b4ffd98e30224763382ade45d164be76877d63de448f3ee2cd29707484df87ea6e8e6333b5fcb1b8b43a7c005ea800000000000000000000010000000000387592adc78ccfe479549e6f4efc14c4a5cfe845e6157d6fe70b278147edf0e25065ec6b17f8022493d105c9c31121e7957aeec5f7f2af0446d128778c8bf15b87a0eec6f4c75966b5f0e06744bda63134223416102aea1254d57c390e1f84ec7d5c3a758ce59c9e2c4ce1f28b6783661e272bf1cb5c8ac177aa9c6ccbead9a96b22394afb840247e5d69473b836f070dc0bf9302e33b03d4e07395c82e33667726b51ff24b0bbea730702835159e3517ffb3da0d01833589fec3bdab629b21e5d9e87c3c58d962ff5e75c81f583c64b7d5a643674801e18b06ca98b49d9e28d004c7ebccf076c64ef71421f672b0948b18ab5af448ca9446e71ba6dd4bd15a12553066de7cb767a121d56d9d26ce27fdbe6721191f2ed1cc3f9c5e300000000c4793165b3cbf51c7d0cf9edf823641e1bc7db7803b60dc8b21e49a33a73ac00337067dfd3ecaf4e6dceee1048f300000000000000000000000000000000f8ff00000000007958a50896df65337581398793d0a9abe75251908c07d2957ca70ad7ac31aae536294d6a944cd35f46cb554d8aecae5a72cb24596d896ff9ad83473567b6cb9d032c395a1459399cea31ebafc1e77649b55af527ca0f1ac972ee72a78391473c1b9e0000000000000000004076eac7e605f8de6f0ce5702af52c5d78bac0097d92f078a3a98229ebf281c3c876d2614109b69967871fea621fb2a29a77a1516b51d9b1c3c5ef1436f50fad4a1cd92a211fec61d37c8b410a20fbdeb642228d6cfeb8cda8eea3a7f343fcaa0459b9d916abb668d4799534307084ee7d854dd0850000000000000000000000002f40c3e24f9c0a56edf543425058ff00ebda26a43bdab770212186b84421d8b841cf9181d47c08cb392e414c1efba9978a97769e65ae443644dbdb32a50cdc717a34d1aa9ced37820a6d1cd0920a9a07e36a85e967bfa7f2caf1c9b52c06f4d178fbb91a169e9533e401819e57cab8147618196e7029327eeed624bb92a7462538dbd8a4b82f87df7982b44b160a598c75bafa5a9b388a4430bdbebc83ac2ad2da3ae80c851bc2fdb8d444597fdac4538aa33bbd204ffe534b15a1878be30157d0815d38fc2effeb7b87d6bd15e21c7b7c7d1ad7b3fd69b4bd06716a203e82f4c0413719eae0967fc70f03570375c2d0986b020066368e6a18f50d32f6fa95542f70b0cf850a3f25a9e76601587e9158b8cf107cc68e0263b270359dd3f4848a049a11659714f6a40df0fc79b3129bd9b1f27b433ae6dbf2c61be55f6a9a06cd6676e2193cf61876330d948b9986df5536574edd427376d308b328f961d821edec74b8eea8f3eb5e9b412f31b85c71ddea2838600ae982987233316bba8bfe260e556eefa9c6946acc5852d2f504d9d43e7d52621b892267642dedf4d6cc2ceaa0be2c070b87ded2785832344532fc562c6a8d39dd9e7233415bfbc74cde3b4afb43fe01e2f9161a1f7ec212c3c2938545efc041e65c8da6fa08004fc47a32b89dc1bf5aebe7b3668d72700b163a005ca227e017a1f90439fca246e7860d0b2536a859d1b07773c7a9eeef06d2fb5241211848f16a6f58dbcdf108d64b6a556aab2ebe79ca06f30d89bc640173815d74aeafdb0856db3b2e9b855538c13609ed94da1419d8312b0feecf56c2e203ae14e1ed05361128aec71587fd6f40b33499cf1c39e28859ba544d413036156cb01a2381ece755c2b6da49d3889f37341a68fb35eea166cfbe1cdbcee9173314d294431f5e9c42028079d0215578896b2edb1e98a3576dafbd1cb7374cc76268304d49e82c1bdacd6eac6ad33de8574a3c39609717af2991314069ba9ec6766ded1acfbbfc0f7438e2376411b3ed7e41f2a9e1ad3473c97d5a351f893847b134d9c205880a0b55dd256f85daa4c519caa42f043cac2d6cffdfd28b9c407c517305a1ba7898cf3343a8a796d45f08aac755a49a2bf2"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x44b, 0x7fffffff, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x84}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) write(r3, &(0x7f0000000000)="3f000000010000", 0x7) read$FUSE(r2, &(0x7f0000003940)={0x2020}, 0x2020) 1m3.160302545s ago: executing program 5 (id=1849): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x20, 0x0, 0x0) write$cgroup_pressure(r0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x18, 0x2b, 0x0, @remote, @local, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0xffffffff) 1m3.058005602s ago: executing program 5 (id=1850): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x103301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000080)={0x80, 0x6, 0x101, 0x0, 0xec, 0x2, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newtaction={0xfffffffffffffe8a, 0x30, 0x1, 0x3, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xc}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x4ee0, 0x0, 0x5, 0xb367}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x189801, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x1, 0xff, 0x5, 0xfffc, 0xe, "f682756c98cc948c"}) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x40}}}, 0x10) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0xc5d116e9899720b9, {{0x1}}}, 0x10) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000100)="a9ab84a4acb94f41a16db94675ea7f2c38494f1ab12a9aed08509f1d0a144be57aa6677fd68ce84b1f5653ca6441cee9fdaf0d59dba5c6b668b8c217dcbe550fde5e6417eb0410b000505b667577f706544ab345f0ae94fe4c942725bf489325d9b3188e90a838f538e7b117fc29aaaaf06569aad3739d269afd9f056f556891109f903a9d9a93fd068ba45c797bb7564fb89974b00c042108", 0x99}, {&(0x7f00000001c0)="f8f7e5490ce0b336532279d14d70cd3eee50331ba3ca8b3baf008331ea7057b68c58e4b2eede666db35df2baf93b06d32410c2b5c48e91b13a5da14c567834e650e8da3f14487d084670c2bd5d9b550141afab3853d467e70414734ac73b7dfa652111fd6fdbd83dd6075facec8092412442d9", 0x73}, {&(0x7f0000000240)="ceeac33aca675ee2f52dc6c5e323a86de2b500fd8e52e71254085c0fb1f6d7ca92d529081fdfda5712ecca1a63aefefbc6d8f9b36aa974b247043fac942c18895adcf1717b28253630a03eaf30fb036ba9ec6bba638651cc4a3075969fab5207aa96b4bee41b9ed59ec33eb18320c130fb26d12a9b03c4e60a9a8a669411f0e3f2c2bbe1183af8b6630a8c113471732522bbe84cbdfa61e20d213fdcbc50", 0x9e}], 0x3) 1m3.056865458s ago: executing program 5 (id=1853): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) (async) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x80) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m2.98776974s ago: executing program 5 (id=1856): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0xc0240, 0x0) ioctl$CDROMEJECT(r0, 0x5381) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r4, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r8}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m2.897965944s ago: executing program 5 (id=1857): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0xc81, 0x0) write$UHID_CREATE2(r1, 0x0, 0x194) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000080)={0xc, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f00000001c0)={0x28, 0x5, r2, r3, 0x0, 0x0, 0x0, 0xf5, &(0x7f00000000c0)="e7bf00dad7b7355fb4387717f50105fb15e7b21bbe0906656eef743dc1a1dad2fe1695f743047036e762ae2858ac11651172ed210ff0520aab0dffe8d1c98d73b5e558f8762a2727b2710f7c30d1ef541331b85c3d1a043b512cd4cab497e140ce535612de20ec9b2371a195d5390c4f4cbd3629ba752ea53694430179575a876359b73372779e6fe3df4d907a5ee8f7fe8f332cffde103b64c2b043d3ca97c5511bf02f6ae1ba90ed7ce4e721ab14f42d7907401c9167a7364efab5ecd651b5bfbc23bc461cfaccadacf566df25de36d7517b0560ddbebd37d5a1ae86cb4e5ff013cea725f2e4312968caef4e63671305af3ae506"}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ptrace$getregset(0x15, r0, 0x2, 0x0) 1m2.436459491s ago: executing program 5 (id=1873): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000840)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000500000000000400040054ef00001000020000f0000020"], 0x24, 0x2) 1m2.395787878s ago: executing program 34 (id=1873): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000840)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000500000000000400040054ef00001000020000f0000020"], 0x24, 0x2) 33.833102183s ago: executing program 2 (id=2231): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x1) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x62, 0x7ffffffd, 0x348, 0x0, 0x250, 0xffffffff, 0x188, 0xe0, 0x308, 0x308, 0xffffffff, 0x308, 0x308, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'veth0\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x300, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00'}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@mcast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000008010040"]) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x9, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x4}, [@initr0, @jmp={0x4, 0x0, 0x6}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r8, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4000) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r11 = dup(r10) write$FUSE_BMAP(r11, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r11, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r11, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) r12 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r12, 0xffffffffffffffff, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)={0x1c, r14, 0xf03, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x1c}}, 0x0) r15 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r15, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r12, 0xc06864a1, &(0x7f0000000540)={0x0, 0x2, r16}) 33.453786458s ago: executing program 2 (id=2234): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="0000000000800000000000000000400000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e000100697036677265746170000000080002800400120008000a00", @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x10000010}, 0x20000004) r4 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000200)="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", 0x180}], 0x2, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 33.377512415s ago: executing program 2 (id=2235): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) (async) r1 = socket(0x200000000000011, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x80) (async) mkdir(&(0x7f00000002c0)='./file1\x00', 0x80) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1048c, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) (async) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000000), 0x8) unlinkat(r2, &(0x7f00000001c0)='./bus\x00', 0x200) (async) unlinkat(r2, &(0x7f00000001c0)='./bus\x00', 0x200) rmdir(&(0x7f0000000040)='./file1\x00') chdir(&(0x7f00000003c0)='./bus\x00') (async) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./bus\x00', 0x400) link(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x4, 0x0, [{0x38e, 0x0, 0x9}, {0x289, 0x0, 0x4}, {0x373, 0x0, 0x8}, {0x271, 0x0, 0x7fffffff}]}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x4044800) 33.115421296s ago: executing program 2 (id=2239): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000300)='.pending_reads\x00', 0x2, 0x90) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000000)={0x14, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}}, 0x4010) sendfile(r1, r0, &(0x7f0000000000)=0x6, 0x9) 33.028964235s ago: executing program 2 (id=2241): socket$inet_smc(0x2b, 0x1, 0x0) write$selinux_access(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)=0x10) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x328d, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@deltaction={0x34, 0x18, 0x1, 0x10000004, 0x25dfdbff, {0xa}, [@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x34}}, 0x20004000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r6, r7, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x10, 0xffff7fff, "fe1d00003413000000000020b42717e47f00"}}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) getpeername$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, &(0x7f0000000640)=0x10) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000400)="0f35660fc77200c4826d4966b8000000000f23d00f4e54046635100000040f23f80f21b73e0f81ee000f30660faef40f0178ee", 0x2e}], 0x1, 0x18, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0x800, 0x2}, 0x35, [0x4346, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfff, 0xfffffffc, 0xffffffff, 0x401, 0x5, 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x851, 0x0, 0x2, 0x3, 0x0, 0x0, 0x800], [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0xa0000000, 0x0, 0x80000001, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x9, 0xa, 0x0, 0xfffffffc, 0x2, 0x8001, 0xfffffffb, 0x2, 0x7, 0xd5c2], [0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x80000000, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x80000000, 0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1], [0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x4]}, 0x45c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000600)="9a00885200baf80c66b80063408d66efbafc0ced0fa93ef30fd6eaf2e22a640fefd10f62b23448b873000f00d8d9fd0f01c9"}], 0x967, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r12, 0x40045532, &(0x7f0000000000)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) 32.78481438s ago: executing program 2 (id=2245): r0 = io_uring_setup(0x6ddd, &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000000}], &(0x7f0000000100), 0x7}, 0x20) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async, rerun: 32) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) (async, rerun: 32) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) (async, rerun: 32) sendmmsg$inet(r2, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004e40)="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", 0x4ba}, {&(0x7f0000000340)="67bc1270103215f70b9f2603356704de3f11ad536ac56c6f09b31d750a398764a2f7b7b27c4b84c81cb0919148446c315fff2cbbe5cec1a2c054fa42d8c910de3c5278b57335acc9ee3fd405f3a5cc2f4778272670533a91741df178492c50bf573b2e30e8196637b30e3f68eef9fa302b1880500099702be4de5e460f099f8f8dfce6c2bcf9c26b1cf95eb3a117c034cf5d238192a899c81b372965eb1f2c66e7f3", 0xa2}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000200)="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", 0x106}, {&(0x7f00000004c0)="ccad2e60b49630455ee3f7a45f5baf397ee4cbc9ff535339cec0516c7f4e3d5bcaa1e922c4db640c619f4103f58352dacdef366238ced5cccf281dc839e40b3150c3f12f49d758c5544b3663e6747aebf5e6f554cfad5ab8ce3a6535022d2dc012c1363a881faeef51eb9fce4bcdbbd6b112ca56f76ca5ddb93767374c1242631645c9ca76ee41cc64d57a0be90a8bef9729ec7594d5b0a3afe341c729805be6f0068e126c8dfc9ceed88419f976d4966d726a3bbf2c8f0c1030a86b40ab223f69ca77044813f7d4188c4d85781dc6c7072890a758eb15fba142fd953db2e6a81af270677f986eb48fdedfe5631a6e5d25adb347a8beb82f8d3caeae20515c7538a686f394d3068e3697e45f3e3e5710acc98e25938e8477b714ac73c96cc4e97fbe5905d9b42fae34ff5a7a321b27a8b25decae8dfcbc939e61cc9c5b102b634b5132ea480b06b942e78474b9aefbfbd0e9766bc244e0fb71f3864307221e5d5f5d199fad1515b46a19d3388955b08e173aa7274f9f888fa34751fff6275038f706deec2833aa1d14226636f1fd061ef4081f49b951afe7cc20bef8ca572b585f22b783085306317030ebd772bf3c80e4b7a604a0af9aeda1a6fc6113af053238f609d94ee56f9a42b3d6ad8d33404555f1a21500d4af045ca5f298c7ce6c5bd828c35f11972882046dd5779297749254b2237ac3a540b5add0a486ad95dae0dd7f691ccb27c06161a0c74021f1088a6fb8ff3f976ecc552cd9d4fb05f566616e96e9422efe615eb89a58b54adf1aa43020e809b6a0e1f52b92c82b936829f0af30d894ce37d531cb1a434b5ec0957e47dbe01e8dd7f9fdfd419c5edf439cc7a9fe4a2b01f2893ede6997e69eb65b9d422a2718f3004fe475bb855387c7b17b2f005c6c03b3ace92fe44a468349011d282e6816bafd007a4632eb9f1bfd2e56e2e5376821111703320384a46c4542203f55768631620cd46bd565ee059f7f4e411bf22f244e9eebd94175482fcf86b645034d0046f3c228d2a9eb22c0cf96578b1ebc180441a014d9d7b0dca353be0484c49d5735c13bd8654634fff8ed7e6499e2c48f07bf422f8d31ea9dfd822c475247ba29495b34d1910a0b08ec43307254e6bc47528e42e4e27a5f4d19cbbd6d8afe3e422e43f902a1b52f956730873596a08868a1245471d40a772c4601c54f9d627881538766626d79c9649dbb35cd24cdcf75f294663094e1a1da9c375348913724deb9866a41528adc6153639fdb5b9b3000cd22af83e4d035b86eaf6f63d91cafe968c0464a4bfb81a657aeac4c6f5a18b022c1b64362caa6a44e16f8ff405851faac010d89f6b8468bc68ba3a27e59f5239c471777ed3f0eef43b62e9789e94341ceacde42332a406b6f7f077dbd23ef7534f111d74b39e0dc1fc6ee8a5faa68756ab4286d3597cf7b34ceac1e263c48a5ab3bf3ac08511ea7be346e631b3fe6643ea2ade3d58a93fe4d02b5643e5c21090eb8f6778468b7993b2d898663f6fcbc1b02939e8ad413", 0x43b}], 0x2}}], 0x2, 0x8090) (async, rerun: 32) shutdown(r2, 0x1) (async) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000040), 0x2) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 32.447538595s ago: executing program 35 (id=2245): r0 = io_uring_setup(0x6ddd, &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000000}], &(0x7f0000000100), 0x7}, 0x20) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async, rerun: 32) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) (async, rerun: 32) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) (async, rerun: 32) sendmmsg$inet(r2, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004e40)="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", 0x4ba}, {&(0x7f0000000340)="67bc1270103215f70b9f2603356704de3f11ad536ac56c6f09b31d750a398764a2f7b7b27c4b84c81cb0919148446c315fff2cbbe5cec1a2c054fa42d8c910de3c5278b57335acc9ee3fd405f3a5cc2f4778272670533a91741df178492c50bf573b2e30e8196637b30e3f68eef9fa302b1880500099702be4de5e460f099f8f8dfce6c2bcf9c26b1cf95eb3a117c034cf5d238192a899c81b372965eb1f2c66e7f3", 0xa2}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000200)="02fe40bab3bac217f1a6e814488778d8e9ac3beee0074386a82fed334cb88055111c023ad070f69d932765a9b5c94f7027561c971b303db0fe2444a3f44361cdf49bf4477bcf6c0fb608f5552297e0e2fe3fbdbd6646d2512657a9cf86885523b1841bdf0658b46936f2e1e0dd04c9f1718b9654704ab7dd6b0fae145c52279f012bbae30183984a15d5296f942207a8a9e7db0df468925f8098987a78338f04235425294ebab38981a1b83715fb49761ca24ad6541d563ba3dfa2d60ecb7c75f1f895c8fa7362798c4aca35a9c36b4e4ea1ef5847823e3e6b92110940f2ee50bbac850243a72b55429bfabc0b5f79bd07e2cda699e62b0b04c9d13359a17c661ecf706bc60d", 0x106}, {&(0x7f00000004c0)="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", 0x43b}], 0x2}}], 0x2, 0x8090) (async, rerun: 32) shutdown(r2, 0x1) (async) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000040), 0x2) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 5.0691318s ago: executing program 4 (id=2453): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000b0cfc4337965941538be0200000000000000000000190d0000000000000000000000fdf700"/64], 0x40) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}}, 0x4044) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='zonefs\x00', 0x2000493, 0x0) 4.938433594s ago: executing program 4 (id=2455): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x140, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x114, 0x3, 0x0, 0x1, [{0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x103, 0x6, 0x1, 0x0, "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"}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc}, {0x6, 0x2}, {0xf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 4.758390669s ago: executing program 4 (id=2458): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x3, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, 0x0) write$sysctl(r0, &(0x7f0000000040)='2\x00', 0xffc4) 3.866903919s ago: executing program 4 (id=2466): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, 0x0, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x89, &(0x7f0000000140), &(0x7f00000000c0)=0xfffffffffffffef0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x86c}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x10, &(0x7f0000000400), &(0x7f0000000480), 0x8, 0x16, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x5, 0x34524742, [0x1000, 0x7], [0x9, 0xfff], 0x108}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f00000003c0)={0x0}) 3.739915371s ago: executing program 1 (id=2467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000080)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r8, @ANYBLOB="0174"], 0x20}}, 0x0) 3.584712064s ago: executing program 1 (id=2469): r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x8802) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000040)={0x2, "4efefaefbd85b4b35f4137c97d5294130f0b58b3ff8e00d721927f67f70af47ea9733930f1ba1827996bd3382ad54637351ba01e4bbe02fd6a2e53c416b5961a"}) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_clone(0x800c8000, &(0x7f00000000c0)="d3bc663c156c3c64401893be2909090497c8ad910c3613d8", 0x18, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="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") r2 = socket$xdp(0x2c, 0x3, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000001180)=0x3, 0x0, 0x4) fstat(r0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_getattr(r1, &(0x7f0000001240)={0x38}, 0x38, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000001280)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000012c0)={{{@in6=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f00000013c0)=0xe8) setresuid(r4, r6, 0x0) sendmsg$key(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001400)={0x2, 0x11, 0x73, 0x0, 0x4, 0x0, 0x70bd25, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd2d, 0x3504}]}, 0x20}}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f00000014c0)={0x38, 0x5, 0x10, 0x1ff, 0x401, 0x5, 0x1, 0x0, 0x2, 0x8}, 0x0) get_mempolicy(&(0x7f0000001500), &(0x7f0000001540), 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000001580)={{0x1, 0x1, 0x18, r2, {0xc9ce2c3, 0x7f}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f00000015c0)={0x0, 0x1000, "776f19cb65195eca018fb69f1930415e2f97088c69b07b23ca04f00b1e3d212a1d11fb4e6943c84bbc526517e3e3b2315a0f1ad80fe2b0f7e31924ea53cf2a5aae77da16064cf44c07ae9dbde94bb90307b92308246ba4c43f763e2eb5d48a2554df2fb3863bd867432ce48a54eba0eff0dd712c4a594939a2d11a547c8a7cf7b2e79f968c9f297c3e5df78b89535f4140cd8e8efb09c7f7c940354ecf77c4a40f8f52a4e0a137b1f340942722c187413880af3c94612f73aff15e58a8b13f2f02491717b7192c33691d4469b64c04a2bc9c006058d5a48a7c7d8e88bf2bd80dda7131f8d27d49576ed3b9e338f58d7c6d523d0bdf3ee688a9280875c478ed496012e48589caad5f6b17e29a173a6564a7c08c4795f12810a7d3c3dadc3aad436a99b93e2b626ecba6dfc57f8fa821e4445573e08e3e37b807dfcf542207d7729d9c764337e17a695b87a98ce53a6a58305d77cf9672e5516258d3fa8e68676455844f9248de87b1d3cf1cdb9445f60d5482fef1f3e55519423337b0e3087da4dbb9e7bcc0b10a6e7f1ca88b87500532fbb9434a61c50020d9370db0afcddf29da27c18038e676df0d61e40515498ae9284105117957a8aa2a5c4a108794ad00dae861ae8051172e4a6ccef9500b401120f0d8afef7dc35461ab7b171193e6f94c24388e1c2988e2af742ad8fca1b32f304bbb90eb43d968fa5ffcce27d299950c898386ef2e6fd8d1483ef610035bbabd07037dd9758217ab80b7f3d8880c9159dd489a60c13ed4c1eac8711c53ee4c26d9fb5bda46bf6ba90811b140438b2d138eef4bc2fdc15fe393a624abcc04dfa136f7f1c3319c14270f6cd9d06992e2c74a29dde8f53ce6e119f8ed2bd0c697fb5d10b842c30251b6c3da3b19b570131e50d06835bb30116ca74a1a93963ad8b4f592f79f71a8ed88a406fc5bb2aab3a9d5cf4997551107cf77f4f6fb68d1e6e3fe30e6ecddabb6554b8f99d99f6fdec957f48b4d51bfecd70ee79efb27849edd4b14ab07c98ab9ff65c14a83cc03f3f9c086654f19f901b15836056b71d526c7dbb33497e3205122e4c3f94fc145c3be83f09b3222f5cda88e871e8fae13d215bbc518e81fa21ec92fa0e6a750325d03d51ebb9705a8ec35efea6d40dd2bc82d593ea170054cbb514f72889df561c8be57d1ced9239e2e3e63eb49a6cec0f880509ace89a8856a87ec096a9d981564f186bb81bc7090072b09aa831336cd3aa25491bece1105e4baa4f3d427d9133131b59b3c1bb18fa9307c436ae33a9ab56991315fa76d7437f13cfb6d226b08d7742a39cad819da03743230ec37c50adb1121a566bb7ca77460a371825e63cc276b329078c5738e7f85712724decfacc460c849e770a36b011f0ebfcaa779cc5f57c508d45d113809d6a8f0499a88fefeac3d0be72a4f39d238be08e5d24a9bb04d885cec1b0ec32db207ead843d9aa6d04c49569f3dacc202af39f0eb33cafeeba76694669004eec8b9728f0f2e862534edc850e385a5a0a97b007fb0126d777ed66e85acaf9e8fc307c286f295024921479e7bc12b28c988d3a31131c4063cc8104d789fdf88056b2c6e2196df852d36bf50394f63e873c88e3fc830c1fc72717ebeff2800de5c7ce82160f2816253a0a2d117683da1c38b1412d84ae6e68ae4359dcf35c68cc58cb9760a73a264aaa0d6c1cfcfb752d0113e10b0155caa7d1253afe8e5bf863888d58909d5325fac8857cebd33cc7c5444360ac40d94fe3cb1431307fa3a1b4d7a86a295261e1518055e9bca74505ffc0aedca54bfb453ca8d47c86a23d3c5609492cb4044ea4317eae7e6f48c9c6c4187942a0c378b2b874c5f850e2bbb2c6a42f12929b3637da8c39cf227010f4ba4e524de1acbdf5db5b13d441d427315c0c63ceb5726dd74d9e53a09a803eea4b0be1f37577306e13e31505151ade078035271459c0c22f137988471dc0a9a0174a8653ad8a6aa05656a98ab09a9a9f2bbd2c72513d6037e8f581568c5ff7ccc83616410ab30489dfe391dcfbea9921085a9c9d8bd4526f66e9ffde27659ce1d35444d402fe40508b3c30c9edd86c8b7d580abe651e3723044a26b6f8cd9f61dc1d2d802db87766572c7e20b80684cc71f6c087ca907a74044c5d4590d7ec17d9a614a4d74bbd69b8c6ab8eb395c0200974f2dec8dc1105204dc97ae3421fe5b1b7adbbaf13681bcb9cb13ff734bc58464a8aa0667f932576193c0edfc18526b3e5b2eedc39140297325142a47f8248fd90f642967c35bcf488981ebc6c23610395ca6cb488bd08889b27af8db68e0118fd12cbccb951dbdc17a7aa6f08f4ab28ab28c7230dfd711dcef0f18d86c0f78da3e1af449f72ccf3a4332e98e8f5f5aac26e346e526337afd55b69b15659e0c9f8b33fb13304281bf35d79990e9d26ba9695cdb0a714b63ce8edd767255e1c38851a27ee70f79323f732345ee316f4c8053b0741713eff4a1c3515a878da8428ab9f439055ce9ca062598f973ce1a1052238ed0b79ffe32248a53a39ec40b96fa43e744c11720813c632c78aaf0aee211d55fde01ea7b8d74587c7083e3a836e3e0f3e59023963e450199d1234fc829c89aa36e040ce76f08b4b6d8d82623afd5c50db413e1b6583ec1c0ee9ea858208ac6d9c8e92c27164c9041fc0faa97a6b4dc17f71022def87361996f8577c52199240b28f446b0950a110f78d2abbbb5058bdbb625944d7fd579d12629d7a7a45dff0c35c02954e2807797402bf1a51010d9024a6db2ab0d60276f6e9ef41a4ebaaec28b6e2a2180b30f9729378161d5be2abee8e73d7282fc4300a9711c67666bfd9c8b158114de9cd81e2cff88341b1f4778c44a1a926f4cb72c175a045a2bb3fecaaf794dead80323e5579315deafba1c0c3c15ee865cc2226cda0d5ce130db37941728c62fd45448f1f9ff73b87462cdbba1c1841ab03fdfc8095a7a016a09bbf3df6d069908f6271d1a397006d785d1075c75bb5d2c34dd0db457a9a3be111012727fea7d42c2f7bd0a3aa0a8ff6fb8a35789f98e2be2d43e761e0df5a3218087193d91ef88c397610cbb4afc29ca332a7312269e2238cb0f0b813506fa102469af4765cdc094f994292e5e5780a3c21874091be89d6c02536e126211ee6cb7a44ac64e4b24cfdb203ac77f159a2fe75b8e108be7e30b2db687b88243ec883a9cefc8be4f5f61fb5bd9158095319486e1d67242405f21cfb1acbc4ed2d042028e6dfa8d858fb50342317ce800e9b6e7e9eddfbbdfaa1deacd86317571880916f716bd614244ebaf98ef3fef2079928da67b1691f85f57878ed03b6eb038d82331c2c5a178bc83813a5f96f2cc8c240df4f92c56c0af2e8f1090e8538058fb04a1beec63fd81a68880ac8853309e01f864d399a07bb9a5ef6067fae982bad4cf96a5420576f2846f54c269c634e9942576174cc3c0249a5d68844c7364b4c47da13e7ff995a6d6efa3d721a4d4eccf1de87d810dce0c9265e832c1867ee2478d8af1902022353dbe0e6308aa18c6ba84beb47d9546ce96594aa5a29ca0bebe2b005fd4d120e1f40aa689237437496853e0b284063e24d9432175b0cd34f32090cca1ffd734c0c6c91fed9e616ee3a9544cfc10a59af5b71471d1359726cb9879735807f13c82b9a513f507934b2fa2c80fee443ff43e87ec4919fb97458c672f08cc0c2b70853765b47e686f89df7050f78bed5800c573bfa88463e12e807aeebd7e47173ed3c313d6b3a6b6f34a750740c79d62c0bfa403628df979941bd5960f9d99b974dff2a7d96fdba36df578806158395cc5b6d24c78af4c6b304ea587f4e32dd5dcb64bb7779204434aea85cbca26f9dd25ca83e4a3fb70d562f60cd1906867fe4080f44f6022d36a75deaafad514fb1e5c15097c342c610e5d3a4741adec465d2e0a55f76605e09ec67af1e89e227672f359acf30627be3a6e477dd203382851d6d32e6d6c4fc4184de8b54914c5cde874a0d31a27325fa04fdbab5daf034a6bca5ad0d75f39504b2146a2e40793d3efe437b0603ccc875b7fd36a3fa7c89c939f5639e3c56e9a90d8ea1358f58b1e5c8aa254f90260cd4b3fcbd1febef20972d7c5d8c5e1156c64dae57864dc9d2a16b15cbe809a1829284f0c516c1e0e38efb7bc6f3cf2927d19e326997c11263f9218cc57818814ce8bdc3628ba533709a21949381cac0fa208f7545c9a811149fe84fb456c485fe594ac45ff378aa68ae75edc5304812c5eb16364ee61b52a08e3b7e66054a75b0c66154a9e31a0271a7210d0846e3eade2a5e7e15fcd68eab01681c867be8ba27955538ae8a3271e1c0c29ca3950da37dc93172d55565f8435e65e693906902dc6430a9566404aa4e5f01da25ee17d3fec68770a606a022ca8812a50a42b7d01c5f0f9ef61b343ec64f4c1d84256f95030be94e8375af23bcedab868995b69762bcf84098ad00af552432d417b74d6a0c23c2ee9201eeacf9794689eea4a9726bc9330635eebbcd48e66a97b01c285a1ab7447e1c4515a524e2d2e4f98a846ee39c2a65a55a2482d51b02740320c0fe074486b4c872036308f1a779cf8d0910ff0d09972430a08d82878c2581f2c1fff16e8ef114d300f28195ba6f2efb5828aa5f2cd390afe0f5ee37db3ba9e49b472fe6a5b9ddb0f99d973e028f32d0d0d7b1912e48d7944a086c08ccccd7fdf508ff5c44fe946a2ca10eb41d6adaeed5c5b0d3f89140ef5bec782867742a8992973884c11a5803b6535c33215171e930dee3e39a2ce4c0e465889d68b80481a216d909c6bfbd80fd5ba6f684e7edb488eb79aaf0602ca3a932a8da5ade6c605ab3d9e79a849429f95c8ddc6e4005b92a736511207da36cf22353b61ef39663973f761ddd9e357668f80c462ae69eb3e9f0cfd2b57b2217c19f6e5dd7358236e16e17f02acb9a35b2d5689dc527c49347ccd2bb4143d4b46224fa366d04052e9f60d74cbb601d71f9732eee9d580e8a934491755e5408d5b4e3807d108063fd257ffa4992966b52c144ee10c4a1b3c165e830ecaa074582e46938b9d29610fc90cbf84007731280a65ea7555880239c83f4624920a3f20c14955083a2e29a23019ab0c70a47785b42fb7ab3a7cd7a75fe435d9ad86bfe730628fb7e412a9854d30e084262af28bb4e9066f0baee34ed3bc9ab2f417449eff2df1c6892287cfa5705b5aa1cc6b6919ced900ec0ee6ed66236170990f0e899d448bc8eb6942e1d8d293aec81c683448ebdab665c29354e34b49e86bcd4b969b42f485964ae0c0d49edfcb82038f1d23b7e8c1ae361ca38ce432a1030c2799be407fa9a71dcdf11fe54ef95a9d345c3605b9d41bf5ba8afa00a290a52f14fd93f425999854d7536e5adfbd5f37b9a1d7bd8c652610a0be86c081b24ae37f08fd5975ff085c8c173c06d2cb6a1737a48e6ec5bdf32a2231a0c90d801d72ba4b30d28e6347ad972e49b7462f03b3477f2fe962a0bf3d0ddf34babfadd9b9bf75950303356ee50b216bd2e2a0354b61cf7109d66fd0d73fa692c84a0368b3a4472c3bb9833bd92ec29f53b25f02ed5df7591019339d26d1651c008d8ad3c5cb5117d1415f782eb77016e9bbbd923e9f49fed307cdde0287d5efb700cd418668668a9165a131e61aad7650ebd65457a55b6c45a25cd40526294f9c298ec194cdc9a04e358e7f84fc224eba72ac594c5eb72f872e468db77960a85636510124d4037e6b412bc3456bf3fee172807a88867b7d24c89847f24005f27b47fb05116935cbdea359e87e440ed"}, &(0x7f0000002600)=0x1008) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000002640)={r8, 0x4, 0x7, 0x6, 0x7eb4000, 0x800}, 0x14) ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000002680)={0x0, "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"}) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000002900), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000029c0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)={0x28, r9, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x404c804}, 0x40000) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffc000/0x1000)=nil) read$FUSE(r0, &(0x7f0000002a00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000004a40)={0x78, 0x0, r10, {0x6, 0x80000001, 0x0, {0x2, 0x93, 0x0, 0x956, 0x2, 0x200, 0x9, 0xfffffffa, 0x5, 0x4000, 0x4, r4, r3, 0xfffffffa, 0x6}}}, 0x78) lseek(r2, 0x8, 0x4) sched_getattr(r1, &(0x7f0000004ac0)={0x38}, 0x38, 0x0) syz_pidfd_open(r11, 0x0) pwritev2(r0, &(0x7f0000005bc0)=[{&(0x7f0000004b00)="5b36250730f5a87631fafd6ff1153db17c8b5f05a34f38df7a4031131ea823f33689342f2bc43cf02b4d1e699f421be66889a09e983946ca45642f6592e8e2cbfcd53d6dd1882fa10b67c98584681c2f80f5820f703d101b5c259b3ce8a1e3cf8759df5c53c3878fb10b9606629aab1daa858776c5c2d6b2d0eaebb299112d3523ab2c3726cc010d1852", 0x8a}, {&(0x7f0000004bc0)="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", 0x1000}], 0x2, 0x9, 0xffffffff, 0xa) socket$xdp(0x2c, 0x3, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000005c00), 0x80, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000005c40)={r8, @in={{0x2, 0x4e23, @remote}}, 0x0, 0x190, 0xe2d6, 0x6, 0x5}, &(0x7f0000005d00)=0x98) 3.429848273s ago: executing program 1 (id=2470): mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='mpol=interleav%=static,\x00']) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x378, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2e0, 0x98, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x100, 0x160, 0x0, {0x122}, [@common=@inet=@dscp={{0x28}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'team_slave_1\x00'}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x0) lseek(r1, 0x0, 0x3) openat(r1, &(0x7f0000000000)='.\x00', 0x84000, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000080)=[0x0], 0x1}) 3.347392469s ago: executing program 1 (id=2471): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000100)="89", 0x1}], 0x1) fcntl$setpipe(r1, 0x407, 0x8001a0) r3 = fcntl$getown(r2, 0x9) capset(&(0x7f0000000000)={0x19980330, r3}, &(0x7f0000000080)={0x0, 0x8001, 0x7, 0x80000000, 0x4, 0x101}) 3.194832519s ago: executing program 1 (id=2473): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @empty}, 0x2}}, 0x2e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000001500000a0100"]) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x34, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x12, 0x610, 0x0, 0x202, 0x240, 0x2e8, 0x2e8, 0x240, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private2, @mcast2, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x4000003f, 0x0, 0x0, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) 2.853762793s ago: executing program 1 (id=2476): r0 = getpid() r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$inet6(0xa, 0x5, 0x9) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)=0x7ffd) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f00000006c0)=0x5) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x80000043, 0x0, 0x0, 0x3}, 0x10) r4 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) close_range(r4, 0xffffffffffffffff, 0x0) bind$tipc(r1, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r7, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) syz_pidfd_open(r0, 0x0) r8 = getpid() syz_pidfd_open(r8, 0x0) 2.006493052s ago: executing program 7 (id=2482): creat(&(0x7f00000002c0)='./file0\x00', 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) setgroups(0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r2, 0x40043d14, &(0x7f0000000500)={0x15}) setregid(0xffffffffffffffff, r1) setuid(0xee01) rmdir(&(0x7f0000000280)='./file0\x00') r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000080), 0x12) 1.884934671s ago: executing program 7 (id=2483): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000000}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r2, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x40801) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x78, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x22}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6452}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd534}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x1, 0x6, 0x8, 0x3, 0x2]}]}, 0x78}, 0x1, 0x0, 0x0, 0x14}, 0x8000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x2000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000440)={0x0, 0x9, 0x1, 'queue0\x00', 0x8}) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000500), &(0x7f0000000540)=0x40) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, r5, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xa1d3429}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000001}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xb80}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000000}, 0x20048045) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r6) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000740), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000800)={r8, 0x9, 0x3, 0x3d83, 0x1, [], [0x5, 0x7fffffff, 0x3ff, 0x1], [0x17a, 0x80000000, 0x696b704, 0x8], [0x4, 0xe, 0xd, 0x6]}) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000880)={'dvmrp0\x00', 0x99a}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000008c0)={0x1, 0x14, 0x0, 'queue0\x00', 0x1}) r9 = fcntl$getown(r1, 0x9) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000980), &(0x7f0000000a00)=0x68) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000a40)) r10 = syz_open_procfs(r9, &(0x7f0000000a80)='net/ip6_mr_vif\x00') sendmsg$NL80211_CMD_GET_KEY(r10, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, r2, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x46}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2d830b0342"}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "b5d3947c5f"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20008025) r11 = accept$inet(r10, &(0x7f0000000c00)={0x2, 0x0, @remote}, &(0x7f0000000c40)=0x10) sendfile(r11, r10, &(0x7f0000000c80)=0x1, 0x2) ioctl$BTRFS_IOC_SYNC(r11, 0x9408, 0x0) exit(0x80000001) sendmsg$nl_route_sched(r10, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000008}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)=@getchain={0x44, 0x66, 0x400, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0x4}, {0x4, 0x1}, {0xfff2, 0x3}}, [{0x8, 0xb, 0x5a}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x4000000}, {0x8, 0xb, 0xe093}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x2000c080) 1.355450179s ago: executing program 6 (id=2485): socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x6}}}, 0x24}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x2}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newtfilter={0x94, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0xf, 0x4, 0x2, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0xf4}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10000}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newtfilter={0x94, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0xf, 0x4, 0x2, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0xf4}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100001400000002000000000017000100000d8925466ad1a6ab674efcca42000000000000000000000000009945968d581ea37615f2612916a70d90023f3fcadafd084b32d429cd7a1a2a040000004ac67ecb052dc617f92bc890"], 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000085000016b4ef7b5fbbf192d4afa50ee5c4136dfb97eb88826d76852a585307acede3de9ae82c8fa0c837c09114763fd38a85848977800382693203b2858351eafc5e31a093886b7067b51a5c593b552ace62e19036fd54da41"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xf5, 0x51, &(0x7f0000000740)="355fc5a74e320dfcb2bed8accd8ac3eb6dfb1a2f6a3bd4f1d043c0fecede6a6222671c9aa5e59cd810b42799ebe097d0f07d98007e92db218319cb9be88fb30de3f59943588a3113cb3235b0cb384edec4f0aa04d672f98412fe5f5f74a9b284e947c2d45aebe376b313a14fa5f5c917b66a23fc136276f5be151a1e10b6b8bc2f4995168281592007d6d7233d3fb3afd31f296e6d604f0cb75d02766def0972d4d465324ce73e521f82cb7522367b5acf0c54a86fccedbb5fd06bc0ee67f3099aa07017b2d951c2137731fb7c69e33f20157efa48a4bfecf47e6f5aaa48bbbc3ac3a56d247590e28179423df5a8d059fe16e49bc5", &(0x7f0000000500)=""/81, 0x4, 0x0, 0x85, 0x9b, &(0x7f0000000840)="d559160f86829dd3e5124f61b86c3d73af3e8ba8bfaa0762e12ae6a3787cc21ddb2ac922d79aa07cfcfe9a424ef4a103ff0483b7214f19fe178772a986c572d38d97d1ebe16024fd45d16f323a4317dabfe9b533f2dc26c947f99c61e2489e69c1b575abb72c08035468017abe06653c86338f36a898d54a81bc0f59891a9127a9c7aa05cd", &(0x7f0000000900)="1918f33340b38edfa445b1b70b9caddaac27b3c4bb01d728e03f74e8612ffe74c54b8be887fbf7668a75573d9835fe6dc2a40a7f2aa6c2c904c53f7409c2cc252810899fcda17e9ef15e75e2874e4650ae394e8cbb21c3d3b4e5cc7dcdf612e7a7ca659891a1255d0fc95592eac4e30ed6790ed260e16cbdc2ba272c8ca9554b0a90078d175e72b059ff26902ab0ddfaba8d5c16df84726b3ac738", 0x3, 0x0, 0x3}, 0x50) futex(&(0x7f000000cffc)=0x1, 0x4, 0x1, 0x0, &(0x7f0000000200), 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8003) (async) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8003) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) (async) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) syz_pidfd_open(r4, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mlock2(&(0x7f0000338000/0x3000)=nil, 0x3000, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f00000000c0)) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x47, "f42a97b96d025891dd3f75fdda624457ad3d5c36389c3085702042628092b90ea97599a65563f0e0f177ef91a9c4c76a8816b02fceab9c4cd9f3eb17d7ebbd2d1d5d3311770e1d"}}) (async) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x47, "f42a97b96d025891dd3f75fdda624457ad3d5c36389c3085702042628092b90ea97599a65563f0e0f177ef91a9c4c76a8816b02fceab9c4cd9f3eb17d7ebbd2d1d5d3311770e1d"}}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 975.180119ms ago: executing program 7 (id=2486): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), r1, 0x0, 0x1, 0x4}}, 0x20) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000140)=0x4) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000180)=0x6, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELTABLE={0x30, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x11c, 0x8, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0xbc, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_TPROXY_REG_PORT={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x68, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffffffff0cbb}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xd}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x200}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0xdc, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xb0, 0x6, "12c5a3ae45b314c49530e7585412b70fd5c0de5d358e043d0c0f343b6992ed58748803133f1bd471c8d9c02e4c5602b2cb79c4f1a4beede569c8ceab41076b01362a2459f27d19625925ebc6a63c362f61e4c30daa2479600c4bc96e0aa66a9f3bd381e40d415737f98a069b38cfbf89f4d600db67466d60047d309e29c8afaa3f3e26e2b93bfb96670a902408a571bbc53f282e0d011ca98bdca7f54200b379324b9ca21626a8d776e1a913"}]}, @NFT_MSG_NEWTABLE={0x6c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x16, 0x6, "529998d4d6225f83f4b97622e3f9da263fad"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x378}, 0x1, 0x0, 0x0, 0x4004}, 0x200000d0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000640)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000600)=0x8, r1, 0x0, 0x0, 0x1}}, 0x20) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000680), 0x101000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000006c0), 0x4) bind$inet6(r2, &(0x7f0000000700)={0xa, 0x4e22, 0xd, @remote, 0x10001}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000740)='reno\x00', 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, &(0x7f0000000780)="0f01cac4e27d099633dd0000f30f35f7eb660f3882150a0000000f6ba500400000c4c259ad1ab9800000c00f3235010000000f30c4c1785c8df6ffffff0f01ca", 0x40}], 0x1, 0x1, &(0x7f0000000800), 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x40113, r3, 0x8000000) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x1000009, 0x44ef02ea126cab79, r3, 0x10000000) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000840), 0x800, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000880)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r6, 0xa, {0x0, r3}, 0x3, 0x3, 0x1}) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f00000008c0)={0xfd, 0x2}) stat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940), 0x1808002, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@ignoreqv}, {@aname={'aname', 0x3d, '\''}}], [{@uid_lt={'uid<', r7}}, {@flag='ro'}, {@audit}]}}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000ac0), 0x10080) pipe2(&(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RVERSION(r9, &(0x7f0000000b40)={0x13, 0x65, 0xffff, 0x4, 0x6, '9P2000'}, 0x13) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000b80)={0x4, 0x98, 0x8, 0x7, 0x1000}) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x15, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff}, [@exit, @ldst={0x1, 0x0, 0x0, 0xe, 0x4, 0x2, 0x8}, @alu={0x3, 0x0, 0x2, 0x1, 0x4, 0xfffffffffffffffc, 0x8}, @call={0x85, 0x0, 0x0, 0x94}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000c80)='syzkaller\x00', 0x7fff, 0xed, &(0x7f0000000cc0)=""/237, 0x40f00, 0x24, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000dc0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000e00)={0x1, 0x4, 0x1, 0x80}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000e40)=[r8, r3, r8, r9, r6], &(0x7f0000000e80)=[{0x2, 0x2, 0xd, 0x9}, {0x1, 0x1, 0x6, 0x6}, {0x3, 0x3, 0xb, 0x3}, {0x3, 0x1, 0xa, 0x3}, {0x5, 0x3, 0x1, 0xa}, {0x5, 0x3, 0xd}, {0x5, 0x5, 0x5, 0x4}], 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001040)={r3, 0x58, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001080)={r10, r11, 0x25, 0x25, @void}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000010c0), 0x200000, 0x0) pidfd_send_signal(r12, 0x24, &(0x7f0000001100)={0x40, 0x4, 0xffffffff}, 0x0) 919.932575ms ago: executing program 6 (id=2487): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000040)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000111c0)='ext4_sync_fs\x00', r2, 0x0, 0x5}, 0x18) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @null, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) sync() 775.049781ms ago: executing program 7 (id=2488): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000500)=0x64, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000080)=0xa43, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) writev(r4, &(0x7f0000000b00)=[{&(0x7f0000000880)="7aed0076e49b", 0x6}], 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x503, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @random="00001500"}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000500)=0x64, 0x4) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000080)=0xa43, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') (async) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) (async) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) (async) writev(r4, &(0x7f0000000b00)=[{&(0x7f0000000880)="7aed0076e49b", 0x6}], 0x1) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x503, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @random="00001500"}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) 773.997481ms ago: executing program 4 (id=2489): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @multicast2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048c4}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02080040", 0x6}], 0x1, 0x3, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000080), 0x8) write$binfmt_misc(r3, &(0x7f0000000040)="9688019593df161996ce817ef3c1811759dd000a7eafd1d30424058729ea40d938f49e3bc7375f6c7c8479d739fc61a474a8881db425b8d926c73d6dc07c5d82a28d38d4032ecf2fa35aec", 0x4b) 604.757283ms ago: executing program 6 (id=2490): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$vhost_msg(r0, 0x0, 0x0) write$vhost_msg_v2(r0, &(0x7f00000006c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x4, 0x7fe2, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000eae6034cd6a3b7c7110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 594.508337ms ago: executing program 7 (id=2491): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001a40)=@newtaction={0xe80, 0x30, 0x25, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x1, 0x10000000, 0x8, 0x8}, 0xf}, [{0x4, 0x1ff, 0x4, 0x20000000, 0x4, 0x15}, {0x3, 0x1c0, 0x4, 0x4, 0x4, 0x1}, {0x10000, 0x0, 0x7, 0x685, 0x8, 0x2}, {0xf, 0xe, 0xab21, 0x1be4, 0x4, 0x8}, {0xfffff800, 0x9, 0x9, 0x4, 0x1, 0x100}, {0x100, 0x5, 0x40, 0x6, 0x5, 0x5}, {0xbee, 0x7, 0xc, 0x9, 0xc, 0x1}, {0x5, 0x4, 0x6, 0xeb7f, 0x3, 0x100}, {0x1, 0x0, 0x80000000, 0xb6f, 0x1, 0xb}, {0x5, 0x3, 0x3, 0x9, 0x80000001, 0x3}, {0x0, 0x1, 0x9a, 0xff, 0xc, 0x5}, {0xfb, 0x8, 0xc, 0x2, 0x1ff, 0x800}, {0x9, 0x3636, 0x119, 0x9, 0x7, 0x4}, {0x6, 0x8, 0x3, 0xfffffffc, 0x1ff, 0x8}, {0x5, 0x8, 0x0, 0x3ff, 0x2, 0xa}, {0xfd, 0x4, 0x7fffffff, 0xaa09, 0x401, 0x4}, {0x4, 0x7fffffff, 0xa1, 0x8, 0xffff, 0x2}, {0x0, 0x8, 0x6, 0x8, 0x5, 0x4}, {0x0, 0x6, 0x568, 0x476a, 0x2e, 0x5}, {0x1000, 0x4, 0x3, 0x4, 0x3, 0x7ff}, {0x4, 0x6, 0x8, 0x39, 0x6, 0x8}, {0x6, 0x2, 0x21, 0x4, 0xa1, 0xfff}, {0xc, 0x4, 0x9, 0x7, 0x9, 0x9}, {0x9, 0x9, 0x6, 0x7, 0x7}, {0x7f, 0x8, 0x7, 0xb5, 0x1000, 0x1}, {0xc, 0x0, 0x0, 0x6, 0xc5a5, 0x5}, {0x2, 0x5, 0x10001, 0xab9b, 0x10000, 0xe825}, {0x3, 0x4, 0x13b, 0x9, 0x6, 0x1}, {0x6, 0xb, 0x4, 0x10, 0x7, 0x7}, {0xfffffabd, 0x4, 0x7ff, 0x6, 0x2, 0x7}, {0xfffffffd, 0x6, 0x7b, 0xaee, 0xfffffffa, 0x3}, {0x4, 0x5, 0x0, 0x0, 0x4, 0x3}, {0x4, 0x3, 0x5, 0xfffffffe, 0x3, 0xf}, {0xf8, 0x37000000, 0x7fffffff, 0x9, 0x2, 0x4}, {0x7fffffff, 0x40, 0xff, 0x40, 0x6, 0xa4bd}, {0x3, 0x4, 0x9, 0x7, 0x9, 0x7f}, {0x877, 0x81, 0x2, 0x2c, 0x3, 0x7}, {0x5, 0x8000, 0x6, 0x3, 0x8, 0x6}, {0xa38, 0x6, 0xffff, 0x5, 0x1643, 0x7}, {0x98bc, 0x3, 0x9, 0x100, 0x7, 0xc0000000}, {0x6, 0x4434, 0x9, 0x0, 0x2, 0x2}, {0x9, 0x6, 0x1, 0x10000, 0x3, 0x2}, {0x2f86, 0x6, 0x80000001, 0x13, 0x2, 0x2}, {0x401, 0x7, 0x9, 0x5, 0x4, 0x3}, {0x5, 0x4, 0x9, 0x1f6d, 0x6, 0x6b}, {0x4d4, 0x1, 0x6, 0x9, 0x9, 0x5}, {0x4, 0x8000, 0x2, 0x4, 0x81, 0xfffffffa}, {0x2, 0x8, 0x2, 0x15, 0xc, 0x101}, {0x9, 0x5453, 0xffffffff, 0x6, 0xb, 0x3}, {0x5, 0x40001000, 0xfffffffc, 0x7, 0xfffffff9, 0x8}, {0x400, 0x2, 0x9, 0xff, 0x20d, 0x80}, {0x38000000, 0x0, 0xc17, 0xa620, 0x8, 0x6}, {0x1e4a, 0x9, 0x5, 0xc, 0x8, 0x6}, {0xfffffff9, 0xff, 0x8, 0x45, 0x3109, 0x1ff}, {0xffff467f, 0xd, 0x2, 0x3, 0x8c, 0x1}, {0xe, 0x4, 0x4, 0x7ff, 0x100, 0xb}, {0x9, 0x0, 0x6, 0x3, 0x1, 0x100}, {0x0, 0x8, 0xd7fb, 0x0, 0x2, 0x2}, {0xffff0000, 0x8000, 0x69, 0x5, 0x0, 0x3}, {0x200, 0x10001, 0x9, 0x3, 0x7, 0x2e0f}, {0x9, 0x9, 0x4, 0x1, 0x800, 0x401}, {0xd, 0x0, 0x869, 0x4, 0x9, 0x5}, {0x6, 0x1000, 0x5, 0x8, 0x1, 0x5}, {0xffffffff, 0x5, 0x2, 0x7fffffff, 0x2, 0x41fce7b2}, {0x3480, 0x9, 0x8, 0xfffffff8, 0x80000001, 0x40}, {0xe, 0x400, 0x4, 0x3, 0x66, 0x6}, {0x0, 0x3, 0x9, 0xffffffff, 0x80, 0x3bc0}, {0x1, 0xfff, 0x7fff, 0x200, 0x90, 0x7ff}, {0x9, 0x1, 0x800, 0x3, 0x5}, {0x5a829e1c, 0x5, 0x0, 0x1, 0x5}, {0x5, 0x8000, 0x401, 0xd6, 0x80, 0x9}, {0x8001, 0x400, 0xb, 0x9, 0x1c, 0x4}, {0x3c43, 0x6, 0x19a9, 0xb, 0x5, 0xab53}, {0x81, 0x3, 0xbe2f, 0x388e8000, 0xbb, 0xa}, {0x1, 0x0, 0x6, 0x9, 0x7, 0x100}, {0x3, 0x8, 0x80000001, 0x80, 0x1, 0x9}, {0x2, 0x4, 0x7, 0x7f, 0xbda6, 0x6}, {0x5, 0x1, 0x7, 0x5, 0x80000000, 0x3}, {0x3, 0xffff, 0x9, 0x4, 0x9, 0x8}, {0xfb64bc0, 0x3, 0x7f, 0x4, 0x1000}, {0x5, 0x1, 0x9, 0xb9, 0x4, 0xfffffe01}, {0xb, 0x1, 0x9, 0x1ff, 0x10, 0x7f}, {0x8000, 0x9, 0x7, 0xf12, 0x5edc}, {0xb, 0x8, 0x6e9f, 0xc, 0x5, 0x2}, {0x4, 0x401, 0x9, 0x1, 0xb64, 0x4e8}, {0xc512, 0x2, 0x4, 0x7, 0x24, 0x7de}, {0x401, 0x101, 0x8, 0x0, 0x5, 0x101}, {0x8, 0x8, 0x7, 0x7, 0x6, 0x7}, {0x0, 0x0, 0xffff8000, 0x8, 0x1000, 0xfa}, {0x99, 0x3, 0xfa, 0x4, 0x10001, 0xe84}, {0x0, 0xffff, 0x8, 0x4000, 0x8}, {0x2, 0x0, 0x2, 0x3, 0x9, 0x9}, {0x0, 0x9, 0x0, 0x0, 0xede, 0x7}, {0x5, 0x100, 0xfffffffc, 0x81, 0x0, 0x8}, {0x6, 0xe5, 0x3, 0x0, 0x2, 0x7}, {0xecc, 0x7, 0x5, 0x0, 0x6, 0x1}, {0x7, 0x7, 0x2, 0x2, 0x3ff, 0x2}, {0x8001, 0x7, 0x9, 0x6, 0xff}, {0x5, 0x7, 0x10000, 0x1, 0x9, 0x8c5}, {0x80000000, 0x24, 0xefef, 0x8, 0x5a7, 0x9}, {0x9, 0xf, 0xffff6bec, 0xffffff9e, 0x2, 0x8e}, {0x4, 0x0, 0xfffffff5, 0x2f, 0xe, 0x53c83d7f}, {0x0, 0x8, 0x4, 0xfffeffff, 0x1, 0x9}, {0x4, 0x2, 0x202caeea, 0x3, 0x3, 0x8}, {0xc18, 0x2000000, 0x8, 0x7f, 0x9, 0x7}, {0xfffffffe, 0x401, 0x8, 0x1, 0x3, 0x8}, {0xa, 0x0, 0x38, 0x8001, 0x100, 0xd5a}, {0x0, 0x3, 0xd1b, 0x9, 0x10001, 0xc5b1}, {0x5, 0x7b, 0x401, 0x0, 0x0, 0x6}, {0x5, 0x7610, 0xfffffffe, 0x7459, 0x80000000, 0x3}, {0x8, 0x7, 0xe, 0x4, 0x6, 0xc}, {0x3, 0x3, 0x7, 0x80000000, 0x81, 0x1}, {0x5, 0xfff, 0x7fff, 0x0, 0x8, 0x9}, {0x1, 0x3, 0xfffffff9, 0x3, 0x6, 0x3}, {0x7, 0x64a40ae9, 0x100, 0xb, 0x7f, 0x5}, {0x1, 0x5, 0xe426, 0x4, 0xff, 0xfffff8ea}, {0x0, 0x4, 0x9bd, 0xffffffc0, 0x100, 0x86}, {0x3, 0xd7a0, 0x7fff, 0x6, 0x0, 0x7}, {0x8, 0x7, 0xfffeffff, 0xc, 0x9, 0xa}, {0x3, 0x8, 0x65e3, 0xfffffff8, 0x708, 0x2}, {0x9, 0x9, 0x200, 0xfe0, 0x4, 0x8}, {0xffff, 0x6, 0x5, 0x7fa, 0x80, 0x47}, {0x7, 0x3, 0x0, 0xada, 0xfffff001, 0x3ff}, {0x3, 0x38, 0x1, 0x4, 0x8000, 0x65f8}, {0x9, 0x513e12e3, 0xffffff74, 0x0, 0xe, 0x5}, {0x89d, 0x7fff, 0x8, 0x4, 0x9df4, 0x3}, {0x3, 0x1, 0x5, 0x1, 0x1000, 0x3}, {0x2, 0xfc0, 0x7ff, 0x80000000, 0x0, 0x3}], [{0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5c6418bd99d4f808, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x7, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0xd3790ade80b919d7}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x3301a96a73d779cb}, {0x3}, {0x2}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x7, 0x1}, {}, {0x3}, {0x3}, {0x3, 0x1}, {0x3}, {0xcd17a28638f0ce7d, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x5}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x3}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r3, 0xee01, 0xee01) keyctl$setperm(0x5, r3, 0xd012117) keyctl$KEYCTL_MOVE(0x1e, r3, r3, r3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x3, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0xa0}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf251b00eb0008009a0002"], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x80) 422.04641ms ago: executing program 6 (id=2492): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getnexthop={0x20, 0x6a, 0xe976912f002a1383, 0x0, 0x0, {}, [@NHA_MASTER={0x8, 0xe}]}, 0x20}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x2, 0x4) listen(r1, 0x2fff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 421.565252ms ago: executing program 7 (id=2493): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x149000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80146, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x2102, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000240)={0xf0003, 0x0, [0x680, 0x3, 0x7, 0x0, 0x0, 0x0, 0x2b, 0x40000000]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 324.422207ms ago: executing program 4 (id=2494): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde08004500005c0000000000019078ac1e0001ac1414aa05009078e00000e0400000000001000000330000ac1414aa00001b3fb4653255a74b44240003ac1e060100010000000000000000ade184d60000ac1414aa00000000ac1414bb000000000000"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x7fd, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x9, 0xa9, 0x4, 0x0, 0x0, 0x4}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x0, 0x0, 0x6, 0x6, 0xff, 0x0, 0xcb, 0x6}, {0x3fe, 0x9, 0x0, 0xfd, 0x0, 0x0, 0x93, 0x2, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) sync_file_range(r2, 0x401, 0xf88c, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r5, &(0x7f0000000440)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) fcntl$setpipe(r1, 0x407, 0x9) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000280)='bridge0\x00', 0x10) 323.922687ms ago: executing program 6 (id=2495): r0 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000741e6c54982a6f029e6b33c06a65456199b1e4b5d77c63c20e5d527b4f7970b9a79cc65890bf20bc9b841fad29dd83424d665b2c0a78baad0472f664", @ANYRES16=r0, @ANYBLOB="000328bd7000ffdbdf250300000008000200020000000800020002000000080002000200000008000200020000000800010003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000804) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"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", 0xfffffdd2}}, 0x1006) (async) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) (async) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) (async) ioctl$UI_DEV_CREATE(r3, 0x5501) (async) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=2496): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c677c636865040bed45d36782a72d667363616368655316657273696f6e3d39703230301e2e75a15d1b08889bc2e51a9105b6cf95e4c6108963f38f9038406c9cffe7ce57c70e057c253bb7d819b71f51c31393974a54cf211b84e45f55dd39976cca47930b85e6373c7f0f099ae2225bfc06"]) syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x2200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2e, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000002fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000700ac14142808000a00", @ANYRES32=r2, @ANYBLOB="3b9ecdd319573f9ac656ed4edc031369c3748a086c0cf17269279fe01b36c08fd1aac3fc0f09a32ca69938f4f84764192969c2896ecd643f2ac877afb7d771a2e7df4697c733cda57cf6a169029b9688cf9bf3d3ac8a309bb6b8cd4a7b7c17390f17b1d1c1e6d3aebe1b2bb8c4a04861d47bd21b5b33e013cf7754b56c102985599e0e"], 0x44}}, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): 58] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 177.554292][T11658] irqentry_exit_to_user_mode+0x13f/0x280 [ 177.554308][T11658] asm_exc_page_fault+0x26/0x30 [ 177.554318][T11658] RIP: 0033:0x7fa67178d169 [ 177.554329][T11658] Code: Unable to access opcode bytes at 0x7fa67178d13f. [ 177.554334][T11658] RSP: 002b:00007fa66f5f5fe8 EFLAGS: 00010286 [ 177.554342][T11658] RAX: 0000000000000000 RBX: 00007fa6719a5fa0 RCX: 00007fa67178d169 [ 177.554348][T11658] RDX: 0000000000000000 RSI: 0000000000000000 RDI: c147b283b36e04d1 [ 177.554354][T11658] RBP: 00007fa67180e990 R08: 0000000000000000 R09: 0000000000000000 [ 177.554360][T11658] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 177.554366][T11658] R13: 0000000000000000 R14: 00007fa6719a5fa0 R15: 00007ffee33e5488 [ 177.554379][T11658] [ 177.554383][T11658] memory: usage 307096kB, limit 307200kB, failcnt 18267 [ 177.698184][T11658] memory+swap: usage 410280kB, limit 9007199254740988kB, failcnt 0 [ 177.700626][T11658] kmem: usage 4932kB, limit 9007199254740988kB, failcnt 0 [ 177.702978][T11658] Memory cgroup stats for /syz5: [ 177.703097][T11658] cache 308080640 [ 177.705294][T11640] syz.5.1665 (11640) used greatest stack depth: 19272 bytes left [ 177.706938][T11658] rss 61440 [ 177.711184][T11658] rss_huge 0 [ 177.712140][T11658] shmem 308080640 [ 177.713174][T11658] mapped_file 0 [ 177.714154][T11658] dirty 0 [ 177.714996][T11658] writeback 0 [ 177.715952][T11658] workingset_refault_anon 5 [ 177.717202][T11658] workingset_refault_file 0 [ 177.718506][T11658] swap 105979904 [ 177.719522][T11658] swapcached 8192 [ 177.720513][T11658] pgpgin 126820 [ 177.721573][T11658] pgpgout 51589 [ 177.722608][T11658] pgfault 13018 [ 177.724569][T11658] pgmajfault 6 [ 177.725488][T11658] inactive_anon 105103360 [ 177.727118][T11658] active_anon 201871360 [ 177.728431][T11658] inactive_file 0 [ 177.729495][T11658] active_file 0 [ 177.730486][T11658] unevictable 0 [ 177.731498][T11658] hierarchical_memory_limit 314572800 [ 177.733119][T11658] hierarchical_memsw_limit 9223372036854771712 [ 177.734821][T11658] total_cache 308080640 [ 177.735989][T11658] total_rss 61440 [ 177.736986][T11658] total_rss_huge 0 [ 177.738007][T11658] total_shmem 308080640 [ 177.740134][T11658] total_mapped_file 0 [ 177.741479][T11658] total_dirty 0 [ 177.742654][T11658] total_writeback 0 [ 177.743989][T11658] total_workingset_refault_anon 5 [ 177.745548][T11658] total_workingset_refault_file 0 [ 177.746940][T11658] total_swap 105979904 [ 177.748107][T11658] total_swapcached 8192 [ 177.749987][T11658] total_pgpgin 126820 [ 177.751076][T11658] total_pgpgout 51589 [ 177.752192][T11658] total_pgfault 13018 [ 177.753325][T11658] total_pgmajfault 6 [ 177.754489][T11658] total_inactive_anon 105103360 [ 177.755884][T11658] total_active_anon 201871360 [ 177.757380][T11658] total_inactive_file 0 [ 177.758943][T11658] total_active_file 0 [ 177.760106][T11658] total_unevictable 0 [ 177.761217][T11658] anon_cost 0 [ 177.762145][T11658] file_cost 0 [ 177.763071][T11658] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1665,pid=11644,uid=0 [ 177.774574][T11658] Memory cgroup out of memory: Killed process 11644 (syz.5.1665) total-vm:45172kB, anon-rss:0kB, file-rss:28416kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 177.828285][ T24] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 177.953492][ T40] audit: type=1400 audit(1744500860.486:1163): avc: denied { mounton } for pid=11884 comm="syz.5.1741" path="/51/file0/file0" dev="9p" ino=36831362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 177.954283][T11888] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1742'. [ 177.963484][ T40] audit: type=1400 audit(1744500860.496:1164): avc: denied { bind } for pid=11887 comm="syz.2.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 177.965772][T11888] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 177.999483][T11894] random: crng reseeded on system resumption [ 178.000957][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.001962][ T40] audit: type=1400 audit(1744500860.536:1165): avc: denied { append } for pid=11893 comm="syz.2.1744" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 178.004031][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 178.010848][ T40] audit: type=1400 audit(1744500860.536:1166): avc: denied { open } for pid=11893 comm="syz.2.1744" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 178.014373][ T24] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 178.023073][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.026339][ T24] usb 9-1: config 0 descriptor?? [ 178.035980][ T24] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 178.115035][T11671] syz.5.1665 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 178.117657][T11671] CPU: 0 UID: 0 PID: 11671 Comm: syz.5.1665 Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(full) [ 178.117672][T11671] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 178.117679][T11671] Call Trace: [ 178.117682][T11671] [ 178.117686][T11671] dump_stack_lvl+0x16c/0x1f0 [ 178.117704][T11671] dump_header+0x101/0x930 [ 178.117719][T11671] oom_kill_process+0x270/0xa60 [ 178.117730][T11671] ? mem_cgroup_out_of_memory+0x8c/0x270 [ 178.117748][T11671] out_of_memory+0x350/0x1700 [ 178.117760][T11671] ? __lock_acquire+0xaa4/0x1ba0 [ 178.117772][T11671] ? __pfx_out_of_memory+0x10/0x10 [ 178.117788][T11671] mem_cgroup_out_of_memory+0x205/0x270 [ 178.117807][T11671] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 178.117831][T11671] ? do_raw_spin_unlock+0x172/0x230 [ 178.117852][T11671] try_charge_memcg+0x8ca/0xfa0 [ 178.117878][T11671] ? __pfx_try_charge_memcg+0x10/0x10 [ 178.117895][T11671] ? __print_lock_name+0xd1/0xe0 [ 178.117914][T11671] ? rcu_read_unlock+0x17/0x60 [ 178.117938][T11671] charge_memcg+0x8a/0x230 [ 178.117956][T11671] __mem_cgroup_charge+0x2b/0x1e0 [ 178.117976][T11671] shmem_alloc_and_add_folio+0x514/0xc20 [ 178.117999][T11671] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 178.118019][T11671] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 178.118040][T11671] shmem_get_folio_gfp+0x687/0x1530 [ 178.118060][T11671] ? __lock_acquire+0xaa4/0x1ba0 [ 178.118073][T11671] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 178.118092][T11671] ? __pte_offset_map_lock+0x155/0x2f0 [ 178.118130][T11671] shmem_write_begin+0x160/0x300 [ 178.118154][T11671] ? __pfx_shmem_write_begin+0x10/0x10 [ 178.118172][T11671] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 178.118194][T11671] ? __pfx_timestamp_truncate+0x10/0x10 [ 178.118217][T11671] generic_perform_write+0x3cd/0x930 [ 178.118242][T11671] ? __pfx_generic_perform_write+0x10/0x10 [ 178.118261][T11671] ? inode_needs_update_time.part.0+0x191/0x270 [ 178.118285][T11671] shmem_file_write_iter+0x10e/0x140 [ 178.118306][T11671] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 178.118324][T11671] __kernel_write_iter+0x317/0xa90 [ 178.118350][T11671] ? __pfx___kernel_write_iter+0x10/0x10 [ 178.118371][T11671] ? __up_read+0x1f8/0x750 [ 178.118391][T11671] ? dump_user_range+0x73d/0xb30 [ 178.118412][T11671] ? copy_mc_enhanced_fast_string+0x6/0xf [ 178.118429][T11671] dump_user_range+0x418/0xb30 [ 178.118449][T11671] ? __pfx_dump_user_range+0x10/0x10 [ 178.118466][T11671] ? elf_coredump_extra_notes_write+0xbd/0x430 [ 178.118489][T11671] ? __pfx_writenote+0x10/0x10 [ 178.118510][T11671] elf_core_dump+0x288a/0x3a90 [ 178.118537][T11671] ? __pfx_elf_core_dump+0x10/0x10 [ 178.118550][T11671] ? kasan_save_stack+0x42/0x60 [ 178.118565][T11671] ? kasan_save_stack+0x33/0x60 [ 178.118578][T11671] ? kasan_save_track+0x14/0x30 [ 178.118591][T11671] ? __kasan_kmalloc+0xaa/0xb0 [ 178.118604][T11671] ? do_coredump+0x17aa/0x4480 [ 178.118621][T11671] ? get_signal+0x22e3/0x26d0 [ 178.118634][T11671] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 178.118654][T11671] ? 0xffffffffff600000 [ 178.118685][T11671] ? do_coredump+0x3183/0x4480 [ 178.118699][T11671] do_coredump+0x3183/0x4480 [ 178.118720][T11671] ? __pfx_do_coredump+0x10/0x10 [ 178.118736][T11671] ? stack_trace_save+0x8e/0xc0 [ 178.118750][T11671] ? __pfx_stack_trace_save+0x10/0x10 [ 178.118763][T11671] ? stack_depot_save_flags+0x28/0xa50 [ 178.118775][T11671] ? __lock_acquire+0xaa4/0x1ba0 [ 178.118788][T11671] ? __kasan_slab_free+0x51/0x70 [ 178.118797][T11671] ? kmem_cache_free+0x2d4/0x4d0 [ 178.118806][T11671] ? __sigqueue_free+0xba/0x2a0 [ 178.118814][T11671] ? get_signal+0xcba/0x26d0 [ 178.118826][T11671] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 178.118864][T11671] ? proc_coredump_connector+0x2d1/0x4f0 [ 178.118878][T11671] ? __pfx_proc_coredump_connector+0x10/0x10 [ 178.118899][T11671] ? rcu_is_watching+0x12/0xc0 [ 178.118914][T11671] get_signal+0x22e3/0x26d0 [ 178.118931][T11671] ? force_sig_fault+0xc4/0x100 [ 178.118945][T11671] ? __pfx_get_signal+0x10/0x10 [ 178.118962][T11671] arch_do_signal_or_restart+0x8f/0x7d0 [ 178.118977][T11671] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 178.118989][T11671] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 178.119013][T11671] irqentry_exit_to_user_mode+0x13f/0x280 [ 178.119029][T11671] asm_exc_page_fault+0x26/0x30 [ 178.119039][T11671] RIP: 0033:0x7fa67178d169 [ 178.119050][T11671] Code: Unable to access opcode bytes at 0x7fa67178d13f. [ 178.119055][T11671] RSP: 002b:00007fa66f5f5fe8 EFLAGS: 00010286 [ 178.119064][T11671] RAX: 0000000000000000 RBX: 00007fa6719a5fa0 RCX: 00007fa67178d169 [ 178.119070][T11671] RDX: 0000000000000000 RSI: 0000000000000000 RDI: c147b283b36e04d1 [ 178.119076][T11671] RBP: 00007fa67180e990 R08: 0000000000000000 R09: 0000000000000000 [ 178.119082][T11671] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 178.119087][T11671] R13: 0000000000000000 R14: 00007fa6719a5fa0 R15: 00007ffee33e5488 [ 178.119100][T11671] [ 178.123965][T11671] memory: usage 307200kB, limit 307200kB, failcnt 22249 [ 178.129436][ T40] audit: type=1400 audit(1744500860.656:1167): avc: denied { ioctl } for pid=11893 comm="syz.2.1744" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 178.131486][T11671] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 178.266190][T11671] kmem: usage 4564kB, limit 9007199254740988kB, failcnt 0 [ 178.268232][T11671] Memory cgroup stats for /syz5: [ 178.268300][T11671] cache 309731328 [ 178.270703][T11671] rss 40960 [ 178.271607][T11671] rss_huge 0 [ 178.272569][T11671] shmem 309731328 [ 178.273593][T11671] mapped_file 0 [ 178.274576][T11671] dirty 0 [ 178.275409][T11671] writeback 0 [ 178.276356][T11671] workingset_refault_anon 6 [ 178.277620][T11671] workingset_refault_file 0 [ 178.278965][T11671] swap 127995904 [ 178.280003][T11671] swapcached 0 [ 178.281000][T11671] pgpgin 140027 [ 178.281966][T11671] pgpgout 64399 [ 178.282936][T11671] pgfault 14137 [ 178.283895][T11671] pgmajfault 8 [ 178.284818][T11671] inactive_anon 200552448 [ 178.285982][T11671] active_anon 108961792 [ 178.287063][T11671] inactive_file 0 [ 178.288053][T11671] active_file 0 [ 178.289071][T11671] unevictable 0 [ 178.290071][T11671] hierarchical_memory_limit 314572800 [ 178.291577][T11671] hierarchical_memsw_limit 9223372036854771712 [ 178.293246][T11671] total_cache 309731328 [ 178.294379][T11671] total_rss 40960 [ 178.295372][T11671] total_rss_huge 0 [ 178.296443][T11671] total_shmem 309731328 [ 178.297604][T11671] total_mapped_file 0 [ 178.298787][T11671] total_dirty 0 [ 178.299821][T11671] total_writeback 0 [ 178.300871][T11671] total_workingset_refault_anon 6 [ 178.302208][T11671] total_workingset_refault_file 0 [ 178.303581][T11671] total_swap 127995904 [ 178.304721][T11671] total_swapcached 0 [ 178.305804][T11671] total_pgpgin 140027 [ 178.306867][T11671] total_pgpgout 64399 [ 178.307947][T11671] total_pgfault 14137 [ 178.309081][T11671] total_pgmajfault 8 [ 178.310144][T11671] total_inactive_anon 200552448 [ 178.311461][T11671] total_active_anon 108961792 [ 178.312747][T11671] total_inactive_file 0 [ 178.313858][T11671] total_active_file 0 [ 178.314934][T11671] total_unevictable 0 [ 178.316004][T11671] anon_cost 0 [ 178.316895][T11671] file_cost 0 [ 178.317778][T11671] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1665,pid=11657,uid=0 [ 178.321754][T11671] Memory cgroup out of memory: Killed process 11657 (syz.5.1665) total-vm:45172kB, anon-rss:0kB, file-rss:29440kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 178.344468][T11671] syz.5.1665 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 178.347146][T11671] CPU: 0 UID: 0 PID: 11671 Comm: syz.5.1665 Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(full) [ 178.347160][T11671] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 178.347167][T11671] Call Trace: [ 178.347170][T11671] [ 178.347175][T11671] dump_stack_lvl+0x16c/0x1f0 [ 178.347193][T11671] dump_header+0x101/0x930 [ 178.347208][T11671] oom_kill_process+0x270/0xa60 [ 178.347219][T11671] ? mem_cgroup_out_of_memory+0x8c/0x270 [ 178.347236][T11671] out_of_memory+0x350/0x1700 [ 178.347248][T11671] ? __lock_acquire+0xaa4/0x1ba0 [ 178.347273][T11671] ? __pfx_out_of_memory+0x10/0x10 [ 178.347291][T11671] mem_cgroup_out_of_memory+0x205/0x270 [ 178.347306][T11671] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 178.347323][T11671] ? do_raw_spin_unlock+0x172/0x230 [ 178.347337][T11671] try_charge_memcg+0x8ca/0xfa0 [ 178.347351][T11671] ? __pfx_try_charge_memcg+0x10/0x10 [ 178.347363][T11671] ? __print_lock_name+0xd1/0xe0 [ 178.347376][T11671] ? rcu_read_unlock+0x17/0x60 [ 178.347392][T11671] charge_memcg+0x8a/0x230 [ 178.347403][T11671] __mem_cgroup_charge+0x2b/0x1e0 [ 178.347417][T11671] shmem_alloc_and_add_folio+0x514/0xc20 [ 178.347431][T11671] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 178.347443][T11671] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 178.347456][T11671] shmem_get_folio_gfp+0x687/0x1530 [ 178.347469][T11671] ? __lock_acquire+0xaa4/0x1ba0 [ 178.347478][T11671] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 178.347489][T11671] ? __pte_offset_map_lock+0x155/0x2f0 [ 178.347505][T11671] shmem_write_begin+0x160/0x300 [ 178.347517][T11671] ? __pfx_shmem_write_begin+0x10/0x10 [ 178.347529][T11671] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 178.347545][T11671] ? __pfx_timestamp_truncate+0x10/0x10 [ 178.347559][T11671] generic_perform_write+0x3cd/0x930 [ 178.347574][T11671] ? __pfx_generic_perform_write+0x10/0x10 [ 178.347585][T11671] ? inode_needs_update_time.part.0+0x191/0x270 [ 178.347601][T11671] shmem_file_write_iter+0x10e/0x140 [ 178.347619][T11671] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 178.347631][T11671] __kernel_write_iter+0x317/0xa90 [ 178.347649][T11671] ? __pfx___kernel_write_iter+0x10/0x10 [ 178.347665][T11671] ? __up_read+0x1f8/0x750 [ 178.347677][T11671] ? dump_user_range+0x73d/0xb30 [ 178.347693][T11671] ? copy_mc_enhanced_fast_string+0x6/0xf [ 178.347706][T11671] dump_user_range+0x418/0xb30 [ 178.347725][T11671] ? __pfx_dump_user_range+0x10/0x10 [ 178.347741][T11671] ? elf_coredump_extra_notes_write+0xbd/0x430 [ 178.347757][T11671] ? __pfx_writenote+0x10/0x10 [ 178.347770][T11671] elf_core_dump+0x288a/0x3a90 [ 178.347786][T11671] ? __pfx_elf_core_dump+0x10/0x10 [ 178.347795][T11671] ? kasan_save_stack+0x42/0x60 [ 178.347805][T11671] ? kasan_save_stack+0x33/0x60 [ 178.347813][T11671] ? kasan_save_track+0x14/0x30 [ 178.347821][T11671] ? __kasan_kmalloc+0xaa/0xb0 [ 178.347830][T11671] ? do_coredump+0x17aa/0x4480 [ 178.347844][T11671] ? get_signal+0x22e3/0x26d0 [ 178.347857][T11671] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 178.347875][T11671] ? 0xffffffffff600000 [ 178.347905][T11671] ? do_coredump+0x3183/0x4480 [ 178.347919][T11671] do_coredump+0x3183/0x4480 [ 178.347939][T11671] ? __pfx_do_coredump+0x10/0x10 [ 178.347955][T11671] ? stack_trace_save+0x8e/0xc0 [ 178.347969][T11671] ? __pfx_stack_trace_save+0x10/0x10 [ 178.347982][T11671] ? stack_depot_save_flags+0x28/0xa50 [ 178.347994][T11671] ? __lock_acquire+0xaa4/0x1ba0 [ 178.348007][T11671] ? __kasan_slab_free+0x51/0x70 [ 178.348016][T11671] ? kmem_cache_free+0x2d4/0x4d0 [ 178.348025][T11671] ? __sigqueue_free+0xba/0x2a0 [ 178.348033][T11671] ? get_signal+0xcba/0x26d0 [ 178.348045][T11671] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 178.348078][T11671] ? proc_coredump_connector+0x2d1/0x4f0 [ 178.348090][T11671] ? __pfx_proc_coredump_connector+0x10/0x10 [ 178.348105][T11671] ? rcu_is_watching+0x12/0xc0 [ 178.348131][T11671] get_signal+0x22e3/0x26d0 [ 178.348148][T11671] ? force_sig_fault+0xc4/0x100 [ 178.348162][T11671] ? __pfx_get_signal+0x10/0x10 [ 178.348180][T11671] arch_do_signal_or_restart+0x8f/0x7d0 [ 178.348195][T11671] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 178.348206][T11671] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 178.348230][T11671] irqentry_exit_to_user_mode+0x13f/0x280 [ 178.348245][T11671] asm_exc_page_fault+0x26/0x30 [ 178.348255][T11671] RIP: 0033:0x7fa67178d169 [ 178.348267][T11671] Code: Unable to access opcode bytes at 0x7fa67178d13f. [ 178.348272][T11671] RSP: 002b:00007fa66f5f5fe8 EFLAGS: 00010286 [ 178.348280][T11671] RAX: 0000000000000000 RBX: 00007fa6719a5fa0 RCX: 00007fa67178d169 [ 178.348286][T11671] RDX: 0000000000000000 RSI: 0000000000000000 RDI: c147b283b36e04d1 [ 178.348292][T11671] RBP: 00007fa67180e990 R08: 0000000000000000 R09: 0000000000000000 [ 178.348298][T11671] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 178.348303][T11671] R13: 0000000000000000 R14: 00007fa6719a5fa0 R15: 00007ffee33e5488 [ 178.348317][T11671] [ 178.484355][T11671] memory: usage 285196kB, limit 307200kB, failcnt 22810 [ 178.486292][T11671] memory+swap: usage 408848kB, limit 9007199254740988kB, failcnt 0 [ 178.488514][T11671] kmem: usage 4548kB, limit 9007199254740988kB, failcnt 0 [ 178.490470][T11671] Memory cgroup stats for /syz5: [ 178.490581][T11671] cache 285876224 [ 178.492960][T11671] rss 40960 [ 178.493826][T11671] rss_huge 0 [ 178.494703][T11671] shmem 285876224 [ 178.495724][T11671] mapped_file 0 [ 178.496686][T11671] dirty 0 [ 178.497512][T11671] writeback 0 [ 178.498502][T11671] workingset_refault_anon 6 [ 178.499778][T11671] workingset_refault_file 0 [ 178.501262][T11671] swap 127537152 [ 178.502532][T11671] swapcached 20480 [ 178.503835][T11671] pgpgin 141472 [ 178.505099][T11671] pgpgout 71663 [ 178.506362][T11671] pgfault 14229 [ 178.507627][T11671] pgmajfault 8 [ 178.509291][T11671] inactive_anon 172453888 [ 178.510592][T11671] active_anon 111980544 [ 178.512025][T11671] inactive_file 0 [ 178.513014][T11671] active_file 0 [ 178.514063][T11671] unevictable 0 [ 178.515065][T11671] hierarchical_memory_limit 314572800 [ 178.516560][T11671] hierarchical_memsw_limit 9223372036854771712 [ 178.518455][T11671] total_cache 285876224 [ 178.519725][T11671] total_rss 40960 [ 178.520787][T11671] total_rss_huge 0 [ 178.521809][T11671] total_shmem 285876224 [ 178.522969][T11671] total_mapped_file 0 [ 178.524064][T11671] total_dirty 0 [ 178.525018][T11671] total_writeback 0 [ 178.526070][T11671] total_workingset_refault_anon 6 [ 178.527439][T11671] total_workingset_refault_file 0 [ 178.529404][T11671] total_swap 127537152 [ 178.530604][T11671] total_swapcached 20480 [ 178.531801][T11671] total_pgpgin 141472 [ 178.532975][T11671] total_pgpgout 71663 [ 178.534223][T11671] total_pgfault 14229 [ 178.535426][T11671] total_pgmajfault 8 [ 178.536751][T11671] total_inactive_anon 172453888 [ 178.539184][T11671] total_active_anon 111980544 [ 178.540842][T11671] total_inactive_file 0 [ 178.541987][T11671] total_active_file 0 [ 178.543167][T11671] total_unevictable 0 [ 178.544599][T11671] anon_cost 0 [ 178.545815][T11671] file_cost 0 [ 178.547033][T11671] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1665,pid=11646,uid=0 [ 178.552584][T11671] Memory cgroup out of memory: Killed process 11646 (syz.5.1665) total-vm:45172kB, anon-rss:0kB, file-rss:28288kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 178.602504][T11905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1746'. [ 178.616455][T11905] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1746'. [ 178.933080][T11934] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 178.935011][T11934] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 178.937347][T11934] vhci_hcd vhci_hcd.0: Device attached [ 178.975141][T11934] vhci_hcd vhci_hcd.0: port 0 already used [ 179.042651][T11935] vhci_hcd: connection closed [ 179.043896][ T104] vhci_hcd: stop threads [ 179.047336][ T104] vhci_hcd: release socket [ 179.048946][ T104] vhci_hcd: disconnect device [ 179.084667][T11921] could not allocate digest TFM handle cryptd(blake2b-160) [ 179.206879][T11953] program syz.2.1757 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.211831][T11953] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1757'. [ 179.215040][T11953] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1757'. [ 179.255599][ T40] audit: type=1400 audit(1744500861.786:1168): avc: denied { create } for pid=11957 comm="syz.2.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 179.267018][ T40] audit: type=1400 audit(1744500861.786:1169): avc: denied { setopt } for pid=11957 comm="syz.2.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 179.525295][T11971] nfs: Unknown parameter 'noac/uhid' [ 179.625595][ T40] audit: type=1400 audit(1744500862.156:1170): avc: denied { getopt } for pid=11976 comm="syz.1.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 179.898463][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.954297][T11651] syz.5.1665 (11651) used greatest stack depth: 19224 bytes left [ 179.968320][T11641] syz.5.1665 (11641) used greatest stack depth: 18456 bytes left [ 180.299433][T11666] syz.5.1665 (11666) used greatest stack depth: 18120 bytes left [ 180.490643][ T9] usb 9-1: USB disconnect, device number 9 [ 193.431940][T11997] __nla_validate_parse: 3 callbacks suppressed [ 193.431955][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1772'. [ 193.515603][T12010] syz.4.1778: attempt to access beyond end of device [ 193.515603][T12010] loop4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 193.521111][T12010] XFS (loop4): SB validate failed with error -5. [ 193.707653][T12041] QAT: Invalid ioctl -2110754303 [ 193.711630][T12041] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1787'. [ 193.782821][ T40] audit: type=1400 audit(1744500876.316:1171): avc: denied { getopt } for pid=12051 comm="syz.4.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 193.783272][T12053] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1791'. [ 193.792665][T12053] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1791'. [ 193.795388][T12053] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1791'. [ 193.797869][T12053] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1791'. [ 193.824970][T12059] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 193.893479][T12070] overlayfs: failed to resolve 'smackfsroot=lowerdir': -2 [ 193.906114][T12067] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 193.960792][ T40] audit: type=1400 audit(1744500876.496:1172): avc: denied { execute } for pid=12088 comm="syz.2.1803" dev="hugetlbfs" ino=38604 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 193.973237][ T40] audit: type=1400 audit(1744500876.496:1173): avc: denied { execute_no_trans } for pid=12088 comm="syz.2.1803" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=38604 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 193.989944][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.007636][T12090] netlink: 'syz.2.1803': attribute type 58 has an invalid length. [ 194.010241][T12090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1803'. [ 194.031152][ T40] audit: type=1400 audit(1744500876.566:1174): avc: denied { ioctl } for pid=12082 comm="syz.5.1800" path="socket:[39241]" dev="sockfs" ino=39241 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 194.040047][T12084] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1800'. [ 194.091867][T12101] tipc: Enabling of bearer rejected, failed to enable media [ 194.151284][T12115] libceph: resolve ' [ 194.151284][T12115] -&fYǝa2i [ 194.151284][T12115] .?&*&' (ret=-3): failed [ 194.272971][ T40] audit: type=1326 audit(1744500876.806:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12128 comm="syz.2.1814" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a36d8d169 code=0x0 [ 194.280108][T12129] ubi31: detaching mtd0 [ 194.291502][T12129] ubi31: mtd0 is detached [ 194.473463][ T40] audit: type=1400 audit(1744500877.006:1176): avc: denied { read write } for pid=12152 comm="syz.4.1820" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 194.481070][ T40] audit: type=1400 audit(1744500877.006:1177): avc: denied { open } for pid=12152 comm="syz.4.1820" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 194.612574][T12173] bridge: RTM_NEWNEIGH with invalid ether address [ 194.653022][T12175] overlayfs: missing 'lowerdir' [ 195.095360][T12189] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 195.165516][T12208] kernel profiling enabled (shift: 9) [ 195.345584][ T40] audit: type=1400 audit(1744500877.876:1178): avc: denied { map } for pid=12218 comm="syz.4.1835" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 195.413604][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.535589][ T40] audit: type=1400 audit(1744500878.066:1179): avc: denied { execute } for pid=12231 comm="syz.2.1838" path="/selinux/mls" dev="selinuxfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 195.831249][ T40] audit: type=1400 audit(1744500878.366:1180): avc: denied { append } for pid=12267 comm="syz.4.1848" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 195.840356][T12268] ntfs3(nbd4): try to read out of volume at offset 0x0 [ 195.904019][T12283] tipc: Can't bind to reserved service type 1 [ 195.906019][T12283] [U] OAMFU,8IO*P [ 195.908046][T12283] [U] KZG֌KVSDAݯ [ 195.911489][T12283] [U] YۥƶHܾU^D [ 195.914592][T12283] [U] F»:ضC [ 195.916350][T12283] [U] 4QS%"LA [ 195.921948][T12282] [U] !?ܼP [ 196.033804][T12297] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=12297 comm=syz.4.1855 [ 196.173957][T12303] nftables ruleset with unbound chain [ 196.174590][T12302] openvswitch: netlink: Actions may not be safe on all matching packets [ 196.383549][T12323] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1864'. [ 196.418388][T12325] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 196.420891][T12325] overlayfs: missing 'lowerdir' [ 196.823394][ T5946] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 196.827950][ T5946] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 196.831747][ T5946] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 196.835056][ T5946] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 196.837539][ T5946] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 196.847965][ T5956] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 196.850957][ T5956] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 196.853837][ T5956] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 196.858034][ T5956] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 196.862866][ T5956] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 196.872750][T12363] Failed to initialize the IGMP autojoin socket (err -2) [ 196.970550][ T1144] Bluetooth: Error in BCSP hdr checksum [ 197.041022][T12363] chnl_net:caif_netlink_parms(): no params data found [ 197.146519][T12363] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.148782][T12363] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.150830][T12363] bridge_slave_0: entered allmulticast mode [ 197.154362][T12363] bridge_slave_0: entered promiscuous mode [ 197.162102][T12363] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.165174][T12363] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.167979][T12363] bridge_slave_1: entered allmulticast mode [ 197.171957][T12363] bridge_slave_1: entered promiscuous mode [ 197.229121][ T1144] Bluetooth: Error in BCSP hdr checksum [ 197.254746][T12363] team0: Port device team_slave_0 added [ 197.266349][T12363] team0: Port device team_slave_1 added [ 197.307856][T12363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.310676][T12363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.320347][T12363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.326215][T12363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.329017][T12363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.337867][T12363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.394722][T12363] hsr_slave_0: entered promiscuous mode [ 197.396875][T12363] hsr_slave_1: entered promiscuous mode [ 197.400169][T12363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.403144][T12363] Cannot create hsr debugfs directory [ 197.501430][ T9841] Bluetooth: Error in BCSP hdr checksum [ 197.590190][T12363] netdevsim netdevsim6 netdevsim0: renamed from eth6 [ 197.601135][T12363] netdevsim netdevsim6 netdevsim1: renamed from eth7 [ 197.617038][T12363] netdevsim netdevsim6 netdevsim2: renamed from eth8 [ 197.633973][T12363] netdevsim netdevsim6 netdevsim3: renamed from eth9 [ 197.744275][T12363] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.753204][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.755308][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.768363][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.770441][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.827880][T12363] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.915728][T12363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.104891][T12363] veth0_vlan: entered promiscuous mode [ 198.110857][T12363] veth1_vlan: entered promiscuous mode [ 198.146603][T12363] veth0_macvtap: entered promiscuous mode [ 198.160027][T12363] veth1_macvtap: entered promiscuous mode [ 198.184453][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.187556][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.190753][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.193878][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.196566][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.199823][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.207473][T12363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.213480][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.216622][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.219781][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.222630][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.225241][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.228088][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.236085][T12363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.240159][T12363] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 198.246976][T12363] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 198.252775][T12363] wireguard: wg0: Could not create IPv4 socket [ 198.255974][T12363] wireguard: wg1: Could not create IPv4 socket [ 198.259649][T12363] wireguard: wg2: Could not create IPv4 socket [ 198.731176][T12403] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 198.788611][ T5956] Bluetooth: hci2: command 0x1003 tx timeout [ 198.788922][ T5952] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 199.191604][T12419] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1896'. [ 199.207047][T12419] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1896'. [ 199.210673][T12419] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1896'. [ 199.266628][T12421] tmpfs: Bad value for 'mpol' [ 199.735057][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 199.735089][ T40] audit: type=1400 audit(1744500882.266:1187): avc: denied { map } for pid=12427 comm="syz.1.1898" path="socket:[42239]" dev="sockfs" ino=42239 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 199.868406][T12439] overlayfs: failed to clone upperpath [ 199.903320][T12441] vlan2: entered allmulticast mode [ 200.058498][T12456] 9pnet_virtio: no channels available for device syz [ 200.147682][ T40] audit: type=1400 audit(1744500882.676:1188): avc: denied { mount } for pid=12464 comm="syz.1.1906" name="/" dev="hugetlbfs" ino=41314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 200.169826][ T40] audit: type=1800 audit(1744500882.706:1189): pid=12471 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1907" name="nullb0" dev="tmpfs" ino=1853 res=0 errno=0 [ 200.308871][ T6020] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 200.412484][T12480] overlayfs: failed to clone upperpath [ 200.460651][ T6020] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.463539][ T6020] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 200.466991][ T6020] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 200.470790][ T6020] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.475257][ T6020] usb 9-1: config 0 descriptor?? [ 200.479711][ T6020] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 200.546352][T12484] xt_hashlimit: size too large, truncated to 1048576 [ 200.602011][ T40] audit: type=1400 audit(1744500883.136:1190): avc: denied { setopt } for pid=12481 comm="syz.1.1910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 201.322970][T12490] __vm_enough_memory: pid: 12490, comm: syz.1.1911, bytes: 21200092073984 not enough memory for the allocation [ 201.639018][ T5956] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 201.642880][ T5956] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 201.647758][ T5956] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 201.653130][ T5956] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 201.655915][ T5956] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 201.700726][T12500] lo speed is unknown, defaulting to 1000 [ 201.816246][T12500] chnl_net:caif_netlink_parms(): no params data found [ 201.842199][T12514] netlink: 'syz.1.1916': attribute type 1 has an invalid length. [ 201.846527][T12514] netlink: 'syz.1.1916': attribute type 2 has an invalid length. [ 201.849616][T12514] netlink: 'syz.1.1916': attribute type 1 has an invalid length. [ 201.853942][T12514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=12514 comm=syz.1.1916 [ 201.910931][T12519] overlayfs: failed to clone upperpath [ 201.976218][T12500] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.979004][T12500] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.981749][T12500] bridge_slave_0: entered allmulticast mode [ 201.985099][T12500] bridge_slave_0: entered promiscuous mode [ 201.989395][T12500] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.991981][T12500] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.994580][T12500] bridge_slave_1: entered allmulticast mode [ 201.997970][T12500] bridge_slave_1: entered promiscuous mode [ 202.051297][T12500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.055546][T12500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.111664][T12500] team0: Port device team_slave_0 added [ 202.116278][T12500] team0: Port device team_slave_1 added [ 202.153731][T12500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.156412][T12500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.165838][T12500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.171306][T12500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.173863][T12500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.183203][T12500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.244415][T12500] hsr_slave_0: entered promiscuous mode [ 202.247315][T12500] hsr_slave_1: entered promiscuous mode [ 202.250540][T12500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.250628][T12530] CIFS: Unable to determine destination address [ 202.253163][T12500] Cannot create hsr debugfs directory [ 202.377649][T12537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1921'. [ 202.886365][T12546] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 202.897044][T12546] kvm: pic: non byte read [ 202.900526][T12546] kvm: pic: level sensitive irq not supported [ 202.901542][T12546] kvm: pic: non byte read [ 202.907132][T12546] kvm: pic: level sensitive irq not supported [ 202.907947][T12546] kvm: pic: non byte read [ 202.913928][T12546] kvm: pic: level sensitive irq not supported [ 202.914821][T12546] kvm: pic: non byte read [ 202.920103][T12546] kvm: pic: level sensitive irq not supported [ 202.921055][T12546] kvm: pic: non byte read [ 202.928484][T12546] kvm: pic: level sensitive irq not supported [ 202.928902][T12546] kvm: pic: non byte read [ 202.935157][T12546] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1924'. [ 203.053011][ T40] audit: type=1400 audit(1744500885.586:1191): avc: denied { setopt } for pid=12549 comm="syz.2.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 203.087164][ T6020] usb 9-1: USB disconnect, device number 10 [ 203.115005][ T40] audit: type=1400 audit(1744500885.646:1192): avc: denied { getopt } for pid=12551 comm="syz.4.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 203.117955][T12500] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 203.129015][T12500] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 203.137757][T12553] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1927'. [ 203.141165][T12500] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 203.148870][T12562] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 203.149490][T12500] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 203.163118][T12553] netlink: 'syz.4.1927': attribute type 1 has an invalid length. [ 203.165232][T12553] netlink: 'syz.4.1927': attribute type 2 has an invalid length. [ 203.189776][T12567] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 203.194724][ T40] audit: type=1400 audit(1744500885.726:1193): avc: denied { write } for pid=12566 comm="syz.2.1931" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 203.205825][T12567] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1931'. [ 203.207680][T12500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.208639][ T40] audit: type=1800 audit(1744500885.736:1194): pid=12571 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1933" name="nullb0" dev="tmpfs" ino=1853 res=0 errno=0 [ 203.223560][T12500] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.229813][ T9843] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.231840][ T9843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.237469][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.239532][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.265856][T12500] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 203.270222][T12500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.362347][T12500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.495723][T12500] veth0_vlan: entered promiscuous mode [ 203.502706][T12500] veth1_vlan: entered promiscuous mode [ 203.519288][T12500] veth0_macvtap: entered promiscuous mode [ 203.524079][T12500] veth1_macvtap: entered promiscuous mode [ 203.528427][ T24] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 203.536768][T12500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.540685][T12500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.543920][T12500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.547446][T12500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.550796][T12500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.554222][T12500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.557608][T12500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.561267][T12500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.565865][T12500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.573138][T12500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.576725][T12500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.580647][T12500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.584320][T12500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.587309][T12500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.590829][T12500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.593666][T12500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.596573][T12500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.600775][T12500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.606014][T12500] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.609004][T12500] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.612223][T12500] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.615434][T12500] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.662492][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.665132][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.690054][ T9841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.697092][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.699506][ T9841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.703442][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 203.710023][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.713311][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.721600][ T24] usb 7-1: config 0 descriptor?? [ 203.729909][ T24] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 203.748641][ T5956] Bluetooth: hci2: command tx timeout [ 203.832274][T12598] tipc: Started in network mode [ 203.834156][T12598] tipc: Node identity 2af67437fd38, cluster identity 4711 [ 203.837023][T12598] tipc: Enabled bearer , priority 0 [ 203.842579][T12597] tipc: Disabling bearer [ 204.092472][T12610] loop6: detected capacity change from 0 to 63 [ 204.099114][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 204.102828][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 204.106881][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 204.111535][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 204.114550][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 204.116648][ T5952] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 204.118821][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 204.120525][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 204.143478][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 204.148558][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 204.151069][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 204.154336][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 204.157522][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 204.160863][ T5952] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 204.163348][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 204.166693][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 204.170054][ T5952] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 204.170826][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 204.175212][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 204.178068][T12610] ldm_validate_partition_table(): Disk read failed. [ 204.182116][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 204.185425][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 204.189544][ T5952] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 204.191179][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 204.194837][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 204.197912][ T5952] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.199933][T12610] Dev loop6: unable to read RDB block 0 [ 204.204758][T12610] loop6: unable to read partition table [ 204.207092][T12610] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 204.247585][T12609] lo speed is unknown, defaulting to 1000 [ 204.344939][T12609] chnl_net:caif_netlink_parms(): no params data found [ 204.401319][T12619] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1943'. [ 204.404496][T12619] IPv6: NLM_F_CREATE should be specified when creating new route [ 204.415417][T12619] kvm_pr_unimpl_wrmsr: 8 callbacks suppressed [ 204.415431][T12619] kvm: kvm [12618]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x200000000021 [ 204.451976][T12609] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.454733][T12609] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.457446][T12609] bridge_slave_0: entered allmulticast mode [ 204.461886][T12609] bridge_slave_0: entered promiscuous mode [ 204.465935][T12609] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.470491][T12609] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.472664][T12609] bridge_slave_1: entered allmulticast mode [ 204.475041][T12609] bridge_slave_1: entered promiscuous mode [ 204.518911][T12609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.524430][T12609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.566349][T12609] team0: Port device team_slave_0 added [ 204.572307][T12609] team0: Port device team_slave_1 added [ 204.625218][T12609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.627585][T12609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.635587][T12609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.640832][T12609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.643185][T12609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.651476][T12609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.818376][ T5952] Bluetooth: hci2: command tx timeout [ 205.850096][T12609] hsr_slave_0: entered promiscuous mode [ 205.852448][T12609] hsr_slave_1: entered promiscuous mode [ 205.854224][T12609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.856254][T12609] Cannot create hsr debugfs directory [ 205.996690][T12609] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.000394][T12609] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.003780][T12609] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 206.109573][T12609] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.112941][T12609] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.116737][T12609] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 206.206498][T12609] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.210106][T12609] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.213421][T12609] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 206.218486][ T5952] Bluetooth: hci4: command tx timeout [ 206.276934][ T58] usb 7-1: USB disconnect, device number 24 [ 206.325326][T12609] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.329112][T12609] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.332835][T12609] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 206.459223][T12609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 206.467357][T12609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 206.480131][T12609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 206.484143][T12609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 206.526685][T12609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.542922][T12609] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.548181][T12280] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.550191][T12280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.559233][ T9841] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.561203][ T9841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.689905][T12609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.712488][T12609] veth0_vlan: entered promiscuous mode [ 206.717122][T12609] veth1_vlan: entered promiscuous mode [ 206.742651][T12609] veth0_macvtap: entered promiscuous mode [ 206.747758][T12609] veth1_macvtap: entered promiscuous mode [ 206.764883][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.768708][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.772289][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.776041][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.782361][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.786161][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.790062][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.793859][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.798075][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.802195][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.807154][T12609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.814940][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.819397][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.823016][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.826601][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.830110][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.833775][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.837629][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.840635][ T40] audit: type=1400 audit(1744500889.366:1195): avc: denied { append } for pid=12668 comm="syz.6.1954" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 206.867463][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.867505][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.867515][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.869352][T12609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.871653][T12609] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.871674][T12609] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.871688][T12609] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.871701][T12609] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.925026][ T40] audit: type=1400 audit(1744500889.446:1196): avc: denied { map } for pid=12668 comm="syz.6.1954" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 206.933064][ T40] audit: type=1400 audit(1744500889.446:1197): avc: denied { write execute } for pid=12668 comm="syz.6.1954" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 206.979403][T12280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.982282][T12280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.005135][T12275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.009186][T12275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.030123][T12687] xt_hashlimit: size too large, truncated to 1048576 [ 207.048269][ T9] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 207.078005][T12693] sctp: [Deprecated]: syz.1.1938 (pid 12693) Use of int in max_burst socket option. [ 207.078005][T12693] Use struct sctp_assoc_value instead [ 207.112467][T12696] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 207.199548][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.199577][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 207.199598][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 207.199611][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.200815][ T9] usb 7-1: config 0 descriptor?? [ 207.203335][ T9] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 207.212225][T12712] trusted_key: encrypted_key: insufficient parameters specified [ 207.538945][ T40] audit: type=1400 audit(1744500890.076:1198): avc: denied { getopt } for pid=12722 comm="syz.4.1973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 207.686048][ T40] audit: type=1400 audit(1744500890.216:1199): avc: denied { bind } for pid=12735 comm="syz.4.1975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 207.693977][T12736] netlink: 'syz.4.1975': attribute type 2 has an invalid length. [ 207.696316][T12736] netlink: 16138 bytes leftover after parsing attributes in process `syz.4.1975'. [ 207.699497][ T40] audit: type=1400 audit(1744500890.236:1200): avc: denied { accept } for pid=12735 comm="syz.4.1975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 207.706485][T12736] netlink: zone id is out of range [ 207.708839][T12736] netlink: zone id is out of range [ 207.711452][T12736] netlink: zone id is out of range [ 207.713143][T12736] netlink: zone id is out of range [ 207.714631][T12736] netlink: zone id is out of range [ 207.716173][T12736] netlink: zone id is out of range [ 207.717648][T12736] netlink: zone id is out of range [ 207.720249][T12736] netlink: zone id is out of range [ 207.721743][T12736] netlink: zone id is out of range [ 207.723299][T12736] netlink: zone id is out of range [ 207.798444][T12747] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 207.801552][T12747] overlayfs: missing 'lowerdir' [ 207.808072][T12747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1978'. [ 207.908261][ T5952] Bluetooth: hci2: command tx timeout [ 207.920400][T12751] qrtr: Invalid version 229 [ 207.955397][ T40] audit: type=1400 audit(1744500890.486:1201): avc: denied { bind } for pid=12755 comm="syz.6.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 207.962237][T12756] batman_adv: batadv0: Adding interface: dummy0 [ 207.964848][T12756] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.973146][T12756] batman_adv: batadv0: Interface activated: dummy0 [ 208.068930][ T836] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 208.233149][ T836] usb 9-1: Using ep0 maxpacket: 16 [ 208.248679][ T836] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 208.251616][ T836] usb 9-1: config 0 has no interface number 0 [ 208.255514][T12780] sp0: Synchronizing with TNC [ 208.273505][ T836] usb 9-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 208.276887][ T836] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.279940][ T836] usb 9-1: Product: syz [ 208.281521][ T836] usb 9-1: Manufacturer: syz [ 208.283309][ T836] usb 9-1: SerialNumber: syz [ 208.298872][ T836] usb 9-1: config 0 descriptor?? [ 208.302222][ T836] hub 9-1:0.132: bad descriptor, ignoring hub [ 208.304171][ T836] hub 9-1:0.132: probe with driver hub failed with error -5 [ 208.307565][ T836] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.132/input/input21 [ 208.308293][ T5952] Bluetooth: hci4: command tx timeout [ 208.346769][T12783] netlink: 'syz.6.1987': attribute type 10 has an invalid length. [ 208.355092][T12783] team0: Cannot enslave team device to itself [ 208.619009][ T836] usb 9-1: USB disconnect, device number 11 [ 208.878323][ T24] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 208.883043][ T40] audit: type=1400 audit(1744500891.416:1202): avc: denied { read } for pid=12810 comm="syz.1.1997" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 208.949535][T12812] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 208.951976][T12812] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 208.955411][T12812] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 208.957752][T12812] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 208.960060][T12812] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 208.963445][T12812] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 208.998029][T12822] netlink: 536 bytes leftover after parsing attributes in process `syz.1.1998'. [ 209.032318][ T24] usb 11-1: Using ep0 maxpacket: 16 [ 209.036845][ T24] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.041028][ T24] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.043991][ T24] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 209.047866][ T24] usb 11-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 209.050621][ T24] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.054056][ T24] usb 11-1: config 0 descriptor?? [ 209.068350][T12827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.071782][T12827] batadv_slave_0: entered promiscuous mode [ 209.074816][ T40] audit: type=1400 audit(1744500891.606:1203): avc: denied { bind } for pid=12829 comm="syz.4.2001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 209.080464][ T40] audit: type=1400 audit(1744500891.606:1204): avc: denied { name_bind } for pid=12829 comm="syz.4.2001" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 209.158095][T12838] syz.4.2004: attempt to access beyond end of device [ 209.158095][T12838] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 209.162118][T12838] syz.4.2004: attempt to access beyond end of device [ 209.162118][T12838] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 209.165724][T12838] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 209.168693][T12838] syz.4.2004: attempt to access beyond end of device [ 209.168693][T12838] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 209.172242][T12838] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 209.174811][T12838] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 209.176891][T12838] UDF-fs: Scanning with blocksize 512 failed [ 209.180402][T12838] syz.4.2004: attempt to access beyond end of device [ 209.180402][T12838] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 209.183986][T12838] syz.4.2004: attempt to access beyond end of device [ 209.183986][T12838] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 209.187479][T12838] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 209.191031][T12838] syz.4.2004: attempt to access beyond end of device [ 209.191031][T12838] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 209.195536][T12838] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 209.197964][T12838] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 209.200145][T12838] UDF-fs: Scanning with blocksize 1024 failed [ 209.202107][T12838] syz.4.2004: attempt to access beyond end of device [ 209.202107][T12838] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 209.205659][T12838] syz.4.2004: attempt to access beyond end of device [ 209.205659][T12838] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 209.210523][T12838] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 209.213182][T12838] syz.4.2004: attempt to access beyond end of device [ 209.213182][T12838] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 209.216540][T12838] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 209.219539][T12838] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 209.221548][T12838] UDF-fs: Scanning with blocksize 2048 failed [ 209.223384][T12838] syz.4.2004: attempt to access beyond end of device [ 209.223384][T12838] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 209.226801][T12838] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 209.229599][T12838] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 209.232113][T12838] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 209.234131][T12838] UDF-fs: Scanning with blocksize 4096 failed [ 209.235766][T12838] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 209.278430][ T24] usbhid 11-1:0.0: can't add hid device: -71 [ 209.288288][ T24] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 209.291597][ T24] usb 11-1: USB disconnect, device number 2 [ 209.381425][T12863] netlink: 'syz.4.2008': attribute type 1 has an invalid length. [ 209.384071][T12863] netlink: 'syz.4.2008': attribute type 2 has an invalid length. [ 209.537103][ T5952] Bluetooth: hci4: Dropping invalid advertising data [ 209.539768][ T5952] Bluetooth: hci4: Malformed LE Event: 0x02 [ 209.541469][ T5952] Bluetooth: hci4: Dropping invalid advertising data [ 209.544413][ T5952] Bluetooth: hci4: Malformed LE Event: 0x02 [ 209.548008][T12880] 9pnet_virtio: no channels available for device syz [ 209.579039][T12882] bond0: Error: Cannot enslave bond to itself. [ 209.839600][ T9] usb 7-1: USB disconnect, device number 25 [ 209.863044][T12904] can0: slcan on ptm0. [ 209.929347][T12903] can0 (unregistered): slcan off ptm0. [ 210.153804][T12910] loop6: detected capacity change from 0 to 524288000 [ 210.208219][T12910] Invalid logical block size (1373) [ 210.235247][T12914] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2029'. [ 210.244756][T12914] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 210.309542][ T9] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 210.380438][T12919] syzkaller0: entered promiscuous mode [ 210.382035][T12919] syzkaller0: entered allmulticast mode [ 210.469593][ T9] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 210.471897][ T9] usb 7-1: config 0 has no interface number 0 [ 210.479479][ T9] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 210.481965][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.484194][ T9] usb 7-1: Product: syz [ 210.485350][ T9] usb 7-1: Manufacturer: syz [ 210.486637][ T9] usb 7-1: SerialNumber: syz [ 210.499174][ T9] usb 7-1: config 0 descriptor?? [ 210.858248][ T24] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 211.028262][ T5952] Bluetooth: hci2: command 0x0c1a tx timeout [ 211.033022][ T24] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.035899][ T24] usb 11-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 211.039580][ T24] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 211.042111][ T24] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.045632][ T24] usb 11-1: config 0 descriptor?? [ 211.049026][ T24] usbhid 11-1:0.0: couldn't find an input interrupt endpoint [ 211.108239][ T5952] Bluetooth: hci4: command 0x0c1a tx timeout [ 211.623407][ T836] usb 7-1: USB disconnect, device number 26 [ 211.653112][T12944] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2039'. [ 211.865035][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 211.865046][ T40] audit: type=1400 audit(1744500894.396:1215): avc: denied { map } for pid=12960 comm="syz.4.2044" path="/dev/radio0" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 211.874441][ T40] audit: type=1400 audit(1744500894.396:1216): avc: denied { execute } for pid=12960 comm="syz.4.2044" path="/dev/radio0" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 212.159766][T12973] netlink: 'syz.2.2048': attribute type 27 has an invalid length. [ 212.215361][ T40] audit: type=1400 audit(1744500894.736:1217): avc: denied { name_bind } for pid=12974 comm="syz.2.2049" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 212.250770][ T40] audit: type=1400 audit(1744500894.786:1218): avc: denied { ioctl } for pid=12976 comm="syz.2.2050" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 212.828365][T12977] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2050'. [ 212.831614][T12977] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2050'. [ 212.975178][T12999] net_ratelimit: 396 callbacks suppressed [ 212.975189][T12999] openvswitch: netlink: Key type 30 is not supported [ 212.980455][T13000] openvswitch: netlink: Key type 30 is not supported [ 213.000242][T12995] loop2: detected capacity change from 0 to 7 [ 213.004407][T12995] Dev loop2: unable to read RDB block 7 [ 213.006086][T12995] loop2: unable to read partition table [ 213.007819][T12995] loop2: partition table beyond EOD, truncated [ 213.011023][T12995] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 213.098203][ T5952] Bluetooth: hci2: command 0x0c1a tx timeout [ 213.169155][T13006] CIFS: iocharset name too long [ 213.173522][T13010] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13010 comm=syz.1.2061 [ 213.177475][ T5952] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 213.188295][ T5952] Bluetooth: hci4: command 0x0c1a tx timeout [ 213.268779][ T1027] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 213.408209][ T1027] usb 9-1: device descriptor read/64, error -71 [ 213.639209][ T836] usb 11-1: USB disconnect, device number 3 [ 213.648370][ T1027] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 213.683949][T13018] hsr0: entered allmulticast mode [ 213.685480][T13018] hsr_slave_0: entered allmulticast mode [ 213.687113][T13018] hsr_slave_1: entered allmulticast mode [ 213.741953][T13026] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2067'. [ 213.778384][ T1027] usb 9-1: device descriptor read/64, error -71 [ 213.820402][T13026] hsr_slave_1 (unregistering): left promiscuous mode [ 213.888887][ T1027] usb usb9-port1: attempt power cycle [ 214.011455][T13036] xt_hashlimit: size too large, truncated to 1048576 [ 214.074249][T13036] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2070'. [ 214.090133][T13044] xt_hashlimit: size too large, truncated to 1048576 [ 214.193381][T13044] tipc: Started in network mode [ 214.194845][T13044] tipc: Node identity ac, cluster identity 4711 [ 214.196632][T13044] tipc: Node number set to 172 [ 214.248404][ T40] audit: type=1400 audit(1744500896.786:1219): avc: denied { bind } for pid=13045 comm="syz.6.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 214.248783][ T1027] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 214.288221][ T24] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 214.288856][ T1027] usb 9-1: device descriptor read/8, error -71 [ 214.430446][T13061] wg1 speed is unknown, defaulting to 1000 [ 214.432203][T13061] wg1 speed is unknown, defaulting to 1000 [ 214.434175][T13061] wg1 speed is unknown, defaulting to 1000 [ 214.439732][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.441735][T13061] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 214.443474][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 214.451610][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 214.451633][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.453292][ T24] usb 7-1: config 0 descriptor?? [ 214.455305][T13061] wg1 speed is unknown, defaulting to 1000 [ 214.455603][ T24] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 214.466295][T13063] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2079'. [ 214.469642][T13061] wg1 speed is unknown, defaulting to 1000 [ 214.472815][T13061] wg1 speed is unknown, defaulting to 1000 [ 214.475755][T13061] wg1 speed is unknown, defaulting to 1000 [ 214.478094][T13061] wg1 speed is unknown, defaulting to 1000 [ 214.481062][T13061] wg1 speed is unknown, defaulting to 1000 [ 214.483502][T13061] wg1 speed is unknown, defaulting to 1000 [ 214.485826][T13061] wg1 speed is unknown, defaulting to 1000 [ 214.489129][T13061] wg1 speed is unknown, defaulting to 1000 [ 214.491488][T13061] wg1 speed is unknown, defaulting to 1000 [ 214.493828][T13061] wg1 speed is unknown, defaulting to 1000 [ 214.496178][T13061] wg1 speed is unknown, defaulting to 1000 [ 214.499601][T13061] wg1 speed is unknown, defaulting to 1000 [ 214.544698][T13063] program syz.6.2079 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.548398][ T1027] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 214.578767][ T1027] usb 9-1: device descriptor read/8, error -71 [ 214.623016][T13070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2082'. [ 214.625700][T13070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2082'. [ 214.628305][T13070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2082'. [ 214.688581][ T1027] usb usb9-port1: unable to enumerate USB device [ 215.178278][ T5952] Bluetooth: hci2: command 0x0c1a tx timeout [ 215.268439][ T5952] Bluetooth: hci4: command 0x0c1a tx timeout [ 215.359760][T13075] openvswitch: netlink: Actions may not be safe on all matching packets [ 215.363361][T13075] __nla_validate_parse: 48 callbacks suppressed [ 215.363375][T13075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2083'. [ 215.369292][T13075] nbd: illegal input index -16777216 [ 215.454914][T13080] kAFS: unparsable volume name [ 216.060741][T13112] xt_hashlimit: size too large, truncated to 1048576 [ 216.109647][T13117] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2097'. [ 216.397200][T13129] 9pnet: Could not find request transport: rx0000000000000000 [ 216.400305][ T5952] Bluetooth: hci4: unexpected event for opcode 0x2006 [ 216.402248][ T40] audit: type=1400 audit(1744500898.936:1220): avc: denied { validate_trans } for pid=13128 comm="syz.1.2102" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 216.973894][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 217.019023][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 217.033910][T13141] syzkaller0: entered promiscuous mode [ 217.035489][T13141] syzkaller0: entered allmulticast mode [ 217.048807][T13140] netlink: 'syz.6.2106': attribute type 11 has an invalid length. [ 217.051714][T13140] netlink: 'syz.6.2106': attribute type 11 has an invalid length. [ 217.054455][T13140] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2106'. [ 217.071544][ T24] usb 7-1: USB disconnect, device number 27 [ 217.078560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 217.169758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 217.248371][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 218.378408][T13158] fuse: Bad value for 'group_id' [ 218.380292][T13158] fuse: Bad value for 'group_id' [ 218.409639][T13158] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.412590][T13158] bond0: (slave bond1): Enslaving as an active interface with an up link [ 218.419258][T13163] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 218.419424][T13158] SELinux: policydb string does not match my string SE Linux [ 218.423037][T13163] team0: Device ipvlan2 is already an upper device of the team interface [ 218.423954][T13158] SELinux: failed to load policy [ 218.476333][ T40] audit: type=1400 audit(1744500901.006:1221): avc: denied { write } for pid=13169 comm="syz.1.2116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 218.640203][T13183] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 218.642609][T13183] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 218.665590][T13183] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 218.667987][T13183] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 218.761204][T13193] IPv6: syztnl0: Disabled Multicast RS [ 218.792005][ T40] audit: type=1400 audit(1744500901.326:1222): avc: denied { read } for pid=13194 comm="syz.4.2124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 218.849348][T13199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2126'. [ 218.851846][T13199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2126'. [ 218.946077][T13210] lo speed is unknown, defaulting to 1000 [ 218.951396][T13210] wg1 speed is unknown, defaulting to 1000 [ 219.271952][T13229] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 219.298865][T13233] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 219.303038][T13233] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 219.305190][T13233] vhci_hcd vhci_hcd.0: Device attached [ 219.310378][T13234] vhci_hcd: connection closed [ 219.311555][ T9843] vhci_hcd: stop threads [ 219.314092][ T9843] vhci_hcd: release socket [ 219.315785][ T9843] vhci_hcd: disconnect device [ 219.395397][T13237] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 219.398606][T13237] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 219.401882][T13237] overlayfs: failed to set uuid (61/file1, err=-13); falling back to uuid=null. [ 219.591915][ T40] audit: type=1400 audit(1744500902.126:1223): avc: denied { accept } for pid=13254 comm="syz.1.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 219.597169][ T40] audit: type=1800 audit(1744500902.126:1224): pid=13255 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2141" name="file1" dev="tmpfs" ino=387 res=0 errno=0 [ 219.666012][T13260] netlink: 'syz.1.2143': attribute type 1 has an invalid length. [ 219.668372][T13260] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.2143'. [ 219.726054][T13265] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2144'. [ 219.728847][T13265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2144'. [ 219.753490][T13269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2145'. [ 219.786525][ T40] audit: type=1326 audit(1744500902.316:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13270 comm="syz.1.2146" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae9658d169 code=0x0 [ 219.863737][T13275] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2148'. [ 219.891423][ T40] audit: type=1400 audit(1744500902.426:1226): avc: denied { getattr } for pid=13270 comm="syz.1.2146" path="socket:[52436]" dev="sockfs" ino=52436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 219.997741][ T40] audit: type=1400 audit(1744500902.526:1227): avc: denied { create } for pid=13280 comm="syz.1.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 220.065703][ T40] audit: type=1400 audit(1744500902.596:1228): avc: denied { listen } for pid=13287 comm="syz.1.2153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 220.076519][ T40] audit: type=1400 audit(1744500902.606:1229): avc: denied { accept } for pid=13287 comm="syz.1.2153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 220.099828][ T40] audit: type=1400 audit(1744500902.636:1230): avc: denied { remount } for pid=13285 comm="syz.4.2152" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 220.386232][T13297] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2155'. [ 221.284600][T13322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2163'. [ 221.290983][T13322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2163'. [ 221.314135][T13322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2163'. [ 221.325035][T13324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2164'. [ 221.329048][T13324] nbd: illegal input index -16777216 [ 221.489576][T13342] netlink: 'syz.6.2170': attribute type 10 has an invalid length. [ 221.489589][T13343] netlink: 'syz.6.2170': attribute type 10 has an invalid length. [ 221.490729][T13343] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.498101][T13343] bond0: (slave team0): Enslaving as an active interface with an up link [ 221.546350][T13348] overlayfs: failed to resolve '/': -2 [ 221.998224][ T6538] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 222.158202][ T6538] usb 11-1: Using ep0 maxpacket: 16 [ 222.162533][ T6538] usb 11-1: unable to get BOS descriptor or descriptor too short [ 222.165633][ T6538] usb 11-1: config 5 has an invalid interface number: 214 but max is 1 [ 222.168068][ T6538] usb 11-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 222.171129][ T6538] usb 11-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 222.173878][ T6538] usb 11-1: config 5 has no interface number 0 [ 222.175733][ T6538] usb 11-1: config 5 interface 214 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.179566][ T6538] usb 11-1: config 5 interface 214 has no altsetting 0 [ 222.183396][ T6538] usb 11-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=d3.3b [ 222.186058][ T6538] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.192151][ T6538] usb 11-1: Product: syz [ 222.193505][ T6538] usb 11-1: Manufacturer: syz [ 222.194952][ T6538] usb 11-1: SerialNumber: syz [ 222.413816][ T6538] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 222.433007][T13401] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2187'. [ 222.444100][ T6538] snd-usb-audio 11-1:5.214: probe with driver snd-usb-audio failed with error -2 [ 222.449759][ T6538] usb 11-1: USB disconnect, device number 4 [ 222.805709][T13417] macsec1: entered allmulticast mode [ 222.807299][T13417] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode [ 222.812290][T13417] mac80211_hwsim hwsim18 wlan0: left allmulticast mode [ 222.824838][T13418] macsec1: entered allmulticast mode [ 222.826370][T13418] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode [ 222.829577][T13418] mac80211_hwsim hwsim18 wlan0: left allmulticast mode [ 223.008449][T13428] ptrace attach of "/syz-executor exec"[13429] was attempted by "/syz-executor exec"[13428] [ 223.183494][T13454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2202'. [ 223.891037][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 223.891052][ T40] audit: type=1400 audit(1744500906.406:1242): avc: denied { wake_alarm } for pid=13484 comm="syz.1.2214" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 223.968203][ T40] audit: type=1400 audit(1744500906.496:1243): avc: denied { map } for pid=13489 comm="syz.2.2215" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 224.008346][ T40] audit: type=1400 audit(1744500906.506:1244): avc: denied { append } for pid=13489 comm="syz.2.2215" name="001" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 224.082391][T13490] ALSA: seq fatal error: cannot create timer (-19) [ 224.357507][T13503] netlink: 788 bytes leftover after parsing attributes in process `syz.2.2219'. [ 224.568248][T13511] dvmrp3: entered allmulticast mode [ 224.574166][T13511] batadv0: entered allmulticast mode [ 224.679253][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.142485][ T40] audit: type=1400 audit(1744500907.666:1245): avc: denied { append } for pid=13535 comm="syz.4.2229" name="usbmon4" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 225.325904][ T40] audit: type=1400 audit(1744500907.856:1246): avc: denied { read } for pid=13541 comm="syz.2.2231" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 225.605052][T13550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13550 comm=syz.2.2234 [ 225.991907][ T40] audit: type=1400 audit(1744500908.516:1247): avc: denied { mounton } for pid=13566 comm="syz.2.2239" path="/509/file0/file0" dev="afs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 226.028527][ T40] audit: type=1400 audit(1744500908.536:1248): avc: denied { getopt } for pid=13567 comm="syz.4.2238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 226.137681][T13574] lo: entered allmulticast mode [ 226.219196][T13574] lo: left allmulticast mode [ 226.342948][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.392018][T13577] bio_check_eod: 2 callbacks suppressed [ 226.392035][T13577] syz.4.2243: attempt to access beyond end of device [ 226.392035][T13577] nbd4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 226.405853][T13577] EXT4-fs (nbd4): unable to read superblock [ 227.036340][ T5956] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 227.055245][ T5956] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 227.063224][ T5956] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 227.079428][ T5956] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 227.105379][ T5956] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 227.120097][ T5952] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 227.148484][ T5952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 227.152446][ T5952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 227.169611][ T5952] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 227.199528][ T5952] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 228.209511][T13584] lo speed is unknown, defaulting to 1000 [ 228.214897][T13584] wg1 speed is unknown, defaulting to 1000 [ 228.326795][ T40] audit: type=1400 audit(1744500910.866:1249): avc: denied { write } for pid=13592 comm="syz.4.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 228.489584][T13584] chnl_net:caif_netlink_parms(): no params data found [ 228.593510][ C1] vkms_vblank_simulate: vblank timer overrun [ 228.837417][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.012750][T13584] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.015837][T13584] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.040508][T13584] bridge_slave_0: entered allmulticast mode [ 229.056546][T13584] bridge_slave_0: entered promiscuous mode [ 229.061266][T13584] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.088328][T13584] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.118225][T13584] bridge_slave_1: entered allmulticast mode [ 229.122397][T13584] bridge_slave_1: entered promiscuous mode [ 229.194498][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.234762][T13630] program syz.1.2258 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.258347][ T5952] Bluetooth: hci1: command tx timeout [ 229.284878][T13630] program syz.1.2258 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.297869][T13584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.305441][T13584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.386923][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.463746][T13584] team0: Port device team_slave_0 added [ 229.477189][T13584] team0: Port device team_slave_1 added [ 229.626581][T13642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2261'. [ 229.648587][ T6020] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 229.702916][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.705235][T13640] IPv6: NLM_F_CREATE should be specified when creating new route [ 229.724157][T13584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.727092][T13584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.745225][T13584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.804759][T13584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.823881][T13584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.841014][ T6020] usb 6-1: device descriptor read/64, error -71 [ 229.843574][T13584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.090944][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.126654][ T6020] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 230.210946][T13584] hsr_slave_0: entered promiscuous mode [ 230.215861][T13584] hsr_slave_1: entered promiscuous mode [ 230.234777][T13584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.237904][T13584] Cannot create hsr debugfs directory [ 230.279336][ T6020] usb 6-1: device descriptor read/64, error -71 [ 230.351098][T13654] loop2: detected capacity change from 0 to 7 [ 230.372280][T13654] Dev loop2: unable to read RDB block 7 [ 230.374828][T13654] loop2: unable to read partition table [ 230.377604][T13654] loop2: partition table beyond EOD, truncated [ 230.385214][T13654] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 230.396915][ T6020] usb usb6-port1: attempt power cycle [ 230.428417][T13658] ata1.00: invalid multi_count 1 ignored [ 230.592542][T13663] macsec1: entered allmulticast mode [ 230.594388][T13663] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode [ 230.617103][T13663] batman_adv: batadv0: Adding interface: macsec1 [ 230.635861][T13663] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.653919][T13663] batman_adv: batadv0: Interface activated: macsec1 [ 230.687226][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.735445][T13666] netlink: 'syz.6.2270': attribute type 5 has an invalid length. [ 230.770973][ T6020] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 230.779724][T13668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2271'. [ 230.791030][ T6020] usb 6-1: device descriptor read/8, error -71 [ 230.871685][T13584] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 230.902046][T13584] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 230.944138][T13584] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 231.003485][T13584] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 231.046381][ T6020] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 231.080955][ T6020] usb 6-1: device descriptor read/8, error -71 [ 231.134156][T13584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.136947][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.164764][T13584] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.215433][ T6020] usb usb6-port1: unable to enumerate USB device [ 231.226487][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.231283][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.242194][T13681] cifs: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 231.267404][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.267489][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.274898][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.303888][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.342152][ T5952] Bluetooth: hci1: command tx timeout [ 231.698667][T13584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.119933][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.235331][T13584] veth0_vlan: entered promiscuous mode [ 232.245531][T13584] veth1_vlan: entered promiscuous mode [ 232.294392][T13584] veth0_macvtap: entered promiscuous mode [ 232.343965][T13720] fuse: Unknown parameter '0x00000000000000040x0000000000000004' [ 232.430042][T13720] lo speed is unknown, defaulting to 1000 [ 232.431223][ T40] audit: type=1800 audit(1744500914.956:1250): pid=13721 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2284" name="file1" dev="tmpfs" ino=1999 res=0 errno=0 [ 232.450899][T13584] veth1_macvtap: entered promiscuous mode [ 232.474529][T13584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.491282][T13584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.496536][T13584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.502530][T13584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.508553][T13584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.514102][T13584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.518925][T13584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.523776][T13584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.528350][T13584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.533714][T13584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.540118][T13584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.547369][T13584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.554048][T13584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.558615][T13584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.564173][T13584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.569772][T13584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.575255][T13584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.591132][T13584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.594892][T13584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.595430][ T40] audit: type=1400 audit(1744500915.126:1251): avc: denied { setattr } for pid=13728 comm="syz.6.2286" name="NETLINK" dev="sockfs" ino=53848 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 232.598832][T13584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.620697][T13584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.626418][T13584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.648273][T13584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.656603][T13584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.663658][T13720] wg1 speed is unknown, defaulting to 1000 [ 232.672521][T13584] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.677207][T13584] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.683322][T13584] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.687288][T13584] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.994952][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.047826][T13584] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: macsec1 [ 233.069133][T13584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.087018][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.100787][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.176256][T12275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.184136][T12275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.280134][T13741] ALSA: seq fatal error: cannot create timer (-22) [ 233.419315][ T5952] Bluetooth: hci1: command tx timeout [ 233.458540][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 233.645522][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 233.651482][ T9] usb 6-1: config 4 has an invalid interface number: 184 but max is 0 [ 233.703671][ T9] usb 6-1: config 4 has no interface number 0 [ 233.707680][ T9] usb 6-1: config 4 interface 184 altsetting 128 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 233.721103][ T9] usb 6-1: config 4 interface 184 has no altsetting 0 [ 233.738486][ T6020] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 233.750320][ T9] usb 6-1: New USB device found, idVendor=08ca, idProduct=0104, bcdDevice=94.68 [ 233.755184][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.761797][ T9] usb 6-1: Product: syz [ 233.764293][ T9] usb 6-1: Manufacturer: syz [ 233.766915][ T9] usb 6-1: SerialNumber: syz [ 233.880633][ T6020] usb 12-1: device descriptor read/64, error -71 [ 233.980455][T13739] trusted_key: encrypted_key: insufficient parameters specified [ 233.990333][ T9] gspca_main: sunplus-2.14.0 probing 08ca:0104 [ 233.994731][ T9] gspca_sunplus: reg_r err -71 [ 233.997751][ T9] sunplus 6-1:4.184: probe with driver sunplus failed with error -71 [ 234.018721][ T9] usb 6-1: USB disconnect, device number 11 [ 234.100337][T13755] netlink: 6 bytes leftover after parsing attributes in process `syz.6.2295'. [ 234.118936][T13755] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2295'. [ 234.152415][ T6020] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 234.303517][ T6020] usb 12-1: device descriptor read/64, error -71 [ 234.408584][ T6020] usb usb12-port1: attempt power cycle [ 234.510818][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.570962][T13758] netlink: 'syz.6.2296': attribute type 11 has an invalid length. [ 234.745296][T13771] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2300'. [ 234.775343][ T6020] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 234.826467][ T6020] usb 12-1: device descriptor read/8, error -71 [ 234.940777][T13773] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2301'. [ 235.088870][ T6020] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 235.128293][ T6020] usb 12-1: device descriptor read/8, error -71 [ 235.238848][ T6020] usb usb12-port1: unable to enumerate USB device [ 235.400186][T13784] SELinux: failed to load policy [ 235.503308][ T5952] Bluetooth: hci1: command tx timeout [ 235.821638][ T40] audit: type=1400 audit(1744500918.346:1252): avc: denied { create } for pid=13794 comm="syz.1.2307" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 235.853863][T13795] ieee802154 phy0 wpan0: encryption failed: -22 [ 235.866394][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.879944][ T40] audit: type=1400 audit(1744500918.346:1253): avc: denied { write } for pid=13794 comm="syz.1.2307" name="file0" dev="tmpfs" ino=687 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 235.919918][ T40] audit: type=1400 audit(1744500918.346:1254): avc: denied { open } for pid=13794 comm="syz.1.2307" path="/124/file0" dev="tmpfs" ino=687 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 235.952989][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.975995][ T40] audit: type=1400 audit(1744500918.396:1255): avc: denied { write } for pid=13794 comm="syz.1.2307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 235.997172][ T40] audit: type=1400 audit(1744500918.446:1256): avc: denied { read } for pid=13794 comm="syz.1.2307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 236.091261][ T9539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.094330][ T9539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.122089][T13804] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2310'. [ 236.133202][T13804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.605149][ T40] audit: type=1400 audit(1744500919.126:1257): avc: denied { setcurrent } for pid=13812 comm="syz.7.2313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 236.616807][ T40] audit: type=1401 audit(1744500919.126:1258): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 236.696454][ T40] audit: type=1400 audit(1744500919.226:1259): avc: denied { unlink } for pid=12609 comm="syz-executor" name="file0" dev="tmpfs" ino=687 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 236.735821][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.834163][T13818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.849295][T13820] ALSA: seq fatal error: cannot create timer (-22) [ 236.902834][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.976648][T13820] IPVS: Scheduler module ip_vs_non not found [ 237.090540][T13836] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2320'. [ 237.096014][T13836] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2320'. [ 237.162885][T13837] x_tables: duplicate underflow at hook 2 [ 237.299174][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 237.470309][ T24] usb 6-1: device descriptor read/64, error -71 [ 237.521658][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2326'. [ 237.526522][T13853] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2326'. [ 237.662969][T13853] hugetlbfs: Unknown parameter '#n{ F[h} ' [ 237.663268][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 237.663285][ T40] audit: type=1400 audit(1744500920.196:1261): avc: denied { remount } for pid=13852 comm="syz.4.2326" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 237.724328][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 237.782697][T13860] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2328'. [ 237.807377][T13860] deleting an unspecified loop device is not supported. [ 237.835778][ T40] audit: type=1400 audit(1744500920.366:1262): avc: denied { unmount } for pid=9481 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 237.884124][ T24] usb 6-1: device descriptor read/64, error -71 [ 237.945183][T13866] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2330'. [ 238.022254][ T24] usb usb6-port1: attempt power cycle [ 238.028347][T13862] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 238.103312][T13872] [U] [ 238.109350][T13872] [U] [ 238.111041][T13872] [U] [ 238.112658][T13872] [U] [ 238.114257][T13872] [U] [ 238.115526][T13872] [U] [ 238.116814][T13872] [U] [ 238.118234][T13872] [U] [ 238.124459][T13872] [U] [ 238.125899][T13872] [U] [ 238.127246][T13872] [U] [ 238.128475][T13872] [U] [ 238.131140][T13872] [U] [ 238.132498][T13872] [U] [ 238.133575][T13872] [U] [ 238.134696][T13872] [U] [ 238.146011][T13869] [U] [ 238.189904][T13874] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 238.306203][T13876] syz.6.2334 (13876): /proc/13875/oom_adj is deprecated, please use /proc/13875/oom_score_adj instead. [ 238.311676][ T40] audit: type=1400 audit(1744500920.826:1263): avc: denied { setopt } for pid=13875 comm="syz.6.2334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 238.400576][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 238.421493][ T24] usb 6-1: device descriptor read/8, error -71 [ 238.693554][ T40] audit: type=1400 audit(1744500921.216:1264): avc: denied { getopt } for pid=13894 comm="syz.6.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 238.788427][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 238.812180][ T24] usb 6-1: device descriptor read/8, error -71 [ 238.937507][ T24] usb usb6-port1: unable to enumerate USB device [ 239.020906][T13909] xt_nfacct: accounting object `syz1' does not exists [ 239.507962][T13929] lo speed is unknown, defaulting to 1000 [ 239.523082][T13929] lo speed is unknown, defaulting to 1000 [ 239.529853][T13929] lo speed is unknown, defaulting to 1000 [ 239.785767][ T24] lo speed is unknown, defaulting to 1000 [ 239.788904][T13929] infiniband sz1: set down [ 239.798258][T13929] infiniband sz1: added lo [ 239.958450][T13929] RDS/IB: sz1: added [ 239.980727][T13929] smc: adding ib device sz1 with port count 1 [ 239.987115][T13929] smc: ib device sz1 port 1 has pnetid [ 239.997077][ T838] lo speed is unknown, defaulting to 1000 [ 240.006655][T13929] lo speed is unknown, defaulting to 1000 [ 240.253275][T13929] lo speed is unknown, defaulting to 1000 [ 240.258293][ T40] audit: type=1400 audit(1744500922.786:1265): avc: denied { write } for pid=13944 comm="syz.1.2349" path="socket:[55712]" dev="sockfs" ino=55712 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 240.406286][T13950] random: crng reseeded on system resumption [ 240.487189][T13929] lo speed is unknown, defaulting to 1000 [ 240.704137][T13929] lo speed is unknown, defaulting to 1000 [ 241.021404][T13929] lo speed is unknown, defaulting to 1000 [ 241.233054][T13929] lo speed is unknown, defaulting to 1000 [ 241.278478][T13967] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2353'. [ 241.427065][T13929] lo speed is unknown, defaulting to 1000 [ 241.543501][T13967] syz.7.2353: attempt to access beyond end of device [ 241.543501][T13967] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 241.550512][T13967] (syz.7.2353,13967,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 241.553724][T13967] (syz.7.2353,13967,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 241.556941][T13967] (syz.7.2353,13967,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 241.564352][T13967] (syz.7.2353,13967,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 241.606623][T13929] lo speed is unknown, defaulting to 1000 [ 241.807367][T13929] lo speed is unknown, defaulting to 1000 [ 242.092160][T13929] lo speed is unknown, defaulting to 1000 [ 242.384887][T13929] lo speed is unknown, defaulting to 1000 [ 242.636511][T13929] lo speed is unknown, defaulting to 1000 [ 242.690024][T13985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2359'. [ 242.788657][ T24] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 242.953561][T13993] IPv6: Can't replace route, no match found [ 242.958446][ T24] usb 12-1: device descriptor read/64, error -71 [ 243.009446][T13995] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2362'. [ 243.081150][T13929] lo speed is unknown, defaulting to 1000 [ 243.220154][ T24] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 243.307406][T14005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2363'. [ 243.321253][ T40] audit: type=1400 audit(1744500925.856:1266): avc: denied { override_creds } for pid=14000 comm="syz.6.2364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 243.330708][T13929] lo speed is unknown, defaulting to 1000 [ 243.394952][ T24] usb 12-1: device descriptor read/64, error -71 [ 243.496746][T13929] lo speed is unknown, defaulting to 1000 [ 243.508649][ T24] usb usb12-port1: attempt power cycle [ 243.565121][T14008] libceph: resolve ' [ 243.565121][T14008] -&fYǝa2i [ 243.565121][T14008] .?&*&' (ret=-3): failed [ 243.686278][T13929] lo speed is unknown, defaulting to 1000 [ 243.895027][ T24] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 243.947536][ T24] usb 12-1: device descriptor read/8, error -71 [ 244.218416][ T24] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 244.232365][ T24] usb 12-1: device descriptor read/8, error -71 [ 244.347581][ T24] usb usb12-port1: unable to enumerate USB device [ 245.055870][ T40] audit: type=1400 audit(1744500927.596:1267): avc: denied { connect } for pid=14032 comm="syz.1.2372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 245.107203][ T40] audit: type=1400 audit(1744500927.596:1268): avc: denied { listen } for pid=14032 comm="syz.1.2372" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 245.331820][ T40] audit: type=1400 audit(1744500927.856:1269): avc: denied { getattr } for pid=14034 comm="syz.1.2373" name="/" dev="9p" ino=36831252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 245.344671][T14035] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 245.411974][ T40] audit: type=1400 audit(1744500927.936:1270): avc: denied { write } for pid=14034 comm="syz.1.2373" name="file0" dev="overlay" ino=36831362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 245.425955][ T40] audit: type=1400 audit(1744500927.956:1271): avc: denied { setattr } for pid=14034 comm="syz.1.2373" name="file0" dev="overlay" ino=36831362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 245.846812][ C3] vkms_vblank_simulate: vblank timer overrun [ 245.890832][ C3] vkms_vblank_simulate: vblank timer overrun [ 245.922258][ T40] audit: type=1326 audit(1744500928.456:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14045 comm="syz.6.2377" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b2ed8d169 code=0x0 [ 245.949132][ T838] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 246.071561][T14052] fuse: Unknown parameter 'xllow_other' [ 246.118291][ T838] usb 12-1: Using ep0 maxpacket: 16 [ 246.122178][ T838] usb 12-1: config 0 has an invalid interface number: 8 but max is 0 [ 246.125338][ T838] usb 12-1: config 0 has no interface number 0 [ 246.127757][ T838] usb 12-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 246.137292][ T838] usb 12-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 246.142594][ T838] usb 12-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 246.147908][ T838] usb 12-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 246.151337][ T838] usb 12-1: Product: syz [ 246.168679][ T838] usb 12-1: SerialNumber: syz [ 246.180086][ T838] usb 12-1: config 0 descriptor?? [ 246.187541][ T838] cm109 12-1:0.8: invalid payload size 0, expected 4 [ 246.194504][ T838] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.8/input/input23 [ 246.389423][ C3] cm109 12-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 246.601770][ C2] cm109 12-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 246.603319][ T838] usb 12-1: USB disconnect, device number 10 [ 246.604800][ C2] cm109 12-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 246.642394][ T838] cm109 12-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 246.781516][T14073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2383'. [ 246.817237][ C3] vkms_vblank_simulate: vblank timer overrun [ 246.822325][T14073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2383'. [ 246.825792][T14073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2383'. [ 246.848745][ C3] vkms_vblank_simulate: vblank timer overrun [ 247.472042][T14098] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2391'. [ 247.590353][ T1026] kernel read not supported for file /zero (pid: 1026 comm: kworker/1:3) [ 247.920613][ C3] vkms_vblank_simulate: vblank timer overrun [ 248.022199][T14123] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 0 [ 248.114002][T14127] netlink: 'syz.1.2400': attribute type 2 has an invalid length. [ 248.831662][T14144] xt_hashlimit: size too large, truncated to 1048576 [ 248.836461][T14146] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2406'. [ 248.867016][T14148] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2406'. [ 249.493108][T14174] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2411'. [ 249.553152][T14178] xt_hashlimit: size too large, truncated to 1048576 [ 250.031678][T14196] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 250.267899][ C3] vkms_vblank_simulate: vblank timer overrun [ 250.566734][ C3] vkms_vblank_simulate: vblank timer overrun [ 250.572787][T14212] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 250.589008][T14212] qnx6: wrong signature (magic) in superblock #1. [ 250.592320][T14212] qnx6: unable to read the first superblock [ 250.596536][ C3] vkms_vblank_simulate: vblank timer overrun [ 250.600727][T14211] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2424'. [ 250.623102][T14212] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2424'. [ 250.630704][ C3] vkms_vblank_simulate: vblank timer overrun [ 250.898755][ C3] vkms_vblank_simulate: vblank timer overrun [ 250.950714][ C3] vkms_vblank_simulate: vblank timer overrun [ 251.048389][ C3] vkms_vblank_simulate: vblank timer overrun [ 251.252834][T14221] lo speed is unknown, defaulting to 1000 [ 251.257582][T14221] wg1 speed is unknown, defaulting to 1000 [ 251.283055][T14221] lo speed is unknown, defaulting to 1000 [ 251.436114][ T5991] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 251.459090][ T40] audit: type=1400 audit(1744500933.986:1273): avc: denied { map } for pid=14232 comm="syz.4.2429" path="/proc/1067/net/xfrm_stat" dev="proc" ino=4026533822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 251.568255][ T5991] usb 11-1: device descriptor read/64, error -71 [ 251.747448][ T40] audit: type=1400 audit(1744500934.286:1274): avc: denied { create } for pid=14241 comm="syz.1.2431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 251.789897][ T40] audit: type=1400 audit(1744500934.316:1275): avc: denied { getopt } for pid=14241 comm="syz.1.2431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 251.838632][ T5991] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 251.933485][ C3] vkms_vblank_simulate: vblank timer overrun [ 251.981067][ T40] audit: type=1400 audit(1744500934.506:1276): avc: denied { listen } for pid=14243 comm="syz.4.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 251.989094][ T5991] usb 11-1: device descriptor read/64, error -71 [ 251.991064][ T40] audit: type=1400 audit(1744500934.526:1277): avc: denied { accept } for pid=14243 comm="syz.4.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 252.121737][ T5991] usb usb11-port1: attempt power cycle [ 252.131525][ C3] vkms_vblank_simulate: vblank timer overrun [ 252.410900][T14260] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2436'. [ 252.455944][ T40] audit: type=1400 audit(1744500934.986:1278): avc: denied { ioctl } for pid=14262 comm="syz.7.2437" path="socket:[57866]" dev="sockfs" ino=57866 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 252.498280][ T5991] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 252.536840][ T5991] usb 11-1: device descriptor read/8, error -71 [ 252.826739][ T5991] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 252.848848][ T5991] usb 11-1: device descriptor read/8, error -71 [ 252.873488][T14277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2442'. [ 252.897860][ C3] vkms_vblank_simulate: vblank timer overrun [ 252.961037][ T5991] usb usb11-port1: unable to enumerate USB device [ 253.250708][ C3] vkms_vblank_simulate: vblank timer overrun [ 253.349267][T14288] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2445'. [ 253.434849][T14288] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2445'. [ 253.634641][T14297] input: syz1 as /devices/virtual/input/input24 [ 253.952290][T14304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2451'. [ 253.959752][T14304] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 254.046289][T14311] zonefs (nbd4) ERROR: Not a zoned block device [ 254.146467][ C3] vkms_vblank_simulate: vblank timer overrun [ 254.191262][T14317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2455'. [ 254.195480][T14317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2455'. [ 254.425781][ T40] audit: type=1400 audit(1744500936.956:1279): avc: denied { ioctl } for pid=14323 comm="syz.4.2458" path="socket:[57204]" dev="sockfs" ino=57204 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 254.703097][T14338] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 254.727966][T14338] overlayfs: missing 'lowerdir' [ 254.869781][T14338] fuse: Bad value for 'group_id' [ 254.873967][T14338] fuse: Bad value for 'group_id' [ 255.357541][T14355] netlink: 'syz.1.2467': attribute type 1 has an invalid length. [ 255.391289][T14355] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.440560][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.481875][ T835] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 255.629439][T14364] tmpfs: Bad value for 'mpol' [ 255.634960][T14364] ipt_REJECT: ECHOREPLY no longer supported. [ 255.670683][ T835] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 255.685549][ T835] usb 9-1: can't read configurations, error -61 [ 255.878850][ T835] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 256.073076][ T835] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 256.077880][ T835] usb 9-1: can't read configurations, error -61 [ 256.095746][ T835] usb usb9-port1: attempt power cycle [ 256.483161][ T835] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 256.511154][ T835] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 256.514000][ T835] usb 9-1: can't read configurations, error -61 [ 256.658383][ T835] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 256.701487][ T835] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 256.705924][ T835] usb 9-1: can't read configurations, error -61 [ 256.709975][ T835] usb usb9-port1: unable to enumerate USB device [ 256.723063][ T40] audit: type=1400 audit(1744500939.256:1280): avc: denied { shutdown } for pid=14391 comm="syz.6.2479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 256.723273][T14392] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2479'. [ 257.347761][T14408] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2484'. [ 257.351279][T14409] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2484'. [ 257.437335][T14409] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 258.561418][T14431] netlink: 'syz.7.2491': attribute type 3 has an invalid length. [ 258.606343][ T40] audit: type=1400 audit(1744500941.146:1281): avc: denied { listen } for pid=14432 comm="syz.6.2492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 258.758372][T14440] input: syz0 as /devices/virtual/input/input25 [ 258.964397][ T40] audit: type=1400 audit(1744500941.496:1282): avc: denied { bind } for pid=14435 comm="syz.4.2494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 259.091792][ C3] ================================================================== [ 259.094847][ C3] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 259.097802][ C3] Read of size 1 at addr ffff888046007418 by task kworker/u32:38/9841 [ 259.110114][ C3] [ 259.110965][ C3] CPU: 3 UID: 0 PID: 9841 Comm: kworker/u32:38 Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(full) [ 259.110990][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 259.111001][ C3] Workqueue: events_unbound toggle_allocation_gate [ 259.111021][ C3] Call Trace: [ 259.111028][ C3] [ 259.111034][ C3] dump_stack_lvl+0x116/0x1f0 [ 259.111056][ C3] print_report+0xc3/0x670 [ 259.111071][ C3] ? __virt_addr_valid+0x5e/0x590 [ 259.111091][ C3] ? __phys_addr+0xc6/0x150 [ 259.111110][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 259.111126][ C3] kasan_report+0xe0/0x110 [ 259.111141][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 259.111157][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 259.111173][ C3] __kasan_check_byte+0x36/0x50 [ 259.111188][ C3] lock_acquire+0xfc/0x350 [ 259.111200][ C3] ? do_raw_spin_unlock+0x53/0x230 [ 259.111214][ C3] ? .slowpath+0x9/0x18 [ 259.111231][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 259.111245][ C3] ? p9_req_put+0xaf/0x250 [ 259.111264][ C3] p9_req_put+0xaf/0x250 [ 259.111282][ C3] req_done+0x1dc/0x2e0 [ 259.111298][ C3] ? __pfx_req_done+0x10/0x10 [ 259.111314][ C3] ? __pfx_req_done+0x10/0x10 [ 259.111328][ C3] vring_interrupt+0x31b/0x400 [ 259.111356][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 259.111372][ C3] __handle_irq_event_percpu+0x229/0x7d0 [ 259.111393][ C3] handle_irq_event+0xab/0x1e0 [ 259.111409][ C3] handle_edge_irq+0x263/0xd10 [ 259.111427][ C3] __common_interrupt+0xdf/0x250 [ 259.111442][ C3] common_interrupt+0xba/0xe0 [ 259.111456][ C3] [ 259.111461][ C3] [ 259.111466][ C3] asm_common_interrupt+0x26/0x40 [ 259.111482][ C3] RIP: 0010:smp_call_function_many_cond+0x4a5/0x1290 [ 259.111502][ C3] Code: 89 ee e8 5e 12 0c 00 85 ed 74 48 48 8b 44 24 20 49 89 c4 83 e0 07 49 c1 ec 03 48 89 c5 4d 01 f4 83 c5 03 e8 fd 16 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 de 0b 00 00 8b 43 08 31 [ 259.111516][ C3] RSP: 0018:ffffc90003287938 EFLAGS: 00000293 [ 259.111528][ C3] RAX: 0000000000000000 RBX: ffff88806a6415e0 RCX: ffffffff81af2699 [ 259.111538][ C3] RDX: ffff888028070000 RSI: ffffffff81af2673 RDI: 0000000000000005 [ 259.111547][ C3] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 259.111555][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed100d4c82bd [ 259.111564][ C3] R13: 0000000000000001 R14: dffffc0000000000 R15: ffff88806a73b040 [ 259.111576][ C3] ? smp_call_function_many_cond+0x4c9/0x1290 [ 259.111591][ C3] ? smp_call_function_many_cond+0x4a3/0x1290 [ 259.111608][ C3] ? smp_call_function_many_cond+0x4a3/0x1290 [ 259.111627][ C3] ? __pfx_do_sync_core+0x10/0x10 [ 259.111644][ C3] on_each_cpu_cond_mask+0x40/0x90 [ 259.111660][ C3] text_poke_bp_batch+0x657/0x760 [ 259.111680][ C3] ? __kmalloc_node_track_caller_noprof+0xec/0x510 [ 259.111696][ C3] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 259.111714][ C3] ? __jump_label_patch+0x1db/0x400 [ 259.111736][ C3] ? arch_jump_label_transform_queue+0xc0/0x120 [ 259.111756][ C3] ? find_held_lock+0x2b/0x80 [ 259.111776][ C3] text_poke_finish+0x30/0x40 [ 259.111793][ C3] arch_jump_label_transform_apply+0x1c/0x30 [ 259.111812][ C3] jump_label_update+0x376/0x550 [ 259.111829][ C3] static_key_disable_cpuslocked+0x158/0x1c0 [ 259.111847][ C3] static_key_disable+0x1a/0x20 [ 259.111861][ C3] toggle_allocation_gate+0x145/0x280 [ 259.111876][ C3] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 259.111893][ C3] ? rcu_is_watching+0x12/0xc0 [ 259.111920][ C3] process_one_work+0x9cc/0x1b70 [ 259.111941][ C3] ? __pfx_bond_alb_monitor+0x10/0x10 [ 259.111961][ C3] ? __pfx_process_one_work+0x10/0x10 [ 259.111979][ C3] ? assign_work+0x1a0/0x250 [ 259.111996][ C3] worker_thread+0x6c8/0xf10 [ 259.112017][ C3] ? __pfx_worker_thread+0x10/0x10 [ 259.112033][ C3] kthread+0x3c2/0x780 [ 259.112046][ C3] ? __pfx_kthread+0x10/0x10 [ 259.112057][ C3] ? __pfx_kthread+0x10/0x10 [ 259.112069][ C3] ? __pfx_kthread+0x10/0x10 [ 259.112083][ C3] ? __pfx_kthread+0x10/0x10 [ 259.112095][ C3] ? rcu_is_watching+0x12/0xc0 [ 259.112110][ C3] ? __pfx_kthread+0x10/0x10 [ 259.112123][ C3] ret_from_fork+0x45/0x80 [ 259.112137][ C3] ? __pfx_kthread+0x10/0x10 [ 259.112150][ C3] ret_from_fork_asm+0x1a/0x30 [ 259.112175][ C3] [ 259.112181][ C3] [ 259.392128][ C3] Allocated by task 14448: [ 259.393874][ C3] kasan_save_stack+0x33/0x60 [ 259.395790][ C3] kasan_save_track+0x14/0x30 [ 259.397680][ C3] __kasan_kmalloc+0xaa/0xb0 [ 259.399722][ C3] p9_client_create+0xc7/0x11c0 [ 259.401857][ C3] v9fs_session_init+0x1f7/0x1a80 [ 259.403635][ C3] v9fs_mount+0xc5/0xa30 [ 259.404982][ C3] legacy_get_tree+0x109/0x220 [ 259.407465][ C3] vfs_get_tree+0x8b/0x340 [ 259.409907][ C3] path_mount+0x14d4/0x1f30 [ 259.412914][ C3] __x64_sys_mount+0x28d/0x310 [ 259.414811][ C3] do_syscall_64+0xcd/0x260 [ 259.416839][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.418868][ C3] [ 259.419703][ C3] Freed by task 14448: [ 259.421227][ C3] kasan_save_stack+0x33/0x60 [ 259.423787][ C3] kasan_save_track+0x14/0x30 [ 259.425682][ C3] kasan_save_free_info+0x3b/0x60 [ 259.428983][ C3] __kasan_slab_free+0x51/0x70 [ 259.431064][ C3] kfree+0x2b6/0x4d0 [ 259.433278][ C3] p9_client_create+0xa28/0x11c0 [ 259.435216][ C3] v9fs_session_init+0x1f7/0x1a80 [ 259.437073][ C3] v9fs_mount+0xc5/0xa30 [ 259.438571][ C3] legacy_get_tree+0x109/0x220 [ 259.440215][ C3] vfs_get_tree+0x8b/0x340 [ 259.441763][ C3] path_mount+0x14d4/0x1f30 [ 259.443675][ C3] __x64_sys_mount+0x28d/0x310 [ 259.446138][ C3] do_syscall_64+0xcd/0x260 [ 259.448503][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.451490][ C3] [ 259.452645][ C3] The buggy address belongs to the object at ffff888046007400 [ 259.452645][ C3] which belongs to the cache kmalloc-512 of size 512 [ 259.458628][ C3] The buggy address is located 24 bytes inside of [ 259.458628][ C3] freed 512-byte region [ffff888046007400, ffff888046007600) [ 259.466046][ C3] [ 259.467666][ C3] The buggy address belongs to the physical page: [ 259.471362][ C3] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x46004 [ 259.475988][ C3] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 259.480442][ C3] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 259.484191][ C3] page_type: f5(slab) [ 259.485925][ C3] raw: 00fff00000000040 ffff88801b442c80 ffffea0001413400 dead000000000002 [ 259.489278][ C3] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 259.493669][ C3] head: 00fff00000000040 ffff88801b442c80 ffffea0001413400 dead000000000002 [ 259.498078][ C3] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 259.502222][ C3] head: 00fff00000000002 ffffea0001180101 00000000ffffffff 00000000ffffffff [ 259.506928][ C3] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 259.513801][ C3] page dumped because: kasan: bad access detected [ 259.517419][ C3] page_owner tracks the page as allocated [ 259.520459][ C3] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13503, tgid 13502 (syz.2.2219), ts 224490589238, free_ts 224197971893 [ 259.532243][ C3] post_alloc_hook+0x181/0x1b0 [ 259.534792][ C3] get_page_from_freelist+0x1193/0x39b0 [ 259.537719][ C3] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 259.541001][ C3] alloc_pages_mpol+0x1fb/0x550 [ 259.543701][ C3] new_slab+0x23c/0x330 [ 259.546130][ C3] ___slab_alloc+0xd9c/0x1940 [ 259.549013][ C3] __slab_alloc.constprop.0+0x56/0xb0 [ 259.551973][ C3] __kmalloc_noprof+0x2f2/0x510 [ 259.554380][ C3] io_cache_alloc_new+0x45/0xf0 [ 259.556663][ C3] io_msg_alloc_async+0x1c3/0x3a0 [ 259.559158][ C3] io_recvmsg_prep+0x5c0/0xcb0 [ 259.561404][ C3] io_submit_sqes+0x825/0x25d0 [ 259.563767][ C3] __do_sys_io_uring_enter+0xd6a/0x1630 [ 259.566406][ C3] do_syscall_64+0xcd/0x260 [ 259.568575][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.571903][ C3] page last free pid 6020 tgid 6020 stack trace: [ 259.575838][ C3] __free_frozen_pages+0x69d/0xff0 [ 259.579011][ C3] kasan_depopulate_vmalloc_pte+0x63/0x80 [ 259.582542][ C3] __apply_to_page_range+0x5f9/0xd30 [ 259.586656][ C3] kasan_release_vmalloc+0xd1/0xe0 [ 259.589205][ C3] purge_vmap_node+0x1cb/0xa70 [ 259.590873][ C3] __purge_vmap_area_lazy+0x9d1/0xc90 [ 259.592710][ C3] drain_vmap_area_work+0x27/0x40 [ 259.595382][ C3] process_one_work+0x9cc/0x1b70 [ 259.598063][ C3] worker_thread+0x6c8/0xf10 [ 259.602400][ C3] kthread+0x3c2/0x780 [ 259.605076][ C3] ret_from_fork+0x45/0x80 [ 259.608069][ C3] ret_from_fork_asm+0x1a/0x30 [ 259.616241][ C3] [ 259.617868][ C3] Memory state around the buggy address: [ 259.624795][ C3] ffff888046007300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 259.635784][ C3] ffff888046007380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 259.642455][ C3] >ffff888046007400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 259.647224][ C3] ^ [ 259.654818][ C3] ffff888046007480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 259.673976][ C3] ffff888046007500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 259.676623][ C3] ================================================================== [ 259.681218][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 259.694212][ C3] CPU: 3 UID: 0 PID: 9841 Comm: kworker/u32:38 Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(full) [ 259.701638][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 259.707133][ C3] Workqueue: events_unbound toggle_allocation_gate [ 259.716708][ C3] Call Trace: [ 259.720130][ C3] [ 259.721504][ C3] dump_stack_lvl+0x3d/0x1f0 [ 259.723742][ C3] panic+0x71c/0x800 [ 259.725617][ C3] ? __pfx_panic+0x10/0x10 [ 259.727848][ C3] ? __pfx__printk+0x10/0x10 [ 259.736342][ C3] ? end_report+0x4c/0x170 [ 259.740759][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 259.743584][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 259.746420][ C3] check_panic_on_warn+0xab/0xb0 [ 259.753943][ C3] end_report+0x107/0x170 [ 259.756304][ C3] kasan_report+0xee/0x110 [ 259.757943][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 259.761055][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 259.763979][ C3] __kasan_check_byte+0x36/0x50 [ 259.766350][ C3] lock_acquire+0xfc/0x350 [ 259.772100][ C3] ? do_raw_spin_unlock+0x53/0x230 [ 259.775107][ C3] ? .slowpath+0x9/0x18 [ 259.777498][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 259.782569][ C3] ? p9_req_put+0xaf/0x250 [ 259.785195][ C3] p9_req_put+0xaf/0x250 [ 259.787773][ C3] req_done+0x1dc/0x2e0 [ 259.794023][ C3] ? __pfx_req_done+0x10/0x10 [ 259.796307][ C3] ? __pfx_req_done+0x10/0x10 [ 259.799891][ C3] vring_interrupt+0x31b/0x400 [ 259.802630][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 259.805437][ C3] __handle_irq_event_percpu+0x229/0x7d0 [ 259.813228][ C3] handle_irq_event+0xab/0x1e0 [ 259.815804][ C3] handle_edge_irq+0x263/0xd10 [ 259.819515][ C3] __common_interrupt+0xdf/0x250 [ 259.822312][ C3] common_interrupt+0xba/0xe0 [ 259.825045][ C3] [ 259.826600][ C3] [ 259.832393][ C3] asm_common_interrupt+0x26/0x40 [ 259.835104][ C3] RIP: 0010:smp_call_function_many_cond+0x4a5/0x1290 [ 259.841160][ C3] Code: 89 ee e8 5e 12 0c 00 85 ed 74 48 48 8b 44 24 20 49 89 c4 83 e0 07 49 c1 ec 03 48 89 c5 4d 01 f4 83 c5 03 e8 fd 16 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 de 0b 00 00 8b 43 08 31 [ 259.856575][ C3] RSP: 0018:ffffc90003287938 EFLAGS: 00000293 [ 259.861256][ C3] RAX: 0000000000000000 RBX: ffff88806a6415e0 RCX: ffffffff81af2699 [ 259.865808][ C3] RDX: ffff888028070000 RSI: ffffffff81af2673 RDI: 0000000000000005 [ 259.874573][ C3] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 259.880030][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed100d4c82bd [ 259.883881][ C3] R13: 0000000000000001 R14: dffffc0000000000 R15: ffff88806a73b040 [ 259.887780][ C3] ? smp_call_function_many_cond+0x4c9/0x1290 [ 259.895738][ C3] ? smp_call_function_many_cond+0x4a3/0x1290 [ 259.897927][ C3] ? smp_call_function_many_cond+0x4a3/0x1290 [ 259.901565][ C3] ? __pfx_do_sync_core+0x10/0x10 [ 259.903760][ C3] on_each_cpu_cond_mask+0x40/0x90 [ 259.906448][ C3] text_poke_bp_batch+0x657/0x760 [ 259.909971][ C3] ? __kmalloc_node_track_caller_noprof+0xec/0x510 [ 259.914425][ C3] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 259.917705][ C3] ? __jump_label_patch+0x1db/0x400 [ 259.921381][ C3] ? arch_jump_label_transform_queue+0xc0/0x120 [ 259.924605][ C3] ? find_held_lock+0x2b/0x80 [ 259.927222][ C3] text_poke_finish+0x30/0x40 [ 259.930006][ C3] arch_jump_label_transform_apply+0x1c/0x30 [ 259.933375][ C3] jump_label_update+0x376/0x550 [ 259.936095][ C3] static_key_disable_cpuslocked+0x158/0x1c0 [ 259.940490][ C3] static_key_disable+0x1a/0x20 [ 259.943459][ C3] toggle_allocation_gate+0x145/0x280 [ 259.946698][ C3] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 259.955274][ C3] ? rcu_is_watching+0x12/0xc0 [ 259.957816][ C3] process_one_work+0x9cc/0x1b70 [ 259.962383][ C3] ? __pfx_bond_alb_monitor+0x10/0x10 [ 259.965504][ C3] ? __pfx_process_one_work+0x10/0x10 [ 259.972394][ C3] ? assign_work+0x1a0/0x250 [ 259.974682][ C3] worker_thread+0x6c8/0xf10 [ 259.977267][ C3] ? __pfx_worker_thread+0x10/0x10 [ 259.981140][ C3] kthread+0x3c2/0x780 [ 259.983332][ C3] ? __pfx_kthread+0x10/0x10 [ 259.985680][ C3] ? __pfx_kthread+0x10/0x10 [ 259.992849][ C3] ? __pfx_kthread+0x10/0x10 [ 259.995790][ C3] ? __pfx_kthread+0x10/0x10 [ 260.000056][ C3] ? rcu_is_watching+0x12/0xc0 [ 260.002970][ C3] ? __pfx_kthread+0x10/0x10 [ 260.005475][ C3] ret_from_fork+0x45/0x80 [ 260.007905][ C3] ? __pfx_kthread+0x10/0x10 [ 260.014531][ C3] ret_from_fork_asm+0x1a/0x30 [ 260.017332][ C3] [ 260.021249][ C3] Kernel Offset: disabled [ 260.023626][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:35:40 Registers: info registers vcpu 0 CPU#0 RAX=00000000001fdbdb RBX=0000000000000000 RCX=ffffffff8b725439 RDX=0000000000000000 RSI=ffffffff8dbef53e RDI=ffffffff8bf46340 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000001 R9 =ffffed100d4865bd R10=ffff88806a432deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90865410 R15=0000000000000000 RIP=ffffffff8b723ccf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8b2ed70f20 CR3=00000000314e2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558e5eb574 000055558e5ea9f0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558e5d90e0 000055558e5d9050 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03c00302100003b0 03018810000c9003 0e9e598529106cb5 5477cf13e0335b1b ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300100003800401 0000000806060165 bc00080003e00300 100003d003001000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d308000304800402 0102f60030656c69 662f2e01ffffffff ffffffffef080480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 aa00646563697672 65735f6f692e7166 622e6f696b6c6201 ffffffffffffffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01000400019db408 0000040108000801 46aa006465636976 7265735f6f692e71 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 66622e6f696b6c62 01ffffffffffffff ffd3080003048004 020102f60030656c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69662f2e01ffffff ffffffffffef0804 8003001000038004 0100000008060601 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65bc00080003e003 00100003d0030010 0003c00302100003 b003018810000c90 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000272637 RBX=0000000000000001 RCX=ffffffff8b725439 RDX=0000000000000000 RSI=ffffffff8dbef53e RDI=ffffffff8bf46340 RBP=ffffed1003ad1488 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4a65bd R10=ffff88806a532deb R11=0000000000000000 R12=0000000000000001 R13=ffff88801d68a440 R14=ffffffff90865410 R15=0000000000000000 RIP=ffffffff8b723ccf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 000fffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 000fffff 00000000 FS =0000 0000000000000000 000fffff 00000000 GS =0000 ffff8880d6ab3000 000fffff 00000000 LDT=0000 0000000000000000 000fffff 00000000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000564878368908 CR3=000000004c8cc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f11d240f972 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f11d240f97f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f11d240f979 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f11d240f98d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f11d240fa13 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f11d240faf1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f11d30dd100 00007f11d257d440 00007f11d2570004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f11d257d498 00007f11d257d490 00007f11d257d488 00007f11d257d480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f8ce0813382afaed a36b7459ac50f8ab 89d98dff9029682f 5438688d200d5533 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 631640607f2511ad 4fab6d5a44d9ae47 d816cdad61b0961d d5ddde12f66c7ed2 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9b7cc6c9a36a4942 24b418e7bae64c8f 72b38b13be54a7bf c75f1a00e31fb6c0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 df3eb94e6a58e49b 6aee965a6a13fb4d cb063263edc102cd e8de49027850dd88 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1746d995a739c3bc 96f32672b517ce0d 616c4c346d4f1bc6 c4890ef9ce53580d ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000002fab RBX=0000000000000000 RCX=0000000000002f65 RDX=0000000000000601 RSI=000000000000fffe RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc90007af7988 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b71f8a0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007f917200d6c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d6bb3000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000ffff IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000023d8e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000010000 0000000000030000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f917200cf90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f917120f972 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f917120f97f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f917120f979 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f917120f98d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f917120fa13 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f917120faf1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854e01a5 RDI=ffffffff9ae254e0 RBP=ffffffff9ae254a0 RSP=ffffc900006f8768 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000032 R14=ffffffff9ae254a0 R15=ffffffff854e0140 RIP=ffffffff854e01cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cb3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fff3d828f58 CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffda636e450 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f11d240f972 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f11d240f97f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f11d240f979 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f11d240f98d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f11d240fa13 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f11d240faf1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000b8 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000b8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000