last executing test programs: 2m47.263492731s ago: executing program 0 (id=474): syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaa11e49200000001907800000000ffa703ffffff120090780000de33bdb213b15500b5bd1498a9d564a51084"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x4000400) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000580)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r2}, @exit], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0xe0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfbff}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x9, 0x4, 0x4}, {0xfffffffffffffeaf, 0x24, 0x1a, 0x0, 0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x7f, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x546a50a1b8886a0a, 0xa3, 0x20, 0x68}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xff, 0x6, 0xb}}}}}}}]}}, 0x0) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000040)=0x1, 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) write$FUSE_NOTIFY_POLL(r6, &(0x7f0000000340)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r7, 0x11, 0x68, &(0x7f0000003a80)=0x2, 0x4) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f00000013c0)=0x2, 0x4) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$TCFLSH(r3, 0x400455c8, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x5f, @private2={0xfc, 0x2, '\x00', 0xff}, 0x8}, 0x1c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0xfffffd9d) 2m44.37192328s ago: executing program 0 (id=486): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x58, 0x0, 0x0, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}, 0x1, 0xf000}, 0x0) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0xa, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b00010a000000000000001807"], 0x114}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000699100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000001800000005"], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000002840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000011070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) unshare(0x68060200) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x0, 0x25, 0x148, 0x108, 0x60, 0x228, 0x2a8, 0x2a8, 0x228, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0x108, 0x0, {0x200003ae, 0x7f00}, [@inet=@rpfilter={{0x28}, {0x7}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c49a, 'syz0\x00', {0xfffffffffffffffd}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@addrtype={{0x30}, {0x180, 0xe00}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c49a, 'syz0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x320) 2m44.144025245s ago: executing program 0 (id=489): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) (async) syz_emit_ethernet(0x2e, &(0x7f0000000c00)={@broadcast, @random="2ecafcc67af2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000180)={0x80, 0x1, 'client0\x00', 0x1, "896c81dd59ff28d2", "e5dbc741536b0e2fbb12e9338ec8dcb3e07c903fc30e8a11d477e3fb04eb2f74", 0x3, 0x4}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)={0x58, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x29, 0x82}}]}, 0x58}}, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet(0x2, 0x2, 0x0) (async) mkdir(&(0x7f0000000140)='./file0\x00', 0x12) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f00000000c0)='./file0\x00', 0x6400000c) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r8, r7, 0x0) (async) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, &(0x7f0000000000)={0x33, @broadcast, 0x4e23, 0x4, 'lblc\x00', 0x12, 0xbdb6, 0x61}, 0x2c) (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) (async) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000140)) 2m44.073743489s ago: executing program 0 (id=490): mkdir(&(0x7f0000000240)='./file0\x00', 0xa) (async) ioprio_set$uid(0x3, 0x0, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x2080000, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x2, @random="beec136bde83", 'vxcan1\x00'}}, 0x1e) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) (async, rerun: 64) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa2d1170f0d4ddbe090600fe8000000000000000000000000000aafe8000000000000000000000000000aaffff4e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090788000"], 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setresuid(0xee00, 0x0, 0x0) (async) ioprio_set$uid(0x3, 0xee00, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r3, @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x40240c1}, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r5 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = socket$packet(0x11, 0x2, 0x300) bind$packet(r6, &(0x7f00000002c0)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) (async, rerun: 64) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r7, 0x3d786000) (async) r8 = syz_io_uring_setup(0x370f, &(0x7f0000000080)={0x0, 0x87ea, 0x4, 0x12, 0x2}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000440)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000003c0)='./file0\x00', 0x82, 0x80, 0x12345}) io_uring_enter(r8, 0x77c, 0x1, 0xc, 0x0, 0x0) (async) write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001002f00fe88a43de1a400000000000000007d01ff0200000000000000000000000000010000883e"], 0xfdef) (async) syz_emit_ethernet(0x14, &(0x7f0000003500)=ANY=[@ANYBLOB="dfc0188ab3bdcf91105c667c311ff13416d842785427cefe97f7df9519548caa797992501a5d0be649ae0ec8d1ccbde29e0ee47c705a319e625fe29834ba3136fd6609e826886903a155cc55da944013aa556f549cf127c3d65fedeac70cf037cfdae107fd40efd5ba", @ANYBLOB="9fe239e136753f171a58d55df3970878f2e03a2afefcd033d91398bb328ee66061098ca74944a0808db1217b75e056b971301914b9a8b6c5c73f8658cfb12fe681d63e2ce821bd75930e470b658ae3fb759c7caca06963ae45bc75562fbe8cb720b218d81fe46fa52390dc6a178531467b01232d97db25fd0a86f58b8e91b30120e1a960aaf5ce3b47d57372afa8f1fb42e452b41157075a98fca5b095a5323e05eb5c2ea25bc71939dbd79fe66cb5fd16867dc00735bd61b469b4f1cb3b97c6437d5da994a6f4fcb0fd228b37cb07a101577f1ebc8a5769d542f07f1b8f1597a6c1c99e263e33295c67a267981bae2931fa92dea9a4c83da3aceb7b83f4092522a8c9ba44389448913e369eca2e206185b796f07b1b4a7c74a4c1e0477b7af166b513e3f2e6eff8f1271b61bb219f7b9cab7789feec33e6f8c8e7498de194c4fe40ae7b5c3787b193d3cdf3b84392c12b48fb124023f494e5c35a7c5ab1886941240aab43a506c9dddd6e94bcd6d52c67d4e634e31364f91ecbdfc5488b7f5a925e8c92e15b06498651db0df2d495cd74336ca4fabc5b3ac17ff5ff4e265bbe457eeb8f9498ee1abc931138d8f9cc5d3ff1492124fd192e095ee74e023fcf489882c3f0e962daf467919ae52bceb08b380ceeefe3dceeca5168e5c02f22e3f592c336679ed8d09b329c5dc7c3ca4c1100e52ba85e3ec8e6e72bf8b3c3fe97df49222fa8b7eb1d1d6471aa837362892379ae534234d788afa59c257f4dd8f7f12e439934fe6098bbd7a643243f2a14afab98ec104afcce15805a2bbdb787767910ddbe22df6d40cfd7208bbda97acc5bd1ee777d563e3e85f282a888c3d39131a4652932877f3a0eecbb204e13622a7a4a7b4e09a813d9dfdc7599a023a2363735f37b2f798394f2ab404654a59e45f18bac72453a9821ce880daaaabf21ba17a3b36054c5b831ef48088b5b8a3222d15bc12a8bf8f84634d632ea40f764b0ec0f58c9680594a23cbfe6c8fed334864b4abcaf5acb0f60e47a5d1d2877dfcfd06ce16d99e4b11835a0c4db9569201d26dae57848bfa5336998d84cf26df60952fc5c13cd04265701c1becbdf1f78fcad65c6e237de744dd186196376be0b28cda1d757e8e928d339adc8285c4b5579f849ae6156bf56c96efec8265eb355c2ba707536124f7d262b7c22c1c3d866b1a774a2bb67c7a8abe37cc29c0eb2b29fee049aa9bcb6ea86d0c3292172b7e43417e93b55a54dd2fcafb2ae9c68ca8e53912f5e5f41ef970cca06f8d754c2c31ed3e2ad7d7a1bac698cba9289d4353a6343313928cf7dc149b4a1560062ed52e3e6609fc5a077ba4d17b2a384e60c129b63f6666d6d31fec1231245c6a617cc9018c0f68cac7b6a8ec1089fac108a538e19a9d64e91b6d259e735566a0ffd0dac4404d986685540ecd9b595c429bcc4df63a5c5740ce1aebff0fda91025ec39534844467d38ca1d546160a80dcd1eefc1953029b7cc9ab868b46321ff8e446e9660da8fc63bc5d7f225a29288577e2f4b0cbc7f16ff2f90f2fc0a5b90ea290066c29f9b1d955117630d5775d585c17046fbc9a44b7253e4c50f5527450f703bd5199d58dddd933e9a2c6de9a96e4aaed6635b82705406e68ed456f6d2dc93de3dff291b6eaa3ebeac8d2532b58edc383d2fb0a1d05ce75c7c41ad4650334e02953432a9b77e0dbc463c3749dec4357f84874c89d14d20b2c839d2d3f19848378ce6df447015810ade9e99abe6ea494e03c60c3c2606300f5d39014ff352afcf4419c61c1b8929d7a0e1f4e0002a31b8254ff7642e4b20863034e241f14e5bde963b24d0516c0428e39522e7ea07899c2663a00eaf83cc6c5a144828a7e001a53a0c51e08482dbfa9ce312804a776e143f03424728abedde0c93ea7d27f2779c5525f134c8d6a562f98ad4574efde03252631fb36822bba81925cb2354f5febe1eacc2acdc29e7a0b64c29b89d041a990976f0f540c605677847f49545f4c4c4a71f11bcd92faacf548c9c7c5486315599ad75602ebe2864ea29afe6f58ef48ddfb2d26c099705933ff804495402e5edf09acfdb666d69948c0a6558bc95a96a966dc2a12f1f1f1c627be86f3cbb269cc8bc443f8660ad8ed5e5967000a8ad6821e67389b642b29a9c18cb8b23298c12127553eeec994a738c4137f542ee7c149e85efbd05a6056e9de2d76627fd61f7428ca1923e826bc64cf6dae98e01d41ab4e65a2dba2bee5a2d62b3f539313490bee4e39f723a5434e2d2397c9047841a5844dcc8af7eecd9b7c128aea6e4b757fffbeb6541aa846452f634e57c3a37347b96aa9deb333f0f0a79ced9f173e4c0534ed5797876e15055196d2847e273b0f9e406b630069ef88d1ad97decc4230fd0639f27bc08bf9ccc5fe82d667d869818384892f57fd58c72429f856bb7fe3a88a9561dde5c7bcaa3951f4a58c53ebb068df2adb8faac03c0f9f30fc706447fcdf1f032f53505aef0b871bb4bcf9a649cf1d8b3e9c41f5a1bfa174cffdce0ea98d28743e69e9e2edb495e1cbe712b2247441f0a6cf95591afc38b16ba776d009ceb0fc10a2558cea770b6c8ff6f34eede21d112a8c08d4964e5a1c0d3d84fd7e0c1238033eb3b4b942fb1a647e80078a98401ff289b12f416d7b23aa7c1ffaa6a50a90a14d0041c0d990219fd02c24d9224cb3cd245d268fa74de1eed06d75d981ba45920b79f992453a175b9f3181fcca42f59fb53717e33679ab79fb6f6b3b33c2b2f621de4aa8b7797016f64617935c19768fe616ab927a1b7372a47b0d9fb37ebb1b5b028efb13e65f47a69751ce74a553347c6fd3217cc4ebc4e735e4832f6823374be61244ab48e39038bcaeb9fdeaec962a0055a3a8d34c6417c2533111152067112290984cae10ddaf469c09c6a3e91dbeb31de27df93b31fa35f1cbc171f8577d58de19c151c47ab63e1046e5e8c3ee02a42bb4a90dff284250cfdaa23605772554e622ffb56a269814171be544ad9c3e586d8635fbad4d0d4fb12eefd73ed98730e9e364dccf42823d59e2f590daeb01a3ea2ffe5002a175efa04d934b609bf3d0c1e5ed55e6c20c2218c44f2485f850e12cdfcd748dba7ee83d704af44a194508853516de42afe24d04ff79005dbad4ef69b6cb4253ee527bb60742127d81282c6bdaf5b873472617b2b70a6d4d6e4f4c032687f1756675f29c96bbcc3cea92916524c84f4959fc124582c38adb33912b7ee3e24327bfd269b9b4e3e066bd1213dd2ba23ba9b44c8143d6b5aa44785479e9b4b23504cc4d82ff26af3871ded56b6d573462aec785d5f65a9afc5d87f23d94edb9024e34defe3aef65e918274e6d83274bb4b2bc21e8aa8ee82d64a1c91af695d4647567e496bd9434598317861146121c27c7846fbf643570e07e0e6ed05be62c164876c962471893e1a18d309e9e613b5aeff9a4c4cd826aa465fc94c877104009631457099014d67737c4bc05aa6fcad7e8fc4a8662d5b05ae6d3da6459e2b03a88becfece3a9fa09a1aabb16b04356fce2341a8744e85405df91ee4ebc0328e7a743b49bf13471500f48e848ee4850af5d149807ef66e9b16bf211ba74ab9e63c944c9574d89558670fd01dbd4366d526a2df5ea0d05ce6a604cd3cdb6473715ae4e2f4a21074570b59f8ad3650d9b018cab63af5163dc026cee3eb89cea1c103785fd6a5915c2ce23a97e14824026ac9286f18db828da528f322794013c0a8828da7e7519bba4189485d469a34343e54214be80a084381d7731daa403b41b5759b1ca518b35a76937fb574cfa1d47e0910ea4d9a93d0167cfb4216c53376f3a73225a649f7fb8702b8b418afb66c5ba2ffb286e1585698413661d199be06b7824e63bfbb552acef247e14c457cecf7f8d0afc19cfd94ad4e4b34ea546ae93599e6813bad4e823c4a1d372b03499690fb9a375cd5030690758503a1528abccee59dbfcc5782a6b33daa10aa6ef9b79e113bb81ce46c689a33145ec7b929f88c140cc99bbf14f184beb98794f98ac0faa6cc465e2012b6492ef04eb9e09fd0f007802ae00461d3018ed0f8fa3dd5529657a23a842fd2c90adf1c4c4fd0864835e5c74e0ab329c19410f9155f4bfb377a44c656bc24bdf55f890e8ffbe1e658858b18fa7adb74fcca9fc5cad47fb3816ba1edf87b0bc263204f12a38fc2ab31f96256ffcefc91f26198f1e11b4839efc21e6951af4f387ad2d11f4964810dfdb3b121481e5f259eeec9ba987533bb80822fc84a5a03126331aed935e60ba83d507f6567d433253cafc522551dd0681f97353333ce13d3f9c89b136abe9c07492cc1400ad15e236b790cc0465e484f383b5da94525f9b38755207a51554899fd5f2afd398757840c03b4dfc6c9cbee99c7af55b43ee945554f7ddd9d72552b183b6fe11605726827b63ebd74dd9d66a9c6c15000a9d772fce9c0b0eb9f44f7bc8f2aa337af5cc42a311ab0390a92365c6ed7c426eedb100f6898de35f0c4bf6c925f27bbf8cc991501b881bcc64cbb97704f4253f0911834229982b053a2207485e400c49e0c68ee455ae7f4ebb3c515fb21d16fdb5089361a55bb6a222f09e17150c551a34b0a7a031a2e65e499b64b51d5fd095327a2a77562e764d8b17570f61e4b6e620d5e89f7b1644d0488df2746606ab20267043bb9aa08381a51475bc7ca5bda7dc50f5afc81502b1a750863ec2b74c6ec29b4bbacaf6e92df1c4f06ba8ac169017b24827a9c01c797d13491f530d9bfd585eb315b4fe9c91b34b52432ad3190628d6c819f6db408a1bcebbb13d6a63eec0978f89d3c415fc6685a348f63811d582b7d253a94d05a5a98fc95cdcae3bf1c1bc45f5e467877f3338ac2707ba160e603cd94ce2120722f7b85b9135fa685dc0b83e244f1073a9c651cac9ef07a2357516419c3f2917ded28f5b7cc271e85f471d672ce61a736c471fbfafac26fdc2204111e46146a1ab61d66832638a782766041690312a92a47caf13bd76ad077e5c8236d463a2cbbe48b32e011e417c77924707ed90a54f410afbad8899d6038af935966d4aa8c238153400a79311b0a29b640e12c1bcab5ad2773bc150d74932611c7a3856747e4c59a9dd23583d41b6c13df563153d1e8d23f0f85115b98adf3fbc19bf67ea4079a83544d5a66e1ffa43586341db3d773a4a906177d54e1779c0f74f1055d82a0a816a0959239a9a6170bb3d246b5e526a2f4955cbfca036a17a028c8133d0c4243e2cd5271c630df4a2b581d12abbf93c75a94c029f575acf8443339200165e4d8020fe26eeef123faca4e4dda73de31c1e5e484e16f5fcee1b89b078c7f9bb1c8face6ad2bfe95eb8321479b625495bdf758af8e34df49f4e1076422184ce70770261618b19bec009fdfd4506c9ea805d0400b8c512a9b5d3e113b6d8c0fe3fa7d5c5b5f95b0c3b8839c974bb8f15ae538b35b15b3f83be56333043fc5b81af4e6473c5911217c7bac8b83c056ccb1f953a0a93f081f13729ca9dd60796a0d670b26656e67b0e9a15f7377a46ffb7be58e2de1c18b5405ec5b49083b56ddef1e8ac0cf242f11bcda051cb21a173f062bcf71c5b1f53a2aa223b8d2d6f487c7cf7d7858b8d998ad9ef03d28317fd072777f906ffffa357926db6acf78bc7b3604fb215a896d03361b5713dd07562602c4c32379e46ef0c494f78f088e2aacd38cabe7bb24fc52f7ce9a617fa4d05f68ee553bd3fe6731fcf6286c7e29bd79779d7642f9d5789d3d0aad1f2ba3329bf6bd593af0051053d16126d17c038", @ANYBLOB="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", @ANYRESOCT=r4, @ANYRESHEX=r1, @ANYRES64=r6], 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) (async) socketpair(0x0, 0x80000, 0x0, &(0x7f00000001c0)) umount2(&(0x7f0000000040)='./file0\x00', 0xc) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) 2m43.982870715s ago: executing program 0 (id=491): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r1, 0x38, 0x1) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000001c0)=[{&(0x7f00000006c0)='=Ers8', 0x5}], 0x1, 0x4) write(r3, &(0x7f0000001100)="94", 0x1) tee(r2, r5, 0xaf5, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001cc0)="e3331cfd74f6da55af073a6e44f5af0d8151f7738a9bc54497") r7 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r7, &(0x7f0000000b40)=[{{0x0, 0x38, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2001, 0x0) ppoll(&(0x7f0000000080)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r6, 0x4161, 0x0) syz_open_dev$sg(0xfffffffffffffffd, 0x53, 0x10000) 2m43.882067018s ago: executing program 0 (id=493): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ff", 0x66}], 0x1}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 2m38.104016083s ago: executing program 32 (id=529): r0 = syz_open_dev$usbmon(&(0x7f0000000140), 0x4, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e0000000000000000000000000040000000000000000000000000000000000000000000380005"], 0x78) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000440)=0x2) close_range(r2, 0xffffffffffffffff, 0x0) 2m28.840388936s ago: executing program 33 (id=493): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ff", 0x66}], 0x1}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 2m24.032620859s ago: executing program 4 (id=601): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="6c08e3d80e8ae6d7d69dede1087b34fa6197289f9201358689e97b2d837f54c38219164d60535f2e1080c6058e945ca0d35ee27db1518d785e35f187d2f899141943ccf0cb97d4e61268a42df53a00314264b407d18fd1aa11e2", 0x5a) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff01"], 0x58}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="6c08e3d80e8ae6d7d69dede1087b34fa6197289f9201358689e97b2d837f54c38219164d60535f2e1080c6058e945ca0d35ee27db1518d785e35f187d2f899141943ccf0cb97d4e61268a42df53a00314264b407d18fd1aa11e2", 0x5a) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff01"], 0x58}}, 0x0) (async) 2m23.843698907s ago: executing program 4 (id=604): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00002d7000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000b36000/0x12000)=nil, &(0x7f0000841000/0x4000)=nil, 0x12000}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UFFDIO_CONTINUE(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) mprotect(&(0x7f0000bc5000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_setup(0x6864, &(0x7f00000003c0)={0x0, 0x4cca, 0x2000}, &(0x7f0000000440), &(0x7f0000000040)) 2m22.852778835s ago: executing program 4 (id=615): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x800, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYRES16=r4], 0x30}], 0x1, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x7ff, 0x80}) r8 = syz_io_uring_setup(0x3e, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2, 0x338, 0x0, r6}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r11 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000009441"]) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}) io_uring_enter(r8, 0x92, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x3) ioctl$TIOCSTI(r6, 0x5412, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000012800c0001006d6163766c616e20070002800800050000000000", @ANYRES32=r1, @ANYBLOB="1c002b80080003000e00000008000800", @ANYRES32=r6, @ANYBLOB="08000300060000000500110001000000"], 0x60}}, 0x0) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000200)={r12, @dev={0xac, 0x14, 0x14, 0x3c}, @rand_addr=0x64010101}, 0xc) 2m22.5234428s ago: executing program 4 (id=618): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x1}}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="e0", 0x1}, {&(0x7f00000000c0)="1d49eea17c34d1571e5fd8a06a2aa1fa1e3552e43af35ead8d46c37d99b7868ef4b52fc13d743fddb817a3566ce65558203f2226288f7b848f5c8b8e17da5b7328c8c1a6", 0x44}], 0x2}, 0x0) 2m22.27053465s ago: executing program 4 (id=620): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB="2c726f6f746d6f64c127a8e9303030303030304e3030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1}, 0x50) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresgid(0x0, 0xffffffffffffffff, r3) setregid(0xffffffffffffffff, r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000004d80)={&(0x7f0000004d00)={0x30, 0x0, 0xb, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_NAME={0xc, 0x1, 'ethtool\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000088}, 0x20000010) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, r1, {0x5, 0x0, 0x4, 0x1, 0xc, 0x7, {0x2, 0x5, 0x7, 0x1, 0x2, 0x5, 0x8, 0xfff, 0x7, 0x4000, 0x1, 0xffffffffffffffff, r3, 0x4, 0x9}}}, 0x90) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, 0x0) 2m21.729076296s ago: executing program 4 (id=625): socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) (async) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getnexthop={0x18, 0x76, 0xb0d, 0x4000, 0x0, {0x3}}, 0x18}}, 0x0) r5 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r8, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}}) io_uring_enter(r5, 0x5b43, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000017010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000100)=0xff, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000100)=0xff, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x300) 2m6.710918803s ago: executing program 34 (id=625): socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) (async) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getnexthop={0x18, 0x76, 0xb0d, 0x4000, 0x0, {0x3}}, 0x18}}, 0x0) r5 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r8, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}}) io_uring_enter(r5, 0x5b43, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000017010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000100)=0xff, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000100)=0xff, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x300) 1m35.914518953s ago: executing program 2 (id=1010): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async, rerun: 64) r1 = socket(0x40000000015, 0x5, 0x0) (rerun: 64) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000000)=0x5, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) (async) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)={0x0, 0x4, [{r0, 0x0, 0x1000, 0xfffffffffffff000}, {r0, 0x0, 0x100000000, 0xfffffffff0000000}, {r0, 0x0, 0x100000000, 0x10000}, {r0, 0x0, 0x10000, 0x2000}]}) (async) recvmmsg(r1, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/127, 0x7f}}], 0x1, 0x0, 0x0) (async, rerun: 32) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 32) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000340)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x1, 0x4, 0x1, 0x5, 0x9], 0x6, &(0x7f0000000140)=[{}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) (async, rerun: 32) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) (rerun: 32) setsockopt$inet6_int(r2, 0x29, 0x1d, &(0x7f0000000040), 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000040)={'vxcan1\x00', 0x400}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r5], 0x20}}, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) (async) remap_file_pages(&(0x7f0000650000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x800) (async, rerun: 32) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) (rerun: 32) 1m35.792682112s ago: executing program 2 (id=1011): r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=r4, @ANYBLOB="8345050000000000240012800900010069706970000000001400028006000f000300000008000300ac"], 0xfff9}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty}}}], 0x20}}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r6, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$RNDZAPENTCNT(r7, 0x5204, &(0x7f0000000440)=0x5abf) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[r6, r5], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1, 0x4, 0x5}) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f00000001c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_open_dev$dri(&(0x7f0000000000), 0xab, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f0000000200)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x56, 0x0, 0x0) r12 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r12, 0x107, 0x8, &(0x7f00000000c0), 0x4) r13 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) 1m35.028670139s ago: executing program 2 (id=1020): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560f, &(0x7f0000000000)={0x1, 0x1, 0x1d, 0x1a, 0x1, 0x0}) ioctl$TCFLSH(r2, 0x40384708, 0x20000000) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x80, 0x800, 0x7f, 0x3}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x48, r3, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vxcan1\x00'}]}, 0x48}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560f, &(0x7f0000000000)={0x1, 0x1, 0x1d, 0x1a, 0x1, 0x0}) (async) ioctl$TCFLSH(r2, 0x40384708, 0x20000000) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x80, 0x800, 0x7f, 0x3}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x48, r3, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vxcan1\x00'}]}, 0x48}}, 0x0) (async) 1m33.792483485s ago: executing program 2 (id=1023): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newnexthop={0x2c, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x14, 0x2, [{0x0, 0x1}, {}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1m33.728900623s ago: executing program 2 (id=1025): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000002800000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa000000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m33.382754199s ago: executing program 2 (id=1030): r0 = socket(0x2a, 0x2, 0x0) (async) ioprio_set$pid(0x2, 0x0, 0x2007) ioprio_get$pid(0x2, 0x0) (async, rerun: 64) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (rerun: 64) open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendto$phonet(r0, &(0x7f0000000040)="ee9769478f6de5b222adecc6bf1a94ab68aef2d79bff80950994aeb7d31f2c2efce8138b5e95e49a94cbfe7de52505", 0x2f, 0x4000800, &(0x7f0000000140)={0x23, 0x8, 0x6, 0x1}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002e0001"], 0x24}}, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) (async) r5 = io_uring_setup(0xad5, &(0x7f0000000100)) close(r5) (async) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x10) (async) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) (async, rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0xe, 0x4, 0x328, 0xffffffff, 0x0, 0x1d8, 0x98, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f0000000380), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2d}, @multicast2, 0xff000000, 0xffffffff, 'dvmrp0\x00', 'pim6reg0\x00', {}, {0xff}, 0x6c, 0x2, 0x19}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x100, 0x140, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xa, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}, {[0xffffffff, 0xff, 0x0, 0xffffffff], 0x7, 0x1, {0x1}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xf7, 0x12, {0x83e3}}}}, {{@ip={@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x38}, 0x0, 0xff000000, 'veth0_to_batadv\x00', 'bridge_slave_1\x00', {0xff}, {0xff}, 0x2, 0x5, 0xa}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x6, 0x6, {0x81}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) (async, rerun: 32) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000280)=0x2b, 0x4) (async) read$char_usb(r4, &(0x7f0000000080)=""/139, 0xfdef) (async) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) (async, rerun: 64) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async, rerun: 64) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) symlink(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000440)='./file0\x00') (async) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1m33.362740998s ago: executing program 35 (id=1030): r0 = socket(0x2a, 0x2, 0x0) (async) ioprio_set$pid(0x2, 0x0, 0x2007) ioprio_get$pid(0x2, 0x0) (async, rerun: 64) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (rerun: 64) open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendto$phonet(r0, &(0x7f0000000040)="ee9769478f6de5b222adecc6bf1a94ab68aef2d79bff80950994aeb7d31f2c2efce8138b5e95e49a94cbfe7de52505", 0x2f, 0x4000800, &(0x7f0000000140)={0x23, 0x8, 0x6, 0x1}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002e0001"], 0x24}}, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) (async) r5 = io_uring_setup(0xad5, &(0x7f0000000100)) close(r5) (async) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x10) (async) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) (async, rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0xe, 0x4, 0x328, 0xffffffff, 0x0, 0x1d8, 0x98, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f0000000380), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2d}, @multicast2, 0xff000000, 0xffffffff, 'dvmrp0\x00', 'pim6reg0\x00', {}, {0xff}, 0x6c, 0x2, 0x19}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x100, 0x140, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xa, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}, {[0xffffffff, 0xff, 0x0, 0xffffffff], 0x7, 0x1, {0x1}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xf7, 0x12, {0x83e3}}}}, {{@ip={@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x38}, 0x0, 0xff000000, 'veth0_to_batadv\x00', 'bridge_slave_1\x00', {0xff}, {0xff}, 0x2, 0x5, 0xa}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x6, 0x6, {0x81}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) (async, rerun: 32) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000280)=0x2b, 0x4) (async) read$char_usb(r4, &(0x7f0000000080)=""/139, 0xfdef) (async) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) (async, rerun: 64) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async, rerun: 64) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) symlink(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000440)='./file0\x00') (async) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1m26.639854372s ago: executing program 3 (id=1084): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8a000, 0x0) syz_emit_ethernet(0xfe53, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0xb, 0x3, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast2}}}}}}, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x5000, 0x7e6f2ec1, 0x0, 0xeffffdfc, 0x0, [{0x0, 0x0, 0xc, '\x00', 0xff}, {0x19, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x3, 0x0, '\x00', 0xfb}, {0x0, 0x3, 0x7f}, {0xb, 0x0, 0x0, '\x00', 0xfd}, {0x0, 0x0, 0x6, '\x00', 0x4}, {0x4, 0x80, 0xfd, '\x00', 0x3}, {0x3a, 0x2, 0x0, '\x00', 0xa}, {0x0, 0xbc}, {0x0, 0x0, 0x0, '\x00', 0xff}, {}, {0x0, 0x10, 0x8}, {0x0, 0x0, 0xff, '\x00', 0xfc}, {0x0, 0x4}, {0x2, 0xfe, 0x0, '\x00', 0x3}, {0x4, 0x81}, {0x7, 0x0, 0x8, '\x00', 0xfc}, {0x1, 0x0, 0x3, '\x00', 0x1}, {0x0, 0x0, 0x8}, {0xfd, 0x4}, {0x40, 0x1, 0x0, '\x00', 0xff}, {0x0, 0x40}, {0xec, 0x0, 0x76}, {0x6, 0x6, 0x20, '\x00', 0x2}]}}) r7 = dup(r2) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f5f4000040"]) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5387, &(0x7f00000001c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000005d77690000000000000000000000006112400000000000950000000000002367b0f32104212b6dcfdbfa3a066fc423076a3067776b0b8a48a548a01a93a4001000000dfbe2767334c112eb"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r8 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r8, &(0x7f0000000080)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) writev(r8, &(0x7f0000000880)=[{&(0x7f0000000340)="64e5fa06", 0x4}, {0x0, 0x3f}], 0x2) socket$xdp(0x2c, 0x3, 0x0) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000180)=[0x1], 0x0, 0x0) 1m26.165412107s ago: executing program 3 (id=1085): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000040), 0x2000011a) (async) write$binfmt_misc(r1, &(0x7f0000000040), 0x2000011a) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2102, 0x0) ioctl$PTP_EXTTS_REQUEST2(r2, 0xc4c03d12, &(0x7f0000000040)={0x5, 0x4}) (async) ioctl$PTP_EXTTS_REQUEST2(r2, 0xc4c03d12, &(0x7f0000000040)={0x5, 0x4}) splice(r1, 0x0, r0, 0x0, 0x4ff9c, 0x0) 1m25.972211482s ago: executing program 3 (id=1087): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x2, 0x4, 0x0, 0x2000, &(0x7f0000a58000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYBLOB="4984e852443d3da7cb1f36f65dc0d536b596e4fc5fe9164f8937de588eb774f3a73103e7b3d5d9315d19f6b8f378c37e3e46b9ad23b1cb74051f23be12b6bad321d6015f37572a27583b49dd241feb502574e68f2f65124f898db16edbe630236e40903d696ab12804771d4295b49ae2", @ANYRES8=r1, @ANYRES32=0x0]) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) clock_gettime(0xa, &(0x7f0000000040)) 1m25.812118947s ago: executing program 3 (id=1090): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x4040850) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) close_range(r4, r3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x3, 0x0, 0x200}, 0x9, 0x1, 0x1, 0x8, 0x101, 0x0, 0x0, 0x17, 0x5, 0x0, {0x5, 0x0, 0x0, 0x20}}}}]}, 0x78}}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x2805011, 0x0) mount$bind(0x0, &(0x7f0000000400)='./file0/../file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev}}}]}]}, 0x44}}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d82400002800"], 0x24d8}], 0x1}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x24, r6, 0x300, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x3}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008041}, 0x24000000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000480)={'gre0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x7800, 0x80, 0x6, 0x100, {{0x5, 0x4, 0x3, 0x3c, 0x14, 0x65, 0x0, 0xc4, 0x2f, 0x0, @broadcast, @loopback}}}}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000e000000200000000000000000000000000000000000000000000000000000000000007bd000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000020000000000000002160000615badc47c4f19b643cc5966ab2b0300000000ffffffffffffffff00000000000000000000ff0f000000000000000000000000000080ffffffff00fffffffffff8c77c033dad8aa6"], 0xc4}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) fcntl$lock(r9, 0x25, &(0x7f0000000140)={0x2, 0x0, 0x1001}) ioctl$SNDRV_PCM_IOCTL_UNLINK(r9, 0x4161, 0x0) 1m25.427838937s ago: executing program 3 (id=1091): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x20, 0x0, 0x0, 0x2, 0x0, @local, @broadcast}, @timestamp_reply={0x11, 0xe0}}}}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x44, 0x11, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x6, 0x0, 0x1, {0x4, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x0, 0x0, 0x123e}, {0x8}, {0x8}]}}]}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@delqdisc={0x34, 0x25, 0x8, 0x5, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffe0}, {0x8, 0x2}, {0xb}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x200000}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x81}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x60000000) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@delqdisc={0x34, 0x25, 0x8, 0x5, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffe0}, {0x8, 0x2}, {0xb}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x200000}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x81}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x60000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x5) (async) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x5) ioctl$TCFLSH(r7, 0x8910, 0x20001114) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65733d71b74c"]) lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x1, 0x0) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r6}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r9, 0xc0a85352, &(0x7f0000000200)={{0x80}, 'port0\x00'}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) 1m25.273035488s ago: executing program 3 (id=1093): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r3 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000399000/0x1000)=nil, 0x1000, 0x17) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0500000000f7ffffff000600000008000300", @ANYRES32=r8, @ANYBLOB="0800050003"], 0x24}}, 0x0) 1m25.255440931s ago: executing program 36 (id=1093): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r3 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000399000/0x1000)=nil, 0x1000, 0x17) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0500000000f7ffffff000600000008000300", @ANYRES32=r8, @ANYBLOB="0800050003"], 0x24}}, 0x0) 1m8.753038199s ago: executing program 6 (id=1259): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000000000000000009600a50500000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r1) ioctl$int_out(r0, 0x5462, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r1, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\\ \x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000a3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000002c0)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x4}}, 0x30) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$vsock_stream(r6, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @host}, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0xff, 0x0, 0x0, 0x0, 0x1}}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r10 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r10, 0x7, 0xffffffffffffffff, 0x0) r11 = openat$cgroup_ro(r9, &(0x7f0000000080)='cgroup.controllers\x00', 0x300, 0x0) preadv(r11, &(0x7f0000000440)=[{&(0x7f0000000300)=""/162, 0xa2}], 0x1, 0x0, 0x0) setsockopt$MRT_DEL_MFC(r11, 0x0, 0xcd, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "207bd5320a33615098832e4eec4e85b0a1dd45bc7baa8bc05ea6d169361ba225", 0x8, 0x10, 0xfffffff8, 0x5}, 0x3c) 1m7.811821851s ago: executing program 6 (id=1271): r0 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) r1 = dup(r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012142, 0x0) r3 = fanotify_init(0x4, 0x0) fanotify_mark(r3, 0x1, 0x40000033, r1, 0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/127, 0x7f, 0x20, &(0x7f00000000c0)=@file={0x92e4c0d1e163e335, './file0\x00'}, 0x6e) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1m7.448655653s ago: executing program 6 (id=1278): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x4], [0x0, 0x0, 0x0, 0xffffffff]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r6}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv4_newroute={0x24, 0x18, 0x1, 0x0, 0xf0ffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x1}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) 1m7.222589608s ago: executing program 6 (id=1280): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="00000000000d0000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa000000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m7.132767462s ago: executing program 6 (id=1282): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000bc0)="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", 0x106}, {&(0x7f0000001540)="b3da23cbcecb0b0107a4", 0xa}, {&(0x7f0000000380)="08d69fe50cd7a79471d8419b0bb9ae9b86ca44a80d0bd986922f24a62dd8eec5a0b561b310cdaa32d1cf3a8aa7e804b357ae5dd9eeb928195a18529d312903a94064febfa8ccfc631a0cded488fa8ca30ab8250663c2b424cf00c0ae599a053846d0c7bc4324a699599efa4247815768b265c64d7e507b199740ee2c5c866d45912ca4c74e981225bb7bf5103e3047677b7dba79cb4e42df4d03db5290dd48df48fe2633ca3e794e816027cbb90ea64270e1dd5875f5f9481cef004ef7", 0xbd}, {&(0x7f0000000480)="a55aa03043568c5299f7f1be2e8b3b64f2950d76ab45834ab4025fbddf2d7556627857a2bd56b6fd6e406856f516c566979c35109f8bca2dcd2cbf657587104f273c301efeb74f99da56e2892bf6138e60ea884ea0c93d254514", 0x5a}], 0x4}}], 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) linkat(r1, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) 1m6.222974354s ago: executing program 6 (id=1293): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001680)={0x18, 0x3a, 0x229, 0x0, 0x0, {0xa}, [@typed={0x4}]}, 0x18}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001080)={0x3c, r8, 0x15, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01003cbe1d3200000000000000003a07000000000300", @ANYRES32=r9, @ANYBLOB="04005b00"], 0x20}}, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d00000000000000000200000000000006000000000600150001000000180016"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r11, &(0x7f0000000000), 0x400000000000235, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="05005b"], 0x24}}, 0x0) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) 1m5.484841744s ago: executing program 37 (id=1293): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001680)={0x18, 0x3a, 0x229, 0x0, 0x0, {0xa}, [@typed={0x4}]}, 0x18}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001080)={0x3c, r8, 0x15, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01003cbe1d3200000000000000003a07000000000300", @ANYRES32=r9, @ANYBLOB="04005b00"], 0x20}}, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d00000000000000000200000000000006000000000600150001000000180016"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r11, &(0x7f0000000000), 0x400000000000235, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="05005b"], 0x24}}, 0x0) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) 58.163038831s ago: executing program 8 (id=1355): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f404b1c91166001b60d003e0f01c80fc71dba4100b016eee3e726fbe74bf2ab6766c7442400030000006766c7442402000000006766c744240600000000670f011424", 0x43}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000440)={0x1, 0x0, [{0x1, 0x4, 0x6, 0xffffffff, 0x1, 0xf, 0xf}]}) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f00000001c0)={0x74, 0x0, 0x40}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioperm(0x0, 0x1, 0x8) (async) request_key(0x0, 0x0, 0x0, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000840)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000800020001000000080001"], 0x1a8}}, 0x0) 57.951992933s ago: executing program 8 (id=1358): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000780)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) syz_emit_ethernet(0x38, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x16, 0x0, @gue={{0x1, 0x0, 0x3, 0x80, 0x0, @void}, "71be7cdbccd2bbb1a5f6"}}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) 57.852708339s ago: executing program 8 (id=1360): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) shutdown(r0, 0x1) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000000)="c7c230", 0x3, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) syz_io_uring_setup(0x4bf5, &(0x7f0000000040)={0x0, 0xb26a, 0x10, 0x2, 0x5, 0x0, r2}, &(0x7f00000000c0), &(0x7f0000000100)) openat(r2, &(0x7f0000000140)='./file0\x00', 0x101000, 0x4) 57.742118491s ago: executing program 8 (id=1362): syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1, 0x0, 0xff94}, 0x20004084) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x8}, {0x3fe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x40, 0x0, 0x0, 0x0, 0x40}], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_io_uring_setup(0x629f, &(0x7f00000002c0)={0x0, 0x1, 0x100, 0x2, 0x8000004}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x6256, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000001fc0)=""/184, 0x20002078) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x2066016}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 57.209565467s ago: executing program 8 (id=1365): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r2, r1, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000340)=""/157, 0x9d}], 0x1}, 0xfffffffc}], 0x1, 0x142, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r4, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r6, 0x3) r7 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r7, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(r7, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[{0x10, 0x10d, 0x4}], 0x10}}], 0x2, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4$tipc(r4, &(0x7f0000000040), &(0x7f0000000180)=0x10, 0x0) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000400)=0x2, 0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=@allocspi={0xf8, 0x1c, 0x1, 0x0, 0x0, {{{@in6=@rand_addr=' \x01\x00', @in6=@private2={0xfc, 0x2, '\x00', 0xff}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in6=@mcast1, 0x0, 0x33}, @in=@private, {0x3, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x100000000, 0x3ff}, {}, 0x70bd27, 0x3504, 0xa}, 0x0, 0x5dfe}}, 0xf8}}, 0x20000000) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x5) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000100)) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000001c0)={0x1fe, 0x2, 0x5000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 56.961786974s ago: executing program 8 (id=1367): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x6, 0x81, 0x5, 0x2, 0x0, 0x70bd27, 0x25dfdbfe}, 0x10}}, 0x44040) io_setup(0x80000000, &(0x7f0000000540)) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x6, 0x81, 0x5, 0x2, 0x0, 0x70bd27, 0x25dfdbfe}, 0x10}}, 0x44040) (async) io_setup(0x80000000, &(0x7f0000000540)) (async) 56.902987385s ago: executing program 38 (id=1367): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x6, 0x81, 0x5, 0x2, 0x0, 0x70bd27, 0x25dfdbfe}, 0x10}}, 0x44040) io_setup(0x80000000, &(0x7f0000000540)) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x6, 0x81, 0x5, 0x2, 0x0, 0x70bd27, 0x25dfdbfe}, 0x10}}, 0x44040) (async) io_setup(0x80000000, &(0x7f0000000540)) (async) 2.629264907s ago: executing program 7 (id=1772): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r2 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x2) ftruncate(r2, 0xffff) r3 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x3ae}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}) io_uring_enter(r3, 0x92, 0x0, 0x0, 0x0, 0x0) fcntl$addseals(r2, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x1000}) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r8}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) 2.511636475s ago: executing program 7 (id=1774): r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0xc95, 0x0, 0x0, 0x900}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r3}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$BLKROSET(r4, 0x125d, &(0x7f0000000080)=0xc) getsockopt$inet_int(r1, 0x0, 0x13, 0x0, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc4c85513, &(0x7f0000000040)={0xb, 0x2}) creat(&(0x7f0000000140)='./file0\x00', 0x0) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000), &(0x7f00000000c0)=@v2={0x6, 0x3, 0x0, 0x0, 0x1, 'b'}, 0xa, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2010008, 0x0) 1.5816465s ago: executing program 7 (id=1781): timer_create(0x2, &(0x7f0000000000)={0x0, 0xe, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) (async) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x3, 0x80, 0x1}) timer_settime(r0, 0x1, &(0x7f0000000200)={{0x77359400}}, 0x0) 1.492068517s ago: executing program 9 (id=1783): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000003fb702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa000000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.412151027s ago: executing program 7 (id=1784): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001e004000"/20], 0x14}}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {r3, r4}}, './file0\x00'}) chown(&(0x7f0000000140)='./file0\x00', r5, r4) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 1.407937405s ago: executing program 9 (id=1785): r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000400), 0x887dab077f141882, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1800000014140702"], 0x18}}, 0x4010010) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x3, 0x400) shutdown(r0, 0x0) write$selinux_context(r0, &(0x7f0000000000)='system_u:object_r:initctl_t:s0\x00', 0x1f) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x61, 0x2, @scatter={0x4, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/63, 0x3f}, {&(0x7f00000000c0)=""/175, 0xaf}, {&(0x7f0000000180)=""/52, 0x34}, {&(0x7f00000001c0)=""/8, 0x8}]}, &(0x7f0000000240)="54d3aa4712298a0f84c9fd194b6109c63b140454204aea123e40793b12550095ef44a93f609153f7bc5ced41a4fb09535051735e3faf10b7c8d26e928cfa5ccbccb7af3094b2a1ad2cfe95844cc6ce5546552a84ea9da162228c2f4faac87c21df", &(0x7f0000000440)=""/4096, 0x5f9, 0x5, 0x2, &(0x7f00000002c0)}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001640)={0x6, 0x1d, &(0x7f0000001440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffa}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x7, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x2, 0x4, &(0x7f00000003c0)=""/4, 0x41000, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001580)=[r0, r0, r0, r0, r0, r0, r0], &(0x7f00000015c0)=[{0x5, 0x5, 0xa, 0xa}, {0x3, 0x3, 0x7, 0x5}, {0x2, 0x3, 0xd}, {0x3, 0x2, 0x4, 0x2}, {0x4, 0x5, 0x3}, {0x3, 0x2, 0xc, 0x4}, {0x0, 0x2, 0x1, 0x1}], 0x10, 0x2, @void, @value}, 0x94) 1.141445977s ago: executing program 9 (id=1788): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4b}]}]}]}, 0x34}}, 0x0) unshare(0x62040200) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}}, 0x0) 1.041634444s ago: executing program 5 (id=1789): ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000000)={0x90fe, 0x6}) (async) r0 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000000)={0x90fe, 0x6}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x7, 0x1}, {0x80, 0x1}]}, 0x14, 0x2) ioctl$KVM_CAP_EXIT_HYPERCALL(r0, 0x4068aea3, &(0x7f00000000c0)={0xc9, 0x0, 0xc}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x431c, 0x36}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f00000002c0), &(0x7f0000000300)=0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), r4) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r6, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @private1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008844}, 0x10) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r7, 0x4070aea0, &(0x7f00000004c0)={[{0x8, 0x3, 0x4, 0x8, 0x1, 0x6, 0x0, 0xc0, 0xe1, 0x9, 0x4, 0x5, 0x8}, {0x7fff, 0x5, 0x6, 0x4e, 0xe, 0x9, 0x71, 0xbe, 0x7, 0x40, 0x10, 0x93, 0x5}, {0x8, 0x0, 0x6, 0x8, 0xfa, 0x8, 0x5, 0x0, 0x2, 0x5, 0x4, 0xc, 0xfffffffffffffc01}], 0x5}) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000540)="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", 0x1000, 0x0, &(0x7f0000001540)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x5, @mcast1, 0x4}}, 0x24) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r8, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x14, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000095}, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r9 = open(&(0x7f0000001680)='./file0\x00', 0x20a880, 0x108) mknodat$null(r9, &(0x7f00000016c0)='./file0\x00', 0x200, 0x103) (async) mknodat$null(r9, &(0x7f00000016c0)='./file0\x00', 0x200, 0x103) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x1c, r1, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x40c0) ioctl$VIDIOC_G_STD(r9, 0x80085617, &(0x7f0000001800)) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000001880)={{{@in=@empty, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000001980)=0xe8) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000001880)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000001980)=0xe8) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000001840)=@sg0, r10, &(0x7f00000019c0)={0x0, 0x1, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r9, 0xc0a85352, &(0x7f0000001a00)={{0x3, 0x4}, 'port1\x00', 0x80, 0x40040, 0x9, 0xfffffff7, 0x6, 0xe00, 0xfffffffc, 0x0, 0x2, 0x6}) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000001f80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001f40)={&(0x7f0000001b40)={0x3e8, r11, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x35}}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xa, @empty, 0x4ed}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}, @TIPC_NLA_BEARER={0x1e8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5f}}, {0x20, 0x2, @in6={0xa, 0x5, 0x8000, @empty, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x591f09db, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1000, @remote, 0x8001}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xff, @ipv4={'\x00', '\xff\xff', @local}, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2b}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8001, @remote, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd2f5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3780}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x57e}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f33}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000010) syz_genetlink_get_family_id$nl802154(&(0x7f0000002000), r8) (async) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002000), r8) sendmsg$NL802154_CMD_SET_LBT_MODE(r8, &(0x7f0000002100)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x24, r12, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c0) (async) sendmsg$NL802154_CMD_SET_LBT_MODE(r8, &(0x7f0000002100)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x24, r12, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c0) 972.429004ms ago: executing program 9 (id=1791): bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000)="451ee33f1c4ec8871cf2c84deb", &(0x7f0000000040)=""/50}, 0x20) r0 = socket$inet6(0xa, 0x5, 0x9) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x6, 0x0, 0x40, @loopback, @mcast1, 0x80, 0x40, 0xffffff7c, 0x10}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@remote, @loopback, @mcast2, 0x4, 0x7, 0x3, 0x100, 0x7, 0xc80000, r1}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000200)={'syztnl2\x00', r1, 0x700, 0x7800, 0x8, 0x4, {{0x6, 0x4, 0x0, 0x2, 0x18, 0x67, 0x0, 0x7, 0x29, 0x0, @broadcast, @loopback, {[@noop]}}}}}) socket$inet_dccp(0x2, 0x6, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000002c0)='memory.current\x00', 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000300)='1', 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000340)={'gre0\x00', r3, 0x80, 0x7800, 0x3, 0x4, {{0x5, 0x4, 0x3, 0x3, 0x14, 0x64, 0x0, 0x4, 0x29, 0x0, @multicast2, @multicast1}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r6, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x74, r7, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x40814) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf) socket$pppl2tp(0x18, 0x1, 0x1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(r8, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r9, 0x100, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r8) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000700)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000740)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r8, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, r10, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x40048045}, 0x20040000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000880)={0x7, 'vlan1\x00', {0x7}, 0x5}) 970.388748ms ago: executing program 1 (id=1792): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1, 0x0, 0x80}) (async) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 32) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) ioctl$TCXONC(r4, 0x540a, 0x1) (async) keyctl$KEYCTL_WATCH_KEY(0x3, r1, 0xffffffffffffffff, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async, rerun: 32) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x401, @none, 0x2, 0xc4d5ba2a7442dc99}, 0xe) (rerun: 32) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000040)={0x0, 0x5, 0x7, 0x8}, 0xc) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x6801, 0x0) (async) r6 = dup2(r2, r4) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x121502, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="20000001000000000000000000e10000085f585259c4007f000001"], 0x20}], 0x1}, 0x0) (async, rerun: 64) write$binfmt_script(r9, &(0x7f0000000340), 0xded564) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) (async, rerun: 64) preadv(r9, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) bind$rds(r6, &(0x7f0000000200)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async, rerun: 32) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2800009, 0x28011, r0, 0x0) 882.667132ms ago: executing program 5 (id=1793): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)=ANY=[], 0x108) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x7fff) 802.449599ms ago: executing program 1 (id=1794): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x11, 0x800000803, 0x1000000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x3c, 0x4b832, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r5, 0x10c, 0x7, &(0x7f00000004c0)=0x3, 0x4) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@getchain={0x2c, 0x66, 0x200, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9, 0x9}, {0x12}, {0x8, 0xffe0}}, [{0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0x7a00, 0x0, 0x4010041}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x18, 0x52, 0xa01, 0x0, 0x0, {0x2}, [@typed={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000815ddb67f284502475168b70fe0a54287e4f3f2f5401bff469a30933ac0d66d46b45ab56addffc40f54096391b1a34f07f9f82c087daa3930b04746c838a9ee347137dc08a60f6cb0497e492bde13f4bf4fe3b782dd9ed3e55b6e8fdab4a463acbf68bd381e633871bbdeb6bbaee3b376d7722b059651a75f5e087430c2bd96129438f53c6a675967432546624428d2c4877622ebc95e87b678149f9b86e91faa6e27c77c76bce31621aed", @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB], 0x28}, 0x1, 0x6c00}, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000000000000014100000018001700000000000000006574683a7465616d30"], 0x34}}, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffd, 0x8}) r12 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r12, 0xc1004111, 0x0) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J]\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}, &(0x7f0000000080)=0xc) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf9}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044050}, 0xc0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x140c, 0x20, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0xfffffffd}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x4008000) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x400) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0x2da401, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x98, 0x0, 0xce53f9000f1d6c27, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xbe21}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '#-(-'}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r3}, {0x8, 0x1, r1}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x98}, 0x1, 0x0, 0x0, 0xc804}, 0x24000000) getsockopt$MRT(r3, 0x0, 0xcf, &(0x7f0000000500), &(0x7f0000000540)=0x4) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) readahead(r4, 0x6, 0x5) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_KVMCLOCK_CTRL(r5, 0xaead) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f00000005c0)=0xc27, &(0x7f0000000600)=0x4) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000006c0)={{0x2, 0x4e22, @local}, {0x1, @broadcast}, 0x4, {0x2, 0x4e21, @loopback}, 'syz_tun\x00'}) r7 = openat$incfs(r3, &(0x7f0000000740)='.log\x00', 0x402200, 0x35) accept4$llc(r7, &(0x7f0000000780)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000007c0)=0x10, 0x80000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000840)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x0, 0x63, &(0x7f0000000900)=[{}, {}], 0x10, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x25, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000b40)={@broadcast, @loopback, 0x0}, &(0x7f0000000b80)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r7, 0x58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000c80)={'team0\x00', 0x0}) getsockname$packet(r3, &(0x7f0000000cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000d00)=0x14) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f0000000d40)=0x0, &(0x7f0000000d80)=0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000dc0)={0x0, @loopback}, &(0x7f0000000e00)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f00000018c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001880)={&(0x7f0000000e40)={0xa40, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r0}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6873}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r0}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r0}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x0, 0xde, 0x4, 0x2}, {0x5, 0x4, 0xfe, 0xfff}, {0x8, 0xc0, 0x6d, 0x5}, {0xd0, 0xec, 0x6, 0x6}, {0x9, 0x4c, 0xc, 0xd}, {0x2, 0x8, 0x9}, {0x2, 0x5, 0xf, 0x5}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r0}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r11}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r0}, {0x228, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x80, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r0}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}]}, 0xa40}, 0x1, 0x0, 0x0, 0x805}, 0xc840) socket$inet6_udplite(0xa, 0x2, 0x88) write$fb(r3, &(0x7f0000001900)="d052cc66a47e66a991076a065154f57e9bc44c9cbb3ee1d472c1819f52009861c921f212ccd3", 0x26) dup2(r7, r3) 550.01819ms ago: executing program 1 (id=1796): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000480)={[{@noswap}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 471.841719ms ago: executing program 7 (id=1797): ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x2c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendfile(r0, r0, 0x0, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 471.519445ms ago: executing program 5 (id=1798): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000081000000000000000000fe8000000000873c266365431ba60000aa00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0000000000000000008000000000000100"/112], 0xb8}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x101ff, 0x2, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x10, &(0x7f0000000280)=[@cr4={0x1, 0x100008}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020200007d00000005f0000000000000000000000000000000000000000000000000000000000000000000000000006465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) 371.781106ms ago: executing program 1 (id=1799): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0xffffffff, @empty, 0x2}, 0xffffffffffffffa4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) syz_emit_ethernet(0xd2, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c200000e00000000000086dd60010100009c1100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e240e22009c9078"], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0xffffffff, @empty, 0x2}, 0xffffffffffffffa4) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) (async) syz_emit_ethernet(0xd2, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c200000e00000000000086dd60010100009c1100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e240e22009c9078"], 0x0) (async) 241.639123ms ago: executing program 7 (id=1800): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) r2 = dup3(r1, r0, 0x80000) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x5, 0x0, &(0x7f00000028c0), 0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r3}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xfff2, 0x7}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x2c}}, 0x0) getsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000040)={@initdev}, &(0x7f0000000080)=0x8) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0xfffffffe, 0xff, "0062ba7d82000000000000000000f7ffffff00"}) r11 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3332be2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) r12 = syz_open_pts(r10, 0x0) ioctl$TIOCSTI(r12, 0x5412, &(0x7f0000000000)=0x1a) r13 = getuid() setreuid(0xee00, r13) r14 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r14, 0x52b242d) keyctl$get_persistent(0x16, r13, r14) recvmmsg(r9, &(0x7f0000004940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 238.395964ms ago: executing program 1 (id=1801): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000140)="eefa1ed0758d877909c49d0f2603be262650e27533b70700000042d349fb55cb574e34ed6ef7f672431069b9c6d58b67d26dc922a463d652b896297f703fcc13cdfad8e962b2347e234cba1a8da788a064b5ff8ef4cb29a05b2f12e2bd441454561261be20bf2e3b7a6f8c38d3894420e67866e2daa55308eeccc5e035866c7f3c332961335731ad7fc222f2043babefa09c7005119dccd0319707b2ec4f9543242ff111b6d4a118c7963a29ffeda8178cb9115b4f661a47dbbff54ed62806fb82008073ad9ad54e302df35d47e299167c3f084f551e79489cdaa46b32a8a25f912868e67cc71435091d", 0xea}, {&(0x7f0000000340)="ecc373fc75d5a8475a764bbfa8639174bed7a2a8a458ce93251b76ba6c61aed7e497a64e46acc30f7aa8ca12649d8f81e17e23db8bc45e0e2f9e2283553df68da010d4322351a131c6497891cf823fb1b33753176a21350e0b85c3570acb4a4e7982e4947c90ed65499abf1a5ee66d625d689551d22fe603f3d31c2656ed6da9a5b59f7f8b4e50a0e546b6691bf7c97e", 0x90}, {&(0x7f0000000400)="b15ee06856b1c0ef10bef4a32a11b6665fad09a0dc37af0b6c62bff885ecc6a803b46d4a5cb1273aa70ab9d1a195e2ba3405d1ac81cd8bba20c243d6e6607b277df08511c33282e509107c95be6281bd37be51285bd0de10138de6e1814d33dc81", 0x61}, {&(0x7f0000001680)="d2a5ddafa6b13c75089b543a99eeb7b87c673d057d11a94aa1ec5e0734fce234f822402ca95e398e76202f63d2aaa9b486e5e9bca1b801191e079b0266fe4425e920edbb25cd4dfdf770b7396c853cbd1094cdacaab8c056785d6cc1a3e32dcd52a645cf26da16e65c60ad9806550a04107dfbe59bb5d83fe11048918b72d1f1d63077f540b021e33c808bf9de392a0ad9eba9936ea6ef314941a002b7703c2abea26b38373d3053ce237b8e1cb17c482adf9b6851163901e801d17ba059a8db0c57160d5cd29016", 0xc8}, {&(0x7f0000000240)="3bd37812b4f52a04b076cef2d2cf", 0xe}, {&(0x7f00000002c0)="ff76cf2edc64c050089a76a3d75c6c4c499ca7", 0x13}, {&(0x7f0000000080)="adf69ebe0e93931cbd7d885d655f2d0a1f08fc88", 0x14}, {&(0x7f00000004c0)="01fa7fe1288059d1c7824781a3a394ac8c70eaa18f919eff22a140d8241b2a3bcf4b215114c4e5631ce9c508395224db08b7b37f8bc05aa0d0259a8a31ce2035697ebac7fab60f3b637556eaa0c86c5311b5d258267d4c9f0da32b5d0342611586518369baec7715b5ea39cd95c3f26caf21daeab3b5c40f55e319fa4cebeb21e9c6504d82180b29e3640c113974c13d132eccf6fe7471094d943573a31089cd9f750e46ad6429c59ddf786a8b006e8d1e7f0442b83ba8384904ebc0465832d613", 0xc1}, {&(0x7f00000005c0)="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", 0x1000}], 0x9}, 0x20f42a95a7c71ba5) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0002008a000000350000000000000085"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r2, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x17) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) mbind(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x0, 0x0, 0x0, 0x3) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x7, 0xb, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000480)={0xfffffd4e, 0x0, 0x80000001, 0x7fffffffffffffff, 0x4, 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001780)=ANY=[@ANYRESDEC=r0, @ANYRES16=r5, @ANYBLOB="010000000000000000ff7f00000008000300", @ANYRES32=r6], 0x30}}, 0x9) 109.947673ms ago: executing program 9 (id=1802): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32, @ANYBLOB="00000000404011d300000000000000b02e000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/28], 0x50) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd0, &(0x7f0000000040)=0xb, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073013f000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb30f, @void, @value}, 0x90) 109.537261ms ago: executing program 5 (id=1803): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020200180070001006374000014000280080001400000000108000240000000110900010073797a30000000000900020073797a3220000000140000001100010000000000000004000000000a"], 0x78}}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast, @dev}}}}}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x0, 0x43, 0x0, 0x4}, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x9c}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000000)={0x0, "59416d570165203d41bec7080089122c000004002231a11000000900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000100)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde", r6, 0xffffffffffffffff}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000240)={0x3, "e452e377187b077e5b828f557d1915b368f4e130bb1447b34bd68508d7bb0fdf", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000280)={"fe0d530b8cbe4b9d87c400000000100006860800", r7, 0xffffffffffffffff}) dup2(r4, r7) (async) r10 = dup(r9) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}}) (async) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c030055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09a946df3d7cb4ebd31a08b32808b80200000000000000334d83239d0c2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cae2ed4b4390af9a9ceefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a58090000000000000094f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000030000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acdfafe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdfc6ea55887dfa18d0aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6e67f530996482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b299968b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac2bc3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa1784d927aca9b8540534c5c49a0300cfbc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e8827b1541eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b047b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab61213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808d409b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124bad23e554c30fdd7cd8c2da1e8706417da26913688e7abfb9eac08603dfc2f2279ba161c13984cd753b54a85e6f3018c7d48c4b6c2f6910975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc0000000000000000b3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf378ca2e577e206a758a3f02816b4e097cfa3d46e45e7949c5b50691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a470563bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37df95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ff70c8a0121e7e8322cb8bc0f50ad33a2879c27557ead3af79d4a034b9ca025ff3d38165b28f8a3e6f91589a711d1dca971a93d50d6b44e6ea13ffa3a8cd0025cb28c7007bff4e2a299cf333dfcd858000db8f8720e1d60293e5138f8760684ee98be9b766433ece16dce5b1c2d6f671f675e1def56eb1355e40a5c188b88e3567a2c5ebae51748cf3aea239173364cfdc83ba7111dafa1b86516e357329227f1b6a810ffc1ca9fb3c522a6dab88e22c3d05ca67521adbb1358b52b54becd2534f8800a8e212b1fcdfbf6c3b741b1023ea74cc8245f3ab866987be3e0000000000000000000000003d5e24da0f7468e7f0c98fb818948aa52c60ad9c31acedb1902b96f539718d4c460cac931991a570c350ffe5949c07236fdf91cc074bc6c4fc2e7bb59606f45ba4e387f29ab42a859c0a7c237d7641c53e9e35bce650381927bc7e2fd6d6793580c02c19e0bdc73cabfa2fe8f2ee3931688d06defc16ad56b9f460b0d6cdec9ff473f2deb790ce198b8cf59aff3987734585b558aaa2df81f78960fee8a52c5ee6f581ac55ff06b44bf166ed87b5e5ac8459f01df96f774383c4136e33d0d60c7378df7f9d52c06a444020bf9e6ada4f0428adc9491a4c4bb599429e73480e1379707716010613660a0a4f0c1a79b9c5101f097852a75bd854125b7f9285b4a3bda968bbdbe7adb9b6ec490e4156aec8d93ea20298a134cb86422ff2fe3d7afc2d884d694565dc4ab31539ef776d98b97a287dd5a3c5f4e11619bd709fd86c4899f84a5333e81bf447decd3c4fe30baeaf8db1a76689b3c313abbf041c47404d183d2ad457d931c8d01467acf7b9d6d4bef5d063112cf247ce8387bf817cceefcfca8d7ea095c572eaddd775ca420450fde76b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r12, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004d", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r13, r3, 0x25, 0x0, @val=@tracing}, 0x40) (async) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @random='\x00\x00B\f\x00', @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x30, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @empty, @mcast2}}}}}}}, 0x0) (async) connect$bt_l2cap(r1, &(0x7f00000004c0)={0x1f, 0x0, @none}, 0xe) 776.635µs ago: executing program 9 (id=1804): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0xa, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000300), 0x101, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x1a, 0x1, 0x0, "9611ba5aab7f3200000000000000069b0000000000000000000000001d00", 0x31435641}) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x2503, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000140)) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r7 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40012143) chdir(&(0x7f0000000080)='./file1\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r8}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={0x0, r9}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0xee01) syz_open_dev$MSR(&(0x7f0000000080), 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0x8}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfff0}, {0x7, 0x0, 0x8, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 467.043µs ago: executing program 1 (id=1805): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b71a000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa000000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 5 (id=1806): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x8f8, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder, @flat=@weak_binder}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xfeffffffffffff, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xede2}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): 3 [ 149.687189][ T25] usb 10-1: config 1 interface 0 has no altsetting 0 [ 149.701299][ T25] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.703712][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.713904][ T25] usb 10-1: Product: О [ 149.715072][ T25] usb 10-1: Manufacturer: 儷鼙鿀즻ǘ贅傽쌱⣗㧳ϥ䈼㐳鄧ᓦ᠃瘣悧荍ꡧ雩㸎漙୘鞯ቜ뷌␵㜎䚿崃屚䬧ﯱ鏕緤ᯚ￘白ꤞې큧腉碁䫻ⶲࣚ唬￟伶먌曉㏊ȍ呔쒧ੴ噓䏿彩맮喾밶던炯놁횔ꡌ힍艨뮢흝⥠秉䏼䫀䦭슖ῦ硁囐鳭ꗒ뛉䝣눹嗫拸﫾 [ 149.725005][ T25] usb 10-1: SerialNumber: 䐊 [ 149.730851][ T9893] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 149.733536][ T9893] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 149.902373][ T9904] 9pnet: Found fid 0 not clunked [ 150.480887][ T25] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 150.487512][ T25] usb 10-1: USB disconnect, device number 6 [ 150.953800][ T9906] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1047'. [ 151.060919][ T9927] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1055'. [ 151.086065][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1055'. [ 151.088403][ T9927] bridge_slAve_0: renamed from lo (while UP) [ 151.137634][ T9850] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 151.146430][ T9850] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 151.153717][ T9850] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 151.164976][ T9850] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 151.206270][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1056'. [ 151.288837][ T7610] IPVS: stop unused estimator thread 0... [ 151.365030][ T9939] No control pipe specified [ 151.381324][ T9850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.428902][ T9850] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.435292][ T9942] bridge_slave_1: left allmulticast mode [ 151.440581][ T9942] bridge_slave_1: left promiscuous mode [ 151.442579][ T9942] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.448688][ T9942] bridge_slave_0: left allmulticast mode [ 151.450225][ T9942] bridge_slave_0: left promiscuous mode [ 151.456615][ T9942] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.482950][ T9945] mmap: syz.6.1061 (9945): VmData 37597184 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 151.553375][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.555359][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.572478][ T7611] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.574360][ T7611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.635995][ T5297] Bluetooth: hci0: command tx timeout [ 151.707538][ T9953] Bluetooth: MGMT ver 1.23 [ 152.599085][ T9850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.972993][ T9992] SET target dimension over the limit! [ 153.726348][ T5297] Bluetooth: hci0: command tx timeout [ 153.788572][T10012] __nla_validate_parse: 2 callbacks suppressed [ 153.788589][T10012] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1079'. [ 153.897011][T10016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1080'. [ 153.916383][T10016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1080'. [ 154.000904][ T9850] veth0_vlan: entered promiscuous mode [ 154.019979][ T9850] veth1_vlan: entered promiscuous mode [ 154.069366][ T9850] veth0_macvtap: entered promiscuous mode [ 154.080359][ T9850] veth1_macvtap: entered promiscuous mode [ 154.103559][ T39] kauditd_printk_skb: 646 callbacks suppressed [ 154.103569][ T39] audit: type=1400 audit(1731193887.607:22760): avc: denied { ioctl } for pid=10021 comm="syz.3.1084" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 154.119039][ T9850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.121762][ T9850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.124367][ T9850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.128413][ T9850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.130985][ T9850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.133676][ T9850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.136432][ T9850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.139132][ T9850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.143548][ T9850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.152251][ T9850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.154958][ T9850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.157605][ T9850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.160302][ T9850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.162808][ T9850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.168653][ T9850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.171188][ T9850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.173733][ T9850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.178407][ T9850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.180954][T10024] kvm: apic: phys broadcast and lowest prio [ 154.202328][ T9850] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.204589][ T9850] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.205520][ T39] audit: type=1400 audit(1731193887.707:22761): avc: denied { prog_load } for pid=10021 comm="syz.3.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 154.207881][ T9850] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.215647][ T9850] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.218922][ T39] audit: type=1400 audit(1731193887.717:22762): avc: denied { bpf } for pid=10021 comm="syz.3.1084" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 154.229701][ T39] audit: type=1400 audit(1731193887.717:22763): avc: denied { perfmon } for pid=10021 comm="syz.3.1084" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 154.240958][ T39] audit: type=1400 audit(1731193887.717:22764): avc: denied { perfmon } for pid=10021 comm="syz.3.1084" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 154.249447][ T39] audit: type=1400 audit(1731193887.717:22765): avc: denied { perfmon } for pid=10021 comm="syz.3.1084" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 154.255013][ T39] audit: type=1400 audit(1731193887.717:22766): avc: denied { perfmon } for pid=10021 comm="syz.3.1084" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 154.260738][ T39] audit: type=1400 audit(1731193887.717:22767): avc: denied { bpf } for pid=10021 comm="syz.3.1084" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 154.266088][ T39] audit: type=1400 audit(1731193887.737:22768): avc: denied { create } for pid=10021 comm="syz.3.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 154.272576][ T39] audit: type=1400 audit(1731193887.747:22769): avc: denied { module_request } for pid=10022 comm="syz.6.1083" kmod="crypto-cryptd(__ecb-camellia-aesni)-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 154.411423][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.414651][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.479493][ T7610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.481938][ T7610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.961047][T10052] netlink: 'syz.3.1090': attribute type 10 has an invalid length. [ 154.975991][T10052] batman_adv: batadv0: Adding interface: team0 [ 154.977710][T10052] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.984230][T10052] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 155.032273][T10052] netlink: 'syz.3.1090': attribute type 1 has an invalid length. [ 155.034365][T10052] netlink: 9364 bytes leftover after parsing attributes in process `syz.3.1090'. [ 155.038811][T10052] netlink: 'syz.3.1090': attribute type 1 has an invalid length. [ 155.048446][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1090'. [ 155.064029][T10052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1090'. [ 155.069562][T10052] netlink: 'syz.3.1090': attribute type 10 has an invalid length. [ 155.071828][T10052] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1090'. [ 155.074284][T10052] team0: entered promiscuous mode [ 155.075785][T10052] team_slave_0: entered promiscuous mode [ 155.077617][T10052] team_slave_1: entered promiscuous mode [ 155.080002][T10052] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.082015][T10052] batman_adv: batadv0: Interface activated: team0 [ 155.084449][T10052] batman_adv: batadv0: Interface deactivated: team0 [ 155.087054][T10052] batman_adv: batadv0: Removing interface: team0 [ 155.089928][T10052] bridge0: port 3(team0) entered blocking state [ 155.091954][T10052] bridge0: port 3(team0) entered disabled state [ 155.094185][T10052] team0: entered allmulticast mode [ 155.097568][T10052] team_slave_0: entered allmulticast mode [ 155.099295][T10052] team_slave_1: entered allmulticast mode [ 155.102029][T10052] bridge0: port 3(team0) entered blocking state [ 155.103791][T10052] bridge0: port 3(team0) entered forwarding state [ 155.258059][ T5939] bond0: (slave syz_tun): Releasing backup interface [ 155.529227][ T5954] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.533990][ T5954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.538230][ T5954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.542811][ T5954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.545931][ T5954] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.548798][ T5954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.612956][T10061] lo speed is unknown, defaulting to 1000 [ 155.795967][ T5954] Bluetooth: hci0: command tx timeout [ 155.804401][T10069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10069 comm=syz.7.1096 [ 155.961177][T10061] chnl_net:caif_netlink_parms(): no params data found [ 156.034972][T10061] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.037123][T10061] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.039082][T10061] bridge_slave_0: entered allmulticast mode [ 156.041561][T10061] bridge_slave_0: entered promiscuous mode [ 156.047877][T10061] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.049797][T10061] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.051707][T10061] bridge_slave_1: entered allmulticast mode [ 156.053711][T10061] bridge_slave_1: entered promiscuous mode [ 156.070815][T10080] netlink: 'syz.5.1098': attribute type 2 has an invalid length. [ 156.085592][T10061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.091023][T10061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.115152][T10061] team0: Port device team_slave_0 added [ 156.120676][T10061] team0: Port device team_slave_1 added [ 156.148762][T10061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.150586][T10061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.158172][T10061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.163428][T10061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.165249][T10061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.171906][T10061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.214976][T10061] hsr_slave_0: entered promiscuous mode [ 156.217971][T10061] hsr_slave_1: entered promiscuous mode [ 156.220356][T10061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.222304][T10061] Cannot create hsr debugfs directory [ 156.395035][T10061] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 156.405578][T10061] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 156.410900][T10061] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 156.416961][T10061] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 156.555040][T10061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.581320][T10061] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.591548][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.593478][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.614962][ T7611] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.617152][ T7611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.556084][ T5954] Bluetooth: hci2: command tx timeout [ 157.587949][T10061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.613714][T10099] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 157.768257][T10139] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1114'. [ 157.874128][T10142] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 157.898236][T10142] netlink: 'syz.5.1115': attribute type 7 has an invalid length. [ 157.900279][T10142] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1115'. [ 158.835912][ T5954] Bluetooth: hci0: command 0x080f tx timeout [ 159.105979][ T39] kauditd_printk_skb: 700 callbacks suppressed [ 159.105990][ T39] audit: type=1400 audit(1731193892.617:23470): avc: denied { read write } for pid=10181 comm="syz.6.1125" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 159.119012][ T39] audit: type=1400 audit(1731193892.617:23471): avc: denied { read write open } for pid=10181 comm="syz.6.1125" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 159.135367][ T39] audit: type=1400 audit(1731193892.627:23472): avc: denied { read write } for pid=9850 comm="syz-executor" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.138647][T10061] veth0_vlan: entered promiscuous mode [ 159.163764][ T39] audit: type=1400 audit(1731193892.627:23473): avc: denied { read write open } for pid=9850 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.173772][ T39] audit: type=1400 audit(1731193892.627:23474): avc: denied { ioctl } for pid=10181 comm="syz.6.1125" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 159.186206][ T39] audit: type=1400 audit(1731193892.627:23475): avc: denied { ioctl } for pid=9850 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.192847][ T39] audit: type=1400 audit(1731193892.687:23476): avc: denied { create } for pid=10190 comm="syz.7.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 159.192978][T10061] veth1_vlan: entered promiscuous mode [ 159.199075][ T39] audit: type=1400 audit(1731193892.697:23477): avc: denied { read } for pid=10190 comm="syz.7.1128" dev="nsfs" ino=4026532928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 159.205369][ T39] audit: type=1400 audit(1731193892.697:23478): avc: denied { read open } for pid=10190 comm="syz.7.1128" path="net:[4026532928]" dev="nsfs" ino=4026532928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 159.211848][ T39] audit: type=1400 audit(1731193892.697:23479): avc: denied { create } for pid=10190 comm="syz.7.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 159.222836][T10191] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1128'. [ 159.284143][T10061] veth0_macvtap: entered promiscuous mode [ 159.297023][T10061] veth1_macvtap: entered promiscuous mode [ 159.349192][T10191] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1128'. [ 159.386547][T10191] netlink: 'syz.7.1128': attribute type 1 has an invalid length. [ 159.391647][T10061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.394389][T10061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.410526][T10061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.413303][T10061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.435805][T10061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.439111][T10061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.442413][T10061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.462739][T10061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.465212][T10061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.478694][T10061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.484521][T10061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.567188][T10061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.572047][T10061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.574924][T10061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.590166][T10061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.594781][T10061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.601274][T10061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.614392][T10061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.619733][T10061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.622210][T10061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.631898][T10061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.635446][T10061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.646126][ T5954] Bluetooth: hci2: command tx timeout [ 159.650711][T10061] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.653053][T10061] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.655430][T10061] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.659209][T10061] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.775840][T10206] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1134'. [ 159.778007][ T7610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.780312][ T7610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.831112][ T7602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.833134][ T7602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.973307][T10218] overlayfs: conflicting lowerdir path [ 159.997364][T10220] netlink: 'syz.5.1140': attribute type 10 has an invalid length. [ 160.004278][T10220] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.007225][T10220] bond0: (slave team0): Enslaving as an active interface with an up link [ 160.567942][T10248] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 160.570982][T10248] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 160.574212][T10248] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 161.096154][ T5944] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 161.254407][ T5944] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 161.259667][ T5944] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 161.262644][ T5944] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 161.265596][ T5944] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 161.274207][ T5944] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.276743][ T5944] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.280285][ T5944] usb 12-1: config 0 descriptor?? [ 161.285153][T10267] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 161.429487][T10291] Driver unsupported XDP return value 0 on prog (id 171) dev N/A, expect packet loss! [ 161.715944][ T5954] Bluetooth: hci2: command tx timeout [ 161.877450][T10306] netlink: 4096 bytes leftover after parsing attributes in process `syz.6.1168'. [ 161.879871][T10306] openvswitch: netlink: ct_state flags 00100000 unsupported [ 161.908067][ T5944] usbhid 12-1:0.0: can't add hid device: -71 [ 161.909720][ T5944] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 161.918733][ T5944] usb 12-1: USB disconnect, device number 2 [ 161.920986][T10309] program syz.8.1169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.148258][T10320] xt_connbytes: Forcing CT accounting to be enabled [ 162.150967][T10320] No such timeout policy "syz0" [ 162.202666][T10316] option changes via remount are deprecated (pid=10314 comm=syz.6.1172) [ 162.418000][T10329] support for the xor transformation has been removed. [ 162.823825][ T7612] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 162.892274][T10347] binder: 10346:10347 ioctl 40045613 20000340 returned -22 [ 163.795968][ T5954] Bluetooth: hci2: command tx timeout [ 164.116547][ T39] kauditd_printk_skb: 1233 callbacks suppressed [ 164.116558][ T39] audit: type=1400 audit(1731193897.627:24713): avc: denied { bind } for pid=10395 comm="syz.6.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 164.144337][ T39] audit: type=1400 audit(1731193897.627:24714): avc: denied { write } for pid=10378 comm="syz.8.1190" laddr=172.20.20.187 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 164.162796][ T39] audit: type=1400 audit(1731193897.627:24715): avc: denied { node_bind } for pid=10395 comm="syz.6.1194" saddr=255.255.255.255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 164.178215][ T39] audit: type=1400 audit(1731193897.627:24716): avc: denied { ioctl } for pid=10397 comm="syz.7.1195" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 164.195620][ T39] audit: type=1400 audit(1731193897.627:24717): avc: denied { write } for pid=10378 comm="syz.8.1190" laddr=172.20.20.187 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 164.204807][ T39] audit: type=1400 audit(1731193897.627:24718): avc: denied { write } for pid=10378 comm="syz.8.1190" laddr=172.20.20.187 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 164.213840][ T39] audit: type=1400 audit(1731193897.627:24719): avc: denied { write } for pid=10378 comm="syz.8.1190" laddr=172.20.20.187 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 164.227580][ T39] audit: type=1400 audit(1731193897.627:24720): avc: denied { write } for pid=10378 comm="syz.8.1190" laddr=172.20.20.187 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 164.248417][ T39] audit: type=1400 audit(1731193897.627:24721): avc: denied { write } for pid=10378 comm="syz.8.1190" laddr=172.20.20.187 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 164.254363][ T39] audit: type=1400 audit(1731193897.637:24722): avc: denied { write } for pid=10378 comm="syz.8.1190" laddr=172.20.20.187 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 164.523213][T10412] bridge0: port 3(erspan0) entered blocking state [ 164.525079][T10412] bridge0: port 3(erspan0) entered disabled state [ 164.535208][T10412] erspan0: entered allmulticast mode [ 164.539116][T10412] erspan0: entered promiscuous mode [ 164.540803][T10412] bridge0: port 3(erspan0) entered blocking state [ 164.542546][T10412] bridge0: port 3(erspan0) entered forwarding state [ 164.695751][ T5944] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 164.835782][ T5944] usb 11-1: device descriptor read/64, error -71 [ 164.944533][T10421] netlink: 'syz.5.1201': attribute type 3 has an invalid length. [ 164.946993][T10421] netlink: 'syz.5.1201': attribute type 3 has an invalid length. [ 165.096106][ T5944] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 165.212509][T10429] bridge_slave_0: default FDB implementation only supports local addresses [ 165.235954][ T5944] usb 11-1: device descriptor read/64, error -71 [ 165.346996][ T5944] usb usb11-port1: attempt power cycle [ 165.685794][ T5944] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 165.707907][ T5944] usb 11-1: device descriptor read/8, error -71 [ 165.965862][ T5944] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 165.988542][ T5944] usb 11-1: device descriptor read/8, error -71 [ 166.097026][ T5944] usb usb11-port1: unable to enumerate USB device [ 166.378585][T10441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10441 comm=syz.8.1206 [ 166.605085][T10446] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1208'. [ 166.683687][T10447] overlayfs: failed to resolve './file1': -2 [ 167.281059][T10471] overlay: ./file0 is not a directory [ 167.290993][T10471] overlay: ./file0 is not a directory [ 167.294397][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1216'. [ 167.297108][T10471] overlay: ./file0 is not a directory [ 167.301626][ T6549] IPVS: starting estimator thread 0... [ 167.307616][T10471] overlay: ./file0 is not a directory [ 167.311409][T10473] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1216'. [ 167.311897][T10471] overlay: ./file0 is not a directory [ 167.321301][T10471] overlay: ./file0 is not a directory [ 167.332120][T10471] overlay: ./file0 is not a directory [ 167.338023][T10471] overlay: ./file0 is not a directory [ 167.342216][T10471] overlay: ./file0 is not a directory [ 167.345857][T10471] overlay: ./file0 is not a directory [ 167.359129][T10471] overlay: ./file0 is not a directory [ 167.363042][T10471] overlay: ./file0 is not a directory [ 167.372839][T10471] overlay: ./file0 is not a directory [ 167.377693][T10471] overlay: ./file0 is not a directory [ 167.381601][T10471] overlay: ./file0 is not a directory [ 167.385988][T10474] IPVS: using max 36 ests per chain, 86400 per kthread [ 167.388379][T10471] overlay: ./file0 is not a directory [ 167.394964][T10471] overlay: ./file0 is not a directory [ 167.399464][T10471] overlay: ./file0 is not a directory [ 167.406061][T10471] overlay: ./file0 is not a directory [ 167.412061][T10471] overlay: ./file0 is not a directory [ 167.415158][T10471] overlay: ./file0 is not a directory [ 167.419597][T10471] overlay: ./file0 is not a directory [ 167.423277][T10471] overlay: ./file0 is not a directory [ 167.426338][T10471] overlay: ./file0 is not a directory [ 167.429326][T10471] overlay: ./file0 is not a directory [ 167.433323][T10471] overlay: ./file0 is not a directory [ 167.436849][T10471] overlay: ./file0 is not a directory [ 167.439616][T10471] overlay: ./file0 is not a directory [ 167.448382][T10471] overlay: ./file0 is not a directory [ 167.456607][T10471] overlay: ./file0 is not a directory [ 167.464488][T10471] overlay: ./file0 is not a directory [ 167.472257][T10471] overlay: ./file0 is not a directory [ 167.480632][T10471] overlay: ./file0 is not a directory [ 167.490713][T10471] overlay: ./file0 is not a directory [ 167.498726][T10471] overlay: ./file0 is not a directory [ 167.505135][T10471] overlay: ./file0 is not a directory [ 167.517477][T10471] overlay: ./file0 is not a directory [ 167.522594][T10471] overlay: ./file0 is not a directory [ 167.528690][T10471] overlay: ./file0 is not a directory [ 167.532489][T10471] overlay: ./file0 is not a directory [ 167.537058][T10471] overlay: ./file0 is not a directory [ 167.541185][T10471] overlay: ./file0 is not a directory [ 167.548118][T10471] overlay: ./file0 is not a directory [ 167.551345][T10471] overlay: ./file0 is not a directory [ 167.554941][T10471] overlay: ./file0 is not a directory [ 167.573511][T10471] overlay: ./file0 is not a directory [ 167.587657][T10471] overlay: ./file0 is not a directory [ 167.591549][T10471] overlay: ./file0 is not a directory [ 167.600257][T10471] overlay: ./file0 is not a directory [ 167.605199][T10481] overlayfs: cannot append lower layer [ 167.611878][T10471] overlay: ./file0 is not a directory [ 167.616826][T10471] overlay: ./file0 is not a directory [ 167.625322][T10471] overlay: ./file0 is not a directory [ 167.633797][T10471] overlay: ./file0 is not a directory [ 167.639547][T10471] overlay: ./file0 is not a directory [ 167.646262][T10471] overlay: ./file0 is not a directory [ 167.656421][T10471] overlay: ./file0 is not a directory [ 167.667471][T10471] overlay: ./file0 is not a directory [ 167.670885][T10471] overlay: ./file0 is not a directory [ 167.674041][T10471] overlay: ./file0 is not a directory [ 167.677826][T10471] overlay: ./file0 is not a directory [ 167.681031][T10471] overlay: ./file0 is not a directory [ 167.685119][T10471] overlay: ./file0 is not a directory [ 167.688011][T10471] overlay: ./file0 is not a directory [ 167.698046][T10471] overlay: ./file0 is not a directory [ 167.701185][T10471] overlay: ./file0 is not a directory [ 168.010955][T10497] vxfs: WRONG superblock magic 00000000 at 1 [ 168.013326][T10497] vxfs: WRONG superblock magic 00000000 at 8 [ 168.015018][T10497] vxfs: can't find superblock. [ 168.315784][ T72] IPVS: starting estimator thread 0... [ 168.425401][T10513] IPVS: using max 35 ests per chain, 84000 per kthread [ 168.643325][T10515] erofs: (device loop7): erofs_read_superblock: cannot find valid erofs superblock [ 169.158698][ T39] kauditd_printk_skb: 1529 callbacks suppressed [ 169.158710][ T39] audit: type=1400 audit(1731193902.667:26249): avc: denied { setattr } for pid=10538 comm="syz.6.1235" name="/" dev="9p" ino=37617752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 169.173516][ T39] audit: type=1400 audit(1731193902.677:26250): avc: denied { unmount } for pid=9850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 169.184459][ T39] audit: type=1400 audit(1731193902.687:26251): avc: denied { unmount } for pid=9850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 169.206674][ T39] audit: type=1400 audit(1731193902.707:26252): avc: denied { read write } for pid=9850 comm="syz-executor" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 169.213106][ T39] audit: type=1400 audit(1731193902.707:26253): avc: denied { read write open } for pid=9850 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 169.229528][ T39] audit: type=1400 audit(1731193902.707:26254): avc: denied { ioctl } for pid=9850 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 169.266030][ T39] audit: type=1400 audit(1731193902.777:26255): avc: denied { read } for pid=10541 comm="syz.7.1236" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 169.272002][ T39] audit: type=1400 audit(1731193902.777:26256): avc: denied { read open } for pid=10541 comm="syz.7.1236" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 169.292228][ T39] audit: type=1400 audit(1731193902.777:26257): avc: denied { create } for pid=10541 comm="syz.7.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 169.299312][ T39] audit: type=1400 audit(1731193902.787:26258): avc: denied { read } for pid=10541 comm="syz.7.1236" name="v4l-subdev5" dev="devtmpfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.496604][T10548] mac80211_hwsim hwsim22 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 169.789320][T10558] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.667137][T10589] lo speed is unknown, defaulting to 1000 [ 170.736897][T10590] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1251'. [ 170.989821][T10600] lo speed is unknown, defaulting to 1000 [ 171.497512][T10595] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 171.500267][T10595] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 171.516672][T10595] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 171.521020][T10595] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 171.522637][T10595] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 171.527019][T10595] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 171.532832][T10595] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 171.535049][T10595] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 171.538284][T10595] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 171.664933][T10606] sctp: [Deprecated]: syz.8.1255 (pid 10606) Use of int in maxseg socket option. [ 171.664933][T10606] Use struct sctp_assoc_value instead [ 171.705102][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1256'. [ 171.712204][T10614] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1256'. [ 172.766244][T10656] sctp: [Deprecated]: syz.5.1268 (pid 10656) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.766244][T10656] Use struct sctp_sack_info instead [ 173.002046][ T5297] Bluetooth: hci1: command 0x0c1a tx timeout [ 173.032342][T10673] dummy0: entered promiscuous mode [ 173.050096][T10673] dummy0: left promiscuous mode [ 173.285673][T10684] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1276'. [ 173.464176][T10700] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1279'. [ 173.496021][ T7610] wlan0: Trigger new scan to find an IBSS to join [ 173.555770][ T5297] Bluetooth: hci2: command 0x0c1a tx timeout [ 173.555840][ T5954] Bluetooth: hci0: command 0x080f tx timeout [ 173.619669][T10708] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 173.621957][T10708] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 173.624238][T10708] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 173.629358][T10708] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 173.773223][T10720] overlayfs: missing 'lowerdir' [ 174.262208][ T39] kauditd_printk_skb: 1196 callbacks suppressed [ 174.262220][ T39] audit: type=1400 audit(1731193907.767:27455): avc: denied { write } for pid=10737 comm="syz.8.1292" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 174.270226][ T39] audit: type=1400 audit(1731193907.767:27456): avc: denied { write } for pid=10737 comm="syz.8.1292" path="/dev/bus/usb/001/001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 174.292703][ T39] audit: type=1400 audit(1731193907.797:27457): avc: denied { create } for pid=10737 comm="syz.8.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.300137][ T39] audit: type=1400 audit(1731193907.797:27458): avc: denied { create } for pid=10737 comm="syz.8.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.312480][ T39] audit: type=1400 audit(1731193907.797:27459): avc: denied { ioctl } for pid=10737 comm="syz.8.1292" path="socket:[41192]" dev="sockfs" ino=41192 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.329177][ T39] audit: type=1400 audit(1731193907.807:27460): avc: denied { create } for pid=10737 comm="syz.8.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.338525][ T39] audit: type=1400 audit(1731193907.807:27461): avc: denied { create } for pid=10737 comm="syz.8.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.345118][ T39] audit: type=1400 audit(1731193907.807:27462): avc: denied { ioctl } for pid=10737 comm="syz.8.1292" path="socket:[41195]" dev="sockfs" ino=41195 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.375196][ T39] audit: type=1400 audit(1731193907.877:27463): avc: denied { unmount } for pid=8761 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 174.425748][ T39] audit: type=1400 audit(1731193907.927:27464): avc: denied { prog_load } for pid=10737 comm="syz.8.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 175.078608][ T5954] Bluetooth: hci1: command 0x0c1a tx timeout [ 175.288363][ T5297] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.303158][ T5297] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.313269][ T5297] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.320807][ T5297] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.323677][ T5297] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 175.329411][ T5297] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 175.635839][ T5954] Bluetooth: hci2: command 0x0c1a tx timeout [ 175.650035][ T5954] Bluetooth: hci0: command 0x080f tx timeout [ 175.760465][T10743] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1293'. [ 175.763915][T10744] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1293'. [ 175.806500][T10748] lo speed is unknown, defaulting to 1000 [ 175.943245][T10757] Bluetooth: MGMT ver 1.23 [ 175.970813][T10759] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1298'. [ 175.998157][T10759] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1298'. [ 176.108889][T10768] netlink: 'syz.8.1300': attribute type 10 has an invalid length. [ 176.123985][T10768] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.128530][T10768] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.130439][T10768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.141291][T10768] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 176.185874][T10748] chnl_net:caif_netlink_parms(): no params data found [ 176.278381][T10748] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.281584][T10748] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.283854][T10748] bridge_slave_0: entered allmulticast mode [ 176.287217][T10748] bridge_slave_0: entered promiscuous mode [ 176.292723][T10748] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.294686][T10748] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.299232][T10748] bridge_slave_1: entered allmulticast mode [ 176.301327][T10748] bridge_slave_1: entered promiscuous mode [ 176.349958][T10748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.373428][T10748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.424339][T10748] team0: Port device team_slave_0 added [ 176.433986][T10748] team0: Port device team_slave_1 added [ 176.516312][ T11] wlan0: Trigger new scan to find an IBSS to join [ 176.524907][T10748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.543640][T10748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.556041][T10748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.562647][T10748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.564450][T10748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.577384][T10748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.611956][T10790] binder: Unknown parameter 'fsname' [ 176.631500][T10748] hsr_slave_0: entered promiscuous mode [ 176.635887][T10748] hsr_slave_1: entered promiscuous mode [ 176.638298][T10748] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.640274][T10748] Cannot create hsr debugfs directory [ 176.876093][T10801] binder: BINDER_SET_CONTEXT_MGR already set [ 176.878170][T10801] binder: 10800:10801 ioctl 4018620d 20000100 returned -16 [ 176.881716][T10801] binder: BINDER_SET_CONTEXT_MGR already set [ 176.883016][T10748] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 176.883733][T10801] binder: 10800:10801 ioctl 4018620d 20000100 returned -16 [ 176.889370][T10801] binder: BINDER_SET_CONTEXT_MGR already set [ 176.891353][T10801] binder: 10800:10801 ioctl 4018620d 20000100 returned -16 [ 176.894579][T10801] binder: BINDER_SET_CONTEXT_MGR already set [ 176.896888][T10801] binder: 10800:10801 ioctl 4018620d 20000100 returned -16 [ 176.900040][T10801] binder: BINDER_SET_CONTEXT_MGR already set [ 176.901753][T10748] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 176.901979][T10801] binder: 10800:10801 ioctl 4018620d 20000100 returned -16 [ 176.908514][T10801] binder: BINDER_SET_CONTEXT_MGR already set [ 176.910519][T10801] binder: 10800:10801 ioctl 4018620d 20000100 returned -16 [ 176.914155][T10801] binder: BINDER_SET_CONTEXT_MGR already set [ 176.916133][T10801] binder: 10800:10801 ioctl 4018620d 20000100 returned -16 [ 176.919365][T10801] binder: BINDER_SET_CONTEXT_MGR already set [ 176.921323][T10801] binder: 10800:10801 ioctl 4018620d 20000100 returned -16 [ 176.924315][T10801] binder: BINDER_SET_CONTEXT_MGR already set [ 176.926456][T10801] binder: 10800:10801 ioctl 4018620d 20000100 returned -16 [ 176.929474][T10748] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 176.930024][T10801] binder: BINDER_SET_CONTEXT_MGR already set [ 176.934576][T10801] binder: 10800:10801 ioctl 4018620d 20000100 returned -16 [ 176.941133][T10748] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 177.149999][T10809] xt_ecn: cannot match TCP bits for non-tcp packets [ 177.193193][T10807] cdrom: dropping to single frame dma [ 177.229491][T10748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.287198][T10748] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.337943][ T795] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.340035][ T795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.351409][ T795] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.353951][ T795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.406170][ T5954] Bluetooth: hci3: command tx timeout [ 177.459418][T10817] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1313'. [ 177.463313][T10817] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1313'. [ 177.482407][ T7602] wlan0: Creating new IBSS network, BSSID b6:72:b2:bc:9b:d3 [ 177.735820][ T5954] Bluetooth: hci0: command 0x080f tx timeout [ 177.737192][ T5954] Bluetooth: hci2: command 0x0c1a tx timeout [ 177.816215][ T7610] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 177.821728][ T7610] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 177.845860][ T5983] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 177.892941][T10827] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1317'. [ 178.056514][ T5983] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.266019][ T5983] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.314290][T10748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.359406][T10840] input: syz1 as /devices/virtual/input/input22 [ 178.447363][T10850] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1322'. [ 178.539162][T10856] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1323'. [ 178.968111][T10879] ubi: mtd0 is already attached to ubi0 [ 179.276168][ T39] kauditd_printk_skb: 734 callbacks suppressed [ 179.276179][ T39] audit: type=1400 audit(1731193912.787:28199): avc: denied { read write } for pid=10061 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 179.284064][ T39] audit: type=1400 audit(1731193912.787:28200): avc: denied { read write open } for pid=10061 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 179.285981][ T6001] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 179.295398][ T39] audit: type=1400 audit(1731193912.787:28201): avc: denied { ioctl } for pid=10061 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 179.302026][ T39] audit: type=1400 audit(1731193912.797:28202): avc: denied { ioctl } for pid=10874 comm="syz.5.1329" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 179.311185][ T39] audit: type=1400 audit(1731193912.797:28203): avc: denied { ioctl } for pid=10874 comm="syz.5.1329" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 179.320796][ T39] audit: type=1400 audit(1731193912.807:28204): avc: denied { ioctl } for pid=10874 comm="syz.5.1329" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 179.342402][ T39] audit: type=1400 audit(1731193912.847:28205): avc: denied { prog_load } for pid=10894 comm="syz.8.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 179.350154][ T39] audit: type=1400 audit(1731193912.847:28206): avc: denied { bpf } for pid=10894 comm="syz.8.1335" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 179.357509][ T39] audit: type=1400 audit(1731193912.867:28207): avc: denied { module_request } for pid=10894 comm="syz.8.1335" kmod=6E65746465762D05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 179.367309][ T39] audit: type=1400 audit(1731193912.877:28208): avc: denied { ioctl } for pid=10874 comm="syz.5.1329" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 179.445900][ T6001] usb 10-1: Using ep0 maxpacket: 8 [ 179.453907][ T6001] usb 10-1: config 0 has no interfaces? [ 179.457820][ T6001] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 179.464237][ T6001] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.472054][ T6001] usb 10-1: config 0 descriptor?? [ 179.475969][ T5297] Bluetooth: hci3: command tx timeout [ 179.555280][ T5946] udevd[5946]: setting mode of /dev/vcs3 to 020660 failed: Read-only file system [ 179.564751][T10331] udevd[10331]: setting mode of /dev/vcsu3 to 020660 failed: Read-only file system [ 179.569154][T10331] udevd[10331]: setting owner of /dev/vcsu3 to uid=0, gid=5 failed: Read-only file system [ 179.573671][ T6019] udevd[6019]: setting mode of /dev/vcsa3 to 020660 failed: Read-only file system [ 179.577218][ T5946] udevd[5946]: setting owner of /dev/vcs3 to uid=0, gid=5 failed: Read-only file system [ 179.589473][ T6019] udevd[6019]: setting owner of /dev/vcsa3 to uid=0, gid=5 failed: Read-only file system [ 179.693482][ T6001] usb 10-1: string descriptor 0 read error: -71 [ 179.703109][ T6001] usb 10-1: USB disconnect, device number 7 [ 179.807767][ T5983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.822468][T10748] veth0_vlan: entered promiscuous mode [ 179.871641][T10748] veth1_vlan: entered promiscuous mode [ 179.929876][T10748] veth0_macvtap: entered promiscuous mode [ 179.941787][T10748] veth1_macvtap: entered promiscuous mode [ 179.994596][T10748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.997901][T10748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.000525][T10748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.003449][T10748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.006312][T10748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.009277][T10748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.012615][T10748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.018916][T10748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.021686][T10748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.024436][T10748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.027141][T10748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.029847][T10748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.033400][T10748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.045293][T10748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.058649][T10748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.061204][T10748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.064824][T10748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.068917][T10748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.071726][T10748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.074223][T10748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.077093][T10748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.079606][T10748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.082319][T10748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.084827][T10748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.087684][T10748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.091956][T10748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.101038][T10748] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.103548][T10748] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.108473][T10748] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.110757][T10748] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.181028][T10901] infiniband syz1: set active [ 180.183243][T10901] infiniband syz1: added bond_slave_1 [ 180.183569][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.187322][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.208905][ T7611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.210349][T10901] RDS/IB: syz1: added [ 180.211008][ T7611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.212491][T10901] smc: adding ib device syz1 with port count 1 [ 180.216142][T10901] smc: ib device syz1 port 1 has pnetid [ 180.469651][T10912] lo speed is unknown, defaulting to 1000 [ 180.524716][T10913] IPv6: Can't replace route, no match found [ 180.769417][T10920] batman_adv: batadv0: Adding interface: erspan1 [ 180.771128][T10920] batman_adv: batadv0: Not using interface erspan1 (retrying later): interface not active [ 180.782808][T10920] syz.5.1340: attempt to access beyond end of device [ 180.782808][T10920] loop11: rw=0, sector=0, nr_sectors = 1 limit=0 [ 180.787357][T10920] FAT-fs (loop11): unable to read boot sector [ 180.842486][ T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.950340][T10925] Bluetooth: (null): Invalid header checksum [ 181.020093][T10930] sctp: [Deprecated]: syz.7.1344 (pid 10930) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.020093][T10930] Use struct sctp_sack_info instead [ 181.030494][ T12] Bluetooth: (null): Invalid header checksum [ 181.033790][ T12] Bluetooth: (null): Invalid header checksum [ 181.137029][ T7610] Bluetooth: (null): Invalid header checksum [ 181.257435][ T7610] Bluetooth: (null): Invalid header checksum [ 181.300582][ T6019] udevd[6019]: setting mode of /dev/vcsu2 to 020660 failed: Read-only file system [ 181.314707][ T6019] udevd[6019]: setting owner of /dev/vcsu2 to uid=0, gid=5 failed: Read-only file system [ 181.360995][ T5899] udevd[5899]: setting mode of /dev/vcsa2 to 020660 failed: Read-only file system [ 181.364377][ T5899] udevd[5899]: setting owner of /dev/vcsa2 to uid=0, gid=5 failed: Read-only file system [ 181.375789][ T11] Bluetooth: (null): Invalid header checksum [ 181.397557][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1348'. [ 181.399811][T10944] netlink: 'syz.8.1348': attribute type 30 has an invalid length. [ 181.401762][T10944] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1348'. [ 181.486812][ T12] Bluetooth: (null): Invalid header checksum [ 181.569868][ T5954] Bluetooth: hci3: command tx timeout [ 181.606049][ T7610] Bluetooth: (null): Invalid header checksum [ 181.686192][T10953] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 181.688333][T10953] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 181.728072][ T11] Bluetooth: (null): Invalid header checksum [ 181.795866][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 181.875940][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.878871][ T5983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.317787][T10955] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1351'. [ 182.380117][T10960] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1351'. [ 182.387929][T10960] netlink: 'syz.9.1351': attribute type 3 has an invalid length. [ 182.398579][T10960] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.400980][T10960] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.403384][T10960] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.405555][T10960] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.425464][T10962] autofs: Unknown parameter 'v>}- xMK(C8$/Z楗ԥ 1-hm@mlj' [ 182.427079][T10960] vxlan0: entered promiscuous mode [ 182.810398][T10984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.812892][ C2] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 182.815315][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.823536][T10984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.908172][ T5983] IPVS: starting estimator thread 0... [ 182.996870][T10988] IPVS: using max 36 ests per chain, 86400 per kthread [ 183.076840][T10997] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 183.265821][ T5984] usb 12-1: new low-speed USB device number 3 using dummy_hcd [ 183.433705][ T5984] usb 12-1: Invalid ep0 maxpacket: 64 [ 183.586113][ T5984] usb 12-1: new low-speed USB device number 4 using dummy_hcd [ 183.665789][ T5954] Bluetooth: hci3: command 0x0419 tx timeout [ 183.731906][ T7610] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.755861][ T5984] usb 12-1: Invalid ep0 maxpacket: 64 [ 183.757504][ T5984] usb usb12-port1: attempt power cycle [ 183.802116][ T7610] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.886855][ T7610] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.928590][ T5954] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 183.934333][ T5954] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 183.946638][ T5954] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 183.952765][ T5954] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 183.956963][ T5954] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 183.959472][ T5954] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 184.022965][ T7610] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.048479][T11008] lo speed is unknown, defaulting to 1000 [ 184.126801][ T5984] usb 12-1: new low-speed USB device number 5 using dummy_hcd [ 184.150546][ T5984] usb 12-1: Invalid ep0 maxpacket: 64 [ 184.248001][ T7610] bridge_slave_1: left allmulticast mode [ 184.249535][ T7610] bridge_slave_1: left promiscuous mode [ 184.251121][ T7610] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.269838][ T7610] bridge_slave_0: left allmulticast mode [ 184.271415][ T7610] bridge_slave_0: left promiscuous mode [ 184.275389][ T7610] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.283198][ T5984] usb 12-1: new low-speed USB device number 6 using dummy_hcd [ 184.307302][ T39] kauditd_printk_skb: 699 callbacks suppressed [ 184.307312][ T39] audit: type=1400 audit(1731193917.817:28908): avc: denied { ioctl } for pid=10992 comm="syz.7.1363" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 184.315107][ T39] audit: type=1400 audit(1731193917.817:28909): avc: denied { write } for pid=11016 comm="syz.9.1371" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 184.321397][ T5984] usb 12-1: Invalid ep0 maxpacket: 64 [ 184.323063][ T5984] usb usb12-port1: unable to enumerate USB device [ 184.327981][ T39] audit: type=1400 audit(1731193917.817:28910): avc: denied { write open } for pid=11016 comm="syz.9.1371" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 184.338082][ T39] audit: type=1400 audit(1731193917.827:28911): avc: denied { ioctl } for pid=10992 comm="syz.7.1363" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 184.359218][ T39] audit: type=1400 audit(1731193917.827:28912): avc: denied { ioctl } for pid=10992 comm="syz.7.1363" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 184.365848][ T39] audit: type=1400 audit(1731193917.827:28913): avc: denied { mounton } for pid=11016 comm="syz.9.1371" path="/10/file1" dev="tmpfs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 184.373826][ T39] audit: type=1400 audit(1731193917.837:28914): avc: denied { read write } for pid=8126 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 184.381793][ T39] audit: type=1400 audit(1731193917.837:28915): avc: denied { read write open } for pid=8126 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 184.389946][ T39] audit: type=1400 audit(1731193917.837:28916): avc: denied { ioctl } for pid=8126 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 184.398213][ T39] audit: type=1400 audit(1731193917.877:28917): avc: denied { create } for pid=11016 comm="syz.9.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 184.516159][ T7610] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 184.677203][ T7610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.691523][ T7610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.695988][ T7610] infiniband syz1: set down [ 184.697538][ T7610] bond0 (unregistering): Released all slaves [ 184.903312][T11008] chnl_net:caif_netlink_parms(): no params data found [ 185.070175][T11008] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.073967][T11008] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.078206][T11008] bridge_slave_0: entered allmulticast mode [ 185.083555][T11008] bridge_slave_0: entered promiscuous mode [ 185.119624][T11008] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.121553][T11008] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.124114][T11008] bridge_slave_1: entered allmulticast mode [ 185.132071][T11008] bridge_slave_1: entered promiscuous mode [ 185.139404][T11017] orangefs_mount: mount request failed with -4 [ 185.192863][ T7610] hsr_slave_0: left promiscuous mode [ 185.195006][ T7610] hsr_slave_1: left promiscuous mode [ 185.197638][ T7610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.200052][ T7610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.202711][ T7610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.205083][ T7610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.246594][ T7610] veth1_macvtap: left promiscuous mode [ 185.248241][ T7610] veth0_macvtap: left promiscuous mode [ 185.249720][ T7610] veth1_vlan: left promiscuous mode [ 185.251440][ T7610] veth0_vlan: left promiscuous mode [ 185.374786][ T5954] Bluetooth: hci3: ACL packet for unknown connection handle 1816 [ 185.445164][T11050] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1378'. [ 185.715814][ T5954] Bluetooth: hci3: command 0x0419 tx timeout [ 186.047093][ T5954] Bluetooth: hci1: command tx timeout [ 186.201285][ T7610] team0 (unregistering): Port device team_slave_1 removed [ 186.307204][ T7610] team0 (unregistering): Port device team_slave_0 removed [ 186.435512][ T7611] smc: removing ib device syz1 [ 187.083234][T11008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.088578][T11048] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1377'. [ 187.097445][T11008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.225051][T11008] team0: Port device team_slave_0 added [ 187.246241][T11008] team0: Port device team_slave_1 added [ 187.348760][T11008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.350559][T11008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.365508][T11008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.375915][T11008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.377670][T11008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.384044][T11008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.503798][T11008] hsr_slave_0: entered promiscuous mode [ 187.521846][T11008] hsr_slave_1: entered promiscuous mode [ 187.539725][T11008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.542022][T11008] Cannot create hsr debugfs directory [ 187.600869][T11080] netlink: 'syz.7.1384': attribute type 10 has an invalid length. [ 187.607523][T11080] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 187.612040][T11081] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 187.684955][ T7610] IPVS: stop unused estimator thread 0... [ 187.791827][T11008] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.879400][T11008] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.990765][T11008] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.064135][T11008] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.115892][ T5954] Bluetooth: hci1: command tx timeout [ 188.242970][T11008] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 188.265350][T11008] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 188.271947][T11008] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 188.289067][T11008] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 188.422371][T11008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.452287][T11008] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.462572][ T7611] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.464478][ T7611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.480320][ T7611] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.482271][ T7611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.519335][T11108] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1393'. [ 188.559600][T11108] 9pnet_fd: Insufficient options for proto=fd [ 189.318297][ T39] kauditd_printk_skb: 456 callbacks suppressed [ 189.318311][ T39] audit: type=1400 audit(1731193922.827:29374): avc: denied { read write } for pid=11135 comm="syz.5.1400" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 189.328125][ T39] audit: type=1400 audit(1731193922.827:29375): avc: denied { read write open } for pid=11135 comm="syz.5.1400" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 189.336371][ T39] audit: type=1400 audit(1731193922.837:29376): avc: denied { create } for pid=11135 comm="syz.5.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 189.343148][ T39] audit: type=1400 audit(1731193922.837:29377): avc: denied { write } for pid=11135 comm="syz.5.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 189.350268][ T39] audit: type=1400 audit(1731193922.847:29378): avc: denied { ioctl } for pid=11135 comm="syz.5.1400" path="socket:[43254]" dev="sockfs" ino=43254 ioctlcmd=0x942a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 189.380319][ T39] audit: type=1400 audit(1731193922.887:29379): avc: denied { read write } for pid=8126 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.396024][ T39] audit: type=1400 audit(1731193922.887:29380): avc: denied { read write open } for pid=8126 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.403910][ T39] audit: type=1400 audit(1731193922.887:29381): avc: denied { ioctl } for pid=8126 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.445885][ T39] audit: type=1400 audit(1731193922.947:29382): avc: denied { create } for pid=11138 comm="syz.5.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 189.601289][T11008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.613136][ T39] audit: type=1400 audit(1731193923.117:29383): avc: denied { read write } for pid=9850 comm="syz-executor" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.673032][T11143] vxcan1: tx address claim with dest, not broadcast [ 189.694338][T11008] veth0_vlan: entered promiscuous mode [ 189.721205][T11008] veth1_vlan: entered promiscuous mode [ 189.780878][T11008] veth0_macvtap: entered promiscuous mode [ 189.789771][T11008] veth1_macvtap: entered promiscuous mode [ 189.816433][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.819109][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.821633][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.824244][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.826741][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.829346][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.831805][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.834369][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.836856][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.839483][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.841981][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.844591][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.847931][T11008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.856732][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.859421][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.861903][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.864593][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.868157][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.871017][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.873510][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.876382][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.878831][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.881484][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.883986][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.888238][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.891518][T11008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.901328][T11008] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.903611][T11008] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.905944][T11008] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.908201][T11008] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.011790][ T7610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.013737][ T7610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.035827][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 190.068180][ T7611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.071245][ T7611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.205830][ T5954] Bluetooth: hci1: command tx timeout [ 190.369845][T11157] xt_CT: No such helper "pptp" [ 190.908683][T11195] netlink: 15 bytes leftover after parsing attributes in process `syz.5.1413'. [ 191.030786][T11207] netlink: 'syz.1.1415': attribute type 4 has an invalid length. [ 191.033117][T11207] netlink: 'syz.1.1415': attribute type 4 has an invalid length. [ 191.036387][T11207] netlink: 126012 bytes leftover after parsing attributes in process `syz.1.1415'. [ 191.196796][T11211] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 192.003686][T11244] program syz.5.1423 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.159892][T11255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11255 comm=syz.5.1425 [ 192.276121][ T5297] Bluetooth: hci1: command tx timeout [ 192.283681][T11261] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 192.430083][T11267] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 192.539329][T11265] lo speed is unknown, defaulting to 1000 [ 192.641576][T11277] input: syz1 as /devices/virtual/input/input23 [ 192.917271][T11289] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1436'. [ 193.315891][ T5954] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 193.877457][ T1410] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.879250][ T1410] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.090873][T11326] netem: unknown loss type 0 [ 194.092278][T11326] netem: change failed [ 194.098237][T11324] mkiss: ax0: crc mode is auto. [ 194.330980][ T39] kauditd_printk_skb: 646 callbacks suppressed [ 194.330995][ T39] audit: type=1400 audit(1731193927.837:30030): avc: denied { execute } for pid=11329 comm="syz.5.1448" path="/227/cgroup.stat" dev="tmpfs" ino=1253 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 194.349409][ T39] audit: type=1400 audit(1731193927.857:30031): avc: denied { read write } for pid=9850 comm="syz-executor" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.366599][ T39] audit: type=1400 audit(1731193927.857:30032): avc: denied { read write open } for pid=9850 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.374184][ T39] audit: type=1400 audit(1731193927.857:30033): avc: denied { ioctl } for pid=9850 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.390956][ T39] audit: type=1400 audit(1731193927.897:30034): avc: denied { create } for pid=11339 comm="syz.7.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 194.410654][ T39] audit: type=1400 audit(1731193927.907:30035): avc: denied { bind } for pid=11339 comm="syz.7.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 194.415782][ T39] audit: type=1400 audit(1731193927.907:30036): avc: denied { setopt } for pid=11339 comm="syz.7.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 194.425957][ T39] audit: type=1400 audit(1731193927.917:30037): avc: denied { unmount } for pid=8126 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 194.435733][ T39] audit: type=1400 audit(1731193927.917:30038): avc: denied { read write } for pid=10748 comm="syz-executor" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.462401][ T39] audit: type=1400 audit(1731193927.917:30039): avc: denied { read write open } for pid=10748 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.986957][T11360] netlink: 'syz.7.1458': attribute type 3 has an invalid length. [ 194.988944][T11360] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1458'. [ 195.023818][T11362] hpfs: bad mount options. [ 195.044415][T11367] dlm: no local IP address has been set [ 195.047278][T11367] dlm: cannot start dlm midcomms -107 [ 195.074018][T11367] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1460'. [ 195.254984][T11375] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1462'. [ 195.340860][T11379] 9pnet_virtio: no channels available for device syz [ 195.357942][T11379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.362649][T11379] batadv_slave_0: entered promiscuous mode [ 195.369560][T11379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.372082][T11380] netlink: 'syz.9.1464': attribute type 1 has an invalid length. [ 195.374016][T11380] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1464'. [ 195.385479][T11380] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 195.547564][T11388] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1465'. [ 195.696061][T11390] nvme_fabrics: unknown parameter or missing value '(' in ctrl creation request [ 196.206550][T11405] overlayfs: missing 'workdir' [ 196.507718][T11417] lo speed is unknown, defaulting to 1000 [ 196.676696][T11414] xt_CT: No such helper "pptp" [ 196.936009][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 197.077652][ T9] usb 6-1: device descriptor read/64, error -71 [ 197.264395][T11434] binder: 11432:11434 ioctl c0306201 20000480 returned -22 [ 197.325839][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 197.452921][T11443] binder: BINDER_SET_CONTEXT_MGR already set [ 197.454482][T11443] binder: 11442:11443 ioctl 4018620d 20000100 returned -16 [ 197.460279][T11443] binder: BINDER_SET_CONTEXT_MGR already set [ 197.461777][T11443] binder: 11442:11443 ioctl 4018620d 20000100 returned -16 [ 197.475818][ T9] usb 6-1: device descriptor read/64, error -71 [ 197.479754][T11443] binder: BINDER_SET_CONTEXT_MGR already set [ 197.481344][T11443] binder: 11442:11443 ioctl 4018620d 20000100 returned -16 [ 197.483922][T11443] binder: BINDER_SET_CONTEXT_MGR already set [ 197.485451][T11443] binder: 11442:11443 ioctl 4018620d 20000100 returned -16 [ 197.487997][T11443] binder: BINDER_SET_CONTEXT_MGR already set [ 197.489534][T11443] binder: 11442:11443 ioctl 4018620d 20000100 returned -16 [ 197.492186][T11443] binder: BINDER_SET_CONTEXT_MGR already set [ 197.493668][T11443] binder: 11442:11443 ioctl 4018620d 20000100 returned -16 [ 197.496315][T11443] binder: BINDER_SET_CONTEXT_MGR already set [ 197.498063][T11443] binder: 11442:11443 ioctl 4018620d 20000100 returned -16 [ 197.500725][T11443] binder: BINDER_SET_CONTEXT_MGR already set [ 197.502332][T11443] binder: 11442:11443 ioctl 4018620d 20000100 returned -16 [ 197.504951][T11443] binder: BINDER_SET_CONTEXT_MGR already set [ 197.514912][T11443] binder: 11442:11443 ioctl 4018620d 20000100 returned -16 [ 197.586002][ T9] usb usb6-port1: attempt power cycle [ 197.636361][T11449] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1487'. [ 197.740016][T11452] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 197.936206][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 197.972661][ T9] usb 6-1: device descriptor read/8, error -71 [ 198.059359][T11470] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1493'. [ 198.206482][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 198.229009][ T9] usb 6-1: device descriptor read/8, error -71 [ 198.284932][T11476] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1494'. [ 198.336053][ T9] usb usb6-port1: unable to enumerate USB device [ 198.534319][T11480] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1496'. [ 198.598006][T11486] netlink: 'syz.7.1497': attribute type 10 has an invalid length. [ 198.600591][T11486] bond0: (slave bond_slave_0): Releasing backup interface [ 198.701102][T11488] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:20002 [ 198.710756][T11487] delete_channel: no stack [ 199.336379][ T39] kauditd_printk_skb: 981 callbacks suppressed [ 199.336391][ T39] audit: type=1400 audit(1731193932.847:31021): avc: denied { read write } for pid=8126 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.355418][ T39] audit: type=1400 audit(1731193932.847:31022): avc: denied { read write open } for pid=8126 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.364420][ T39] audit: type=1400 audit(1731193932.847:31023): avc: denied { ioctl } for pid=8126 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.398255][ T39] audit: type=1400 audit(1731193932.907:31024): avc: denied { unmount } for pid=9850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 199.417745][ T39] audit: type=1400 audit(1731193932.927:31025): avc: denied { read write } for pid=9850 comm="syz-executor" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.433069][ T39] audit: type=1400 audit(1731193932.927:31026): avc: denied { read write open } for pid=9850 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.446111][ T39] audit: type=1400 audit(1731193932.927:31027): avc: denied { ioctl } for pid=9850 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.483098][ T39] audit: type=1400 audit(1731193932.987:31028): avc: denied { execmem } for pid=11501 comm="syz.5.1502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 199.494628][ T39] audit: type=1400 audit(1731193932.997:31029): avc: denied { create } for pid=11502 comm="syz.7.1503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 199.507003][ T39] audit: type=1400 audit(1731193933.007:31030): avc: denied { create } for pid=11502 comm="syz.7.1503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 199.707941][T11503] net_ratelimit: 6 callbacks suppressed [ 199.707954][T11503] openvswitch: netlink: Actions may not be safe on all matching packets [ 199.919584][T11525] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 200.507304][ T5954] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 200.510257][ T5954] CPU: 2 UID: 0 PID: 5954 Comm: kworker/u33:8 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 200.513118][ T5954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 200.515911][ T5954] Workqueue: hci3 hci_rx_work [ 200.517177][ T5954] Call Trace: [ 200.518066][ T5954] [ 200.518863][ T5954] dump_stack_lvl+0x16c/0x1f0 [ 200.520119][ T5954] sysfs_warn_dup+0x7f/0xa0 [ 200.521319][ T5954] sysfs_create_dir_ns+0x24d/0x2b0 [ 200.522675][ T5954] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 200.524145][ T5954] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 200.525560][ T5954] ? kobject_add_internal+0x12d/0x990 [ 200.526974][ T5954] ? do_raw_spin_unlock+0x172/0x230 [ 200.528342][ T5954] kobject_add_internal+0x2c8/0x990 [ 200.529708][ T5954] kobject_add+0x16f/0x240 [ 200.530898][ T5954] ? __pfx_kobject_add+0x10/0x10 [ 200.532200][ T5954] ? class_to_subsys+0x3e/0x160 [ 200.533492][ T5954] ? do_raw_spin_unlock+0x172/0x230 [ 200.534860][ T5954] ? kobject_put+0xab/0x5a0 [ 200.536062][ T5954] device_add+0x289/0x1a70 [ 200.537321][ T5954] ? __pfx_dev_set_name+0x10/0x10 [ 200.538645][ T5954] ? __pfx_device_add+0x10/0x10 [ 200.539920][ T5954] ? mgmt_send_event_skb+0x2f2/0x460 [ 200.541304][ T5954] hci_conn_add_sysfs+0x17e/0x230 [ 200.542631][ T5954] le_conn_complete_evt+0x1078/0x1d80 [ 200.544032][ T5954] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 200.545524][ T5954] ? trace_contention_end+0xea/0x140 [ 200.546923][ T5954] hci_le_conn_complete_evt+0x23c/0x370 [ 200.548378][ T5954] hci_le_meta_evt+0x2e2/0x5d0 [ 200.549641][ T5954] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 200.551252][ T5954] hci_event_packet+0x666/0x1180 [ 200.552547][ T5954] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 200.553927][ T5954] ? __pfx_hci_event_packet+0x10/0x10 [ 200.555336][ T5954] ? mark_held_locks+0x9f/0xe0 [ 200.556265][ T5983] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 200.556580][ T5954] ? kcov_remote_start+0x3cf/0x6e0 [ 200.559937][ T5954] ? lockdep_hardirqs_on+0x7c/0x110 [ 200.561299][ T5954] hci_rx_work+0x2c6/0x16c0 [ 200.562505][ T5954] ? lock_acquire+0x2f/0xb0 [ 200.563693][ T5954] ? process_one_work+0x921/0x1ba0 [ 200.565044][ T5954] process_one_work+0x9c5/0x1ba0 [ 200.566339][ T5954] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 200.567809][ T5954] ? __pfx_process_one_work+0x10/0x10 [ 200.569215][ T5954] ? assign_work+0x1a0/0x250 [ 200.570438][ T5954] worker_thread+0x6c8/0xf00 [ 200.571666][ T5954] ? __kthread_parkme+0x148/0x220 [ 200.572985][ T5954] ? __pfx_worker_thread+0x10/0x10 [ 200.574329][ T5954] kthread+0x2c1/0x3a0 [ 200.575409][ T5954] ? _raw_spin_unlock_irq+0x23/0x50 [ 200.576776][ T5954] ? __pfx_kthread+0x10/0x10 [ 200.578010][ T5954] ret_from_fork+0x45/0x80 [ 200.579191][ T5954] ? __pfx_kthread+0x10/0x10 [ 200.580405][ T5954] ret_from_fork_asm+0x1a/0x30 [ 200.581669][ T5954] [ 200.583116][ T5954] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 200.586716][ T5954] Bluetooth: hci3: failed to register connection device [ 200.716540][ T5983] usb 10-1: Using ep0 maxpacket: 32 [ 200.763686][ T5983] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 200.766238][ T5983] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 200.768492][ T5983] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 200.770815][ T5983] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 200.773295][ T5983] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 200.786154][ T5983] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 200.789121][T11542] netlink: 'syz.1.1511': attribute type 9 has an invalid length. [ 200.789488][ T5983] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 200.793845][ T5983] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.819787][ T5983] usb 10-1: config 0 descriptor?? [ 201.044136][ T5983] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 201.056475][ T5983] usb 10-1: USB disconnect, device number 8 [ 201.066885][ T5983] usblp0: removed [ 201.107045][T11550] netlink: 'syz.1.1514': attribute type 1 has an invalid length. [ 201.109149][T11550] netlink: 9388 bytes leftover after parsing attributes in process `syz.1.1514'. [ 201.260375][T11538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.262612][T11538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.399520][ C2] ata1: illegal qc_active transition (00000000->0000c000) [ 201.463750][T11570] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 201.472340][T11567] tls_set_device_offload_rx: netdev not found [ 201.718033][ T1102] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 201.720655][ T1102] ata1.00: configured for UDMA/100 [ 201.828688][T11588] netlink: 'syz.1.1526': attribute type 9 has an invalid length. [ 201.830979][T11588] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.1526'. [ 201.842832][T11588] netlink: 'syz.1.1526': attribute type 9 has an invalid length. [ 201.844879][T11588] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.1526'. [ 201.850576][T11588] netlink: 'syz.1.1526': attribute type 9 has an invalid length. [ 201.852624][T11588] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.1526'. [ 201.856537][T11588] netlink: 'syz.1.1526': attribute type 9 has an invalid length. [ 201.858638][T11588] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.1526'. [ 201.862411][T11588] netlink: 'syz.1.1526': attribute type 9 has an invalid length. [ 201.864440][T11588] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.1526'. [ 201.868275][T11588] netlink: 'syz.1.1526': attribute type 9 has an invalid length. [ 201.871637][T11588] netlink: 'syz.1.1526': attribute type 9 has an invalid length. [ 201.875246][T11588] netlink: 'syz.1.1526': attribute type 9 has an invalid length. [ 202.811133][T11627] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.831175][T11629] No such timeout policy "syz1" [ 202.851730][T11627] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 202.853634][T11627] IPv6: NLM_F_CREATE should be set when creating new route [ 203.126027][T11627] batadv_slave_0: left promiscuous mode [ 203.140466][T11627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.391241][T11627] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.399577][T11627] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.406008][T11627] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.409627][T11627] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.505248][T11627] mac80211_hwsim hwsim18 wlan1: left allmulticast mode [ 203.522272][T11627] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 203.526117][T11627] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 203.530712][T11627] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 203.540824][T11627] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 203.549380][ T55] lo speed is unknown, defaulting to 1000 [ 203.805863][ T5954] Bluetooth: hci0: unexpected event for opcode 0x1009 [ 204.347379][ T39] kauditd_printk_skb: 917 callbacks suppressed [ 204.347391][ T39] audit: type=1400 audit(1731193937.857:31948): avc: denied { create } for pid=11668 comm="syz.1.1549" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 204.354877][ T39] audit: type=1400 audit(1731193937.857:31949): avc: denied { read write } for pid=11668 comm="syz.1.1549" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 204.371320][ T39] audit: type=1400 audit(1731193937.857:31950): avc: denied { read write open } for pid=11668 comm="syz.1.1549" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 204.380338][ T39] audit: type=1400 audit(1731193937.867:31951): avc: denied { bpf } for pid=11668 comm="syz.1.1549" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 204.387348][ T39] audit: type=1400 audit(1731193937.867:31952): avc: denied { read write } for pid=10748 comm="syz-executor" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.393453][ T39] audit: type=1400 audit(1731193937.867:31953): avc: denied { read write open } for pid=10748 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.399719][ T39] audit: type=1400 audit(1731193937.877:31954): avc: denied { ioctl } for pid=10748 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.406417][ T39] audit: type=1400 audit(1731193937.877:31955): avc: denied { mounton } for pid=11668 comm="syz.1.1549" path="/25" dev="tmpfs" ino=145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 204.420595][ T39] audit: type=1400 audit(1731193937.927:31956): avc: denied { prog_load } for pid=11673 comm="syz.9.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 204.426055][ T39] audit: type=1400 audit(1731193937.937:31957): avc: denied { bpf } for pid=11673 comm="syz.9.1550" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 204.449687][T11674] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:0 [ 204.875837][ T5942] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 205.031120][ T5942] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 205.033301][ T5942] usb 10-1: config 0 has no interface number 0 [ 205.034921][ T5942] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 205.038622][ T5942] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 205.041680][ T5942] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 205.044511][ T5942] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 205.047378][ T5942] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 205.050683][ T5942] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 205.052948][ T5942] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.058919][ T5942] usb 10-1: config 0 descriptor?? [ 205.065265][T11679] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 205.070680][ T5942] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 205.416756][T11700] __nla_validate_parse: 28 callbacks suppressed [ 205.416767][T11700] netlink: 132132 bytes leftover after parsing attributes in process `syz.1.1558'. [ 205.493514][ T6001] usb 10-1: USB disconnect, device number 9 [ 205.497349][ T6001] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 205.941428][T11720] lo speed is unknown, defaulting to 1000 [ 206.716738][T11749] bond2: entered allmulticast mode [ 206.778827][T11751] netlink: 16126 bytes leftover after parsing attributes in process `syz.5.1574'. [ 206.781090][T11751] netlink: 183228 bytes leftover after parsing attributes in process `syz.5.1574'. [ 206.836211][ T5297] Bluetooth: hci3: command 0x0419 tx timeout [ 207.229625][T11772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1579'. [ 207.325874][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 207.344049][T11774] geneve2: entered promiscuous mode [ 207.346058][T11774] geneve2: entered allmulticast mode [ 207.479314][ T7610] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 207.659258][T11787] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1583'. [ 207.709305][T11785] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1584'. [ 207.712164][T11785] netem: invalid attributes len -16 [ 207.713628][T11785] netem: change failed [ 208.295834][ T5942] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 208.451632][ T5942] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.454522][ T5942] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.459202][ T5942] usb 14-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 208.464863][ T5942] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.471210][ T5942] usb 14-1: config 0 descriptor?? [ 208.578793][T11821] overlayfs: failed to resolve './file0': -2 [ 208.777395][T11833] lo speed is unknown, defaulting to 1000 [ 208.915348][ T5942] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 208.918131][ T5942] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 208.921300][ T5942] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/0003:0D8C:0022.0008/input/input25 [ 208.934801][ T5942] cm6533_jd 0003:0D8C:0022.0008: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.9-1/input0 [ 208.972171][T11842] vxfs: WRONG superblock magic 00000000 at 1 [ 208.974369][T11842] vxfs: WRONG superblock magic 00000000 at 8 [ 208.976841][T11842] vxfs: can't find superblock. [ 209.181828][T11802] block nbd9: NBD_DISCONNECT [ 209.206706][T11802] block nbd9: Send disconnect failed -107 [ 209.208620][T11802] block nbd9: Disconnected due to user request. [ 209.210243][T11802] block nbd9: shutting down sockets [ 209.241328][T11854] SELinux: Context system_u:object_r:fuse_device_t:s0 is not valid (left unmapped). [ 209.349892][ T8] usb 14-1: USB disconnect, device number 2 [ 209.395489][ T39] kauditd_printk_skb: 929 callbacks suppressed [ 209.395500][ T39] audit: type=1400 audit(1731193942.897:32887): avc: denied { module_request } for pid=11845 comm="syz.7.1599" kmod="crypto-authenc(digest_null,ecb(cipher_null))-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 209.400312][T11856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=11856 comm=syz.5.1601 [ 209.420772][ T39] audit: type=1400 audit(1731193942.927:32888): avc: denied { create } for pid=11855 comm="syz.5.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 209.427194][ T39] audit: type=1400 audit(1731193942.927:32889): avc: denied { module_request } for pid=11855 comm="syz.5.1601" kmod="net-pf-10-proto-3-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 209.614206][ T39] audit: type=1400 audit(1731193943.117:32890): avc: denied { module_request } for pid=11855 comm="syz.5.1601" kmod="net-pf-10-proto-3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 209.635025][ T39] audit: type=1400 audit(1731193943.137:32891): avc: denied { read } for pid=5341 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 209.640678][ T39] audit: type=1400 audit(1731193943.137:32892): avc: denied { search } for pid=5341 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.646248][ T39] audit: type=1400 audit(1731193943.137:32893): avc: denied { append } for pid=5341 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 209.652968][ T39] audit: type=1400 audit(1731193943.137:32894): avc: denied { append open } for pid=5341 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 209.665760][ T39] audit: type=1400 audit(1731193943.137:32895): avc: denied { getattr } for pid=5341 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 209.671552][ T39] audit: type=1400 audit(1731193943.167:32896): avc: denied { read } for pid=5341 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 210.925875][T11905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1613'. [ 211.028580][T11907] netlink: 256 bytes leftover after parsing attributes in process `syz.9.1614'. [ 211.030965][T11907] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1614'. [ 211.893192][T11944] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=512 sclass=netlink_tcpdiag_socket pid=11944 comm=syz.5.1625 [ 211.923333][T11944] validate_nla: 29 callbacks suppressed [ 211.923343][T11944] netlink: 'syz.5.1625': attribute type 1 has an invalid length. [ 211.930522][T11944] netlink: 9348 bytes leftover after parsing attributes in process `syz.5.1625'. [ 211.932864][T11944] netlink: 'syz.5.1625': attribute type 1 has an invalid length. [ 211.934855][T11944] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1625'. [ 212.038782][T11949] overlay: ./file1 is not a directory [ 212.328439][T11961] input: syz0 as /devices/virtual/input/input26 [ 212.432576][T11965] 9pnet_fd: Insufficient options for proto=fd [ 212.538516][T11977] netlink: 'syz.9.1635': attribute type 1 has an invalid length. [ 212.540531][T11977] netlink: 112860 bytes leftover after parsing attributes in process `syz.9.1635'. [ 212.542871][T11977] netlink: 9 bytes leftover after parsing attributes in process `syz.9.1635'. [ 212.563429][T11977] hfs: can't find a HFS filesystem on dev nullb0 [ 212.602230][T11977] netlink: 88 bytes leftover after parsing attributes in process `syz.9.1635'. [ 212.614554][T11977] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1635'. [ 212.773907][T11989] binder: Unknown parameter 'staglobal' [ 213.250227][T12003] netlink: 'syz.5.1642': attribute type 10 has an invalid length. [ 213.254825][T12003] team0: Device hsr_slave_0 failed to register rx_handler [ 213.295107][T12003] REISERFS warning (device nullb0): super-6502 reiserfs_getopt: unknown mount option "" [ 213.564322][T12020] netlink: 16126 bytes leftover after parsing attributes in process `syz.9.1647'. [ 213.785467][T12028] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 213.794833][T12031] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.406073][ T39] kauditd_printk_skb: 729 callbacks suppressed [ 214.406084][ T39] audit: type=1400 audit(1731193947.917:33626): avc: denied { create } for pid=12046 comm="syz.9.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 214.413502][ T39] audit: type=1400 audit(1731193947.917:33627): avc: denied { write } for pid=12046 comm="syz.9.1655" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 214.418772][ T5954] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 214.419641][ T39] audit: type=1400 audit(1731193947.917:33629): avc: denied { map } for pid=12047 comm="syz.7.1656" path="socket:[49538]" dev="sockfs" ino=49538 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 214.429332][ T39] audit: type=1400 audit(1731193947.917:33628): avc: denied { write } for pid=12046 comm="syz.9.1655" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 214.435454][ T39] audit: type=1400 audit(1731193947.927:33630): avc: denied { create } for pid=12047 comm="syz.7.1656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 214.440768][ T39] audit: type=1400 audit(1731193947.927:33631): avc: denied { ioctl } for pid=12047 comm="syz.7.1656" path="socket:[48719]" dev="sockfs" ino=48719 ioctlcmd=0x9417 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 214.447458][ T39] audit: type=1400 audit(1731193947.927:33632): avc: denied { create } for pid=12047 comm="syz.7.1656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 214.452390][ T39] audit: type=1400 audit(1731193947.937:33633): avc: denied { create } for pid=12046 comm="syz.9.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 214.457784][ T39] audit: type=1400 audit(1731193947.937:33634): avc: denied { create } for pid=12047 comm="syz.7.1656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 214.462761][ T39] audit: type=1400 audit(1731193947.937:33635): avc: denied { bind } for pid=12046 comm="syz.9.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 214.541180][ T5954] block nbd9: Receive control failed (result -32) [ 214.584134][ T6019] block nbd9: shutting down sockets [ 215.103419][T12072] 9pnet_virtio: no channels available for device [ 215.126046][T12076] netlink: 'syz.1.1663': attribute type 5 has an invalid length. [ 215.359859][T12088] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 215.361539][T12088] PKCS7: Only support pkcs7_signedData type [ 215.389321][T12094] netlink: 'syz.9.1670': attribute type 11 has an invalid length. [ 215.400897][T12095] xt_CT: You must specify a L4 protocol and not use inversions on it [ 215.438215][T12090] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode [ 215.462672][T12089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.610934][T12107] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.612971][T12107] IPv6: NLM_F_CREATE should be set when creating new route [ 215.615196][T12107] IPv6: NLM_F_CREATE should be set when creating new route [ 215.618595][T12108] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.319385][T12138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12138 comm=syz.9.1681 [ 216.446228][T12141] xt_l2tp: invalid flags combination: 4 [ 216.563609][T12143] IPVS: Error connecting to the multicast addr [ 217.029674][T12133] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 217.031391][T12133] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 217.032970][T12133] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 217.067966][T12133] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 217.096304][T12133] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 217.117631][T12133] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 217.119312][T12133] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 217.121883][T12133] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 218.275825][ T5954] Bluetooth: hci0: command 0x080f tx timeout [ 219.076446][ T5954] Bluetooth: hci3: command 0x0419 tx timeout [ 219.166079][ T5954] Bluetooth: hci1: command 0x0c1a tx timeout [ 221.155897][ T5954] Bluetooth: hci3: command 0x0419 tx timeout [ 221.167980][ T39] kauditd_printk_skb: 537 callbacks suppressed [ 221.167993][ T39] audit: type=1400 audit(1731193954.677:34173): avc: denied { read } for pid=5341 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 221.177231][ T39] audit: type=1400 audit(1731193954.677:34174): avc: denied { search } for pid=5341 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.182940][ T39] audit: type=1400 audit(1731193954.677:34175): avc: denied { append } for pid=5341 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 221.188759][ T39] audit: type=1400 audit(1731193954.677:34176): avc: denied { append open } for pid=5341 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 221.194655][ T39] audit: type=1400 audit(1731193954.677:34177): avc: denied { getattr } for pid=5341 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 221.236402][ T5954] Bluetooth: hci1: command 0x0c1a tx timeout [ 223.235868][ T5954] Bluetooth: hci3: command 0x0419 tx timeout [ 223.249459][ T39] audit: type=1400 audit(1731193956.757:34178): avc: denied { read } for pid=5341 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 223.256496][ T39] audit: type=1400 audit(1731193956.757:34179): avc: denied { search } for pid=5341 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.262625][ T39] audit: type=1400 audit(1731193956.757:34180): avc: denied { append } for pid=5341 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 223.268866][ T39] audit: type=1400 audit(1731193956.757:34181): avc: denied { append open } for pid=5341 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 223.276256][ T39] audit: type=1400 audit(1731193956.757:34182): avc: denied { getattr } for pid=5341 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 223.315843][ T5954] Bluetooth: hci1: command 0x0c1a tx timeout [ 225.325882][ T5954] Bluetooth: hci3: command 0x0419 tx timeout [ 228.791526][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 228.791538][ T39] audit: type=1400 audit(1731193962.297:34188): avc: denied { read append } for pid=12167 comm="syz.5.1692" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 228.803327][ T39] audit: type=1400 audit(1731193962.297:34189): avc: denied { read open } for pid=12167 comm="syz.5.1692" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 228.811743][ T39] audit: type=1400 audit(1731193962.297:34190): avc: denied { ioctl } for pid=12167 comm="syz.5.1692" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 228.819925][ T39] audit: type=1400 audit(1731193962.297:34191): avc: denied { read } for pid=12168 comm="syz.9.1693" name="v4l-subdev0" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 228.830817][ T39] audit: type=1400 audit(1731193962.307:34192): avc: denied { read open } for pid=12168 comm="syz.9.1693" path="/dev/v4l-subdev0" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 228.841446][ T39] audit: type=1400 audit(1731193962.307:34193): avc: denied { ioctl } for pid=12168 comm="syz.9.1693" path="/dev/v4l-subdev0" dev="devtmpfs" ino=965 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 228.851859][ T39] audit: type=1400 audit(1731193962.307:34194): avc: denied { ioctl } for pid=12168 comm="syz.9.1693" path="/dev/v4l-subdev0" dev="devtmpfs" ino=965 ioctlcmd=0x5600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 228.860679][ T39] audit: type=1400 audit(1731193962.307:34195): avc: denied { ioctl } for pid=12168 comm="syz.9.1693" path="/dev/v4l-subdev0" dev="devtmpfs" ino=965 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 228.867627][ T39] audit: type=1400 audit(1731193962.307:34196): avc: denied { ioctl } for pid=12168 comm="syz.9.1693" path="/dev/v4l-subdev0" dev="devtmpfs" ino=965 ioctlcmd=0x5600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 228.874722][ T39] audit: type=1400 audit(1731193962.307:34197): avc: denied { read } for pid=12168 comm="syz.9.1693" name="v4l-subdev0" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 228.967114][T12183] xt_policy: output policy not valid in PREROUTING and INPUT [ 229.183292][T12202] syz.9.1701: attempt to access beyond end of device [ 229.183292][T12202] nbd9: rw=0, sector=0, nr_sectors = 8 limit=0 [ 229.276626][T12201] 9pnet_fd: Insufficient options for proto=fd [ 229.495041][T12218] openvswitch: netlink: nsh attribute has 65512 unknown bytes. [ 229.500801][T12218] openvswitch: netlink: Actions may not be safe on all matching packets [ 229.697904][T12219] Process accounting resumed [ 230.046441][T12246] lo speed is unknown, defaulting to 1000 [ 232.557907][T12266] F2FS-fs (loop19): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 232.560190][T12266] F2FS-fs (loop19): Can't find valid F2FS filesystem in 1th superblock [ 232.562692][T12266] F2FS-fs (loop19): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 232.564794][T12266] F2FS-fs (loop19): Can't find valid F2FS filesystem in 2th superblock [ 232.589654][T12269] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=12269 comm=syz.7.1719 [ 232.699134][T12273] xt_socket: unknown flags 0x8 [ 233.833912][ T39] kauditd_printk_skb: 960 callbacks suppressed [ 233.833922][ T39] audit: type=1400 audit(1731193967.337:35158): avc: denied { read write } for pid=9850 comm="syz-executor" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 233.857905][ T39] audit: type=1400 audit(1731193967.337:35159): avc: denied { read write open } for pid=9850 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 233.883176][ T39] audit: type=1400 audit(1731193967.337:35160): avc: denied { ioctl } for pid=9850 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 233.898074][ T39] audit: type=1400 audit(1731193967.347:35161): avc: denied { read } for pid=5341 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 233.924178][ T39] audit: type=1400 audit(1731193967.357:35162): avc: denied { search } for pid=5341 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.944471][ T39] audit: type=1400 audit(1731193967.357:35163): avc: denied { append } for pid=5341 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 233.957549][ T39] audit: type=1400 audit(1731193967.357:35164): avc: denied { append open } for pid=5341 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 233.966451][ T39] audit: type=1400 audit(1731193967.357:35165): avc: denied { getattr } for pid=5341 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 233.973110][ T39] audit: type=1400 audit(1731193967.427:35166): avc: denied { audit_control } for pid=12337 comm="syz.9.1734" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 233.979430][ T39] audit: type=1400 audit(1731193967.437:35167): avc: denied { prog_load } for pid=12337 comm="syz.9.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 234.028223][T12340] netlink: 'syz.7.1735': attribute type 11 has an invalid length. [ 234.082698][T12342] netlink: 'syz.9.1736': attribute type 3 has an invalid length. [ 234.616226][T12368] __nla_validate_parse: 2 callbacks suppressed [ 234.616238][T12368] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1743'. [ 235.087246][T12382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.147865][T12382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.208233][T12382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.344214][T12384] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1748'. [ 235.346826][T12385] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1748'. [ 235.350545][T12384] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1748'. [ 235.611982][T12395] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1750'. [ 235.628122][T12395] netlink: 'syz.9.1750': attribute type 7 has an invalid length. [ 235.630183][T12395] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1750'. [ 235.879070][T12398] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1753'. [ 237.018428][T12453] binder: BINDER_SET_CONTEXT_MGR already set [ 237.020058][T12453] binder: 12449:12453 ioctl 4018620d 20000100 returned -16 [ 237.026195][T12452] binder: 12449:12452 ioctl c0306201 20000080 returned -22 [ 237.377783][T12462] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 238.240669][T12483] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1776'. [ 238.998377][ T39] kauditd_printk_skb: 1844 callbacks suppressed [ 238.998387][ T39] audit: type=1800 audit(1731193972.507:37012): pid=12478 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.7.1774" name="/" dev="fuse" ino=1 res=0 errno=0 [ 239.010951][ T39] audit: type=1400 audit(1731193972.517:37013): avc: denied { read } for pid=5341 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 239.018564][ T39] audit: type=1400 audit(1731193972.527:37014): avc: denied { search } for pid=5341 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.024126][ T39] audit: type=1400 audit(1731193972.527:37015): avc: denied { append } for pid=5341 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 239.032412][ T39] audit: type=1400 audit(1731193972.527:37016): avc: denied { append open } for pid=5341 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 239.041220][ T39] audit: type=1400 audit(1731193972.527:37017): avc: denied { getattr } for pid=5341 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 239.048559][ T39] audit: type=1400 audit(1731193972.537:37018): avc: denied { unmount } for pid=9850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 239.053754][ T39] audit: type=1400 audit(1731193972.547:37019): avc: denied { read write } for pid=10748 comm="syz-executor" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 239.060354][ T39] audit: type=1400 audit(1731193972.547:37020): avc: denied { read write open } for pid=10748 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 239.066936][ T39] audit: type=1400 audit(1731193972.547:37021): avc: denied { ioctl } for pid=10748 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 239.267065][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1785'. [ 239.396336][ T1111] sr 2:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 239.398937][ T1111] sr 2:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 239.400951][ T1111] sr 2:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 239.403053][ T1111] sr 2:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 239.405406][ T1111] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 239.415848][ T1111] buffer_io_error: 4 callbacks suppressed [ 239.415859][ T1111] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 239.530921][T12529] lo speed is unknown, defaulting to 1000 [ 239.649099][T12537] xt_ipcomp: unknown flags 12 [ 239.956081][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.983733][T12551] tipc: Started in network mode [ 239.987326][T12551] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 239.991515][T12551] tipc: Enabled bearer , priority 0 [ 240.694382][T12585] ================================================================== [ 240.696460][T12585] BUG: KASAN: vmalloc-out-of-bounds in acpi_nfit_ctl+0x19e8/0x1cf0 [ 240.698534][T12585] Read of size 4 at addr ffffc90005d9b038 by task syz.9.1804/12585 [ 240.700758][T12585] [ 240.701953][T12585] CPU: 0 UID: 0 PID: 12585 Comm: syz.9.1804 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 240.705273][T12585] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 240.707924][T12585] Call Trace: [ 240.708739][T12585] [ 240.709462][T12585] dump_stack_lvl+0x116/0x1f0 [ 240.710681][T12585] print_report+0xc3/0x620 [ 240.711865][T12585] ? __virt_addr_valid+0x5e/0x590 [ 240.713213][T12585] kasan_report+0xd9/0x110 [ 240.714420][T12585] ? acpi_nfit_ctl+0x19e8/0x1cf0 [ 240.715731][T12585] ? acpi_nfit_ctl+0x19e8/0x1cf0 [ 240.717005][T12585] acpi_nfit_ctl+0x19e8/0x1cf0 [ 240.718271][T12585] ? rcu_is_watching+0x12/0xc0 [ 240.719533][T12585] ? trace_contention_end+0xea/0x140 [ 240.720918][T12585] ? __pfx_acpi_nfit_ctl+0x10/0x10 [ 240.722269][T12585] ? __mutex_lock+0x1a6/0x9c0 [ 240.723509][T12585] ? __might_fault+0x13b/0x190 [ 240.724790][T12585] ? nd_ioctl+0xf7a/0x18c0 [ 240.725950][T12585] ? __pfx___mutex_lock+0x10/0x10 [ 240.727249][T12585] ? __might_fault+0xe3/0x190 [ 240.728487][T12585] nd_ioctl+0x13bc/0x18c0 [ 240.729628][T12585] ? __pfx_acpi_nfit_clear_to_send+0x10/0x10 [ 240.731211][T12585] ? __pfx_nd_ioctl+0x10/0x10 [ 240.732450][T12585] ? trace_lock_acquire+0x14a/0x1d0 [ 240.733816][T12585] ? selinux_file_ioctl+0x180/0x270 [ 240.735177][T12585] ? selinux_file_ioctl+0xb4/0x270 [ 240.736477][T12585] ? __pfx_bus_ioctl+0x10/0x10 [ 240.737738][T12585] __x64_sys_ioctl+0x18f/0x220 [ 240.738985][T12585] do_syscall_64+0xcd/0x250 [ 240.740123][T12585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.741620][T12585] RIP: 0033:0x7fa75577e719 [ 240.742774][T12585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.747689][T12585] RSP: 002b:00007fa75661c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.749868][T12585] RAX: ffffffffffffffda RBX: 00007fa755935f80 RCX: 00007fa75577e719 [ 240.751939][T12585] RDX: 0000000020000140 RSI: 00000000c008640a RDI: 0000000000000007 [ 240.754004][T12585] RBP: 00007fa7557f139e R08: 0000000000000000 R09: 0000000000000000 [ 240.755637][T12590] tmpfs: Unknown parameter 'usrquotaeo#' [ 240.756066][T12585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.756076][T12585] R13: 0000000000000000 R14: 00007fa755935f80 R15: 00007fff5151e998 [ 240.756086][T12585] [ 240.756091][T12585] [ 240.756096][T12585] The buggy address belongs to the virtual mapping at [ 240.756096][T12585] [ffffc90005d9b000, ffffc90005d9d000) created by: [ 240.756096][T12585] nd_ioctl+0xf14/0x18c0 [ 240.756114][T12585] [ 240.756116][T12585] The buggy address belongs to the physical page: [ 240.756120][T12585] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88803aa12e58 pfn:0x3aa12 [ 240.756131][T12585] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 240.756145][T12585] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 240.756153][T12585] raw: ffff88803aa12e58 0000000000000000 00000001ffffffff 0000000000000000 [ 240.778196][T12585] page dumped because: kasan: bad access detected [ 240.779769][T12585] page_owner tracks the page as allocated [ 240.781196][T12585] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), pid 12585, tgid 12584 (syz.9.1804), ts 240694371369, free_ts 240686058241 [ 240.785923][T12585] post_alloc_hook+0x2d1/0x350 [ 240.787191][T12585] get_page_from_freelist+0xf7d/0x2d10 [ 240.788610][T12585] __alloc_pages_noprof+0x223/0x25a0 [ 240.789989][T12585] alloc_pages_bulk_noprof+0x77c/0x1110 [ 240.791437][T12585] alloc_pages_bulk_array_mempolicy_noprof+0x250/0x11f0 [ 240.793232][T12585] __vmalloc_node_range_noprof+0x517/0x15a0 [ 240.794777][T12585] vmalloc_noprof+0x6b/0x90 [ 240.795971][T12585] nd_ioctl+0xf14/0x18c0 [ 240.797089][T12585] __x64_sys_ioctl+0x18f/0x220 [ 240.798353][T12585] do_syscall_64+0xcd/0x250 [ 240.799543][T12585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.801087][T12585] page last free pid 16 tgid 16 stack trace: [ 240.802647][T12585] free_unref_page+0x5f4/0xdc0 [ 240.803918][T12585] rcu_core+0x79d/0x14d0 [ 240.805040][T12585] handle_softirqs+0x213/0x8f0 [ 240.806309][T12585] run_ksoftirqd+0x3a/0x60 [ 240.807483][T12585] smpboot_thread_fn+0x661/0xa30 [ 240.808760][T12585] kthread+0x2c1/0x3a0 [ 240.809790][T12585] ret_from_fork+0x45/0x80 [ 240.810930][T12585] ret_from_fork_asm+0x1a/0x30 [ 240.812156][T12585] [ 240.812790][T12585] Memory state around the buggy address: [ 240.814241][T12585] ffffc90005d9af00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 240.816267][T12585] ffffc90005d9af80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 240.818320][T12585] >ffffc90005d9b000: 00 00 00 00 00 00 00 03 f8 f8 f8 f8 f8 f8 f8 f8 [ 240.820391][T12585] ^ [ 240.821863][T12585] ffffc90005d9b080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 240.823952][T12585] ffffc90005d9b100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 240.826037][T12585] ================================================================== [ 240.833107][T12585] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 240.835026][T12585] CPU: 0 UID: 0 PID: 12585 Comm: syz.9.1804 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 240.837744][T12585] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 240.840475][T12585] Call Trace: [ 240.841348][T12585] [ 240.842130][T12585] dump_stack_lvl+0x3d/0x1f0 [ 240.843348][T12585] panic+0x71d/0x800 [ 240.844368][T12585] ? __pfx_panic+0x10/0x10 [ 240.845470][T12585] ? preempt_schedule_thunk+0x1a/0x30 [ 240.846788][T12585] ? preempt_schedule_common+0x44/0xc0 [ 240.848170][T12585] check_panic_on_warn+0xab/0xb0 [ 240.849435][T12585] end_report+0x117/0x180 [ 240.850539][T12585] kasan_report+0xe9/0x110 [ 240.851673][T12585] ? acpi_nfit_ctl+0x19e8/0x1cf0 [ 240.852925][T12585] ? acpi_nfit_ctl+0x19e8/0x1cf0 [ 240.854235][T12585] acpi_nfit_ctl+0x19e8/0x1cf0 [ 240.855456][T12585] ? rcu_is_watching+0x12/0xc0 [ 240.856621][T12585] ? trace_contention_end+0xea/0x140 [ 240.857889][T12585] ? __pfx_acpi_nfit_ctl+0x10/0x10 [ 240.859199][T12585] ? __mutex_lock+0x1a6/0x9c0 [ 240.860422][T12585] ? __might_fault+0x13b/0x190 [ 240.861616][T12585] ? nd_ioctl+0xf7a/0x18c0 [ 240.862797][T12585] ? __pfx___mutex_lock+0x10/0x10 [ 240.864120][T12585] ? __might_fault+0xe3/0x190 [ 240.865367][T12585] nd_ioctl+0x13bc/0x18c0 [ 240.866511][T12585] ? __pfx_acpi_nfit_clear_to_send+0x10/0x10 [ 240.868072][T12585] ? __pfx_nd_ioctl+0x10/0x10 [ 240.869305][T12585] ? trace_lock_acquire+0x14a/0x1d0 [ 240.870675][T12585] ? selinux_file_ioctl+0x180/0x270 [ 240.872000][T12585] ? selinux_file_ioctl+0xb4/0x270 [ 240.873316][T12585] ? __pfx_bus_ioctl+0x10/0x10 [ 240.874558][T12585] __x64_sys_ioctl+0x18f/0x220 [ 240.875784][T12585] do_syscall_64+0xcd/0x250 [ 240.876957][T12585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.878460][T12585] RIP: 0033:0x7fa75577e719 [ 240.879590][T12585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.884516][T12585] RSP: 002b:00007fa75661c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.886639][T12585] RAX: ffffffffffffffda RBX: 00007fa755935f80 RCX: 00007fa75577e719 [ 240.888690][T12585] RDX: 0000000020000140 RSI: 00000000c008640a RDI: 0000000000000007 [ 240.890712][T12585] RBP: 00007fa7557f139e R08: 0000000000000000 R09: 0000000000000000 [ 240.892759][T12585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.894799][T12585] R13: 0000000000000000 R14: 00007fa755935f80 R15: 00007fff5151e998 [ 240.896804][T12585] [ 240.898134][T12585] Kernel Offset: disabled [ 240.899229][T12585] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:12:54 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850b8a45 RDI=ffffffff9aaebc40 RBP=ffffffff9aaebc00 RSP=ffffc90004397598 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3030303963666666 R12=0000000000000000 R13=0000000000000032 R14=ffffffff850b89e0 R15=0000000000000000 RIP=ffffffff850b8a6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa75661c6c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555570a5d808 CR3=00000000504de000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a96ff223b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a96ff2248 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a96ff2242 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a96ff2256 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a96ff22dc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a96ff23ba ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9418d78fb74af124 6de5cb83455b0cb8 afbadd60256cbe61 f494a42fcc2db5c5 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7ecc62a3de3da086 59b8bf945e096faa 4dc8347526670004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 820a4114e4d2d03b e439fe15a8b70546 843bc136f3d43c16 c12707714e888266 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b5dafae9f63a1a11 21c495a50741c064 ed5f679562d631c6 9491bda6b8558495 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c9b5dafae9f63a1a 1121c495a50741c0 64ed5f679562d631 c69491bda6b85584 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 95820a4114e4d2d0 3be439fe15a8b705 46843bc136f3d43c 16c12707714e8882 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 667ecc62a3de3da0 8659b8bf945e096f aa4dc834752667e2 eeb8c7516273ea77 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 709418d78fb74af1 246de5cb83455b0c b8afbadd60256cbe 61f494a42fcc2db5 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000147967 RBX=0000000000000001 RCX=ffffffff8b237429 RDX=0000000000000000 RSI=ffffffff8b6cd040 RDI=ffffffff8bd1b3c0 RBP=ffffed1003b58910 RSP=ffffc90000187e08 R8 =0000000000000001 R9 =ffffed100d4e7025 R10=ffff88806a73812b R11=0000000000000000 R12=0000000000000001 R13=ffff88801dac4880 R14=ffffffff905f58c8 R15=0000000000000000 RIP=ffffffff8b23880f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055558c4ed808 CR3=0000000025bac000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=abf71a44abf71a44 abf71a44abf71a44 abf71a44abf71a44 abf71a44abf71a44 abf71a44abf71a44 abf71a44abf71a44 abf71a44abf71a44 abf71a44abf71a44 ZMM22=88830ec288830ec2 88830ec288830ec2 88830ec288830ec2 88830ec288830ec2 88830ec288830ec2 88830ec288830ec2 88830ec288830ec2 88830ec288830ec2 ZMM23=cb7b7741cb7b7741 cb7b7741cb7b7741 cb7b7741cb7b7741 cb7b7741cb7b7741 cb7b7741cb7b7741 cb7b7741cb7b7741 cb7b7741cb7b7741 cb7b7741cb7b7741 ZMM24=d6323043d6323043 d6323043d6323043 d6323043d6323043 d6323043d6323043 d6323043d6323043 d6323043d6323043 d6323043d6323043 d6323043d6323043 ZMM25=d408de09d408de09 d408de09d408de09 d408de09d408de09 d408de09d408de09 d408de09d408de09 d408de09d408de09 d408de09d408de09 d408de09d408de09 ZMM26=8ece910a8ece910a 8ece910a8ece910a 8ece910a8ece910a 8ece910a8ece910a 8ece910a8ece910a 8ece910a8ece910a 8ece910a8ece910a 8ece910a8ece910a ZMM27=e6090effe6090eff e6090effe6090eff e6090effe6090eff e6090effe6090eff e6090effe6090eff e6090effe6090eff e6090effe6090eff e6090effe6090eff ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=6408000064080000 6408000064080000 6408000064080000 6408000064080000 6408000064080000 6408000064080000 6408000064080000 6408000064080000 info registers vcpu 2 CPU#2 RAX=ffffffff96e2ec40 RBX=0000000000000022 RCX=ffffffff8169b5ce RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff96e2ec40 RBP=ffffc9000428f688 RSP=ffffc9000428f530 R8 =0000000000000000 R9 =0000000000000006 R10=ffffffff96e2ec57 R11=0000000000000002 R12=ffff8880354ec880 R13=0000000000000200 R14=0000000000000009 R15=1ffff92000851eb0 RIP=ffffffff81eefe36 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558c4ed500 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f246f9a5fb0 CR3=0000000020a6e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffefff0 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffb635b0d0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f246f9f223b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f246f9f2248 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f246f9f2242 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f246f9f2256 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f246f9f22dc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f246f9f23ba ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2e006a64615f65 726f63735f6d6f6f 2f666c65732f636f 72702f0030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0b004f41445f40 574a46565f484a4a 0a434940560a464a 57550a0015151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=0000000000000003 RCX=ffffffff8169adce RDX=fffffbfff20beb1a RSI=0000000000000008 RDI=ffffffff905f58c8 RBP=0000000000000000 RSP=ffffc90004d277d0 R8 =0000000000000000 R9 =fffffbfff20beb19 R10=ffffffff905f58cf R11=0000000000000000 R12=0000000000000001 R13=0000000000000000 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff817381d0 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f09530b6280 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa8bca00000 CR3=0000000020068000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=000000000000cdb2 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feff0000 Opmask01=0000000000410101 Opmask02=00000000ffffffef Opmask03=8200002010820020 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d17a9ccdd0 000055d17a9a1a00 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d17aa27350 000055d17a9ccdd0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd02a81910 0000003000000010 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffff00ff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73730c7a21ac6f43 73730c7a21ac6f43 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737232 7373737373737173 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c393230302c38 3230302c37323030 2c36323030003632 3d5145534b534944 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000039706f6f 6c2f6b636f6c622f 6c6175747269762f 736563697665642f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000a1 0000000000000000 39706f6f6c2f6b63 6f6c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0952df1f80 00007f0952df1f80 0000000000000671 0000000000000031 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 726f6674616c702f 736563697665642f 0000000000000061 0035327475706e69 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 370a007d6c796667 6b78264b483b2649 333b263d333b263f 333b2639333b2638 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020