last executing test programs: 1m2.363486391s ago: executing program 3 (id=113): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000feff17110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000200"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc1, &(0x7f0000000280)=[{}], 0x8, 0x10, &(0x7f00000002c0), &(0x7f0000000340), 0x8, 0xaf, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') readv(r2, &(0x7f0000000140)=[{&(0x7f0000000380)=""/198, 0xc6}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x23, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kvm_userspace_exit\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kvm_userspace_exit\x00', r4}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1m2.203774699s ago: executing program 3 (id=118): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x15, 0x0, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfa, 0x10000, @value}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe00000100000000080013"], 0x24}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) getitimer(0x0, &(0x7f0000000000)) keyctl$KEYCTL_MOVE(0xc, 0x0, 0xfffffffffffffffe, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00', {0x3, 0x5, 0x8, 0x8}, 0x41, [0x6, 0x8, 0x4, 0xd2f, 0x9, 0x51b, 0x2, 0x374ee73b, 0x1, 0x7fff, 0x8, 0xb04c, 0x2, 0x4, 0x80, 0x1, 0x6, 0x8, 0x0, 0x0, 0x4, 0x1ff, 0x3, 0x0, 0x2, 0xb8, 0x9, 0x9, 0x2, 0x158, 0x9, 0x8, 0x0, 0x4, 0x8, 0xfffffffb, 0x7ff, 0x6, 0xffffffff, 0xd372, 0x9, 0xffffffff, 0x5, 0xfc, 0x1, 0xd21, 0xb, 0x1, 0xfffffffa, 0x89c7, 0xfffffffd, 0xff, 0xf887, 0x101, 0x5, 0x3, 0x3, 0x10000, 0x0, 0x10000, 0x80000001, 0x0, 0xdffb], [0xe51d, 0x4e64, 0x8000, 0x5, 0x6, 0x1, 0x7b2, 0xff, 0x100, 0x2, 0xffff8000, 0x8001, 0x7fff, 0x560, 0x7, 0x80000000, 0x5, 0x5, 0x103d, 0x5, 0x4c3, 0x9, 0xfffffffe, 0x2e6f, 0x7f, 0x2, 0x400, 0x8, 0x2a, 0x7, 0x2, 0x80, 0x40, 0xd1, 0x7fffffff, 0x79d1, 0x9, 0x3ac, 0x4, 0xffffffff, 0xffffff81, 0x0, 0x4, 0x5, 0xa, 0x101, 0x0, 0x8000, 0xf04, 0x1b, 0x7fff, 0x9, 0x5, 0xf, 0x80, 0x66aa, 0x5, 0x6, 0x5, 0xffffffff, 0x7f, 0xc, 0x3, 0x4], [0xfffffffa, 0x81, 0x9, 0x5, 0x200, 0x1d85634d, 0x5, 0x0, 0xb, 0xffffffff, 0x2, 0x4, 0x8, 0x5, 0xe, 0x1, 0x800, 0x4, 0xc8b, 0x8, 0x8, 0xac37, 0x6, 0xfffffffa, 0x1, 0x989, 0x7, 0x80000001, 0x1400000, 0x7, 0x5, 0x6, 0xb4c1, 0x0, 0x2, 0x3, 0xffffd8da, 0x7, 0xffffffff, 0x2, 0x8, 0xfffff001, 0x9, 0x9, 0x8, 0x8, 0xffffffbf, 0x40, 0xffffffff, 0x101, 0xb, 0xf, 0x4, 0x1, 0xe0f1, 0x6, 0x1, 0xfffffff8, 0x4, 0x2e, 0x9, 0x0, 0x622, 0x8], [0x139b, 0x6, 0x9, 0x3e, 0x4, 0x6, 0x2, 0xfffffff9, 0x1, 0x8, 0x3, 0x3, 0x7fffffff, 0x0, 0x4, 0x2, 0xa, 0xd, 0x3, 0x2, 0x5, 0x9, 0x77, 0x8a6d, 0x7fffffff, 0x2, 0xad7, 0x2, 0x5, 0x0, 0x800, 0xffffc4e4, 0x7, 0x7, 0x4, 0xffffffff, 0x4, 0xea, 0xfffffff2, 0x1, 0x9, 0x3, 0x11cf7098, 0xd, 0xe, 0xfffffff8, 0xf, 0xc, 0x3, 0x2, 0x74, 0xfffffeff, 0x9, 0x80000001, 0x80, 0x5, 0x0, 0x401, 0x3b836a5b, 0x8, 0x0, 0x176, 0x1, 0x8]}, 0x45c) 1m1.512728701s ago: executing program 3 (id=132): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x4, 0x501480) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20000050) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00', 0x26}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) read(r2, &(0x7f00000012c0)=""/212, 0xd4) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$SG_BLKTRACESTART(r0, 0x1274, 0x0) 1m0.66370451s ago: executing program 3 (id=143): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b2f, 0x3) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000100)) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000001980)=""/236, &(0x7f0000000080)=0x18) ioctl$CDROM_CLEAR_OPTIONS(r1, 0x5321, 0x12) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000000)=ANY=[@ANYBLOB="ff0f0000c900000057a4a0ae34bbe0e085de993c03017ae499da0e3ae6555c276b79034d3c91426901209bfebfa5878631951b9bbbcdf72995bb1f958f8d15b29733605b127e381af81558a4f3344da4e6f20d5ac01df1de42789edb53630eaddb4b8b363613172032651e38c52e64ef8b113e197bfbbf8be24483f19579443a10afa8ea34dac8f7e735371431c878d4e7d913b8b7d4fe0cb4816c30f2dc053ccf596b18677dcd598bbd549ce5a9b36303cb4d9d10449bca48a4630b834a4203a1ad8d83fd8c"]) 1m0.593601307s ago: executing program 3 (id=146): r0 = socket$inet6(0xa, 0x2, 0x3a) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new '], 0x2d, 0xfffffffffffffff9) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='rxrpc\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000100), 0x0, r1) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000040)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x1b0}}], 0x1, 0x0) 1m0.413535217s ago: executing program 3 (id=150): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r2, 0x18000000000002a0, 0x4, 0x0, &(0x7f00000000c0)="00001a00", 0x0, 0x80800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe}, 0x50) r4 = dup(r1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) ioctl$KVM_NMI(r4, 0xae9a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="c300"}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc1105511, &(0x7f0000000180)={{0x7}}) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2a0600000000000000002d0000000c000500000000000000000008002f000027f1244bc5ac93ce49938a00000005002b00030000000a0001007770616e3100000005002e00000000000c002d000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000200)="0f01d1b801000000b8010000000f01d966baa000ecc74424009b004e004424024c000000ffc463fd01e7ae1d0000c0fe260fc7acbbfd000000b934030000b83cb635c7ba2d13de340f30440f780d9fdfa593470f79d5", 0x56}], 0x1, 0x5a, 0x0, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x18) ioctl$TIOCSTI(r10, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000180)=0xc4) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r10, 0x5412, &(0x7f00000001c0)=0x81) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r11, 0x8910, &(0x7f0000000000)={'nicvf0\x00', @ifru_ivalue=0x5}) 1m0.413282769s ago: executing program 32 (id=150): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r2, 0x18000000000002a0, 0x4, 0x0, &(0x7f00000000c0)="00001a00", 0x0, 0x80800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe}, 0x50) r4 = dup(r1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) ioctl$KVM_NMI(r4, 0xae9a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="c300"}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc1105511, &(0x7f0000000180)={{0x7}}) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2a0600000000000000002d0000000c000500000000000000000008002f000027f1244bc5ac93ce49938a00000005002b00030000000a0001007770616e3100000005002e00000000000c002d000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000200)="0f01d1b801000000b8010000000f01d966baa000ecc74424009b004e004424024c000000ffc463fd01e7ae1d0000c0fe260fc7acbbfd000000b934030000b83cb635c7ba2d13de340f30440f780d9fdfa593470f79d5", 0x56}], 0x1, 0x5a, 0x0, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x18) ioctl$TIOCSTI(r10, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000180)=0xc4) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r10, 0x5412, &(0x7f00000001c0)=0x81) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r11, 0x8910, &(0x7f0000000000)={'nicvf0\x00', @ifru_ivalue=0x5}) 39.439299965s ago: executing program 4 (id=560): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000230000009500000000010000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_load(r2, &(0x7f00000004c0)={0xf97cff8c, 0x8}, 0x8) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='romfs\x00', 0x200000, 0x0) (async) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='romfs\x00', 0x200000, 0x0) 39.438597769s ago: executing program 4 (id=561): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}]}}}]}, 0x3c}}, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000200), &(0x7f0000000240)={'U+', 0x4}, 0x16, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r1, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000000)=@arm64) accept4$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r5 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a00)={'veth1_to_team\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x8, r6}, 0x10) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000200)=0x2041, 0x4) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0x10) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020601020000740000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000e4000008001240ffffffff11000300686173683a69702c706f727400000000050004"], 0x60}}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1800000011140100feffffff0100000008004b0028000000c872a9e6496ecb526fa5c40000bdfc913f5e1875955a8768af4a2b3040ca2ae43c8dc7f73ec5a8753439b076cd7ff770d5dd68b865b51ced082de805ea7f9a451cfdb1e7defa47bcfdf0bc212a20529437e777d0b2e592c50a5ea8b199bc99515a44777863d136c2da47db7a8bcdf49c9b63b609a28f02b9"], 0x18}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) fcntl$lock(r2, 0x25, &(0x7f0000000140)={0x0, 0x0, 0x2}) 39.351070863s ago: executing program 4 (id=562): newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setfsuid(r0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000004600)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000006640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, r1}}, './file1\x00'}) syz_fuse_handle_req(r2, &(0x7f0000000100)="fc7f80cff68008659b74dd1a164d05c2ea66abe81801cfd902673ca26d8cdc3e729f6552292053ea225ae14da8e67902eee2df478dadd68dd86becb4310abfe444a84d260d961886d8914f68c097a3f4b73a8398465ed01e02033e264917ec3d19619f46cee7683951ead0ec12a014cf9f6e687fe49fa1a048ce09e5d7e81a91683283939315ae6e816549b81121fb9e00da0caa1ecb29cefbd741f4fd97d96a2ad1dbe3fdc145d9a019cafbe9ec0bc71e7acc6a1f73323e529d8bea5f46ab33e32ff26cc6404c074ec76cefd550bb1437885e9969b94a9e0a8c3abe84beb69b83076f0cb1168c2a5182f62e4d9a63e62ed240a64f4fb2de440c5e08b86fce5e04dfa0d2b30c098b419d04908d096d653c4a57e4591074a938f41beae3216e05a52709b81045f689952f65a86455765a321d9923ece7ea9a559331af3a82bafd1fd3818e2d286a7642ad00109c9817054bfb97b9c8f9fec7886c6578e91b129a31e01adfbe41921bca1a0a36b76738effc9a73e4d6c4f4f14b2dca5341626c4f9589dd01f5356baaae4583de421e666420e5d66f70d1e128b681fc32ec63ada118025de3a6c0dc304017023b933ab666ebf5bfbb8a4871a9717bd307e3f56ffd433f0b2bbe38a59a961e2e7ce5e2f97acdae009cd83726d5f4c26d12c17e967152b179bd8dd46662fb23e0477bbd521f151947a83a0350a840bbf859cd098c877345ca37275951be2e5ca6579869734ff5cc030b6f85bce588540a2be652a1d801f486faf313eae31721681f6f49e0ed379f8ea3f90622db4dded705434e44dfae02acaddcb9f42fdc6279a0968cb7a19d5fed02cd792f0b8955a3cc4465541384ccca8e3ad15f9a3c65867bc6efddfd01dcc933e08d1b958306bc77c294a5ab8f62ed9c0529af174b2d7b733aba655b3274d06baecbc244159bf9b4e90102aa0d6d0ce3058958baba06eabdca905765dc9b9aa44177dfde347f3d4c538077d0c88b3b8ea2f381c2944167e6a7f8c40f6cabbeefca5fd8ee699f030664007362ac504294b286a5a83a3d7b7e33bd1d974c5e5c9789b6a2623a3c18dddf55287cf1f0fd456a7fddf0c10ab6e146d8d0ab013fb0e9aa5998a45bb947059e449c577ee738ca4cbb8c0aacf443e07ba266d961608df0b33db1f47052dfecdd26e463f4a7ab40b98530745e440c24a0a73573b1efa8fbfc8e98393b3a6a321065ebbb813e31a10ed70470a98de631d5b1ca915ddcb1239eaf7b978e574f699d34f483250a95d979d717b0c5e9ae21cc39eed8c92886d984efc404aa7ddcb6f5f4b8842eb303fe94194104f116ac964c00064ea5a527d5dd0451e0261f7ed4d8dd2b8945f77a59e5d493a9f93eb5f5b38b6f736b3c70125397e4cdf05f95a949134859984aacb42436098733ec7e4624ca64944883bfb36593af5c2a376f68e1e15e3599aa42025865e7e2793c77ab1895bc1471b1ab888ddb294f6b951199d7b6d613ea0d6b6e2250f42ec28a352ce797bf6a067f841101739180cd1a07055e1213b98bdb1e1ac41aa0ac1850995aaa2f46f97d3c50e644092e712f579eda2e2d2ea8b97b27cf554e4dc695e192039c84b4e0888549a126cabc8cc5b4b8cc83778acc85e4d6a436899293b9f677bfb27e212c22b3ad8fe09bb3648e9ceff26f11189dda75d66293781ea067241e7343ac9656e31cb6d077c325cb5a95e2f0fba1148b1b6f3361a73c9e8d46ac9b45c3b6db2c660f2a5be7006a16afb6b577895937ffd558d9753b02af30fa6cd2cf64ae6f7ace69b55a80e77a1f232da16747277471025467c53dbd4d6a6214f539f839463ad1344e847938441b61b689ca2b8f66849fad404e7b0f9ebd91d37cb8919cc542bfa9fc36cefb3e5dcec6909a2c5bfa6bba48133698a61cccbd48993bc27ca96017e772a7d0667cdae9302e79afd2ac37ea7b81bb6521faef7be538e4b2ffd830e86965d229edf2a980dce7304738db33c7c14f965db2d569810994346fea50eb2c12d489e2e87e02e598e354e597e216d3cef36715110f11a99bc18f9aa484ca8d8371d3f12bb15adbd2562ed82e68189415bdc4a87b34ce5840c6b7a2c6327167cc93d21023d42ce596163879b8390037fce9a333feb030005ed781b0783100285c325d64ff0759aed722c8c41c339d2ed1674a74c2ec6c36cfc4ee674e751916292a44c98e9e738ae1e9cd1724c28c324b8e33590de23d5917ac3c569b03d1c10fc093e560dc8f1d267dc6ccd9f55e8d6c5e216cd882714a4c0cb46491ef42ee7afb79ca470246032db07a1c21b1420a5ae9cb0db849f61761dc460e6ce61ee996040e978e7066858d7f109b8913c33d53d888221d1cb533b609cec806a2e2b24cd2510aee33a284890ef34683a3dbc64b2d98a4829596537ff38d842b905f5323b4387143823f684775efbcc94d3d46b452c6213ff1473c6dd5f2b28d0ef09ddeb6e38f6508fa83110d492e2d93b7563e71ca5ba3b68d225c55c9b69be45cb3e58bc93fe6633fccef514692c9160c75febec6d5839f6e7ecc4a66745b7216bae4a2de0e998d460118c0bf8f7cd990894a8bd281671ce4202526ac83f251289b5ca77534c32392f30f8e36968d9ad92a9a84fb969491d6fbeff6e1743b54c4c743c6de08e7f8a69febb454dcd902f197553f383718b2655bf867a9b4635c827758de630452d3abada02c08d574f085cc29e47f1e354c0239014611ac61ccd26d3a89a683607beb7bc4503529c2725d2ac6826af826baf0ea1dc4d16fefe3bac239f2fdff205d7ec781f8a35f31627bdbd4de1a596c33fe24a12c28ee94fa35a7ab867cb414e87123239e1d2b8ec0d6b1ed75139664ce8a0317467d337f19bfca2ac853b2daa69c2606b13a6098b2b82aa74ca1db4ff80cdb8e7eebeb1793a38fe6d1b0f187dd7b40d5fb2394dc73072c78a94b5a4268e687c7d06386c1ee415d1c1c9bf55594027a375da064bdf288248400db74e5f323f1cb903faec78dc2355df7e8fb9eee3fad1eb8bbfda7d982962f8d3aa1f4532e7563d91ca251f3191bc19a09c7d58c3c4644c67ecd77ef8ece058c3770e6902dc259dd83a3d946b2958cbdc9e0fac46a28b6c713eba1bf593ecb5bf57f06d2c5388878b5c7190561d725404db2fb6dbe1e9b98e1f32132ed15ac0500b6481774dfa3c8070f46504c11dfe375a9cad2b88ca4b1c7b1015737898033a89ad0c91c282df16724ce707322833e7f01c9075213120b8c00d65ae00af7c36cd64770f91b19933666f1f805dbdfdfbee45e8e6154517d3ab43955d958e2adf3f0e3ce19e816c8aeb1a2cd11e5e25c39b0633cebf89511ff901978447fcee6783face3b65fd001143c4919a66eb04e40c1d825c01342112308c5d303c0f423cd6c9b0c6c0bf8842d1770be9466390d9cd42e3b5546362268987ce27c63a6941b70e4b9ad616df14a701e9f8beb767ac0fb9478843c508f73103eb2704c1988535d71d0c05a1f973c4f3f66869c05aa64dd77ac71b1ecdc548ec90b9cb7175e77656460c9b785454c4450a4aa46f31009528af3c4150cac9e7b00cc1c75f55f01abf6cc0bbad3b55d287dd4c5721226b70915bc45e078621b2a962c9b3aa5ee37a6bcbaf270d8e37a7ce4911d1afdf5c28d34c6377b13bdf367c96dd4dabafa392a185db30280796ccfae6efc85de5e6107d955f23d8733f43c71797efe5af6f29d7eed40033e12457ea9d9426e47229852e54809bd110b61acef01444dba512990bae5004f912efd3b9b6962ea92a4145449164d41061c180a8b77ea0c108468de3c14c31d1799a92986bd3f9880428a7104e734e4bf0d560763a7c410ec51efa5efb86a4fcd8f3e3b9e00e7cd440283f24cb17ede12da95e429c1fcb52a404b5830a522d48a087ea681e3265e5120254df1a0a60e7d0312c334de72b0d22b80f0e3b7b51df28f4f77c2b261a933bf3ffb7060f5c282e6a1ffe8d61290cd08a6bddcdbf4cd592d2a352ff804c17af2a032137ad88d08b9d79bafd1a6c91ffeab0aa4a9a6db431acc39b7157eb3bd30a304fcd0e958b4472b6e27e6f87cb987f832d0f57d1f2eee57c2ade59b023ddaf7bca5d101520eca131bd889e43932b4f9e0c3df632350477153a5f5dd242d7936871f1b3951cccbe3369075c144978595f82363ff640ab4cdbbd79c5dcd684934cb1b270d592f1629c2a2ca3d0e7ef9813654bb4604e5d34a9f200915745e2d13c7cab0cbac60f198030ea2c1dbf1116e1ffeb8bd76633ff205a3bd2836c3c6147a9486ec58f7f3a0fa88fd46ccf26d910a069e0213ffc7743163bfcae92a9226156967f406ad66a08e2932ff7a31871db1cc30ba145abe36e0666f73183b32e51d6a4e8de0a9aebcf340cbaf1b1ff2570592dd315ed254fe273f59189ad9295135fe68beb287e296cd06d48b7413bedb99d1088bbc0e1170a942ec590aa370910eee16d6f5824a18eeef491f40f07480b3779741da358947f7adf6a4e22ef4422da7fb5a77e043af3ac079cf981e67a44ee5d31db9cb399b92a58dfaa0a3f88c6e4d16a08697fef13e34559bb8c35be7b3b95b2b4b6c7494d39ce4398530174c677e5d785710478039a16556d0c688bdcdaccbff5cda5e2d346d718c54800666b8354cfac4927b497d7d8eca38ba2ca5508f57a403f2a11d27b7c896c70e7cde96f13b83c12156cfd7d927cfb73a193815ced3b6c296eba13e8f1000437db57969634a0fccefefa25fa263259d58878a16c38d2318e927553ed6662a013c453f49a639ebae61e5183206b209eac55a1934edb386b141d759587f677ebe3353ba4cfac7cb0da3af115880547d2713492e6deae3e32f23ac7f47e6f30a9a3291a6942d4f244a930d24f6c954bfc3e0daffe6d64dd79e92ad7d66503f2d8cc8c16ca01fce2bd201f7a7c2789d09b3279c2b5d63ca36cf74efc09f23cf57d892bb188c85bbad3a157f8f6d5d801e6c3929f80f46e280c99f819b262e7e89844afc10dce8e51ccb28be95bda92eb623d915fe8a1b34b005785f372019da5b3382eef7c1789cb1d31a1c64bff2f5d615c090b33251384069956bf5f0e1ef9c2ee54ee003c5998017b42eefb0e150ecf154ebd4782220c0720ce2f5451cca99e8646d011f9db0e61b0b8a22de3b1d331d6ece5046e8a84deb76d6177bf2d19c347dec70839be2ba3317e165828b7fe2af455104867cb4dc25cbd98f77c8f36db859f96799bb77c48cdedfa0bf13960f298c8a9639725fadf79e9234644fe1ee99ed310ffd4f95ff5e80287a833bdbb4404ba45b3da9aa8b39e472a0e9aed2a8ad24b8aa1a7339c0b8198ddeb0e84310484c136f8f23c795e3c35c763d6301624d607b579f0ba15a610c4ebc5c9ffd16a7ebee4bf5b0069ee804c4503a4aa3ce5a1c66834ba0bcbb48036a9e6b76b4921f8e69a1b11ca4e71d47aef000a42c7a072c0cf73290ca9050b016a4975538bf63b6a21b8dcec4f65b75e1625c216da56cf7bba30ac41de453ee565f72d3e703531409be907741b4d8bc28b1daa6d2e542994d6441816b6a6f4146aef0a3c288d64eb6013e5651a5501eb820f4938bc26065beba68d18b81cc156e3832daed91c63fe4102a26de8fadb4331d77263e974b6fcbd33c735e0d0fddb6c43b1759ccb4f40765fdb1d5464136d981faebb999e79306f0550474b72fe8f5cb203e2bf9bcf7522695fd5669e36599d5c5a3f3dd42d9f3a79ddf481128f1e853409123c5422760622dece23fec0e8ab40c9ccc8adf69578e6bc3dbd8a0dfac86c8d85457f6f648c4e716d68b2f38c40ac23bce8d24daa7f5266ccadefd9cd61b4d80c298b330251c3e1510932fd24c3cd315debc0960c67f0472eb901f190a9f0c8bd8917e82f545bf3f75225db22576794c2f1a85410cca372d2814cef520e8a4cf7de7a5d24d7fb57ac2d500da37368fdf3ff06d242fb9c7d7d669597f0e6801457f7d174b3a36dd8892fe8dae0bb455fc74d6f5334103addb0cf99b38d61159945a5b0619bf11bbe5c04984e6f432b70cb38e4aa0648a01df6c085d239c5c0c79ce69de39988c6d09e19a8308786d9313abe452b55eebe10cc1e347c30558e95bb21c69cd702c19fc8d40afba264ca32180bdb274365eb1c2ec41c015880ef0e7500dd684c49538154f15bc127f95359b80017bafa0623721d68fa5bd1774f3054b16d938493619ed01aea15913147f4fe210f92f87c427df6f72a07d8ea8dcd12c86a8f7abbc2f0a11d395e36945e9af5a32aee50541e67bfabe25c75190ed2edf4ea9eee3bde7db14465b7ce5208cd0498414b2ca7f10800a1286167fce8bc79fa3a71040bc888cce31de3ae26b8a6feaeb75d3ef45fbfa6ce5ece40d7d883c00c7ebfff2d27bee8fe5b5c4eab0b72b799cf5537d0193274f308bca94e5d579958adc01a2a3e05384bc27164390f0983c2ece9df3005ef88badb0f241aa4880a5712436c58911c09c6f977ae17c7f27f3fe8c35a0ac9f780a9c1d667f6164fcee35b1bad9331087082d779a9683faa98038a0dc74199aadcd7efdb1dda0d361943cf8cdd536608e8bbaf43e92dc17e6e28ef0ccdfe71661ff2aa089ad53a5a21525375992b5b1091f5b802a319a44a95b0cef0086167f0be2b1b3416a311d3e075028f6a9ed57bd062af7ead213cbbbbb042950e40a29b2b911e2329833a14f69fdb539ce0894201339e4d25353e46a84a9036e90442f731ded4ae9d9eef66200696d6b18ae84711dc998115a86cab7568509f7ca29ffa3025ddad6ac8e7f34121f6f42d3337b55fc4f0bc30124c5156a03af0cbb6a7ab7bcde3b367e45d66f16547a09d4d188f0f6195bbba696a7bc569ba5653a72641eba37a76d8b3b11da82fa184b465c9260c18e831298366e178a39d61644db137c90665013f7a3fdc9125f713969e1237b485187761f71b47f45e6f257b9b7422171d27dfa977b38ca034c5b60f9f9e3a3a1aee5c6d650752660c8996eb844779e4adf700939228195b63190b495bf2ccf209fc433d69fcd9e3f82ffc959e10f2d4cabe70f5ec51817d2953c7387fdf82a615b6bf6461782835f622d3dfef6e70392b4b6727b2f2411f12ca0ae2ac04e4047b3d1b32fc39e5095af4f73acff2a7f304391e9a148b4a906ff73edb5b10414e95dd9bff6395fc8b926d239c1e3b4856882668b928dec64b81213efc843f749e99a181da109b4c15b8b276a4ed0ccf5d6e3fd68392ed3a783419a9737b560f30370fb911d43668b76774e964dda83e1904d5918f86eb003a1673a78b9252e9738b87c94a4e73b39f8e1fd6539c7daaf28f943c82167f159f06a1db7e0cb77de91094d5f7716a22cc88f81fb0d9971ed3fbf1564273a4c645b118273a1c8cb80cbc27a078c33cb01cd570d04ce306cf94e1e51a2d3aa0161da3850d4ffb9709ae841ea79ec76abfba6c2611c5a9d5ef75501e4184aecba97a997bcbff2af00075f13dfe80dc0d9801de02c27c5aacb31f2fbf43be54c01a5a0bda5f86104bc31aa282d63fc6d0470ae305058f7df64be26cc8f72f29789c8c66e60a1425604c7bf4d55b9de76f8700dbb80a334f7b714373484f20c976bb52bc9f64019d341e9bf6ef458ef03e62a2d8c3965c037596351dd46a71f9c7879abe6b921cac82f80319b115b3cbd841b065073f5e334ddea7574eefbd97a56528d72ebd136c2b8d1c884b4e95ec92348f595cf582a45e931163876d99a89f02426e1dbc8579ff9337cc3d2ae9b9551d79d3127c64eb5445ce71cd571aa89fcde613e9077e6f2abb54bd594701387294748cc8f0a8c42dae16d653b81f52440ae4801235b153d4000a63ac7ba69c0121a5f420574036a4d4be7d01c180a8e558fb1ad94c2e6f179ebd0b62ecbdbb2eb4128a087ffda713109dd91378b281585d605eaa3d755f00ac51992c3d68a751be92af3ab5e972a5a977c75c0d0e90287e99cae6aab648338ffc708e8b3b6aae801647a3da33f4353722c505795a0a4adec2aa17aef17c54b43c02a9d3de17e6531a07d207b057e4e98029826a3e828213c2d1a403c38da7dc6858e928f048e3cb2ddb5dd39a102b78eb4c6ecee173271a78a902c070e8b38eca111ca941d0115679c757728a2db818a81d5dbca1c4c99f33fd7aae0ec7d4c7d1464b17a58e6c3f5c05ea3c93ec1a1d4ae8e9db6d704e11ab1668470d503216bebbbc4b2979751093dc9fd31f4872b80bfbb9eeff4b5246e2ce2b6a73dcfeb190d61d8a94cd69022e7bfb262f253ebc80a21590276dc14c579787587b84a0b194ac70b2301d3112b996706fe74b3e85fc7feab0ec2450dc580e6b29e0e9731baaa5b5ecd91c383a5cac9d630552fb42afabc43ce00b85088be0a739ea7fc74fd9a59b45403a4145b1d7af971ce7b837110509d8fd56a462ba0001e62d20a460de55752051ae0992ff8adbd7433f0efb4fb09819e277043677bd4f5f60de3ec76fca91edcf2fe5c9e34c3f5ed3e68ee8acae8b9e930967ac04e569642f1d25bb32692301787a0679f44b2cc8e14c967c2f2035f8bf5af385067ab30da8cf6936a586277fc7ffb4dd6af80beafb5bf3537a461955f3c88bc78ea189255d0edbba743916a3a85468dc1a053a8055c822bd236e3d2823249b4f161773799559e08369d9f926c8a9f235c92098201c9932c797f864800484282592cbdc21c3bb4b48e998fb814ced55f6c08855bb5085ce2188ac774695be65235525f8cbd22cf1b85e129881f80ebf9782946094e0fd905528fd1e5dd6a887b1946c1514e62d8419d03d4262705f053711e4c5fb68d2ca1c283a6283c08a2c935de635922f76cf0b6bde3bd38490f71a7e2b8773439605618c7543fbf809feb863faeb20cb289abafb467259a6896c81b3e6ed29cc03f6a5e4b4d361940a9dd94b985ef05689190ed51859264193161160544e4d1dc4384483145518f2ef1a2d766dc87cd3aeeacd7496ef5b26051f058ed6241343052783c7c1e5b86861e39cc994b349582a9003f36e85d2b69f53e74500441755af673b6c53a556a716bb9d4c217795805ebff17344438e098994bbf232aeeb6a36734734a387eadc9f3448c4fbe2c9885f376f0796370c03fec0939f505c17f110d9725a73a2cfefb95b173f19ecec2981bf34f199bf5e7b07bb315804cbfc5024a37099baee2e96c12b6d358d1ea6e4ebee64c1ee273b9ff8b4794ffb493ae51ac96ea7301b1bef0999830b256571f31ae5ef0727ca8426495fb08013820808836fbbc0051f7fa05afc2681c5dd1a4a6064d50b59e5251f9d9d9d64277f923f657468bf6d323bad45d99ddeafb3bf2b5c9ba81f14f22438d8b8fd69a5bcac635297876bf02582648db113faf84a432078c059ecfad35e327edbd7e7f66d9485eea6cf242967352dba146a61f80dfcd6ced61cc193c36d565be42695581c62f173a22a379c9a37569541236d8b57fbfa45f0e7705b47204f457b5e5e0f8c4891bb0c6add34ce5a30af4dd6bb12c9e171d194434c439a6b69e1ff1447d749f9855c49572d5619c3d2932d4e0d24369fb7ab6d9d09854c2b1becc7fbe59b387f3ca31d77114924bcfa052c09af38b71b57d6d317814fb2032aae911c177bba466f83600edc2585912cbdfae42c952878259c9d4ff912679fceb5821e0b47b135ed148c9d1f6deda5af3c30fb7399b99f18fe60e036eb40b6dca46057c96623075530be182d5300fa2e37911cf854d687c50e1d82ddee49dc1bd10f650ae8120647271ea51eb06c6768c058277036e6b42daefd7bd77d5fa8d843db74ceb0452bb11f13692126acc64c60895a846dd4e011dc4116c126f7c04c65aadff9819eab0111c9c8b95613bf9222e244e30148d46321beffc9531774e9949692e6ff2a1f80d91d0096e1aa3172257f3b45cf6cca48355dcc9b70e4234d775f2f80ac0f90d62ae2a230817028ca40258ce7c864c0ce6412150d485538bbbaa8bb59fb50a82c31593d8b240f91bc75b5d0260457d3c82eb861a89b840098e7ef42f8e881889cc90d370ad7310e50ea12c79b19fe9611db795e7b36998d9e63b570e6bcd49eb9e26d181051f72fb066376b7d2ed816123b1fc54fe7e727337df811307a5cef0b34b9dd97fd5dea3707f7912ad7f25c76bbfc2a0ef3e57c04f65dbc5eefd91619a217ace919b90cfea1e1aa24726f60885cb7227e134ae5af056de300410a3832a953ad06f6a95c4dfd8995c843d4cf13d17bb6c38cb4563e7e0aca3b40a5cec319e0e3292098452f0e0ef89ae4fbf0ee66e5dea46a5f008d664c148352225e4dfa6f955935b83ab89e9accbae8a809e6c70262fd77b1bf6e45ae838c6400f67bcadeef49dba285d7f98153de13dcc289c0849581259f7973ab9a0da7600ddd301175d5b7b25f56a3c625ec772f8849240a5616bc57025ceb18d5f862c3992b492f429a97aff38392ba6d54a9add83c759cf9ee57c25511ce51825ee7376547997249fbfad57913d53e6214b658f2727ba884a2e00f8d2cafc925f2d8ec0def60f3491b87fca994a845e1d146088ee2048a825e8829c085a15ef9ab004779b4a14664d4757f1d791d30125637e6c8df36403c218b50c2c53d5d52847dda4a2be632769a772ff41d2686957af12204d37db085c86088d96088fa82dda8d000bd0ff1c007055120ab6106b0c0725842443a8f1120bc4105f4a0536e945e4983b92ba08fbbc9113743d2508a8184c54874182aca984251409c2a6e9c7852f8336d9b96d12b872b57119ef2e6dfcd143a56028dee1156abe59cddf2f5b69876c05e6416ac96982c7fdcad10a5cdc0c794579f5b444fe2ecd8af3e3b75c75ffa56046dceca8512676411878431a8533f1b3d6641d3e2877ed611fbc4816b0d37e19f4b88df8f8a210dde06b280b11cd7822fbaea41c442217a47f86db6d89e2aa738c46192a2a08f5980fbe8ca76c9e85d9bffb10bb4cc6ca650f7054142d094c5c413f02dc42ee93b09dd24ee8d5c7036b0d7e25c859e5cac09138432e46aca382e75856d6ed21995c8126aa4a74018409909c7144e2a4036dfa0cef9c1018c9084ed8e3c181765ad43e229e936d82318a78a976743487d6765b1ed1ab5d23a940b8e091df3c8daa67f9a3967275d4ef911d481757585d63be477db177a31ff628840621337570ee69e2b68cfa09f3080a7156679aa1e59dbee124b942221d1be00126e4a8e2b9572b0a8cf9f43db3cbcdfd4f2644baaa1e0d7cd2191d918510c4b5eec279ba4d6d579e821b0f88a85711599a19f8be69c8df8f6ecbaf384a5f2cb5efd84d96445b50cf265b2607666572cc5ce5fea64f5a127d27e37a1ae3f2ff70e49ad068a35707b8f5919f7abc307417c98a31dc3ac05dac2f327c7696a5fa7b420fde47237f1544ef55588fcf9bc4ca907d3f598a2af37271c05b4fec9cce1df7eab99bd47c9540fc31531a7da5bd6d519bfc768ea2adaa144ae6711224efeda0131de734c9a8dfc57681bd7e70e11bc13d17e7ca24b2f7a1d0700076dfc0913a4988ac6b6819ceb38ab89d284339d075182df885d0386f19a0d1dfa12f9ac47a52232cb45adbe3e9cdd28f76a5", 0x2000, &(0x7f0000006ac0)={&(0x7f0000002100)={0x50, 0x0, 0x7fffffff, {0x7, 0x29, 0x8000, 0x88292, 0xfffc, 0x5, 0x53c, 0x4}}, &(0x7f0000002180)={0x18, 0x0, 0xfff, {0x7e838f89}}, &(0x7f00000021c0)={0x18, 0x0, 0x4, {0x4}}, &(0x7f0000002200)={0x18, 0x0, 0xfffffffffffffff6, {0xf}}, &(0x7f0000002240)={0x18, 0x0, 0x5, {0x401}}, &(0x7f00000042c0)={0x28, 0xfffffffffffffffe, 0x4000000000, {{0x61be, 0x3, 0x0, r5}}}, &(0x7f0000004300)={0x60, 0x0, 0xe, {{0x6, 0x100000001, 0x7, 0x4, 0xfff, 0x3, 0x6ade, 0x8}}}, &(0x7f0000004380)={0x18, 0x0, 0x7, {0x3}}, &(0x7f00000043c0)={0x1a, 0x0, 0xf36, {')@(*\\#(#\\\x00'}}, &(0x7f0000004400)={0x20, 0xfffffffffffffff5, 0x7f, {0x0, 0x1a}}, &(0x7f0000004440)={0x78, 0x0, 0x6, {0x6, 0x5, 0x0, {0x1, 0x9, 0x0, 0xf, 0x7fffffff, 0x9, 0x25be0696, 0x25, 0x2, 0xa000, 0x7d, r0, r1, 0x1, 0x6}}}, &(0x7f00000044c0)={0x90, 0xfffffffffffffff5, 0x0, {0x2, 0x3, 0x1, 0x590d, 0x80000001, 0xfffffffa, {0x2, 0x28b0, 0xffffffffffffffff, 0x44, 0xb779000000, 0x6, 0x79, 0x1, 0x0, 0x1000, 0x2, r0, r1, 0x101, 0x9}}}, &(0x7f0000004580)={0x60, 0xfffffffffffffffe, 0x9, [{0x0, 0xd, 0x5, 0xa, '\xe7](-:'}, {0x4, 0x6, 0x0, 0x8}, {0x0, 0x8000000000000001, 0x0, 0x60a}]}, &(0x7f0000006680)={0x330, 0x0, 0x5, [{{0x5, 0x0, 0x7, 0x6, 0x6, 0x8, {0x5, 0x0, 0xa9, 0x60e, 0x5, 0x4d45, 0x9, 0x6, 0xc94, 0xa000, 0x1, r0, r1, 0xfffffffb, 0x2}}, {0x2, 0xb1b, 0x5, 0x140000, '}^&-\\'}}, {{0x0, 0x1, 0x0, 0x3, 0xfffffffc, 0x8, {0x0, 0x8000000000000000, 0x93e4, 0x100000000, 0x300, 0x4, 0x3e7ff2b5, 0x8436, 0x10, 0x4000, 0x1ff, r0, r1, 0xffff, 0x8}}, {0x2, 0x9, 0x8, 0xfffffff2, '+)@-!g*['}}, {{0x1, 0x2, 0x100000001, 0xffffffffffff8000, 0x8, 0x9, {0x3, 0x7fb, 0x5, 0x8, 0xf50, 0x9, 0xd, 0x1, 0x9d, 0xc000, 0x6, r0, r1, 0x9, 0x9}}, {0x0, 0x9a01, 0x1, 0x12, '\x9f'}}, {{0x6, 0x2, 0xa785, 0x1, 0xfffffffa, 0x3ff, {0x4, 0x100000000, 0x2, 0x3, 0x5e, 0xa8e, 0x8, 0x5, 0x4, 0x4000, 0x3, r6, r1, 0x6, 0x1}}, {0x3, 0x4, 0x2, 0x0, '{\\'}}, {{0x1, 0x3, 0x9, 0x10000, 0x5, 0x3, {0x0, 0x3, 0x3, 0x2, 0x80, 0x2db00000, 0x3, 0x1, 0x405c59dd, 0x8000, 0x3, r0, r8, 0x4}}, {0x6, 0x8, 0x4, 0x7f5, '\\+\xd1['}}]}, &(0x7f00000069c0)={0xa0, 0x0, 0x100, {{0x5, 0x2, 0x7, 0x3bc, 0x3, 0x54d4ca78, {0x6, 0xb44, 0x5, 0x10000, 0x9, 0xc5, 0x1, 0x4, 0x7ff, 0x1000, 0x9, r0, r1, 0x17ab, 0x5}}, {0x0, 0x4}}}, &(0x7f0000006a80)={0x20, 0x0, 0x4, {0x6, 0x0, 0xf}}}) chroot(&(0x7f0000006b40)='./file1\x00') syz_fuse_handle_req(r2, &(0x7f0000006b80)="e10dc7b7a9322465810211e22106aa73a838d8acf01b57bbb0976ecc69b634be22602ba0060addcf30b81867972db44ac38a8fa8434d456d3fca7c2b71e0f1594df448c9e694aad23d3b54c61812951e1114e70ba1c795fb4eeb04f12b0d1ba5f09134c0ea87c75547a6aa79fd222a47ece3a14c1e29ab3c0f4cc455e4344351821ae552a313e5b43c22078762e42a57b4108be1d23740a4ce864dc76ad3a3341e80a2b5617665ae76f3f1371ba88fffe59caa15b690bed9e8f97d75e737f953f78d5334e366e3bcbaa4913ebff5a0e054073b5d153fed0a1ed874825fa3fc3e9c40a3bab1954dc12d71e5a646c0b16b0917d85b1d3575e99e2a5e3a39909becc859aaf9beea70243caf3a7a48f6dd78ead0facdaac6a9d012dc80fef4b51ff56ef27a18c6281fdcfc55822782b0aaa3e3f259cdb1542be7ee965d7c0f9a764dcba23a2180e507820ec0609a1f818a0201835668e92952375300eb0b3e98c4ba32e6a73b1e40f1c5ee3cd220a01fc82d129ff1e5ffad5e2804d0c6b69c448e19321e28327e299094d30c11217d092a23ab1f4b96187a7e2459212e726d6351f71c6ebd1f053b0837a62a9271c2b06d5719f75067d2c404de7e7a4a076bba3aca3698e135ce6d9bb05ee0d339145e5716d332cab34bc4b0587a681796360b5889580d8f68494b5013a017ac72cf36987da862aeb90b45b2a7f276a5a13f04f0cc905d6230745de438dc5b5ad96b2c4cf23aa1c2a1a0e232ace3057ff911c3b584ecbc00c87cd5a0fcc447ee9d0357716a71b3d7a440fd282478f5abf02522d286d0f101d8815d0a9a4f99ce49517ee7c831f415454598ffafa6bd356319dfd26c10c83bff9b0d8fd43a64e20d12e80c6df20b93975776fba25d5c093cd7d4deeb8d3e40f7efdc7c8ee11c385de3518f51a3c2c66b80c496cf5f4f3883016e637717f4e8322bc34cbb60ade846840281630c04795ee79b375722ab1bbd7fdd565de84eb73bef9a1a4c8429f44829960127aed8e5ff5f79aaabfc2236b86d57b0d931b8856ec73079ed7b81f0797b60630c99e4ee619f89ef1f9aeede1745736ab6fe4a18103071f4289ae3aec14ace03d5693a7318c03337cd315ad14210657f447f8ed6a608839fec5075443feeb1a3098b281a150869dfbed538ca4e4100960eaa156e88398ebf55965e9cf2b0d68ddc9ea94d1e0ef747a9c5add408daed6bb022dcedd42fb5bd3b5ee1377e59f658bc3c0b96e5c544dea1b0ba63d6c331dd7a5f6c2359c07753f7f7df838bed8178c1dde60bf14c1bc36a253e9847f75a9e5af4dee347518846a490c0e957048c7164fa6d5dd15c7dfb9fbb4bb926de48bcb449b33f989ed9612594f4ccbcdd470a69fdd933b6e84ec31e1d4adf918db8b03445d60b6328ef0e7db70e44b3c1977b5cf97c4f9de84655d30fa9f35dddcd58807b5704f39da7c096492c60a1c8b3ca84ae4eb2ebd5345073a3e4eb197b85993a6e4a7041865be396ad0493e6a1677c53764a42216bb9db1955680b7a4b463bfc161b906361597d80d682aa9a84d97d3e7158ce7aceeb35b1cc3cffdbf7a1a31d3900d9c27cf32f24051f87403426dfa652e57d8db76162a041deda49410f7b44793dd313bb6541a2e99f58672e349b4f2e37106456e89ccbeda3d0a9aebf0749b3dfbf8d4f57b61304f488eac6df23cf4e092328e05137ed62c5230237d7f8822c356cf8dfeb5235049e59cb0feab5aebfdd4b970e9a7bbe819d30a391bb3298a73dd1229364dda43a55a8c3e21c0a54f60c428b27bfbf6ecdef914621240e9250e2ae7a603501b581f7ef785f5e306484f5b5ec8fd4ffe24265eadf7f1e10b2d26589a285ef81d49c982d14b07dac4713534acfbb3106dfb9e4bc003e5241ad0bfbb80a52e4a7579a45e286dbaf53d5e1047c30ed5078176fb599f00dee907b888969feebc214d0957afd49a9fb770c58ad1999f5b4c0617fd66297a5b36a5e34288b8611564eb316851ec9fae518076d9353dc7c9a2416dab4ed9967c44345649cc04af3153e32298996807f3c9ba5f201fece8497007bc1d9fc62d7318f45ab3cdd53de9d8d96ce99437df98f93358dc31a313cbd8d03ef67751cfced64151be3360b0e6191739e05291d24097d107eb22f1d3e57cf02e3d39ca01d8076fe32da5494136e644f2eb74796d2938808ffadb40bf85cd5bd013a1dcec01c137a18c48d54c5f0fa93d70e21c7278a870e8c061c72f0480d9e1f7c29bacd60b2f21e1eb773becaafbeeefd977e98b9ae3b295b99a150a7b7b6008ea3bf54342fcf2ce5f81ad8aee7c243cf5661a3d7723eca3b753e333c35b8b4809478cf4335e556c9ee9ff5d94a6e6612bd04ff2106e1a87749f63fed6fa41c22006a1036e22f22fef7b435f91bfa99854e7172e402b59e33168e3629c70a6e29648d212359d5a6ccc37ac1b4bc059b48193089b6d7e12a29ca94b5403ece75a8e2848c74d40c7361d6d5977d5f77a248cea351983c924d2c488df4aa2c7e166eaed7dd2c5330ef3e3f7f74f46ad4f76cbd627f4150c508550235e54b5bc61452ba7e6dcb15b53e6ca693f64a91d95b5a062db976cad357645b9bee41af7c3008b1b3835a222f4c5e29b0d6cded48f3c7400bd7d7b4a9ff61aade327e387cad7f43b9a2a64bfe1dd8d5fad7515c38adef06021e8499b4c4e2d288eed79129272eaed680b48a45a454ddfa2db510d250e29544f67b8b4939a098a9d1fbb803522212fb5641ce12dd61819cdae6440aeafea9dc19640bc3349e2ee405ad118bb033755c6003608b3e073202504af95c856c720e88982fb282bf66b92f82163bdcfde0bfe4f4150c0ab6b0dbeb03f455549371dd69a57c41a0c63d5370bb943a2c8fe1366894dda12f0d763ca332dd5508adef2e1378d24631ed0cc416756f2cadf3ce95940f86fc01e5a8e0d273e2296057cfb30e0101a378599ee250844d8141d076031a1e8ce5b68e706afc80b54d815925d6bd006aa1e17b7c6707a6d0d11b90685e8b4dd6e68354f6be4c96cd6633f516164c2aaf4bacd1e3ce56ac0e5d73cabec71e31feb27851379778e96a683749f5d66008c2174bc1c6ce433b532f4e799c63a5a86ea968f014577480b9a701e9a0aab4057cf86e7703d143929c44998dbdfd11493337a92cb90693ec6f545a07951934d2422ac7b445653e8603aedd19e54151be7e857c715f5b9379f17c4d9a02e0e0ebd6be8354acefc85aa8107755fd82134bd49e40977a724d8cb62ebf7b00541a6a497bd4459bad656a3d4b7f6c3a10516d4e7812f568ce79d27b0a74c724584c6bf1b126cc7a5d21104157d242dc5c28e20e74044f2f3560b0fcf0c91074c79b57b1d912ff1b641529ffccbc30310202103159e021faf15b727ac73dd9f3e89fdc13de3c8589db0aa85de2b8ed7483e262e0edb75265da19e8866ab77af7773de9045616d4ed26d928659b70e9fc793083370e7574719d9b318347f78e85733a59516d0b13cf46d5acfc672744a2435100049ad04372da23a0cb4934a090dc82abfef71a7bb5a8de2415978209dd15cdbe18e67fa4af731b4e585390735edbbddc07b826141b30564b7d439f60955921affeb32004f087d60d65920e213117e61f0f083d6e7c7f1f5e17666135d761587bf688830647ecf75fc7c2b8f17ac3a98120d13778af97518f0d58075586084c6277fb67d6a86661166596eb44204602a424ae3a41a29ff1f5ea287fab46dc5b79f8e0e7883bbe97f27f0779ab5f447bd4566346ede51166ca9e28bb0c6e87f725d815c4e4665b4eecd1bd3988a18285e30559475635b65f676ac83b2e7d1295cacfbbe4873feaa68e76e7f596bfb9799a24188af2db78436c039ed860ec10c11040d4c101d11bdda312305d3d5bef6e014cb06cb312c98732fe3f14f367af0d805d774951132d91488c4de078df3e1d90d664a74572f3ae6f7ea7cd2dd603832c866fa83a6c8fb010f27e2d3f0b4a5e9ea76c2b23d6341a7251ff20cc1e43611957b835f6750f6c8fb3726df64e0b339aa6bd3cc86c8572fb0da5db9d33cc8127079c4296d44210420b5bf20a3567f42220fb4f14c571c10a26ddebe9c63492d6426446b5b3ef2ca823aaa480006147a5f5cc258235a029d43efe74b3bcb1b2ca4c6959aebb5fe3e2d413f0e064baf2e8d7fee13e42886c9044a40016e4c96593570aa8768c96665b5733d8aff5196946a3e1ba00eb5513a65a32172699c2c9abf4043a85e336eabe344077cb488cedd4ef7c5a4bdddbc33a85cb1dd1c13d524eef0403d18d2bb10e9cb6b90c6aa59812d7744c3777ec56f6e4fd36dcf110c1549e4cd918e20e2432b6763652a1115cd59991827881423bad781ac3d0835d4b623977b09dfef9d4e6bc869fb0a8a0ee5f117134ea9e53338126367b4b0b1cca4c802562eb3c87d4cb4f9e183978f1a889df2db05ec62a8e8e85aabb88645716f2d64000409c9b7e269c35fe1d00ac53a1df80d3c234d34e440e85df7ce158dc3e2e78d36c6f2dfff096f6f0ee766532d29b84e208450ceef13adc6877e8b11c6ae43fd489a5a49fd2272fe8205ce66e8a41924b4a167d8b5184d6df1f8c519261268b6af5be824793add3de766b1597200e3af120964a0189e6f04de6523fb1c5eab361c1a62cc895f8bf53be54462058a7365a3887ed931bd6d8e4371e006f68cebcfb8b211e7bccddd993f6966baae56d293eb491257b27d18fd6236362229daa5b9354945ee54eddd5571ec0f15e9713a52bc266862bd325d079065fb6214cd65bc247182f9cc0cf06ae5b8929aca0b0286bd5deebf652721cccef3dfc1d2ef988681ded773b810db3eac7d3c2f6bd5e0164d674b70ed025bc021d6061c6aa5a157649d1a06301b67c7b2d8815f283fc6b4140f1e2290d95729424baf88c396edd1ab64b564efa4c2de69ddeddd33d6634539afa66aec5b01218af54eebdb1ef8747ff3a4225affb2857e080d4f6872e4b0da096e756869122879a281ddfe48967e9ad7f792cd59cd6d0b2a1452889c3cbf2a34a13bc0c39f8d63888b9d9786250ace6cfee48ea4faf88da518746134988bce7e035c4d5fef5002db860179feaa7ae22eb7ce3af68495a1eaf5037111905a6703058996b19fba6185c12404d9b1677b9ee1794c889dfdde4acf7c9f9c122923a346e2681bd06e3a06b4a7d4bed89414de3031dadc9a86f6d009ad2b7c07b00ea5f2924b39bd1836e241e252f350f9e63cf499dca56c46dabbd4ec1d71c8e00159d0522893732c78649526173a85e567dc7c5ad78abaeac0c1563816c671f3be1e1dae5d4a508b54af4f5cfaa7e6674f036798c4bfbae2f185ba8909d31c34a7cd389873434daa438385d12250001b87cce96d8ed7d8111fe005aef7a686b702fba6e6b67b1044db964beb00dc898559748e9e5e33b2219321ff6441b0bae9bc2645a40cdc12fce142be4e86d9eb37e7b6928c872a9dd6c6b424f8025d9dcc7446cec05ca9fb62fad5e601622c47bc64d9cf8ed912b6dbafa5e7c6ae783f54fffa681336aa06e17fbe41b6097b5bdaeb458af3a045a51fc7a0c1530ea742b3ed2735e2bee3c9fccd2d022377c1353d0944945780288f3ef435f82b539d460d105eafb1cc29bd0cbcc61df9b9732dfd5194539c5f190e58d51b0f6f3129b13333568be182094779de90933917af5d03c29591c5bf28790cf880debb32eabe33ce8a74449b208fdcb8f7a2253eab2a80c1b1d368a3db1b0082c4d2be00e904142aa5ff7a36e6011a5cbf68d935e588322bb860968b89497a22c9637fb17411c3350fdf6af96f654d16d21dca733a253add505890a3bf5180f4ee8226b17b9ac541562c0ae5a943178948921330a8dc38a46be99c2a1a17069d1f387e9daeeb71e11615905278a01a542b438f5cc3730dc1eedee6c8319284868832b2fa92071a48fea1c8539f95b7eb4da23b51b92224d2a4e570e943797be7b2308345181bac401ece2b092fd2f0b4c559fcf51504b19c01d7ec4a5a279b477c42bd85cbac51909876bba83f87486f89b2d41e09cdd611739856ce1c904e59e83dbea52f6f6ba9c537dcff7c30bfef3a6331ae83d4a460c32440fa07775a889de3bfa6f78b3bda9213fbfc1707937527faf9f896de7be096f0c6f4f1c0d1dbb2f77f9fb7d936403966bdd0ec049e2972166e27a7db60c69ca8a41aa44256d2d16b17ad9f7eccf805e8cbe3f159a5048acfb476b19712922ab3bae2bdca52f78ef789b9b76fdf344b5290073a6ef29cd8fa494b272434e67fa473d414aa333c439f953017ad2f240792dbc2db2e83d734c6b98ce5d9fec0eb7b28e2e1766c7c0045b498ef85967ba175422ae4a67451ddc392af9cc480760fada74dbffb7296ac9c08753479f4abf4250e86514b974999324c28d19687971b9c27015d5f4ee920ecc18b50cdbafd5766474a98195d6b5c1bb58fea5c68a03e1cb7f58eab34e5e755c6cef480f4f30074e07ab7142410a687ad32d4e4ecc02e3e73150a7fdcae74873c23b9ca01d26c8882c04c7baf727efc1f1efcbbabdbd1ff15e659e8fd2f082d4958d5dba9fb4ae133c49a710b5e74f699b2d810408ecb6e9ca70ef1ec79e748c09d7ac5b1b88194fa90f3c8271250583d7f31f98b9794d1de1950b491bbf058bbcd6cea6944c5da9dd33951b1155a1e12df65428a8f8ca8469b245c1362696b883527ab1b44fcf660d23608ffb50e13765d65282a02553d9f5c31eb33839a4c51318b0eb5969baff02ffdda4fadea2be8cbf8423be38aeaed3028d5c22f8c4c3cee2ffbef7638e3efc6a7053a9c8b6c3e7aad75a05fe2c84f9ac414010f9bdf50cd9b86ac777e6915d7d87f6ffa4fe45adbd3b62d06dafccf4aa2426ba063540d68df26857546e9e6a29c42ef5661489545e18feb856ac3469f608ac587b03da13e7e58556103befe922709d8379239dbdd3d8a4c6d1f8bdb4b3be509994234ad914e03ead2a2c76aa3ae92670474e131576bf6b658b94889fc61d5a3da09dff7e5487839b4fe42b2ca2dfeee03d26e705398cda0f5ed69f542159024827061bba24e323a9078488c37f4d9609e321dd249cc4a4d4608b7d92e9c88f07eac97dd3dbd445c6554f544d9cb34881c7de3978865cff5254b0f8404ca2116834d7f6bf0792766338666adc86eacbd06f635d912b82ebccaf161c6d13d03814ad23ff52e0043e141d524f334313875dec33e8eed822c0cac1525a6d5c35b160c8648699f55d862113be9831086499bf4e2af7cdf0f56cd91016deb43f1eb2c004332d3e6039c8d32ebb20deeb8bdf6219365bd8b9ae708837dcbb48d3d6bffcf8d5908c06e328d5ce1f006925f6005a010ef6772862ac4091115dc65238b40db8ba104fb217dc922d14c18d668014822d618eee490e4441bb414391cb31b1de6312bb7563f32c8ebd7213e8fc310fea9891a2493c28eb0f60f04ff8b39d14357d6f2bb5d1f7e02cedaf348dcf6b39b50d6da070f2738ebe147330e958e5cf0786539a0f462cf14bb0fe8d2cd667b4660a1504ec13303b6f2dbccf1c224721f16628e7b00cdd363b9b152340cda3cb88f6e589d6a562a56468f7481351f74bc001b246009ec47b2985c1545a4a012f900387f1451d181bbed0c2919abf6486918411f9daccaeedd0684f13482593c77b77c71bd716bb3fc600b3b4cd1f2b9bd9200e4334912376e86ec83938d0c9d564fa3e834dc768b395849a13aa8d4cb1079041e4846990ba00af307b878a802e1b22410f6f68b1cf323e627db79513d89085077576d3cf65557daa2a650268b42a0100d08e4d07bafd877b27c7a74ccba30de26bb6297ad6163cd69b89e2da0d5c839185a2743c5c6cc1764efaaa2aa9da520cebf5f8760fdea3409fd2c846c60c2e6d58d49c203b50214f52af85d9b0dc6c26d029cf37d943f3b6804e69b8510412444c8374b0b196c619a70d085caab55273b964abea29fbb3bd44e5c69978139f3b2acd5d9d16cfda7d02a1fc5b696368f947f9d8947c53253b9e18858a34f6f5e2a3245cb87a9ce684bc27185da7749e771afbdc55cf5c1950e6f8e0a688880c08fd1c5751ee383ac936966d822a9ec980d778aa4d8ac7531ccb1c0e270bff31880fd579d66acb178de4bba53d41324e4f806fa93085feed5f4069437475f2c7e0df2e2543589c3238f2fe3bc264ad00928cd67176dc881c87e44cbea8a7ccb2045a9318d6bb6827999deec197e8c61794e138b951cf8a808303b57abfacd63be1fa35043db8ca1fe6d16b047a252a1fe9e3bbc8c8aff9c235384ee195c3496d0e6f0c51bb47393442af33eb7eedcf743ef91e7a55dc9f45fba676784111b722f2e4acd839a93e6ee4a69dcb95a1ff663a4a70f94ee9c6ce67a9d809b1c174796ce65b291303a90ff458c05fa77b9b1edc92af0293f415b10ac589cae4e59d5a284dbf5d81b93854616338ef2c678a3b53099ce0d27b73fa8f2480979d122d26bac6f491c60c5b89e5b78a8195b990112b62db8366a6d21a2bd5094e6cb8b9fa6a27962be9f786b1a22c5f94df4d96010a1571529c2bc6656c71c3c711265eeb84df543e250b6123303272996faf370d9688c323d3d76a98a221286fefb20a08260349e989830dedfe3b99c8534f31deb157ce04699335754a4cd4d3b9a5272aef7730c382c63674e9fce09bac39d12cd8c5998727d18310d0cc920df9db7160fae06e5bd7c19e1594f550a0221c64c40ee7dc23e7174d7e0eb76fe491a2cf6dbf0ee791359e0a1620162fb1ba8d2e9a4a95b5920357f75f8f43c279b0ac8edf6b60075fb329ba2e5918cde675993810138cf9a9877c6cf5984629d1684006c565206739f7a255f1fc3121dc01017a276db49e890d19329627fd3d15b68cae73b44fbf94fd038d57d652ee66f5e15730146503ebfa4610d6979a0d051d675a9efe266cc240d566909b02df45f2b0efdfc3fd8aa2c9ec5f7eef4d419aa46fe1bf1c6b02998e9eeff77c5ec765b022015a8996ad796e87716d2d677e0e3e461612bedf7d125c06c56d684887963867a5b9b7c5e9a7a00be3be5936ba884278ebd6866cde6f4390f81daebe8e29f5c0f205413299bf2a6141211949700f4df85745bf43ec1adbb237345079bcea09bbc1b9507bd7b0402f613f4e6ff8c47503fa3c0957e770d93d8b3a0fc32e41667f20ccd989da5c3c526fb5d5d0900ff82dbc2af5c0653253c5eb519c3511be7368a64110d61ab622be70bc9ad53ad29d767be70dc8ddb28cb72926eee85de49151aa8b066352538813b4971c601dd24c933c7f7ed3c385a5339a7139cf8a3a6ca7a3ada89a073f3db4cff6b51c9a7c5820d6a9a5b88e50af247545357aced75335800c22f8ef693f60b81acd85ac341e691c6b821fc19671f438139a8dfb5d5cd44720282f321a3e236b31de2b1099bc975229990b040fb2012f13f0cccf2a387986815f4a90b147ae289b3ed62d7edc00c818098b1b2343384e3f5cb212c45f7fd6089d8d4855ad10278180254d758f30e6b131813f5a7677a34b3c2e0aa4fd4630d302a2de0f425c4e5b06a1d1281cd8e01aad47e5b21eda6804ab2571b32b5cf1ca12d1e34c4aa044fa080c19a36043d56650f8684f552dd491d3ca87f45fcc10c57dc35ae1098417b96ab1610e91203016eb0dc2067d43420eb0e947926c84a4500c777d4a02122832b862a1f27a736d09ce0fd4ffe293a5cb27d6f89c7ed347435e43419c6ae1ba9d42738f846302a8345ce28ced6ccdb78f6dbbeca215769a31d1860bbcdc81cbd0ada89318c5b673464795f172efa4b40734be700249ac76152724aecdfb127f1e60326674991939a2ed61e41e5037a6a4f9053bdea0dd5b51afb6048aabb5a67ca6dac1500a759194e81a9fa45b727e8fc908bb85dc34ea9d771a28df655935fd81f6b74c1ce81cb73fe012229f3b79fc1a94cac6e80ede224d47070f145ffc814d1c35beac83a1b00efeebbeff81d59574c4f6225f22fc25e127a8a87eb66d2201cb8ffcf75a08191c6434341e94be267c98f2c88db2ed09a0c66aff59ecf917de40f83fc028af991071a9d00fed63c568ca21145b20b47ddfe8c5f7bd535040a161a89612f9ba550c3bf5ce539308a985a05820d50e8daf98ae3515002164d4f08b8d393652f51804940bb1ef76f3049f37e200c068641be04fd42f27be9b6923cf3bc8221f561cceb6745df27157b5982f09baaa1a265b9bddcb247e0951732aa6395a48bd49dd71704d757ee4c84009a2381d255296bac31a34ddc8c7a45dbad9a1781d2f5e83a97b29dae1946d26ca5120efc6a26a7c01cf9159d0c7d6b8d24813a7c7b027e7ad686a4b48639f59345fe0943d828c3f3e565499cf260355bac13a855345d32da620811f1f2202a9510b6f8d43282d0bbcfb7476906df0c5c74dc10ea06ecd9a51857889dac1f0a43d4ff4249cb2f3c26bf4bef47154e76bd1816d82583087047647381a2491e4230b2855086222bf3818671dff526a4d725be6aee940062478bd5bb4b258432f14bd371dfabedaa2028f82df0dc318a8ac67412a5c732e71332bb54eb6c2cd8ac23f1c6cb99b6963b45f0f52df3fac0e9a2927b36cbc534f823d28ca37f13698bf2e17494fd0e2ee1a637d2c29f74ab476e89dbbfdd49898de4fb58d24827dced81b2bdbea24934586a7574925ed61b3ce5830c5ba08ff4558dde5ede291766cd0bd0e26b3842202d69eb2f21600eedf4634f6b0eb0acf177459ddfbb00c4db5cc5e754716ba3de34a48ce00e779552083a008588c7660df6debce1e13b10a690a599214a91d7e911ae159958de8d6433ec0730ea0a73d6302c157b2bd7547e95b30c8a4cda45455682c1ff0b7d192b4e5ef9a254d626b3cdc9d4c9b3c941190c90b4daf3c9b2d10c53f275a0d9f515b0e55b676de236d73b3733953eefb26dd11768956857d28ab501bf1ac0c09120e2b24e8b37eb356bf6fef55dea5734756933a8148897a4902e731723dca59560a894abc517fa2c6fbf3af6e2e1c9fea4e54adca9d7c6539b4792e23e5b5e21ee6f2a856f4fe0a7aaf133c1cb53b9644174bfd61ea70d42e5ae135a90a6cebe2e99777f7696f71cdff7347eb2871fac82fe9e86c14d53da189db8f8ebbc377b0aa70a600ee644619c18cc671a9e17ce67bead5c1f71e2fe1dce03d7d28eedb88c23c526d39dc5a44663e824ca4ddf0882f789ea1084b23337da15816f081e3789ca31d6a4ef7137782fc89ad3e10d9d33c05f15f2768769077f8d811c32ca984d65817cc5c50aa68c7614ab8b134cf90f6995d4adb13901630dea7312dc443e392af92e40baeb5042d2298540cd19dee3619547af016a1728ed8d70d55310fc0bab17ae86a88909ec2bf43e625950e896bc8c068b60f5945c88b758e7cf1344896b695d82711aad66ce02e7cdaa7836ce1260e140f90686d2e0f238efcf4e8a4de4073b1cda6c324b19809ffe0fba383a218afc04739525fe862f173141fbbaf3e1886a469e86ed57fd8911db23e404589c69c82ea12f88b9f69e40f9797422fb5d31b9b7cff1e7439bac62b5fb96448", 0x2000, &(0x7f0000009240)={&(0x7f0000008b80)={0x50, 0xfffffffffffffff5, 0xca1, {0x7, 0x29, 0x9, 0x400000, 0xfffa, 0x80, 0x9f, 0x2}}, &(0x7f0000008c00)={0x18, 0x0, 0x7, {0x2}}, &(0x7f0000008c40)={0x18, 0x0, 0x8}, &(0x7f0000008c80)={0x18, 0x0, 0x7, {0x758d}}, &(0x7f0000008cc0)={0x18, 0x0, 0x1, {0x5}}, &(0x7f0000008d00)={0x28, 0x0, 0x8d, {{0xd, 0x5, 0x1, r5}}}, &(0x7f0000008d40)={0x60, 0x0, 0x5, {{0x1ff, 0x88, 0x401, 0x2, 0x7, 0x9, 0x5, 0x4892}}}, &(0x7f0000008dc0)={0x18, 0x0, 0x9, {0x2}}, &(0x7f0000008e00)={0x15, 0x0, 0x3, {'\xe7](-:'}}, &(0x7f0000008e40)={0x20, 0x0, 0x9, {0x0, 0x18}}, &(0x7f0000008e80)={0x78, 0x0, 0x3fffffffc000, {0xb, 0xfffffff7, 0x0, {0x1, 0x2, 0xffffffffffffffff, 0x0, 0xb8, 0x2, 0xef8, 0x3, 0x1, 0x4000, 0x6, r6, r4, 0x0, 0x225}}}, &(0x7f0000008f00)={0x90, 0x0, 0x4, {0x4, 0x2, 0x2, 0x8, 0xfff, 0xe2, {0x6, 0x3, 0x5, 0x8, 0x0, 0x7fff, 0x0, 0x2, 0x3, 0x4000, 0x2944, r6, r1, 0xfffffff8, 0x7}}}, &(0x7f0000008fc0)={0xa0, 0x0, 0xfffffffffffffffc, [{0x0, 0x6, 0xa, 0x2, ')+%[\xef\xac{(-['}, {0x0, 0xf, 0xa, 0x9, '/dev/cuse\x00'}, {0x2, 0x5, 0x2, 0x8, '\','}, {0x5, 0x7a, 0x1, 0x7ff, '\\'}]}, &(0x7f0000009080)={0xb0, 0xffffffffffffffda, 0x4, [{{0x6, 0x0, 0x2, 0x9, 0xc95, 0x400, {0x2, 0x6, 0x3488, 0x7, 0x3ff, 0x77, 0x5, 0xfff, 0x5, 0x4000, 0x10, r0, r1, 0xc46, 0x3}}, {0x1, 0x5, 0x6, 0x200, 'W\x84#-\xb3)'}}]}, &(0x7f0000009140)={0xa0, 0x0, 0x5, {{0x6, 0x1, 0xf, 0x3, 0x7, 0xfffffffe, {0x5, 0x6, 0xde, 0xfffffffffffffffc, 0x7, 0x80000000, 0x40, 0x5, 0x6, 0x8000, 0x80, r3, r1, 0x0, 0x7}}}}, &(0x7f0000009200)={0x20, 0x0, 0x5, {0x8, 0x0, 0xb, 0x3}}}) (async) r9 = accept(r7, &(0x7f00000092c0)=@phonet, &(0x7f0000009340)=0x80) r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000009380), 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r10, 0x6, 0x15, &(0x7f00000093c0)=0x62, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000009400)={{0x1, 0x1, 0x18, r10, {r6, r1}}, './file0\x00'}) (async, rerun: 32) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000009480), 0xffffffffffffffff) (rerun: 32) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000009540)={&(0x7f0000009440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000009500)={&(0x7f00000094c0)={0x1c, r12, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000) r13 = openat$vcs(0xffffffffffffff9c, &(0x7f0000009580), 0x40, 0x0) ioctl$SNDCTL_MIDI_INFO(r13, 0xc074510c, &(0x7f00000095c0)={"21b309679116d3a2a1ab6be9b2a1e114124698079a395884feb9b6b03a7f", 0x1539f53c, 0x6, 0x5, [0x4, 0x2, 0xfffffffa, 0x9, 0x9, 0x8, 0xfffffff7, 0x6, 0x3, 0xffff, 0x6, 0x5, 0x7810122, 0x0, 0x7, 0x4a8, 0x0, 0x8]}) (async) pivot_root(&(0x7f0000009640)='./file1\x00', &(0x7f0000009680)='./file1\x00') bpf$MAP_CREATE(0x0, &(0x7f00000096c0)=@bloom_filter={0x1e, 0x1, 0x9, 0x7, 0x40a2, r11, 0x7fffffff, '\x00', 0x0, r13, 0x0, 0x4, 0x3, 0x6, @void, @value, @void, @value}, 0x50) getsockopt$IP_VS_SO_GET_SERVICES(r9, 0x0, 0x482, &(0x7f0000009740)=""/76, &(0x7f00000097c0)=0x4c) connect$phonet_pipe(r11, &(0x7f0000009800)={0x23, 0x3, 0x9, 0x7}, 0x10) (async) chdir(&(0x7f0000009840)='./file1/file0\x00') r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000098c0), r13) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000009a00)={&(0x7f0000009880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000099c0)={&(0x7f0000009900)={0xc0, r14, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x9, 0x2}, {0xc, 0x4}, {0x4}, {0x65, 0x7}, {0x3, 0x5}, {0x5, 0x4}], "b7b9fd237aca80c2"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x80, 0x7}, {0x5, 0x5}, {0x48, 0x7}, {0xc}, {0x2, 0x5}, {0x9, 0x2}, {0xc, 0x3}, {0x2d, 0x6}, {0x9, 0x5}, {0x8, 0x1}, {0x5, 0x2}, {0x4, 0x5}, {0x9}, {0x85, 0x2}, {0x6, 0x2}, {0x8, 0x2}, {0x9, 0x5}, {0x40, 0x5}, {0x9, 0x6}, {0x8, 0x6}], "f7c8b5cab363161d"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0xa, 0x2}, {0xa, 0x2}, {0x11, 0x5}, {0x6, 0x4}, {0x9, 0x3}, {0x10}, {0x1}, {0x7, 0x1}, {0xe1, 0x3}, {0x3, 0x2}, {0x2, 0x5}, {0x85, 0x2}, {0xd, 0x7}, {0xff, 0x3}, {0x3, 0x1}, {0x7, 0x1}, {0x9, 0x3}], "47c76fb66fbcdab1"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x0, 0x1}, {0x6, 0x5}, {0x7}, {0x3, 0x1}, {0x5}, {0xa, 0x7}, {0x3, 0x5}, {0x7f, 0x4}, {0xf, 0x7}, {0x5, 0x2}, {0x4, 0x5}, {0x3}, {0x5, 0x6}, {0x9}, {0x3, 0x3}, {0x3, 0x3}, {0x4, 0x5}], "b675b2a3c3f51efc"}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x800) (async) r15 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r15, &(0x7f0000009c00)={&(0x7f0000009a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000009bc0)={&(0x7f0000009a80)={0x104, 0x3ed, 0x2, 0x70bd26, 0x25dfdbfd, "72f0bbf30841377ce8ad6d080db5f075f4cfc7d5bcd3da5faa89571b028fd02bb341ae07cfac6fb41a4c2f6c24adbb6b948a2dd5dc7476ee3a7ad4553f6da75c8cdcb8b6fd9fc00b0decff7748e79af3f43bdd9bbab8e7eb488d9991fa81f62282641f43ef3e393220a74f9f8adcbc093b988653483d41e0e8eed03205ef9ade3a06d3936993d0053173150150b04415e6e7bb9c5df0919bc932909e0050002185973dbdc4f5235e6eb598c18578c5b565b8efd8b3bd1c44f459bc5f80c9fa5a11462e16de69546f70e9a5f78f1449ba2be23253b3eeec03276bdb15ca09a17a5d6534603efb314ddbc8a115da834e70ae", ["", ""]}, 0x104}}, 0x0) (async) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r17 = syz_genetlink_get_family_id$nl802154(&(0x7f0000009c80), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000009cc0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r16, &(0x7f0000009ec0)={&(0x7f0000009c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000009e80)={&(0x7f0000009d40)={0x108, r17, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8b}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "30406e22b97dc56b73249acecbd063ab"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r18}, @NL802154_ATTR_SEC_KEY={0xb8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3ba5d8e3a7356166a9dfb256a057fb6914892da83cf9fc7ee4d8fbd8c0bf8e1f"}, @NL802154_KEY_ATTR_ID={0x54, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xa06}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xd6}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10000}]}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3b8e2dc7978ff0a99978c13ce64f53f1"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "2d0cbcf6db0316d982bf24f864020dc4"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x108}, 0x1, 0x0, 0x0, 0x400c5}, 0x4040041) 39.350831964s ago: executing program 4 (id=563): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}]}}}]}, 0x44}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad000008"], 0x125) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 39.289576817s ago: executing program 4 (id=564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="ccaec68eea052c2acb0172f9ee2fc7bb394f36c8c00cffe5e95b7cdc67ed46063c867d7d080ae3123b769b5bc74b78767082aeeb4357ab26c55ab1ad2126f9d85bd12a8ace21e80c3dbff8b3cb789b2639afdd214de88aea13e152f32b693e7b277cb9d075b3f14931537ad7a422", @ANYBLOB="d79a9ea77030828f68ab9221d9e333b679c4eb84188463bae8cd6dcc18b44d46"], 0x30}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87, r5}, './file0\x00'}) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x7c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000240)={0x0, @multicast1, 0x4e1f, 0x0, 'lblc\x00', 0x0, 0x0, 0x4}, 0x2c) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r7, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=r2, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES8=r2, @ANYBLOB="100000000000000020"], 0x5c, 0x1) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) rmdir(&(0x7f0000000000)='./file1\x00') r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r9, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r9, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x0, 0x440, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x5) ioctl$TCFLSH(r8, 0x8926, 0x20001114) 39.224633903s ago: executing program 4 (id=568): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) (async) prctl$PR_SET_PDEATHSIG(0x35, 0x2) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0x0, 0x204}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="360a0000000000007910480000000000610410000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000000)={0x3, "b0071d"}, 0x4) (async) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f0000000080)={0xe, 0x1, 0x6, 0x2, 0x8, 0x4}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00') write$cgroup_int(r5, &(0x7f0000000040), 0x12) (async) r6 = socket$alg(0x26, 0x5, 0x0) fstat(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) (async) memfd_create(&(0x7f0000000000)='oom_score_adj\x00', 0x5) (async) write$cgroup_int(r5, &(0x7f0000000200), 0x12) accept$alg(r5, 0x0, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, r1}, 0x68) 34.03489758s ago: executing program 2 (id=614): sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, 0x0, 0x5, 0x0, 0x0, 0x0, {0x3, 0x0, 0x2}, [{{0x254, 0x1, {{0x1, 0x8}, 0x8d, 0xe6, 0x5, 0x3, 0x0, 'syz0\x00', "82518d029804aadf39e78b12d404c774e093147bedbecd7794a72518007addf1", "5ae23499fe09d950452d62b4b8bbf94057bffee7ef53c70d55448fb5f7f03b32", [{0xefd, 0x101, {0x0, 0xa}}, {0x40, 0xf, {0x2, 0x81}}, {0x8, 0xa, {0x1, 0x7}}, {0x8, 0x0, {0x0, 0x4a1}}, {0x38f5, 0x0, {0x1, 0x2}}, {0x4, 0x400, {0x3, 0x5}}, {0x71, 0x0, {0x1, 0x9}}, {0x0, 0x400, {0x3, 0x2}}, {0xf561, 0x3, {0x0, 0x1}}, {0x101, 0x3, {0x3, 0x6}}, {0xd, 0x2, {0x2, 0xffff}}, {0x9, 0x4, {0x7022d7512aed3270, 0x5570}}, {0xffff, 0x0, {0x2, 0x66}}, {0x100, 0x0, {0x0, 0x4}}, {0x9, 0x6, {0x5, 0x3}}, {0xda6, 0x6, {0x1, 0x9}}, {0x95, 0x8, {0x0, 0x3}}, {0x8d, 0x8, {0x3, 0x4}}, {0x7, 0x8, {0x2565ff7ff7b8ab54, 0x7}}, {0x1, 0xcd4, {0x2, 0x5}}, {0x6a1, 0x1, {0x1, 0x1}}, {0xc420, 0x0, {0x3, 0x4}}, {0x4, 0x2, {0x0, 0x3}}, {0x3cf3, 0x80, {0x3, 0xe3}}, {0x1, 0x7, {0x1, 0x3}}, {0x19, 0x5, {0x0, 0x2}}, {0x7, 0xbd, {0x0, 0xfffffff8}}, {0x0, 0x2a58, {0x3, 0x61}}, {0x8, 0xc, {0x3, 0x2}}, {0x0, 0x5, {0x3, 0x5}}, {0x4, 0x9, {0x1, 0x8000}}, {0xf, 0xe68c, {0x3, 0x32a5}}, {0x2, 0x400, {0x0, 0x9}}, {0x1, 0x8, {0x2, 0xffffffff}}, {0x81, 0x6, {0x1, 0xfff}}, {0x3, 0x0, {0x1}}, {0x1, 0x7, {0x2, 0x1}}, {0x2, 0xb, {0x2, 0x80000001}}, {0x6, 0x0, {0x2, 0x10001}}, {0x0, 0x6e9, {0x3, 0xffffffff}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x4, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @dev}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="28800100000000000500110001000000140003006272696467655f736c4176655f30"], 0x44}, 0x1, 0x0, 0x0, 0x48010}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x28000001}, 0xc, &(0x7f0000000780)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_RULE_USERDATA={0x12, 0x7, 0x1, 0x0, "cc858bbba82c04af6aaf60c99ef8"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xed0}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELSETELEM={0x88, 0xe, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6c, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x58, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}]}]}, @NFT_MSG_NEWCHAIN={0x144, 0x3, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x74, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x417a1a4a}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'netpci0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7171724d}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_USERDATA={0x98, 0xc, "3c8532d875d1f690acabe32a9b79eea5d8003aa4296d6441347a020a52f060291be20905bd2a27fc481fc545d712d2c617b881aa2cd02d27c16518406ede13fbbb313f7878c9e3d5797146b8a4770ef1d0633b9fdd6fa41aa3e1e408a156b4afaa345e279e8a273def22d5f96144f8ec7187bcdbc5eee08915b2b065f3fbd5efc0f1faf52b34da7301ac3bf9d7c70775752ce8cf"}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x303, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x7c, 0x5, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_USERDATA={0x32, 0xc, "acaced1f9c7345f927b7324edc3a1150ee1fc04c4b27c4476317c4691b30645c4304d905fb134376bc42c07c50bc"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x5, 0x0, 0x0, {0xb, 0x0, 0x4}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x364}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) 34.034446186s ago: executing program 2 (id=616): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000040)=0x1) r0 = syz_open_dev$dri(&(0x7f0000000500), 0x16, 0x22400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 34.034276483s ago: executing program 2 (id=617): prlimit64(0x0, 0xf, &(0x7f0000000140)={0x0, 0xffff7fffffffffff}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000280), 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x80, 0x3231564e, 0x3, [0x2], [0x2003], [], [0xfff]}) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 33.950655878s ago: executing program 2 (id=618): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r2 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r2, &(0x7f00000000c0)="e3", 0x1, 0x0, &(0x7f0000000040)={0x2, 0xffff, @private=0xa010101}, 0x10) listen(r2, 0xda8c) accept4(r2, &(0x7f0000000340)=@nfc, 0x0, 0x0) r3 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000002300), 0x200, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@private1, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r6}}]}, 0x144}}, 0x0) ioctl$PTP_PIN_SETFUNC(r3, 0x40603d07, &(0x7f0000002340)={'\x00', 0x3, 0x0, 0x8001}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/202, 0xca}, {&(0x7f0000000300)=""/173, 0xad}], 0x2, 0x8, 0x9) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000002c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c00}, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x80601) ioctl$CEC_DQEVENT(r7, 0xc0506107, &(0x7f0000000400)={0x0, 0x0, 0x0, @raw}) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='squashfs\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x78, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10}}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0xc0}, 0x1) 33.866158716s ago: executing program 2 (id=621): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x66, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000580), 0x7, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) r3 = semget$private(0x0, 0x4000000009, 0x0) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000240)=[0xfae3]) socket$can_raw(0x1d, 0x3, 0x1) getrusage(0x0, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@ipv4_newaddr={0x30, 0x14, 0x1, 0x70bd24, 0x25dfdbfe, {0x2, 0x18, 0x41}, [@IFA_LOCAL={0x8, 0x2, @empty}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_FLAGS={0x8, 0x8, 0x3c}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) 33.678003245s ago: executing program 2 (id=623): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) sendto$inet(r0, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_group_source_req(r0, 0x0, 0x3b, &(0x7f0000000140)={0x5, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e22, @remote}}}, 0x108) 33.67791976s ago: executing program 33 (id=623): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) sendto$inet(r0, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_group_source_req(r0, 0x0, 0x3b, &(0x7f0000000140)={0x5, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e22, @remote}}}, 0x108) 23.424356719s ago: executing program 34 (id=568): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) (async) prctl$PR_SET_PDEATHSIG(0x35, 0x2) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0x0, 0x204}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="360a0000000000007910480000000000610410000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000000)={0x3, "b0071d"}, 0x4) (async) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f0000000080)={0xe, 0x1, 0x6, 0x2, 0x8, 0x4}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00') write$cgroup_int(r5, &(0x7f0000000040), 0x12) (async) r6 = socket$alg(0x26, 0x5, 0x0) fstat(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r7, 0x0) (async) memfd_create(&(0x7f0000000000)='oom_score_adj\x00', 0x5) (async) write$cgroup_int(r5, &(0x7f0000000200), 0x12) accept$alg(r5, 0x0, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, r1}, 0x68) 3.524190503s ago: executing program 1 (id=1077): r0 = socket$nl_route(0x10, 0x3, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x41) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macsec0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8042}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) memfd_create(&(0x7f0000000000)='\'}{y!&t^(\'+{\'*\\$\x00', 0x1) 3.417145621s ago: executing program 1 (id=1078): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4080) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2c}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mknod$loop(&(0x7f0000000080)='./file0/bus\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x1, 0x0, 0x0, 0x1000, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000440)="0f2224f2ad66b805000f00d866baa000b0dfee660f3a173edf660f3834f60f01796dd1fec74424007e6f0000c744240200000100c744249306002000000001142466ba2000b81cf10000ef", 0x4b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) chown(&(0x7f00000000c0)='./file0/bus\x00', 0xee00, 0x0) unlink(&(0x7f0000000100)='./file0/bus\x00') 3.267395734s ago: executing program 1 (id=1080): r0 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) 2.347507094s ago: executing program 1 (id=1098): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000808000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$kcm(0x11, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x8, {"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", 0x1000}}, 0x1006) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3332be2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x4}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7) r3 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) getsockname$packet(r3, 0x0, &(0x7f0000000140)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x31ea8be7603078ea}}, @common=@inet=@tos={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x360) 2.343910118s ago: executing program 1 (id=1099): socket$inet6(0xa, 0x3, 0x8b) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (rerun: 64) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) (async) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030030000b12d25a80648c2594f90124fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa}, 0x0) 2.283594647s ago: executing program 1 (id=1101): mkdir(&(0x7f0000000040)='./file0\x00', 0xa8) (async) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000780)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x5b03, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x10000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}, {@mmap}, {@fscache}, {@ignoreqv}, {@cachetag}, {@cache_readahead}], [{@smackfsfloor={'smackfsfloor', 0x3d, '9P2000.u'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfsdef={'smackfsdef', 0x3d, '.^\x98%@'}}, {@seclabel}]}}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async, rerun: 32) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) (rerun: 32) close(r6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r7 = syz_open_dev$audion(&(0x7f0000000180), 0x2, 0x103001) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x19, 0x8, 0x8, 0x2, 0x10414, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r7}, 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r9, 0x0, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r8, &(0x7f0000000300), 0x0}, 0x20) (async) r10 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="f39efa", @ANYRESHEX=r10, @ANYBLOB=',access=client,k']) 815.78774ms ago: executing program 6 (id=1136): open_by_handle_at(0xffffffffffffffff, 0x0, 0x2a100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x28, 0x0, 0x10, 0xab49}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x5}]}, 0x10) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000080)={0x3, 0x74, "bfc906ccf4327311dd2aafbf43485567a5a0d2ddaf06d07bb13e6d0aa3c8cfea616121d93a3d154b9f7bcf6bd4514ddf77ac0470a04633defad63cd97f3323ad49aa581f428c9af8fea97bde56b40f7859cf68e6a37817f7b92e38aa3e6ac869d7eb69b8b9ce199bb8ab0d907ca915bcf7dbf110"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 815.097402ms ago: executing program 6 (id=1137): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@local, @local, @remote, 0x0, 0x9, 0xa, 0x300, 0x0, 0x4400046, r1}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0x13c}}, 0x0) 764.886964ms ago: executing program 6 (id=1139): capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) capget(&(0x7f0000000080)={0x19980330, 0xffffffffffffffff}, &(0x7f00000000c0)={0xac2, 0x0, 0x9, 0x8, 0xe24b, 0x71}) r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x54}}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000009441"]) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) capget(&(0x7f0000000140)={0x19980330, r1}, &(0x7f0000000180)={0x8, 0x8, 0x7, 0x6, 0x6, 0x9}) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@ldst={0x6, 0x0, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mlock(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff) 764.067305ms ago: executing program 6 (id=1140): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r1, 0x80000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000001c0)="ba30a945e46b03d7dd459192252b6e3c518d8badd03bee30080487b36c9dc92d57f60c92e675acf419e99d5ca8758bdc1e0ddc04ee8d370e9e5c1faa5b4fefed59d0931c498f0c7a38aeae2c26014b38"}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000040)=[@dead_binder_done], 0x0, 0x0, 0x0}) 763.423828ms ago: executing program 6 (id=1141): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000040)={0x5000, 0xeeef5000, 0x0, 0x0, 0x2}) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @multicast1}, 0x4, 0x0, 0x4, 0x3}}, 0x2e) r3 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9c, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xda, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000400)={'gre0\x00', &(0x7f00000003c0)={'sit0\x00', r4, 0x1, 0x7800, 0x5, 0x7, {{0x8, 0x4, 0x1, 0x8, 0x20, 0x68, 0x0, 0x8, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x31}, {[@timestamp={0x44, 0xc, 0x4c, 0x0, 0x6, [0x65, 0x9]}]}}}}}) ioctl$SG_IO(r1, 0x2285, &(0x7f00000009c0)={0x0, 0xfffffffffffffffd, 0x95, 0x1, @scatter={0x6, 0x0, &(0x7f0000000800)=[{&(0x7f0000000440)=""/67, 0x43}, {&(0x7f00000004c0)=""/214, 0xd6}, {&(0x7f00000005c0)=""/170, 0xaa}, {&(0x7f0000000680)=""/51, 0x33}, {&(0x7f00000006c0)=""/128, 0x80}, {&(0x7f0000000740)=""/147, 0x93}]}, &(0x7f0000000880)="f67d2ec7eb98cfd832679dbb105404955ccbcedf0338c690f8d44b02d64e39b3ca1287ed2ddb671fcc1a3d528e919ce65b50c7e5668a68a0f0113014cf641bdc54d33c8e16116a2a3e6cf6c8c67c7b20457d8bd9977c24106a36fa7b2d2a8e190f47b885c42c6ac0374a7f75d46ea36919d4ef3721da3f8e0abe09a1d249b374cb3f0caa74826d34ea92b131d1db00e6213ebe2878", &(0x7f0000000940)=""/31, 0x81e, 0x10020, 0x3, &(0x7f0000000980)}) ppoll(&(0x7f0000000a40)=[{r2, 0x80}], 0x1, &(0x7f0000000a80)={0x0, 0x989680}, &(0x7f0000000ac0)={[0xe]}, 0x8) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r1, 0x4068aea3, &(0x7f0000000b00)={0xce, 0x0, r1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001cc0)={0xffffffffffffffff, 0x0, 0x1000, 0x2c, &(0x7f0000000b80)="79f4ff094e72e0a083ae99cb6782846b7489781f9893ba0923389cda3854d61430f9411f10df681f723b482e1dd42f32a4e690e25cc0dc731a43b00cade8b9b1ada14e02eeaf158651a0b4a88229b8392bfc09497aab32a440cb8ac616beb9add3f533f898c5f23704673644599c6fd4eeb17a30a78a52fff34a0074514d1c293f548c6b5e318332b25725978a1f2f7caa35a76b0a9ed616fdf344758c51784ecdd9938ce3a1540480605fe10759ad20a4764e97467ef37771db7c9a1960f7f45d65a5cb2e886907bf12746f9d0a853d8c25c8d9499194dd332e58460e72896ed437b139d81daa9e93fae81e9c07d0048821e3e65b06b253183b5d914e3b19c74e69f6a20dfa344200eafadcc378d5dee9d768d5cab08d4a52d23d9c96c7362e3fbedf3a67e5a1b536c3a54ed5d6ba7609d7eadf3a1d16eb2313fcb83184965e9d0dd11deaf8cef287a3cec4f05d527a27148b923b4e866f4efc3078dcfe1238a15b8f168510a1b0d208b62396eef0214b8f0687fc2d22bd05e36a6f0aea95431ff188c86a5a546487e178dcdb711a366692e21e07448cd4fa97beaf002b1041acbe050c86e6f3a9538c0956e0b68fe545959f100704e7d1905af8dc0517c3e41b1fa47826608d3a2ff69fa804d9984273d339136f98a13ef7f7344eae2b1543462df8128dbe5cd3eadea2dab4435c1c2005088d39bf3ee85cbb721546bb8664067f17c43bb26b3f718439871bd6df86cc8c25d6ca953d80ef5f5a660a8a85a2dab8864013aa29904eb6a7be9769280c4c2025e327e22ae09b376708892c9c19d3d79fd7608a5270df03e815ee86fdb997b267ce70eca9f9d891c323421da0cb6f261eda041bee0a1ee8c897fb616a87c21a7a27a93f19c5e86fe2ee786c02211a8cae1667654c94f84e1288433a1c392ab0d4e48847ce6ea837ed26c49522c7d7b594d1ce1ccade74ae4040d8b8643b3eb60780b7b98a3374de521f159a6463db788e37d6f93beb38c69e527975ebb29595504b02795f8185306af1f52102d796003e9844f2ca54951c8fbf6edea8bf79ee9802b063d45ac62e542f2c2c9229f5b491ec2e8ec3bf49bb9d7a6ef4dc2adb54175e422f29dc1bed1e52e812ca3deb7158545e349cfd9263cff8718fc711c7a391cfd1a8885cbea7fcb63121d8fc43fe59fe00d180beda835604105930243ab6bdfadd13de6aab3c953650084d4b228e5574c8a52faae4d36e879c18fb8aa3d7fce98a926641dd5b855e5f328fa946a254e20d4af54f888ebdb8c533e30cf8056ce9347d5170a8f506430cd999b946fbcdbedc5739561176fcde83170f4adb6348d01f548c19dba4271d3febf10697cdcd8c9059695d3c2b01e80e05bbaff2e1008b65f8b641cfa335a93c0eb90ba31d5ebba656dde763fd0d46620f57696a791f45ddd1c7c5ec54cb8fea7e20557e7efa1fe8a40d28e6d08434e5bc11d7bf94c498f0165f54194298a39132d8f84a7fcc3dbed06a59d2ba96232c80543e102585c8ec007394f5c7b27d2387d30d3fbfb51f8d2e7b723b6182b0f98d3ef8024c8b93be3fbadc794d989cbf96be37a4517af8ad48524feee5c4b00c2f8f19d848641f0906261e0a3f3a791121bad64329170f94b322b4f7841a1dc8873edcca6b857bc4372b9087f09646e4614cb7e498ddcd7486ed3073910af5c90993316caeca3eab865112e7d59a3ffb24e37f70fa3d4cec0e5eaa01a33c237ea972b32011f576cca91f51cc1e1a79551127d63ca1f867f1b28daf8fe12b78e35947e3bb7702e70274c5861e5024d2db85d62f1fff4bed62a7b03b742c94a3474eba5e0b86feb2d973d8820739ef99ce491fec4f4ecc9b912c02981ab89411187ce46d8e9acbcfb61e52ef8a3dac8c442f58eb3e4ebdcabab75409b08486205ccc474cfcd8c16682628842a08f90aedc8bb734ac9338ba2182fe039817c707909cc0998bbbafbd27d6246d3d0d38acc2d66d7b8b309dc354a604b882d937ac08d8338279d4f9e8b71c10e15cf33a4b3fa08481da246a864c44f50513ddf4a6a01586876ea192bae052f1996d08c85bfd1754b6bfc12293e4da3136e5565d3657f7af86566ce4c7df524f3b0687019b550d53b85674f402c1c1f9a8e08ad6dfad391e20dba88b2ce4422236a4952437527c128edf8936de3f3ccad6fd1b2ea7e9ebcfb29267cf6a42eec18ce09b49d38f3854512bd9138e0c42d114ad0822fe9f8af812ce4fd93193476dd13b5062d120d187888bec5671259405b5ed97830f9c9c98c2645e949a9c827d405d7b14709f7c21c5cbf6f7aa0b908b6f1225c3766bee6377c8712b29d081d6184531ba583968940b1958f96e8e9230f728d430652c17157da011f88ac3c73af98034575b33dbe673412ef48616338f4b42dea434d97d9886ce65b729c607216f53ab7ab43d5e4c2ad8e9993f0332a2e07f32b8d58b8d312cfe23e02b9a0af93c751fcf6e5811cdf2b06e7c787a020746c020a4ca2394ea1d24dcefb83aec51819876d1bb41f9f002b8b875ffb3d27396c8af8aed41e5ae7e3ca9c7e264914eb2ac975a2acccc6a40adcfb4bb78a199c32f1dbfc77d02ec7563214fdf382b949e33c782780fc76034b4c6b7cbe321f6fcb267c9462a68b543008dd458e6ea1a240511695f9473cbb7c1b04bf6424dbdf16df11f5bbf59da2d4bc9a9d01ee31292a802be92bf8adbb3c5940cbc55d219f1d1da43d3d51ed622a5e527b08de081ba34d4607594840253cc5edcb34218d0ea7e0655b4287a28e24b039577e99f7630dad38d80bf91b1451a0620d9abc40aba871ab20a50fdf8d8e688a6c11628a0e0eeb7de7babf808bc5d9ce635d29ec37c15adccd8478c9446c7a95633958be3633afb6be36aa816c4418f623cfd30f2645e8d1d72d0c7805ea34b735552a56be19e900a8804969b6d405f3dacbc96c7330909ceb2217b52c0ad9197930ec8dd9f4a31b915d5d0ba42e9572411a032d3742809a72fb12de73cdd3ff39b0e05579b92d69f1cc33df694cc376c1394b1c1174034b9524a64265e1f901a8ee504d99d8db7c4af9414ab06065f58b513eff8c09bcb005e1db89daa039fc69f03c2a4554133ab63a55da6620ffc564d4493956f51b8e3fc112d4767b260f97835bf592d669277f4314940f3d942aea007740e89559e49f86f23087ab6452ff15b82dd50eb4273ec73e5081230dff73453461fc8b41f1d0b93c175a8ce5526aafc0c9743b16d09ffb32dffd575bb306d6625d62642de2f4561032fe42af9b828431fa04610d9415ad01df159473d8b7688f485eb135765961535c39a90218ad7b6b6d23d53d87826c3ef6e032e290a1295150f9dbfeefbdcaabfeedf1fd9105efef1b36cebfac5e829a230a0f4533ea76d829b204b1cc4e00171bc333e9419d1a4e3636eaf9b5f851eb4a4d32ed34c932f7ec709ba4c7e42b181890e27563e91e1a78d2b881d4310257ded5170ba6aa9c1fabf56bc0b79d6cb5aa0a7efe4543d385fb89b81ba17786fdde50817fe573bc6f2b0c61e86ed364e0b778cbc8313cc831a07b78b143109834bd6cd0fc20185c37473ae2a2e15490b4908aef7588f8515d501549c1494b19095154207aa0968c3ccf7164a0622317adc104ad90a321a0ddd55b1fad05feed6124949eb4ad364ed4ed92761c3e39258c8f5d8e2eefea29e28d474a3f2d3118e1ef2203777565d757932e8eb1fb0bfb3573636ac855d9f9d797849982bd26685c084306e82160e8ff15612f9086c96b0a900d3eb67a8904cd9633ab055a5c8769ddefc927b40d5676c166c787e4d800171755265c5665a5c0d1e113a736254126bc473664b68dfc3b51cb6352f4df53d0cb9ca90645579ae1996512c5b273d14c1ee6dde5bf8e9eef977f8d03a0c62dc953c0499328c3d409f903d7ee335824af9127eeb153826bc7cdba2828c734ec221f5d96dd562054767c9b5e2d691bba6b1ac18aa4da6d419aa45520c8011a6ded7fdc7a200233e271cfa5da8c2fb537bbacfea8d88aa3a8f1b66ab4f44c9cf11df8cff8e1a3b2ee6ca9ec569d5af577861da26b7d92252e9bef08893c0fd66d204c7c0765d2252690dbde356f41f64edb22dabf2ddf3c4c474a0bb28c771336ab5a5ae2a27ab592e2f3766eb3b633db3a203481077de3185d2c4769115ecbbfe39386e1d1d52f78c39a96a45f0a410707075a47b6fd7fc6f6baadd0036500c14004be34c77aa66d1772107b1fb1876976eadae1dcf0bc2fb4a39e16ef03b29aed0f52c02f72d9dcc516827932fc02b1681696ad7e5c6bcbc07a94a8afc25e603d40839d429a61ace49a763c0c69c98ccaf726693d77e230007be86c05cad5d1647599bfcff8bde33d145c60c24f88184c3e015c5fa3ce931d8e318e396f8495ff2468c6da0542e5596d2f2c0814d4c1ae8ad9cc290a0ffa35979c9f37f1ebaa18010d27f465f3728ea138d9d27718efbe746ce6a7fc6e51f602308ea78259940fefd07b624f700a11a259a8b87b64746b3ff90f9fd8b98a808579829cfcebb05a97ae5360f197d595946676964277ad9f15a6fe6737ac871be229489f6b05868a6a6222ad80f7576e8b54309d39dd6cc9831ba6562863a5827891b0f1e91c92098419916c660579b5e84e93713b9b2c78ccd87a843cd9409e3bee0a5e0b0c29d8cd3ce2f3e4022c9da19e4beec513852c7476f853d096acfea00dd930dbbdaa5867a03cae9502d3c9658eae1e899c11e04b537f7f5e979d8abc916011986d517c0c8794851387c89c11661fc18184343717032a1a6c710aa3038557e33d00f6e10c11a712596e7676d0f5b9f853ac56c4d98bb20251a78e26d3c200dafce5066f9aee9ce8dbeee0119becccae5cba05410e88a8f615f871c07c575de5457c827d3b38eab342c716347cdc16ed926461ce0cf32bf5962023c4ae2d92767cbf97fa0b2d1cd08c6e3d52ea27889a85a9e0a965298ff1d9cd4e916a3dd0b7a06078b71475be110bcb46a8f8e7556725b446b23e05210f5f7e52a60d516ff23ceb8ec00fbeba4fa3a59ceb34d04d14af1203213304e3e073aaf8e74b7191a0ef866399daa93e630a3dae1f1f1b1d8ac845348523598d3d5ac4c787678c6db1d1147921431b72e2492b6cb40d25d45c1459d56812a9f5e0f0ef483320ca05e22fe1c184bab455c48c0965a5293f81b1bcb9dbfe17655f2f04896ee25f3d0b84de2510dc5e995bbab034e492833494406305214460f74e40a77f0c6e532a162c32e2b939a9c562be490b41deff986f62ca171b1d46f751e4b34cfcbdc10c0408c94c8c62cb24f781e918aec4fd7800198f5c7e1c56e1d5193ede644f9368cf0ae429b9c089e08bdf71e3eee0eb02f65c2c24cbb8b0240596da864bcc128b744242e61eee60916622a72513f71c73e7b269ea7aa476fe25f1fc3ab18f048d7fa82a25ac6d8355a274d7cb09843b7c1edb8e4c5fe6a5710f66c6afc016b0c01cf6975a4eb8aeb4b5e332d48aafd5fafd995d0d9d45f9bdafafbb99b9a8a21773ef583e32929505add9e31d7ce9c16ca8db05a50e45fbb318265b290805a302606d7f5702339e4403e431e852c4710d5b8510e0156c2fde08aa524dbf9133e3463cbdb4712dcbf57c51c8600b2dd462fba7b07719c04cd3efcf3f53be4564478b9c63b0f8272eee19ab4339c3cdb38b0467b5201155fe8d274939673f7296fe52fd0e85cc090af3cab0f81ef0002c50071bc4f96ab85932d6a1c7e3b45b4848f83bc8be9206e19ad7585df0cab898396916b6b4a41be18c8", &(0x7f0000001b80)=""/44, 0x9, 0x0, 0x46, 0x54, &(0x7f0000001bc0)="201d485c183dea250398daba68d1805520adf118703578c42266c73c20c33bf3c0703746c53920b221d48b90e063742aaee1c8cbddfc40561958a880145fd3a84dbcd9d04a40", &(0x7f0000001c40)="874fe88ef3c12f15b5f65a788e61184ebf4b86b631d9851693ee8ff3a261263f9482720c08d28a2a3ec359d1b716eb8f96fba40decf3ca99a015877a2b051c5bef1ccc7183f6a86831c93d7c1e67d3110a32be7d", 0x5, 0x0, 0x1}, 0x50) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000001d40)={0xa, {0x7, 0x1}}, 0xa) bpf$ITER_CREATE(0x21, &(0x7f0000001d80)={r1}, 0x8) r5 = open(&(0x7f0000001dc0)='./file0\x00', 0x220441, 0xc0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000001e00), 0x2400, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000001e40)={'veth1_macvtap\x00'}) rt_sigaction(0xb, &(0x7f0000001f00)={&(0x7f0000001e80)="861b65f2d9e9c462e19fcac4417b7d31f341a5c4e1c5f9c50f529ddc9700000fddd9c40175f4110fad10", 0x80000000, &(0x7f0000001ec0)="c4e289a7de2e0f9f860d000000c481c9fa03660f383c550a64450fa1470f01f9c4a1cd68df660f1aac9900000100c401fa7e7f0042d3950000ffff"}, &(0x7f0000001fc0)={&(0x7f0000001f40)="66470f6bd966470fd40766f2410f5907c4e2298e27c4e171d58b790000008f29489010672e0fd17f006601b90080000041d9f6410f8200000100", 0x0, &(0x7f0000001f80)="64460f38057a0bf20f38f08b0e000000c4039d7dce003e3e66470f68c912af9c15000067660f3a0e2e00c403f16cdda73642e390c4027197e6420f01c1"}, 0x8, &(0x7f0000002000)) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002040), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f00000020c0)={0x7, 0x0, &(0x7f0000002080)=[r5, r5, r5]}, 0x3) io_uring_setup(0x78db, &(0x7f0000002100)={0x0, 0x1e20, 0x0, 0x3, 0x311, 0x0, r2}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002280)={@fallback=r5, 0x8, 0x0, 0x6, &(0x7f0000002180)=[0x0], 0x1, 0x0, &(0x7f00000021c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002240)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) syz_genetlink_get_family_id$ethtool(&(0x7f00000022c0), r1) listen(r2, 0x5) r9 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCNOTTY(r9, 0x5422) inotify_init1(0x80000) r10 = syz_open_pts(r7, 0x100) ioctl$TCXONC(r10, 0x540a, 0x1) ioctl$KVM_GET_PIT2(r8, 0x8070ae9f, &(0x7f0000002300)) 682.958476ms ago: executing program 6 (id=1144): sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40040, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045003, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES64=r1], 0x7) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000003800)={@multicast1, @loopback}, 0x8) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x19b, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaa2786dd630715e4016506ff00000000000000000000000000000000fe8000000000000000000000000000bb840000000000000004018104010500005e10040830000600fc00000000000000000000000000000000000000000000000000ffffffffffff00000000000000000000ffffac1414bb20010000000000000000000000000000ff020000000000000000002bce69c7fe96b53b00000000000000000000000000fe8000000000000000000000000000bb200100000000000000000000000000019512016f00000000fe8000000000000000000000000000bbfe880000000000000000000000000101fe8000000000000000000000000000bb00000000000000000000000000000001ff0200000000000000000000000000010000000000fffffffffffffff500000100000000000000000000000000000000ff020000000000000000000000000001fe8000000000000000000000000011640000000000000000000000000000000000000400004e2000004e21000000030000000000000001000000040000000000"], 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000000)={0x7, 'bridge_slave_0\x00', {0x5}, 0xfda}) 454.652848ms ago: executing program 0 (id=1150): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000200)={0x3, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, &(0x7f00000002c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000300)={&(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x1, 0xa, 0x3, 0x0, r5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000280)="b98d0a0000b8feff0000ba000000000f30c4c3397b8919a50000e0440f20c0350c000000440f22c03e0f3536660fc7755066ba2000b89ebd0000ef0f20c035200000000f22c066baf80cb8cda1cb82ef66bafc0cb05deef0828e7a9e8514030f0158eb", 0x63}], 0x1, 0x49, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x48, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r8, r7, 0x25, 0x0, @val=@tracing}, 0x40) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @random='\x00\x00B\f\x00', @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x30, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @empty, @mcast2}}}}}}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 231.183148ms ago: executing program 5 (id=1151): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x16c, r1, 0x1, 0x8000, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x11e, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x70}, @device_b, @broadcast, @initial, {0xd, 0x4}, @value=@ver_80211n={0x0, 0x10, 0x1, 0x0, 0x0, 0x3}}, 0x1, @default, 0x2, @void, @void, @void, @val={0x4, 0x6, {0x0, 0x7f, 0xffff, 0xa}}, @void, @val={0x2d, 0x1a, {0x8, 0x2, 0x4, 0x0, {0x7, 0x2, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1}, 0x800, 0x33f, 0xdf}}, @val={0x72, 0x6}, @void, [{0xdd, 0xc4, "410fa524cde575ce7f20572346df3802088e8faa6ecef25c2474070ffd1345e42a45aeb56b630a51fcacf0b272f3b392d08d45d9f7fd8728899313eaa2b51bd48d11a52111e5bcb24a61cc2d8d3e07ff62412578332fc731d9c31e8284117c3134138694e09b01991d654089e5a7e1722f1042db50f8dd0452232d60a1fca4d9e046588804154c9363e6b5f671696d0fc9f32451e3ded334f1620c88ea2ca2ec16008fab76a69a25d351fc30162ee1c6e7d2bd2da74682f54914e3085a7a868d3db99ee7"}]}}, @NL80211_ATTR_FRAME={0x26, 0x33, @mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_b, @device_b, @random="9d2b2f5c82d9", {0x6, 0x8}, @value=@ver_80211n={0x0, 0x5, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, 0xa80a, 0x4c, @random=0x3, @void, @void}}]}, 0x16c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x80}}, 0x200080c0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) removexattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f00000005c0)=""/210, 0x0, 0x20, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff58, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)) syz_io_uring_setup(0x6177, &(0x7f0000000240)={0x0, 0x0, 0x10100}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r6}, 0x8) ioctl$SIOCSIFHWADDR(r5, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0xd7d, &(0x7f0000000740)={0x0, 0x0, 0x10100, 0x0, 0x2cc}, &(0x7f0000000100), &(0x7f0000000040)) 230.873058ms ago: executing program 0 (id=1152): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x1, 0x4}, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x21, &(0x7f0000000200)="24fc911e918c74ad7a0e599e17a90ecabe833ca12054887f4142a64471dbe048", 0x20) bind$tipc(r1, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0xb, &(0x7f0000000100)=""/125, &(0x7f00000001c0)=0x7d) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000240)={"e425ceb7e3b74f98c641e9591e74abd6", 0x0, 0x0, {0xff, 0x9}, {0x1, 0x4a04e3fe}, 0x6, [0x8, 0x0, 0x8, 0xde8, 0x2, 0x8, 0x6, 0xf8b9, 0xe9, 0x6, 0x8, 0xffff, 0x0, 0xaa, 0xf, 0x56f]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000004c0)={0x0, "e8c13670ac4b4c457cb885fd86804ad6"}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f00000014c0)={{r3}, r5, 0x8, @unused=[0x2, 0x8, 0x40, 0x60000000000], @devid=r6}) socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x10000001}}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) bind$tipc(r1, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty}}) 229.40088ms ago: executing program 0 (id=1153): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x24040) ioctl$EVIOCGSND(r0, 0x8040451a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00') r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r5, 0xc048aeca, &(0x7f0000000200)) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000020701020003000000000000000067000003090001007319c2"], 0x38}}, 0x400801c) r6 = syz_io_uring_setup(0x24fa, &(0x7f0000000300)={0x0, 0x0, 0x2}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[@ANYBLOB='/'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x8, 0x12, r2, 0x951c1000) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r10, 0x112, 0xb, &(0x7f0000000100)=0x3, 0x2) connect$bt_sco(r10, &(0x7f0000000040), 0x8) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r11 = syz_io_uring_setup(0x82e, &(0x7f0000000280)={0x0, 0xfffffffe, 0x10100, 0x1, 0x0, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_CLOCK(r11, 0x1d, &(0x7f0000000380)={0x6}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f0000000080)={0x0, "507539c4666e80cc506ff5e9c91a0d1611c7a50b089c740fec00becb13334e93", 0x0, 0x0, 0x10}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000580)="27050200590200000600002fb96dbcf706e10500000088641100112708000281", 0x20}, {&(0x7f0000000400)="ce2d9300446a", 0x6}], 0x2}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x4605, 0x1) socket$kcm(0x29, 0x5, 0x0) r12 = openat$selinux_status(0xffffff9c, &(0x7f0000000bc0), 0x0, 0x0) read(r12, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r12, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x7}) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000040)=""/238) 164.878041ms ago: executing program 5 (id=1154): r0 = socket$kcm(0x10, 0x3, 0x10) (async) r1 = getpid() process_vm_readv(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000003c0)="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", 0x8a7}], 0x1}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) (async) r4 = fsopen(&(0x7f00000000c0)='coda\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) accept4$alg(r3, 0x0, 0x0, 0x800) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90424fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) 78.178722ms ago: executing program 5 (id=1155): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="810000"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_TARGET_NETNSID={0x8}]}, 0x20}}, 0x0) 77.467628ms ago: executing program 0 (id=1156): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x80000000, 0x1, {0x1, @win={{}, 0x0, 0xffffffff, 0x0, 0x0, 0x0}}}) 77.181694ms ago: executing program 5 (id=1157): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x7, 0x1) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x91, 0x6, 0x1, "9cc7d7ea64016634246cefedfe5f2538b1681eae200677a92f76e928f12b0c87ad5227dc1a6bf9c5a2aff2de071584280183a147daf656551826223d89d8c2579a47b23871799c764f2707c962eb38d76926d91fc2269c5c9572fb6ca466cbd004a390fcf218ebd0874bff33df5388941767a82463d0ee6d54066a9771ce4826c578891d21c886a33480e2f0f4d855cddb"}) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000100)=0xb30, 0x4) (async) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x8, 0x2, 0x1}, 0x18, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r4}}, 0x18) r5 = syz_open_dev$mouse(&(0x7f00000002c0), 0x7, 0x101000) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000300)=0xd9) (async) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000340)={0x4, 0x8, 0xfa00, {r4, 0xe5a}}, 0x10) (async) r6 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), r5) (async) getsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000400)={@private2, 0x0}, &(0x7f0000000440)=0x14) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000480)={@loopback, @rand_addr, 0x0}, &(0x7f00000004c0)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x926b, 0x5, {{0xa, 0x4, 0x3, 0x4, 0x28, 0x66, 0x0, 0x1, 0x4, 0x0, @broadcast, @remote, {[@ssrr={0x89, 0xf, 0xbe, [@multicast2, @broadcast, @multicast2]}, @end, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000007c0)={'ip_vti0\x00', &(0x7f0000000780)={'ip_vti0\x00', 0x0, 0x80, 0x10, 0x0, 0x1, {{0x6, 0x4, 0x2, 0x1e, 0x18, 0x64, 0x0, 0xb0, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1e}, {[@noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x2f, 0xf4, 0x1, 0x7f, 0x13, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, 0x7, 0x1f, 0x200, 0x1ac1}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000f80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000900)={0x634, r6, 0x100, 0x70bd25, 0x64, {}, [{{0x8, 0x1, r7}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x6, 0xf, 0x6, 0xf}, {0x1, 0x9, 0xc8, 0x3}, {0x5, 0x6b, 0x5, 0xa2}, {0x2, 0x50, 0xc, 0xbfa}, {0x6, 0x0, 0x3, 0x1}, {0x51, 0x5, 0xc, 0x5b93}]}}}]}}, {{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r10}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x1d4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}]}}, {{0x8, 0x1, r14}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5a9}}, {0x8, 0x6, r18}}}]}}, {{0x8, 0x1, r19}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x634}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) ioctl$CDROMEJECT(r5, 0x5309) (async) sendmsg$nl_route_sched(r5, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)=@getchain={0x6c, 0x66, 0x0, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xa, 0x2}, {0x5, 0xffff}, {0xfff1, 0x7}}, [{0x8, 0xb, 0xed}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x186a}, {0x8, 0xb, 0xffff0000}, {0x8}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x9996}, {0x8, 0xb, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40004}, 0x20008081) (async) fadvise64(r2, 0x1, 0x5, 0x1) 76.580846ms ago: executing program 0 (id=1158): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c86c73b33970fc0d2a1d4c6726b29961f542f32c9c9a4af967d2e84b8e60c8c201be26b12467a2df24e4ba5916ea4b4c9fd420570a520a399213d932e49404ef5c75f0cef0e946a2266f23797f9aa6d2d8a8b990178a0817c7b333c78462c6e39b0d3a9c338079b786f6ecd8964afdc734e24e33f35a580e833e2f71b6e5b59b6dc14688c0932c58dc99da0ff406fc0754369451fca5215fa5c307633ed18a8732d3a31d18a0143f7259cf2bef38f6c4756cce31ee02ab0d292d93"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) (async) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) (async) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r4, 0x100, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000080}, 0x24024091) (async) fcntl$setlease(r2, 0x400, 0x2) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x0, r2}) 76.426513ms ago: executing program 5 (id=1159): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r3, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) r4 = dup(r0) copy_file_range(r0, 0x0, r4, &(0x7f0000000240)=0xfffffffffffffffe, 0x20000009, 0x0) 6.800323ms ago: executing program 5 (id=1160): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x28011, r1, 0x1000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='mm_khugepaged_scan_pmd\x00', r4}, 0x18) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socket$kcm(0x10, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x22}]}}}]}]}], {0x14}}, 0xd8}}, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r9, 0x1, 0x70bd2d, 0x224, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) r10 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {0xc, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) r12 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r14, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}]]}, 0x2c}}, 0x40020) sendfile(r10, r12, 0x0, 0xf2) sendmsg$NFC_CMD_GET_DEVICE(r8, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x1c, r9, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}]}}) write$nci(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="610302a6af7de133dc03"], 0xa) 0s ago: executing program 0 (id=1161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) kernel console output (not intermixed with test programs): [ T7490] FAULT_INJECTION: forcing a failure. [ 63.898858][ T7490] name failslab, interval 1, probability 0, space 0, times 0 [ 63.902280][ T7490] CPU: 2 UID: 0 PID: 7490 Comm: syz.0.414 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 63.905026][ T7490] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 63.907822][ T7490] Call Trace: [ 63.908702][ T7490] [ 63.909479][ T7490] dump_stack_lvl+0x16c/0x1f0 [ 63.910708][ T7490] should_fail_ex+0x497/0x5b0 [ 63.911962][ T7490] ? fs_reclaim_acquire+0xae/0x150 [ 63.913299][ T7490] should_failslab+0xc2/0x120 [ 63.914508][ T7490] kmem_cache_alloc_node_noprof+0x71/0x310 [ 63.916042][ T7490] ? __alloc_skb+0x2b1/0x380 [ 63.917401][ T7490] __alloc_skb+0x2b1/0x380 [ 63.918609][ T7490] ? __pfx___alloc_skb+0x10/0x10 [ 63.919922][ T7490] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 63.921266][ T7490] netlink_ack+0x164/0xb90 [ 63.922438][ T7490] netlink_rcv_skb+0x348/0x440 [ 63.923696][ T7490] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 63.925128][ T7490] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 63.926582][ T7490] ? netlink_deliver_tap+0x1ae/0xd90 [ 63.927987][ T7490] netlink_unicast+0x53c/0x7f0 [ 63.929238][ T7490] ? __pfx_netlink_unicast+0x10/0x10 [ 63.930624][ T7490] netlink_sendmsg+0x8b8/0xd70 [ 63.931879][ T7490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.933261][ T7490] ____sys_sendmsg+0xaaf/0xc90 [ 63.934527][ T7490] ? copy_msghdr_from_user+0x10b/0x160 [ 63.935972][ T7490] ? __pfx_____sys_sendmsg+0x10/0x10 [ 63.937359][ T7490] ? __pfx___lock_acquire+0x10/0x10 [ 63.938713][ T7490] ___sys_sendmsg+0x135/0x1e0 [ 63.939974][ T7490] ? __pfx____sys_sendmsg+0x10/0x10 [ 63.941343][ T7490] ? lock_acquire+0x2f/0xb0 [ 63.942536][ T7490] ? __fget_files+0x40/0x3f0 [ 63.943788][ T7490] ? fdget+0x176/0x210 [ 63.944866][ T7490] __sys_sendmsg+0x117/0x1f0 [ 63.946091][ T7490] ? __pfx___sys_sendmsg+0x10/0x10 [ 63.947445][ T7490] ? __fget_files+0x244/0x3f0 [ 63.948713][ T7490] do_syscall_64+0xcd/0x250 [ 63.949898][ T7490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.951433][ T7490] RIP: 0033:0x7f8fea97e719 [ 63.952707][ T7490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.957602][ T7490] RSP: 002b:00007f8feb707038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.959768][ T7490] RAX: ffffffffffffffda RBX: 00007f8feab35f80 RCX: 00007f8fea97e719 [ 63.961803][ T7490] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 63.963861][ T7490] RBP: 00007f8feb707090 R08: 0000000000000000 R09: 0000000000000000 [ 63.965909][ T7490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.967974][ T7490] R13: 0000000000000000 R14: 00007f8feab35f80 R15: 00007ffd78fa1138 [ 63.969985][ T7490] [ 64.113812][ T7525] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 64.115640][ T7525] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 64.122188][ T7525] vhci_hcd vhci_hcd.0: Device attached [ 64.124535][ T64] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 64.125057][ T7526] vhci_hcd: connection closed [ 64.126253][ T64] Bluetooth: Wrong link type (-22) [ 64.130819][ T1144] vhci_hcd: stop threads [ 64.132271][ T1144] vhci_hcd: release socket [ 64.133477][ T1144] vhci_hcd: disconnect device [ 64.220521][ T7530] netlink: 'syz.1.422': attribute type 62 has an invalid length. [ 64.224995][ T7530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'. [ 64.227433][ T7530] gre0: Master is either lo or non-ether device [ 64.230689][ T7529] ALSA: mixer_oss: invalid OSS volume '' [ 64.414153][ T1040] wlan0: Trigger new scan to find an IBSS to join [ 64.551785][ T7556] netlink: 36 bytes leftover after parsing attributes in process `syz.1.432'. [ 64.673498][ T7568] FAULT_INJECTION: forcing a failure. [ 64.673498][ T7568] name failslab, interval 1, probability 0, space 0, times 0 [ 64.677410][ T7568] CPU: 2 UID: 0 PID: 7568 Comm: syz.4.436 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 64.680376][ T7568] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.683134][ T7568] Call Trace: [ 64.684024][ T7568] [ 64.684873][ T7568] dump_stack_lvl+0x16c/0x1f0 [ 64.686110][ T7568] should_fail_ex+0x497/0x5b0 [ 64.687339][ T7568] should_failslab+0xc2/0x120 [ 64.688579][ T7568] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 64.690068][ T7568] ? skb_clone+0x190/0x3f0 [ 64.691231][ T7568] skb_clone+0x190/0x3f0 [ 64.692343][ T7568] netlink_deliver_tap+0xab3/0xd90 [ 64.693670][ T7568] netlink_unicast+0x6b4/0x7f0 [ 64.694916][ T7568] ? __pfx_netlink_unicast+0x10/0x10 [ 64.696287][ T7568] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 64.697618][ T7568] netlink_ack+0x6a8/0xb90 [ 64.698783][ T7568] netlink_rcv_skb+0x348/0x440 [ 64.700030][ T7568] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 64.701437][ T7568] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 64.702810][ T7568] ? netlink_deliver_tap+0x1ae/0xd90 [ 64.704184][ T7568] netlink_unicast+0x53c/0x7f0 [ 64.705430][ T7568] ? __pfx_netlink_unicast+0x10/0x10 [ 64.706805][ T7568] netlink_sendmsg+0x8b8/0xd70 [ 64.708054][ T7568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.709419][ T7568] ____sys_sendmsg+0xaaf/0xc90 [ 64.710664][ T7568] ? copy_msghdr_from_user+0x10b/0x160 [ 64.712082][ T7568] ? __pfx_____sys_sendmsg+0x10/0x10 [ 64.713459][ T7568] ? __pfx___lock_acquire+0x10/0x10 [ 64.714806][ T7568] ___sys_sendmsg+0x135/0x1e0 [ 64.716042][ T7568] ? __pfx____sys_sendmsg+0x10/0x10 [ 64.717394][ T7568] ? lock_acquire+0x2f/0xb0 [ 64.718569][ T7568] ? __fget_files+0x40/0x3f0 [ 64.719781][ T7568] ? fdget+0x176/0x210 [ 64.720999][ T7568] __sys_sendmsg+0x117/0x1f0 [ 64.722199][ T7568] ? __pfx___sys_sendmsg+0x10/0x10 [ 64.723521][ T7568] ? __fget_files+0x244/0x3f0 [ 64.724759][ T7568] do_syscall_64+0xcd/0x250 [ 64.725952][ T7568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.727497][ T7568] RIP: 0033:0x7f78cdf7e719 [ 64.728671][ T7568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.733652][ T7568] RSP: 002b:00007f78ced83038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.735913][ T7568] RAX: ffffffffffffffda RBX: 00007f78ce135f80 RCX: 00007f78cdf7e719 [ 64.737947][ T7568] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 64.740145][ T7568] RBP: 00007f78ced83090 R08: 0000000000000000 R09: 0000000000000000 [ 64.742837][ T7568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.744866][ T7568] R13: 0000000000000000 R14: 00007f78ce135f80 R15: 00007ffeb6e03b58 [ 64.746907][ T7568] [ 64.785204][ T7575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=7575 comm=syz.4.438 [ 64.820546][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.437'. [ 65.093618][ T7611] FAULT_INJECTION: forcing a failure. [ 65.093618][ T7611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.097440][ T7611] CPU: 0 UID: 0 PID: 7611 Comm: syz.2.447 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 65.100196][ T7611] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.102945][ T7611] Call Trace: [ 65.103871][ T7611] [ 65.104168][ T7608] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 65.104653][ T7611] dump_stack_lvl+0x16c/0x1f0 [ 65.104678][ T7611] should_fail_ex+0x497/0x5b0 [ 65.109138][ T7611] _copy_to_user+0x32/0xd0 [ 65.110309][ T7611] simple_read_from_buffer+0xd0/0x160 [ 65.111703][ T7611] proc_fail_nth_read+0x198/0x270 [ 65.113008][ T7611] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.114502][ T7611] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.115948][ T7611] vfs_read+0x1df/0xbe0 [ 65.117048][ T7611] ? __fget_files+0x23a/0x3f0 [ 65.118284][ T7611] ? fdget_pos+0x24c/0x360 [ 65.119456][ T7611] ? __pfx_lock_release+0x10/0x10 [ 65.120783][ T7611] ? trace_lock_acquire+0x14a/0x1d0 [ 65.122143][ T7611] ? __pfx_vfs_read+0x10/0x10 [ 65.123422][ T7611] ? __pfx___mutex_lock+0x10/0x10 [ 65.124759][ T7611] ? __fget_files+0x244/0x3f0 [ 65.126393][ T7611] ksys_read+0x12f/0x260 [ 65.127588][ T7611] ? __pfx_ksys_read+0x10/0x10 [ 65.128854][ T7611] do_syscall_64+0xcd/0x250 [ 65.130045][ T7611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.131585][ T7611] RIP: 0033:0x7f436d97d15c [ 65.132764][ T7611] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 65.138176][ T7611] RSP: 002b:00007f436e750030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 65.140332][ T7611] RAX: ffffffffffffffda RBX: 00007f436db35f80 RCX: 00007f436d97d15c [ 65.142361][ T7611] RDX: 000000000000000f RSI: 00007f436e7500a0 RDI: 0000000000000004 [ 65.144446][ T7611] RBP: 00007f436e750090 R08: 0000000000000000 R09: 0000000000000000 [ 65.146517][ T7611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.148615][ T7611] R13: 0000000000000000 R14: 00007f436db35f80 R15: 00007ffd939c5e38 [ 65.150653][ T7611] [ 65.219267][ T7623] capability: warning: `syz.4.452' uses 32-bit capabilities (legacy support in use) [ 65.329338][ T7632] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 65.373224][ T7640] netlink: 16 bytes leftover after parsing attributes in process `syz.4.459'. [ 65.376747][ T7640] openvswitch: netlink: Key type 63 is out of range max 32 [ 65.506183][ T7658] fuse: Bad value for 'user_id' [ 65.507571][ T7658] fuse: Bad value for 'user_id' [ 65.553595][ T7662] CUSE: zero length info key specified [ 65.591632][ T7672] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 65.936515][ T7706] xt_nat: multiple ranges no longer supported [ 66.016210][ T7711] could not allocate digest TFM handle blake2s-224 [ 66.019211][ T7711] netlink: 'syz.4.480': attribute type 27 has an invalid length. [ 66.021525][ T7711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.480'. [ 66.054164][ T827] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 66.227646][ T827] usb 5-1: config 1 interface 0 has no altsetting 0 [ 66.230868][ T827] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 66.233317][ T827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.235250][ T7743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7743 comm=syz.2.488 [ 66.235752][ T827] usb 5-1: Product: syz [ 66.239714][ T827] usb 5-1: Manufacturer: syz [ 66.241245][ T827] usb 5-1: SerialNumber: syz [ 66.358668][ T7753] Cannot find add_set index 0 as target [ 66.630885][ T7769] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.862809][ T827] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 67.123173][ T7801] xt_hashlimit: size too large, truncated to 1048576 [ 67.217948][ T7795] __nla_validate_parse: 4 callbacks suppressed [ 67.217958][ T7795] netlink: 36 bytes leftover after parsing attributes in process `syz.1.504'. [ 67.312980][ T7698] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 67.356225][ T7807] netlink: 48 bytes leftover after parsing attributes in process `syz.1.507'. [ 67.422700][ T7799] ufs: failed to set blocksize [ 67.426078][ T62] usb 5-1: USB disconnect, device number 6 [ 67.428748][ T62] usblp0: removed [ 67.434612][ T7815] netlink: 16 bytes leftover after parsing attributes in process `syz.1.509'. [ 67.454202][ T45] wlan0: Trigger new scan to find an IBSS to join [ 67.574969][ T7819] xt_cgroup: xt_cgroup: no path or classid specified [ 67.704067][ T5955] Bluetooth: hci3: command 0x0406 tx timeout [ 67.715050][ T7828] loop2: detected capacity change from 0 to 7 [ 67.719446][ T7828] Dev loop2: unable to read RDB block 7 [ 67.721072][ T7828] loop2: unable to read partition table [ 67.722668][ T7828] loop2: partition table beyond EOD, truncated [ 67.727188][ T7828] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 67.768854][ T7837] SET target dimension over the limit! [ 68.034223][ T7862] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 68.112248][ T7866] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 68.120832][ T7866] kvm: pic: non byte read [ 68.123142][ T7866] kvm: pic: non byte read [ 68.125397][ T7866] kvm: pic: non byte read [ 68.127664][ T7866] kvm: pic: non byte read [ 68.357099][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.484621][ T7915] block device autoloading is deprecated and will be removed. [ 68.501039][ T7917] netlink: 16 bytes leftover after parsing attributes in process `syz.1.538'. [ 68.504544][ T7917] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 68.507402][ T39] kauditd_printk_skb: 28 callbacks suppressed [ 68.507410][ T39] audit: type=1326 audit(1731735817.492:503): auid=4294967295 uid=16832 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7916 comm="syz.1.538" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2380b7e719 code=0x0 [ 68.519439][ T39] audit: type=1400 audit(1731735817.513:504): avc: denied { mounton } for pid=7918 comm="syz.4.539" path="/89/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 68.545743][ T7924] netlink: 'syz.4.540': attribute type 10 has an invalid length. [ 68.548248][ T7924] syz_tun: entered promiscuous mode [ 68.558229][ T7924] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 68.605705][ T39] audit: type=1400 audit(1731735817.598:505): avc: denied { module_request } for pid=7930 comm="syz.4.543" kmod="net-pf-10-proto-122-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 68.634906][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.543'. [ 68.642701][ T39] audit: type=1804 audit(1731735817.640:506): pid=7931 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.543" name="/newroot/92/file0/bus" dev="ramfs" ino=19211 res=1 errno=0 [ 68.759284][ T7939] netlink: 'syz.0.545': attribute type 11 has an invalid length. [ 68.827027][ T7943] openvswitch: netlink: Actions may not be safe on all matching packets [ 69.376803][ T6369] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 69.406587][ T7956] trusted_key: encrypted_key: insufficient parameters specified [ 69.409716][ T7956] trusted_key: encrypted_key: insufficient parameters specified [ 69.411797][ T7956] trusted_key: encrypted_key: insufficient parameters specified [ 69.415556][ T7956] trusted_key: encrypted_key: insufficient parameters specified [ 69.425498][ T39] audit: type=1400 audit(1731735818.454:507): avc: denied { accept } for pid=7958 comm="syz.2.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 69.433953][ T7960] [U] V3Fپ"S/4:XTZWTLW= [ 69.450710][ T7958] [U] J"E:" [ 69.482955][ T7967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7967 comm=syz.1.556 [ 69.488185][ T7967] netlink: 'syz.1.556': attribute type 1 has an invalid length. [ 69.497614][ T7967] 8021q: adding VLAN 0 to HW filter on device bond2 [ 69.501986][ T7971] binder_alloc: binder_alloc_mmap_handler: 7970 20ffd000-21000000 already mapped failed -16 [ 69.504370][ T7967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.556'. [ 69.505499][ T7972] binder_alloc: 7970: binder_alloc_buf, no vma [ 69.522805][ T6369] usb 5-1: Using ep0 maxpacket: 32 [ 69.525343][ T6369] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.527996][ T6369] usb 5-1: config 0 has no interfaces? [ 69.530849][ T6369] usb 5-1: New USB device found, idVendor=a168, idProduct=0617, bcdDevice=c0.3b [ 69.533939][ T6369] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.536035][ T6369] usb 5-1: Product: syz [ 69.537142][ T6369] usb 5-1: Manufacturer: syz [ 69.538399][ T6369] usb 5-1: SerialNumber: syz [ 69.540465][ T6369] usb 5-1: config 0 descriptor?? [ 69.636419][ T7981] SELinux: truncated policydb string identifier [ 69.638174][ T7981] SELinux: failed to load policy [ 69.639845][ T7981] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 69.640013][ T7982] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 69.642791][ T7981] VFS: Can't find a romfs filesystem on dev nullb0. [ 69.642791][ T7981] [ 69.646053][ T7982] VFS: Can't find a romfs filesystem on dev nullb0. [ 69.646053][ T7982] [ 69.673243][ T7984] dlm: no local IP address has been set [ 69.674813][ T7984] dlm: cannot start dlm midcomms -107 [ 69.689599][ T39] audit: type=1400 audit(1731735818.732:508): avc: denied { bind } for pid=7983 comm="syz.4.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 69.733448][ T39] audit: type=1400 audit(1731735818.773:509): avc: denied { audit_write } for pid=7985 comm="syz.4.562" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 69.755491][ T7993] netlink: 47 bytes leftover after parsing attributes in process `syz.4.563'. [ 69.771315][ T39] audit: type=1400 audit(1731735818.814:510): avc: denied { create } for pid=7973 comm="syz.2.558" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 69.778597][ T39] audit: type=1400 audit(1731735818.814:511): avc: denied { read write } for pid=7973 comm="syz.2.558" name="file0" dev="tmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 69.784494][ T39] audit: type=1400 audit(1731735818.814:512): avc: denied { open } for pid=7973 comm="syz.2.558" path="/122/file0" dev="tmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 69.799928][ T7995] mkiss: ax0: crc mode is auto. [ 69.815416][ T1013] usb 5-1: USB disconnect, device number 7 [ 69.852381][ T7999] fuse: Bad value for 'group_id' [ 69.853769][ T7999] fuse: Bad value for 'group_id' [ 70.372613][ T8012] syzkaller0: entered promiscuous mode [ 70.374100][ T8012] syzkaller0: entered allmulticast mode [ 70.876738][ T8017] kernel profiling enabled (shift: 7) [ 70.898661][ T1410] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.948049][ T8023] binder: 8022:8023 ioctl c020f509 20000140 returned -22 [ 70.969042][ T8025] usb usb7: usbfs: process 8025 (syz.2.576) did not claim interface 0 before use [ 70.972427][ T8025] usb usb7: usbfs: process 8025 (syz.2.576) did not claim interface 0 before use [ 71.375483][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.577'. [ 71.438322][ T8036] netlink: 20 bytes leftover after parsing attributes in process `syz.1.581'. [ 71.441053][ T8036] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 71.445516][ T8036] xt_policy: output policy not valid in PREROUTING and INPUT [ 71.447350][ T8035] netlink: 16 bytes leftover after parsing attributes in process `syz.1.581'. [ 71.470671][ T8040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 72.240662][ T8029] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 72.242404][ T8029] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 72.248960][ T8029] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 72.253130][ T8029] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 72.255767][ T8029] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 72.318247][ T8058] netlink: 32 bytes leftover after parsing attributes in process `syz.1.588'. [ 72.530374][ T5985] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 72.706023][ T5985] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 72.708839][ T5985] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.711641][ T5985] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.714133][ T5985] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 72.725640][ T5985] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 72.728012][ T5985] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 72.730088][ T5985] usb 7-1: Manufacturer: syz [ 72.732998][ T5985] usb 7-1: config 0 descriptor?? [ 73.155161][ T5985] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 73.163957][ T5985] appleir 0003:05AC:8243.0004: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 73.500947][ T3220] usb 7-1: USB disconnect, device number 8 [ 73.592934][ T5955] Bluetooth: hci2: command 0x0c1a tx timeout [ 74.036109][ T8094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.599'. [ 74.038457][ T8094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.599'. [ 74.041215][ T8094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.599'. [ 74.043670][ T8094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.599'. [ 74.046834][ T8094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.599'. [ 74.049746][ T8094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.599'. [ 74.052208][ T8094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.599'. [ 74.054424][ T8094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.599'. [ 74.056713][ T8094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.599'. [ 74.303121][ T8112] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 74.307603][ T1040] Bluetooth: hci4: Frame reassembly failed (-84) [ 74.331081][ T64] Bluetooth: hci3: command 0x0406 tx timeout [ 74.938307][ T8140] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 75.022663][ T8145] pimreg4: entered allmulticast mode [ 75.025554][ T8145] bridge_slAve_0: renamed from lo (while UP) [ 75.067912][ T8153] netlink: 'syz.2.617': attribute type 10 has an invalid length. [ 75.075236][ T8153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.078324][ T8153] team0: Port device bond0 added [ 75.165657][ T39] kauditd_printk_skb: 22 callbacks suppressed [ 75.165666][ T39] audit: type=1400 audit(1731735824.093:535): avc: denied { accept } for pid=8154 comm="syz.2.618" lport=53040 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.171497][ T8156] netdevsim netdevsim2 netdevsim0: Unsupported IPsec algorithm [ 75.202471][ T5944] bridge0: port 3(syz_tun) entered disabled state [ 75.209465][ T5944] syz_tun (unregistering): left allmulticast mode [ 75.211170][ T5944] syz_tun (unregistering): left promiscuous mode [ 75.212867][ T5944] bridge0: port 3(syz_tun) entered disabled state [ 75.239612][ T8166] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 75.241339][ T8166] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 75.245473][ T8166] vhci_hcd vhci_hcd.0: Device attached [ 75.249138][ T8167] vhci_hcd: cannot find a urb of seqnum 9 max seqnum 0 [ 75.252435][ T1040] vhci_hcd: stop threads [ 75.253558][ T1040] vhci_hcd: release socket [ 75.254694][ T1040] vhci_hcd: disconnect device [ 75.430674][ T39] audit: type=1400 audit(1731735824.350:536): avc: denied { execute } for pid=8169 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 75.436459][ T39] audit: type=1400 audit(1731735824.350:537): avc: denied { execute_no_trans } for pid=8169 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 75.501994][ T5953] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.506466][ T5953] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.508869][ T5953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.511705][ T5953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.513911][ T5953] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.515895][ T5953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.575300][ T8170] chnl_net:caif_netlink_parms(): no params data found [ 75.597918][ T1040] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.600771][ T1040] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.654720][ T1040] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.657430][ T1040] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.677046][ T8170] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.678933][ T8170] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.680806][ T8170] bridge_slave_0: entered allmulticast mode [ 75.683072][ T8170] bridge_slave_0: entered promiscuous mode [ 75.685625][ T8170] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.687506][ T8170] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.689413][ T8170] bridge_slave_1: entered allmulticast mode [ 75.691364][ T8170] bridge_slave_1: entered promiscuous mode [ 75.709882][ T8170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.713448][ T8170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.732850][ T8170] team0: Port device team_slave_0 added [ 75.742372][ T1040] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.745629][ T1040] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.750517][ T8170] team0: Port device team_slave_1 added [ 75.755222][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 75.767068][ T8170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.768890][ T8170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.775486][ T8170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.780503][ T8170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.782436][ T8170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.789413][ T8170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.804302][ T39] audit: type=1400 audit(1731735824.702:538): avc: denied { write } for pid=8178 comm="syz.1.625" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 75.810696][ T39] audit: type=1400 audit(1731735824.712:539): avc: denied { ioctl } for pid=8178 comm="syz.1.625" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 75.826029][ T1040] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.829087][ T1040] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.834326][ T8170] hsr_slave_0: entered promiscuous mode [ 75.838669][ T8170] hsr_slave_1: entered promiscuous mode [ 75.841195][ T8170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.843192][ T8170] Cannot create hsr debugfs directory [ 75.926273][ T1040] bridge_slave_1: left allmulticast mode [ 75.927790][ T1040] bridge_slave_1: left promiscuous mode [ 75.929297][ T1040] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.934641][ T1040] bridge_slave_0: left allmulticast mode [ 75.936218][ T1040] bridge_slave_0: left promiscuous mode [ 75.937750][ T1040] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.978268][ T39] audit: type=1400 audit(1731735824.874:540): avc: denied { setopt } for pid=8189 comm="syz.1.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 75.985469][ T1040] batman_adv: batadv0: Removing interface: ip6gretap1 [ 76.156899][ T39] audit: type=1400 audit(1731735825.036:541): avc: denied { read write } for pid=8189 comm="syz.1.628" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 76.163136][ T39] audit: type=1400 audit(1731735825.036:542): avc: denied { open } for pid=8189 comm="syz.1.628" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 76.172520][ T39] audit: type=1400 audit(1731735825.036:543): avc: denied { ioctl } for pid=8189 comm="syz.1.628" path="pid:[4026532877]" dev="nsfs" ino=4026532877 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.191585][ T30] cfg80211: failed to load regulatory.db [ 76.255092][ T1040] team0: Port device bond0 removed [ 76.257868][ T1040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.261694][ T1040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.265083][ T1040] bond0 (unregistering): Released all slaves [ 76.269328][ T1040] bond1 (unregistering): Released all slaves [ 76.273067][ T8170] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 76.289509][ T8170] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 76.293152][ T8170] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 76.296205][ T8170] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 76.324359][ T8170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.330167][ T8170] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.336467][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.338310][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.343137][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.345061][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.428748][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 76.432242][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 76.449423][ T8170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.513234][ T5955] Bluetooth: hci3: command 0x0406 tx timeout [ 76.549283][ T8170] veth0_vlan: entered promiscuous mode [ 76.559418][ T39] audit: type=1400 audit(1731735825.415:544): avc: denied { sys_chroot } for pid=8223 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 76.575500][ T1040] hsr_slave_0: left promiscuous mode [ 76.579124][ T1040] hsr_slave_1: left promiscuous mode [ 76.581149][ T1040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.583241][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.585647][ T1040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.587971][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.604547][ T1040] veth1_macvtap: left promiscuous mode [ 76.606019][ T1040] veth0_macvtap: left promiscuous mode [ 76.607657][ T1040] veth1_vlan: left promiscuous mode [ 76.609223][ T1040] veth0_vlan: left promiscuous mode [ 76.659130][ T1040] pimreg4 (unregistering): left allmulticast mode [ 77.163713][ T1040] team0 (unregistering): Port device team_slave_1 removed [ 77.225114][ T1040] team0 (unregistering): Port device team_slave_0 removed [ 77.707013][ T5955] Bluetooth: hci1: command tx timeout [ 77.714083][ T8170] veth1_vlan: entered promiscuous mode [ 77.724803][ T8170] veth0_macvtap: entered promiscuous mode [ 77.727891][ T8170] veth1_macvtap: entered promiscuous mode [ 77.741578][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.744465][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.746975][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.750118][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.752668][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.755346][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.758507][ T8170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.762568][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.765264][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.769266][ T8170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.775885][ T8170] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.778272][ T8170] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.780547][ T8170] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.783345][ T8170] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.815139][ T1250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.817201][ T1250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.829118][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.831181][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.882498][ T8258] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 77.891065][ T8258] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.893214][ T8258] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.950809][ T5955] Bluetooth: hci2: command 0x0c1a tx timeout [ 77.958373][ T8256] loop5: detected capacity change from 0 to 9 [ 77.963270][ T8256] Buffer I/O error on dev loop5, logical block 1, async page read [ 77.965394][ T8256] Dev loop5: unable to read RDB block 8 [ 77.967312][ T8256] loop5: unable to read partition table [ 77.968926][ T8256] loop5: partition table beyond EOD, truncated [ 77.970549][ T8256] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 77.970549][ T8256] ) failed (rc=-5) [ 77.974864][ T8256] openvswitch: netlink: Missing key (keys=44, expected=200000) [ 78.101068][ T8290] __nla_validate_parse: 16 callbacks suppressed [ 78.101079][ T8290] netlink: 666 bytes leftover after parsing attributes in process `syz.5.643'. [ 78.239571][ T8306] mac80211_hwsim hwsim5 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 78.370935][ T8335] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 78.639405][ T6369] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 78.819805][ T6369] usb 6-1: Using ep0 maxpacket: 8 [ 78.822400][ T6369] usb 6-1: config 2 interface 0 has no altsetting 0 [ 78.825690][ T6369] usb 6-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 78.828082][ T6369] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.830143][ T6369] usb 6-1: Product: syz [ 78.831471][ T6369] usb 6-1: Manufacturer: syz [ 78.832704][ T6369] usb 6-1: SerialNumber: syz [ 78.964419][ T8352] block device autoloading is deprecated and will be removed. [ 79.055334][ T6369] usb 6-1: USB disconnect, device number 6 [ 79.433325][ T8375] xt_CONNSECMARK: invalid mode: 0 [ 79.681690][ T8396] netlink: 5300 bytes leftover after parsing attributes in process `syz.0.663'. [ 79.684462][ T8396] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 79.845800][ T8] IPVS: starting estimator thread 0... [ 79.855478][ T8417] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 79.914027][ T5955] Bluetooth: hci1: command tx timeout [ 79.956561][ T8415] IPVS: using max 38 ests per chain, 91200 per kthread [ 79.979115][ T8429] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 80.005084][ T8435] netlink: 40 bytes leftover after parsing attributes in process `syz.0.676'. [ 80.099463][ T8446] sctp: [Deprecated]: syz.1.678 (pid 8446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 80.099463][ T8446] Use struct sctp_sack_info instead [ 80.146923][ T8452] xt_hashlimit: size too large, truncated to 1048576 [ 80.192982][ T8454] program syz.1.682 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.290526][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.684'. [ 80.296796][ T8463] bridge0: port 5(macvlan2) entered blocking state [ 80.299267][ T8463] bridge0: port 5(macvlan2) entered disabled state [ 80.301720][ T8463] macvlan2: entered allmulticast mode [ 80.303511][ T8463] bridge0: entered allmulticast mode [ 80.306387][ T8463] macvlan2: left allmulticast mode [ 80.308426][ T8463] bridge0: left allmulticast mode [ 80.532994][ T8468] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 80.696075][ T8476] nfs4: Unknown parameter 'PL' [ 80.723256][ T8485] netlink: 20 bytes leftover after parsing attributes in process `syz.5.690'. [ 80.822647][ T39] kauditd_printk_skb: 28 callbacks suppressed [ 80.822657][ T39] audit: type=1400 audit(1731735829.442:573): avc: denied { read } for pid=8493 comm="syz.5.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 80.829144][ T39] audit: type=1400 audit(1731735829.442:574): avc: denied { write } for pid=8496 comm="syz.0.693" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.851153][ T1040] wlan0: Trigger new scan to find an IBSS to join [ 81.040852][ T8515] fuse: Bad value for 'user_id' [ 81.042272][ T8515] fuse: Bad value for 'user_id' [ 81.065938][ T39] audit: type=1400 audit(1731735829.667:575): avc: denied { bind } for pid=8516 comm="syz.0.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 81.072723][ T39] audit: type=1400 audit(1731735829.667:576): avc: denied { connect } for pid=8516 comm="syz.0.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 81.099428][ T1485] IPVS: starting estimator thread 0... [ 81.127414][ T39] audit: type=1326 audit(1731735829.733:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8522 comm="syz.0.702" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8fea97e719 code=0x0 [ 81.137103][ T8526] netlink: 'syz.5.698': attribute type 4 has an invalid length. [ 81.151600][ T8526] netlink: 'syz.5.698': attribute type 17 has an invalid length. [ 81.201505][ T8521] IPVS: using max 39 ests per chain, 93600 per kthread [ 81.222427][ T5955] Bluetooth: hci2: unexpected event for opcode 0x200a [ 81.239903][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.708'. [ 81.259461][ T8542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.709'. [ 81.457322][ T8558] autofs4:pid:8558:validate_dev_ioctl: path string terminator missing for cmd(0xc018937c) [ 81.611425][ T39] audit: type=1400 audit(1731735830.184:578): avc: denied { watch watch_reads } for pid=8562 comm="syz.1.716" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CC1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F5202864656C6574656429 dev="tmpfs" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 81.616138][ T8563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.716'. [ 81.623139][ T39] audit: type=1400 audit(1731735830.193:579): avc: denied { ioctl } for pid=8562 comm="syz.1.716" path="socket:[25712]" dev="sockfs" ino=25712 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.681830][ T39] audit: type=1400 audit(1731735830.249:580): avc: denied { read } for pid=8569 comm="syz.1.719" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 81.687450][ T39] audit: type=1400 audit(1731735830.249:581): avc: denied { open } for pid=8569 comm="syz.1.719" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 81.794824][ T8574] devtmpfs: Bad value for 'mpol' [ 81.795232][ T39] audit: type=1400 audit(1731735830.352:582): avc: denied { mount } for pid=8573 comm="syz.1.720" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 81.914792][ T8584] affs: No valid root block on device nullb0 [ 81.931527][ T8586] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 81.996501][ T8599] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20000 [ 82.036440][ T8604] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=63 sclass=netlink_xfrm_socket pid=8604 comm=syz.5.728 [ 82.042009][ T8606] fuse: Unknown parameter 'VX[fDKIH&a0x0000000000000005' [ 82.117766][ T5955] Bluetooth: hci1: command tx timeout [ 82.384506][ T8084] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 82.554605][ T8084] usb 6-1: Using ep0 maxpacket: 8 [ 82.557604][ T8084] usb 6-1: config 0 has no interfaces? [ 82.559624][ T8084] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 82.561833][ T8084] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.565973][ T8084] usb 6-1: config 0 descriptor?? [ 82.786004][ T8084] usb 6-1: USB disconnect, device number 7 [ 82.978395][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.735'. [ 83.158320][ T8627] netlink: 44 bytes leftover after parsing attributes in process `syz.5.736'. [ 83.365488][ T5955] Bluetooth: hci2: ISO packet too small [ 83.417557][ T8651] netlink: 'syz.1.742': attribute type 1 has an invalid length. [ 83.417888][ T8654] netlink: 'syz.1.742': attribute type 9 has an invalid length. [ 83.421611][ T8651] netlink: 'syz.1.742': attribute type 4 has an invalid length. [ 83.421634][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.421694][ T8651] netlink: 'syz.1.742': attribute type 1 has an invalid length. [ 83.424044][ T8654] openvswitch: netlink: Port -524278 exceeds max allowable 65535 [ 83.425180][ T8651] netlink: 'syz.1.742': attribute type 4 has an invalid length. [ 83.425190][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.425238][ T8651] netlink: 'syz.1.742': attribute type 1 has an invalid length. [ 83.435247][ T8651] netlink: 'syz.1.742': attribute type 4 has an invalid length. [ 83.437252][ T8651] __nla_validate_parse: 3 callbacks suppressed [ 83.437258][ T8651] netlink: 188 bytes leftover after parsing attributes in process `syz.1.742'. [ 83.441445][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.443245][ T8651] netlink: 'syz.1.742': attribute type 1 has an invalid length. [ 83.445269][ T8651] netlink: 188 bytes leftover after parsing attributes in process `syz.1.742'. [ 83.447544][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.449212][ T8651] netlink: 188 bytes leftover after parsing attributes in process `syz.1.742'. [ 83.450971][ T71] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 83.451808][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.454954][ T8651] netlink: 188 bytes leftover after parsing attributes in process `syz.1.742'. [ 83.457197][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.458755][ T8651] netlink: 188 bytes leftover after parsing attributes in process `syz.1.742'. [ 83.461070][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.462782][ T8651] netlink: 188 bytes leftover after parsing attributes in process `syz.1.742'. [ 83.465060][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.466622][ T8651] netlink: 188 bytes leftover after parsing attributes in process `syz.1.742'. [ 83.469097][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.470653][ T8651] netlink: 188 bytes leftover after parsing attributes in process `syz.1.742'. [ 83.473538][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.475557][ T8651] netlink: 188 bytes leftover after parsing attributes in process `syz.1.742'. [ 83.478444][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.480456][ T8651] netlink: 188 bytes leftover after parsing attributes in process `syz.1.742'. [ 83.483475][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.486628][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.488271][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.489863][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.491870][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.494504][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.496133][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.497786][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.499388][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.500994][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.502527][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.504178][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.505765][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.507319][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.508899][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.510451][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.511975][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.513496][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.515611][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.517183][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.518705][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.520321][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.521833][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.523413][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.525026][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.526723][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.528323][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.529908][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.531569][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.533177][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.534773][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.536442][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.538000][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.539545][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.541136][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.542794][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.544397][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.545992][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.547667][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.549266][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.550862][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.552438][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.554018][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.555584][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.557198][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.558748][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.560290][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.561842][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.563361][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.564935][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.566500][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.568142][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.569680][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.571201][ T8651] NCSI netlink: No device for ifindex 458760 [ 83.610672][ T71] usb 5-1: Using ep0 maxpacket: 8 [ 83.614653][ T71] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 83.616956][ T71] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.618956][ T71] usb 5-1: Product: syz [ 83.620020][ T71] usb 5-1: Manufacturer: syz [ 83.621447][ T71] usb 5-1: SerialNumber: syz [ 83.623634][ T71] usb 5-1: config 0 descriptor?? [ 83.765011][ T8667] sp0: Synchronizing with TNC [ 83.841180][ T71] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 83.848978][ T71] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 83.852246][ T71] usb 5-1: USB disconnect, device number 8 [ 83.933391][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 83.935102][ T8683] Bluetooth: hci4: Frame reassembly failed (-84) [ 84.336198][ T64] Bluetooth: hci1: command tx timeout [ 84.459290][ T8697] overlay: ./file0 is not a directory [ 85.726763][ T8719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.730550][ T8719] bond0: (slave rose0): Enslaving as an active interface with an up link [ 85.775082][ T7479] bond0: (slave syz_tun): Releasing backup interface [ 85.788995][ T5953] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.792855][ T5953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.796905][ T5953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.801029][ T5953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.803248][ T5953] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.805223][ T5953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.840308][ T45] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.863373][ T8724] md: superblock version 796288356 not known [ 85.865079][ T8724] md: couldn't set array info. -22 [ 85.900414][ T8726] chnl_net:caif_netlink_parms(): no params data found [ 85.932107][ T45] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.966995][ T8726] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.969172][ T8726] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.971188][ T8726] bridge_slave_0: entered allmulticast mode [ 85.973833][ T8726] bridge_slave_0: entered promiscuous mode [ 85.979976][ T8726] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.982392][ T8726] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.984381][ T8726] bridge_slave_1: entered allmulticast mode [ 85.986268][ T8726] bridge_slave_1: entered promiscuous mode [ 85.997256][ T45] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.024638][ T8726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.028346][ T8726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.050470][ T8726] team0: Port device team_slave_0 added [ 86.054082][ T8726] team0: Port device team_slave_1 added [ 86.068170][ T45] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.088855][ T8726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.090701][ T8726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.097328][ T8726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.101700][ T8726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.103533][ T8726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.110198][ T8726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.130663][ T5955] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 86.130687][ T64] Bluetooth: hci4: command 0xfc11 tx timeout [ 86.145965][ T8726] hsr_slave_0: entered promiscuous mode [ 86.146029][ T68] wlan0: Trigger new scan to find an IBSS to join [ 86.160375][ T8726] hsr_slave_1: entered promiscuous mode [ 86.170831][ T8726] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.173628][ T8726] Cannot create hsr debugfs directory [ 86.233768][ T45] bridge_slave_1: left allmulticast mode [ 86.235300][ T45] bridge_slave_1: left promiscuous mode [ 86.238046][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.240117][ T8751] devtmpfs: Bad value for 'mpol' [ 86.242114][ T45] bridge_slave_0: left allmulticast mode [ 86.243651][ T45] bridge_slave_0: left promiscuous mode [ 86.245159][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.547078][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.550880][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.554475][ T45] bond0 (unregistering): Released all slaves [ 86.607714][ T8726] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 86.611819][ T8726] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 86.620261][ T8726] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 86.630226][ T8726] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 86.692187][ T8726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.707662][ T8726] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.717697][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.719563][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.731703][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.733602][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.752903][ T8726] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.755616][ T8726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.842266][ T45] hsr_slave_0: left promiscuous mode [ 86.844332][ T45] hsr_slave_1: left promiscuous mode [ 86.849315][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.851298][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.853637][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.855656][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.881170][ T45] veth1_macvtap: left promiscuous mode [ 86.882659][ T45] veth0_macvtap: left promiscuous mode [ 86.884142][ T45] veth1_vlan: left promiscuous mode [ 86.885532][ T45] veth0_vlan: left promiscuous mode [ 87.136754][ T68] wlan0: Creating new IBSS network, BSSID 16:f8:d6:33:53:47 [ 87.166721][ T8790] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 87.504493][ T8796] dccp_v4_rcv: dropped packet with invalid checksum [ 87.557819][ T45] team0 (unregistering): Port device team_slave_1 removed [ 87.632739][ T45] team0 (unregistering): Port device team_slave_0 removed [ 88.020570][ T64] Bluetooth: hci3: command tx timeout [ 88.130912][ T8726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.146612][ T8801] vlan2: entered promiscuous mode [ 88.147990][ T8801] syz_tun: entered promiscuous mode [ 88.150362][ T8801] vlan2: entered allmulticast mode [ 88.151758][ T8801] syz_tun: entered allmulticast mode [ 88.213779][ T8822] (unnamed net_device) (uninitialized): (slave team0): Device is not bonding slave [ 88.216217][ T8822] (unnamed net_device) (uninitialized): option active_slave: invalid value (team0) [ 88.233193][ T8726] veth0_vlan: entered promiscuous mode [ 88.251591][ T8726] veth1_vlan: entered promiscuous mode [ 88.254358][ T8835] validate_nla: 125 callbacks suppressed [ 88.254367][ T8835] netlink: 'syz.1.780': attribute type 19 has an invalid length. [ 88.256712][ T8836] IPVS: set_ctl: invalid protocol: 11612 172.20.20.170:20003 [ 88.278231][ T8726] veth0_macvtap: entered promiscuous mode [ 88.281219][ T8726] veth1_macvtap: entered promiscuous mode [ 88.290882][ T8726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.293591][ T8726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.296956][ T8726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.300974][ T8726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.303914][ T8726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.306918][ T8726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.311722][ T8726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.315592][ T8726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.321164][ T8726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.325014][ T8726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.328197][ T8726] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.330555][ T8726] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.332922][ T8726] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.335073][ T39] kauditd_printk_skb: 32 callbacks suppressed [ 88.335080][ T39] audit: type=1400 audit(1731735836.470:615): avc: denied { write } for pid=5344 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.335227][ T8726] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.336890][ T39] audit: type=1400 audit(1731735836.470:616): avc: denied { remove_name } for pid=5344 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.351139][ T39] audit: type=1400 audit(1731735836.470:617): avc: denied { add_name } for pid=5344 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.405844][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.407924][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.426667][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.428760][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.448337][ T39] audit: type=1400 audit(1731735836.592:618): avc: denied { mounton } for pid=8726 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 88.464904][ T5985] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 88.532900][ T8859] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 88.534660][ T8859] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 88.536294][ T8859] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 88.542990][ T8859] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 88.569451][ T8859] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 88.571068][ T8859] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 88.576417][ T8859] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 88.622470][ T5985] usb 10-1: config 0 has no interfaces? [ 88.624264][ T5985] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 88.624279][ T5985] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.624290][ T5985] usb 10-1: Product: syz [ 88.624297][ T5985] usb 10-1: Manufacturer: syz [ 88.624304][ T5985] usb 10-1: SerialNumber: syz [ 88.625596][ T5985] usb 10-1: config 0 descriptor?? [ 88.698710][ T39] audit: type=1400 audit(1731735836.816:619): avc: denied { append } for pid=8880 comm="syz.0.789" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 88.724216][ T39] audit: type=1400 audit(1731735836.845:620): avc: denied { accept } for pid=8894 comm="syz.1.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.750356][ T39] audit: type=1326 audit(1731735836.873:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8899 comm="syz.0.791" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8fea97e719 code=0x0 [ 88.850891][ T39] audit: type=1400 audit(1731735836.957:622): avc: denied { connect } for pid=8816 comm="syz.5.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 88.857179][ T8084] usb 10-1: USB disconnect, device number 2 [ 89.418962][ T39] audit: type=1400 audit(1731735837.490:623): avc: denied { setattr } for pid=8928 comm="syz.5.792" name="NFC_RAW" dev="sockfs" ino=25315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 89.450446][ T8934] tap0: tun_chr_ioctl cmd 1074025677 [ 89.452023][ T8934] tap0: linktype set to 1 [ 89.623551][ T39] audit: type=1400 audit(1731735837.677:624): avc: denied { unmount } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 89.654739][ T8948] __nla_validate_parse: 61 callbacks suppressed [ 89.654750][ T8948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.798'. [ 89.787366][ T8971] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 89.788483][ T8969] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 89.809302][ T8973] netlink: 'syz.1.806': attribute type 21 has an invalid length. [ 89.812221][ T8973] IPv6: NLM_F_CREATE should be specified when creating new route [ 89.816063][ T8950] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 89.817793][ T8950] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 89.824163][ T8950] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 89.911970][ T8981] netlink: 'syz.1.809': attribute type 10 has an invalid length. [ 89.918659][ T8981] bridge0: port 3(syz_tun) entered disabled state [ 89.924415][ T8981] syz_tun: left allmulticast mode [ 89.925941][ T8981] syz_tun: left promiscuous mode [ 89.927341][ T8981] bridge0: port 3(syz_tun) entered disabled state [ 89.931214][ T8981] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 89.939025][ T8984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.939498][ T8985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.053960][ T8993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8720 sclass=netlink_route_socket pid=8993 comm=syz.1.811 [ 90.201548][ T9002] UHID_CREATE from different security context by process 740 (syz.0.814), this is not allowed. [ 90.320493][ C1] sr 2:0:0:0: [sr0] tag#11 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 90.323410][ C1] sr 2:0:0:0: [sr0] tag#11 CDB: Erase(12), Get Performance ac 71 9f 37 51 d5 [ 90.381632][ T9029] veth1_macvtap: left promiscuous mode [ 90.383611][ T9029] macsec0: entered promiscuous mode [ 90.384968][ T9029] macsec0: entered allmulticast mode [ 90.458682][ T9048] dns_resolver: Unsupported content type (24) [ 90.523354][ T9062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.831'. [ 90.524506][ T9059] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 90.658368][ T9114] netlink: 4100 bytes leftover after parsing attributes in process `syz.6.837'. [ 90.746550][ T9141] netlink: 20 bytes leftover after parsing attributes in process `syz.6.839'. [ 90.959497][ T9177] [U] v3f"S/4:XTzWtlW= [ 90.961653][ T9177] [U] J"e:" [ 90.962680][ T9177] [U] v3f"S/4:XTzWtlW= [ 90.964235][ T9177] [U] J"e:" [ 90.965205][ T9177] [U] v3f"S/4:XTzWtlW= [ 90.966772][ T9177] [U] J"e:" [ 90.967742][ T9177] [U] v3f"S/4:XTzWtlW= [ 90.969304][ T9177] [U] J"e:" [ 90.982344][ T9179] netlink: 68 bytes leftover after parsing attributes in process `syz.0.847'. [ 91.103558][ T9211] FAULT_INJECTION: forcing a failure. [ 91.103558][ T9211] name failslab, interval 1, probability 0, space 0, times 0 [ 91.108953][ T9211] CPU: 0 UID: 0 PID: 9211 Comm: syz.1.854 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 91.111997][ T9211] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.114799][ T9211] Call Trace: [ 91.115705][ T9211] [ 91.116497][ T9211] dump_stack_lvl+0x16c/0x1f0 [ 91.117762][ T9211] should_fail_ex+0x497/0x5b0 [ 91.119011][ T9211] ? fs_reclaim_acquire+0xae/0x150 [ 91.120433][ T9211] should_failslab+0xc2/0x120 [ 91.121719][ T9211] __kmalloc_noprof+0xcb/0x400 [ 91.122974][ T9211] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 91.124455][ T9211] tomoyo_realpath_from_path+0xb9/0x720 [ 91.125924][ T9211] ? tomoyo_path_number_perm+0x232/0x590 [ 91.127405][ T9211] tomoyo_path_number_perm+0x245/0x590 [ 91.128843][ T9211] ? tomoyo_path_number_perm+0x232/0x590 [ 91.130321][ T9211] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 91.131988][ T9211] ? trace_lock_acquire+0x14a/0x1d0 [ 91.133371][ T9211] ? lock_acquire+0x2f/0xb0 [ 91.134576][ T9211] ? __fget_files+0x40/0x3f0 [ 91.135815][ T9211] ? __fget_files+0x244/0x3f0 [ 91.137063][ T9211] security_file_ioctl+0x9b/0x240 [ 91.138384][ T9211] __x64_sys_ioctl+0xbb/0x220 [ 91.139645][ T9211] do_syscall_64+0xcd/0x250 [ 91.140852][ T9211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.142446][ T9211] RIP: 0033:0x7f2380b7e719 [ 91.143646][ T9211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.148675][ T9211] RSP: 002b:00007f23819ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.150846][ T9211] RAX: ffffffffffffffda RBX: 00007f2380d35f80 RCX: 00007f2380b7e719 [ 91.152920][ T9211] RDX: 0000000020000180 RSI: 00000000c03864bc RDI: 0000000000000003 [ 91.155577][ T9211] RBP: 00007f23819ce090 R08: 0000000000000000 R09: 0000000000000000 [ 91.157825][ T9211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.159874][ T9211] R13: 0000000000000000 R14: 00007f2380d35f80 R15: 00007fffb95c58e8 [ 91.161969][ T9211] [ 91.166994][ T9211] ERROR: Out of memory at tomoyo_realpath_from_path. [ 91.170314][ T9218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.857'. [ 91.226282][ T9235] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 91.240231][ T9240] netlink: 8 bytes leftover after parsing attributes in process `syz.6.864'. [ 91.242598][ T9240] netlink: 4 bytes leftover after parsing attributes in process `syz.6.864'. [ 91.247776][ T9240] netlink: 'syz.6.864': attribute type 12 has an invalid length. [ 91.255743][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.6.864'. [ 91.258085][ T9239] netlink: 4 bytes leftover after parsing attributes in process `syz.6.864'. [ 91.262981][ T9239] netlink: 'syz.6.864': attribute type 12 has an invalid length. [ 91.295579][ T9249] FAULT_INJECTION: forcing a failure. [ 91.295579][ T9249] name failslab, interval 1, probability 0, space 0, times 0 [ 91.299043][ T9249] CPU: 3 UID: 0 PID: 9249 Comm: syz.6.869 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 91.301755][ T9249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.304572][ T9249] Call Trace: [ 91.305432][ T9249] [ 91.306209][ T9249] dump_stack_lvl+0x16c/0x1f0 [ 91.307448][ T9249] should_fail_ex+0x497/0x5b0 [ 91.308298][ T9253] Context (ID=0x1) not attached to queue pair (handle=0x2:0x0) [ 91.308694][ T9249] ? fs_reclaim_acquire+0xae/0x150 [ 91.311872][ T9242] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 91.312730][ T9249] should_failslab+0xc2/0x120 [ 91.312746][ T9249] __kmalloc_noprof+0xcb/0x400 [ 91.314646][ T9242] UDF-fs: Scanning with blocksize 2048 failed [ 91.315835][ T9249] ? d_absolute_path+0x137/0x1b0 [ 91.319957][ T9249] tomoyo_encode2+0x100/0x3e0 [ 91.321192][ T9249] tomoyo_encode+0x29/0x50 [ 91.322365][ T9249] tomoyo_realpath_from_path+0x19d/0x720 [ 91.323835][ T9249] tomoyo_path_number_perm+0x245/0x590 [ 91.325263][ T9249] ? tomoyo_path_number_perm+0x232/0x590 [ 91.326743][ T9249] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 91.328326][ T9249] ? trace_lock_acquire+0x14a/0x1d0 [ 91.329683][ T9249] ? lock_acquire+0x2f/0xb0 [ 91.330872][ T9249] ? __fget_files+0x40/0x3f0 [ 91.332129][ T9249] ? __fget_files+0x244/0x3f0 [ 91.333440][ T9249] security_file_ioctl+0x9b/0x240 [ 91.334756][ T9249] __x64_sys_ioctl+0xbb/0x220 [ 91.336005][ T9249] do_syscall_64+0xcd/0x250 [ 91.337214][ T9249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.338767][ T9249] RIP: 0033:0x7f37b937e719 [ 91.340021][ T9249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.345231][ T9249] RSP: 002b:00007f37ba1ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.347453][ T9249] RAX: ffffffffffffffda RBX: 00007f37b9535f80 RCX: 00007f37b937e719 [ 91.349494][ T9249] RDX: 0000000020000180 RSI: 00000000c03864bc RDI: 0000000000000003 [ 91.351575][ T9249] RBP: 00007f37ba1ac090 R08: 0000000000000000 R09: 0000000000000000 [ 91.353617][ T9249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.355667][ T9249] R13: 0000000000000000 R14: 00007f37b9535f80 R15: 00007ffc4c9f6858 [ 91.357721][ T9249] [ 91.358620][ C3] vkms_vblank_simulate: vblank timer overrun [ 91.360567][ T9242] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 91.360849][ T9249] ERROR: Out of memory at tomoyo_realpath_from_path. [ 91.364048][ T9242] UDF-fs: Scanning with blocksize 4096 failed [ 91.402627][ T9259] netlink: 'syz.6.871': attribute type 11 has an invalid length. [ 91.481913][ T9274] tipc: Enabling of bearer rejected, failed to enable media [ 91.520574][ T9280] FAULT_INJECTION: forcing a failure. [ 91.520574][ T9280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.525133][ T9280] CPU: 3 UID: 0 PID: 9280 Comm: syz.5.879 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 91.528675][ T9280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.532179][ T9280] Call Trace: [ 91.533057][ T9280] [ 91.533838][ T9280] dump_stack_lvl+0x16c/0x1f0 [ 91.535106][ T9280] should_fail_ex+0x497/0x5b0 [ 91.536776][ T9280] _copy_from_user+0x2e/0xd0 [ 91.538313][ T9280] drm_ioctl+0x501/0xc00 [ 91.539457][ T9280] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 91.540987][ T9280] ? __pfx_drm_ioctl+0x10/0x10 [ 91.542250][ T9280] ? trace_lock_acquire+0x14a/0x1d0 [ 91.543634][ T9280] ? selinux_file_ioctl+0x180/0x270 [ 91.545008][ T9280] ? selinux_file_ioctl+0xb4/0x270 [ 91.546368][ T9280] ? __pfx_drm_ioctl+0x10/0x10 [ 91.547604][ T9280] __x64_sys_ioctl+0x18f/0x220 [ 91.548861][ T9280] do_syscall_64+0xcd/0x250 [ 91.550201][ T9280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.552266][ T9280] RIP: 0033:0x7f8eb3f7e719 [ 91.553781][ T9280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.558770][ T9280] RSP: 002b:00007f8eb4dd2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.561446][ T9280] RAX: ffffffffffffffda RBX: 00007f8eb4135f80 RCX: 00007f8eb3f7e719 [ 91.563905][ T9280] RDX: 0000000020000180 RSI: 00000000c03864bc RDI: 0000000000000003 [ 91.566241][ T9280] RBP: 00007f8eb4dd2090 R08: 0000000000000000 R09: 0000000000000000 [ 91.568968][ T9280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.571631][ T9280] R13: 0000000000000000 R14: 00007f8eb4135f80 R15: 00007ffc49774428 [ 91.574255][ T9280] [ 91.575464][ C3] vkms_vblank_simulate: vblank timer overrun [ 91.731906][ T9302] ip6gretap0: entered promiscuous mode [ 91.733631][ T9302] macvtap1: entered promiscuous mode [ 91.735062][ T9302] macvtap1: entered allmulticast mode [ 91.736482][ T9302] ip6gretap0: entered allmulticast mode [ 91.748523][ T9302] ip6gretap0: left allmulticast mode [ 91.750200][ T9302] ip6gretap0: left promiscuous mode [ 91.760838][ T9] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 91.931844][ T9] usb 11-1: Using ep0 maxpacket: 8 [ 91.934750][ T9] usb 11-1: config index 0 descriptor too short (expected 5924, got 36) [ 91.936968][ T9] usb 11-1: config 250 has an invalid interface number: 228 but max is -1 [ 91.939274][ T9] usb 11-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 91.941672][ T9] usb 11-1: config 250 has no interface number 0 [ 91.943783][ T9] usb 11-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 91.946939][ T9] usb 11-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 91.949746][ T9] usb 11-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 91.953587][ T9] usb 11-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 91.956533][ T9] usb 11-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 91.958657][ T9317] FAULT_INJECTION: forcing a failure. [ 91.958657][ T9317] name failslab, interval 1, probability 0, space 0, times 0 [ 91.960198][ T9] usb 11-1: config 250 interface 228 has no altsetting 0 [ 91.963351][ T9317] CPU: 2 UID: 0 PID: 9317 Comm: syz.5.889 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 91.963365][ T9317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.963372][ T9317] Call Trace: [ 91.963375][ T9317] [ 91.963380][ T9317] dump_stack_lvl+0x16c/0x1f0 [ 91.966771][ T9] usb 11-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 91.968081][ T9317] should_fail_ex+0x497/0x5b0 [ 91.971651][ T9] usb 11-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 91.972493][ T9317] ? fs_reclaim_acquire+0xae/0x150 [ 91.973166][ T9] usb 11-1: Product: syz [ 91.974275][ T9317] should_failslab+0xc2/0x120 [ 91.974291][ T9317] __kmalloc_cache_noprof+0x6b/0x300 [ 91.978320][ T9] usb 11-1: SerialNumber: syz [ 91.980218][ T9317] ? drm_atomic_state_alloc+0xb8/0x120 [ 91.983662][ T9] hub 11-1:250.228: bad descriptor, ignoring hub [ 91.983879][ T9317] drm_atomic_state_alloc+0xb8/0x120 [ 91.985549][ T9] hub 11-1:250.228: probe with driver hub failed with error -5 [ 91.986520][ T9317] drm_mode_atomic_ioctl+0x3a3/0x25e0 [ 91.994388][ T9317] ? __pfx___lock_acquire+0x10/0x10 [ 91.995753][ T9317] ? __pfx___lock_acquire+0x10/0x10 [ 91.997108][ T9317] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 91.998624][ T9317] ? lock_acquire.part.0+0x11b/0x380 [ 92.000008][ T9317] ? find_held_lock+0x2d/0x110 [ 92.001277][ T9317] ? do_raw_spin_unlock+0x172/0x230 [ 92.002635][ T9317] drm_ioctl_kernel+0x1e6/0x3d0 [ 92.003920][ T9317] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 92.005439][ T9317] ? __pfx___might_fault+0x1/0x10 [ 92.006765][ T9317] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 92.008157][ T9317] ? __might_fault+0xe3/0x190 [ 92.009397][ T9317] drm_ioctl+0x5d6/0xc00 [ 92.010522][ T9317] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 92.012059][ T9317] ? __pfx_drm_ioctl+0x10/0x10 [ 92.013320][ T9317] ? trace_lock_acquire+0x14a/0x1d0 [ 92.014675][ T9317] ? selinux_file_ioctl+0x180/0x270 [ 92.016043][ T9317] ? selinux_file_ioctl+0xb4/0x270 [ 92.017377][ T9317] ? __pfx_drm_ioctl+0x10/0x10 [ 92.018628][ T9317] __x64_sys_ioctl+0x18f/0x220 [ 92.019888][ T9317] do_syscall_64+0xcd/0x250 [ 92.021085][ T9317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.022623][ T9317] RIP: 0033:0x7f8eb3f7e719 [ 92.023795][ T9317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.028822][ T9317] RSP: 002b:00007f8eb4dd2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.030971][ T9317] RAX: ffffffffffffffda RBX: 00007f8eb4135f80 RCX: 00007f8eb3f7e719 [ 92.033042][ T9317] RDX: 0000000020000180 RSI: 00000000c03864bc RDI: 0000000000000003 [ 92.035171][ T9317] RBP: 00007f8eb4dd2090 R08: 0000000000000000 R09: 0000000000000000 [ 92.037224][ T9317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.038839][ T5955] Bluetooth: hci3: command 0x041b tx timeout [ 92.038871][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 92.038968][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 92.039321][ T9317] R13: 0000000000000000 R14: 00007f8eb4135f80 R15: 00007ffc49774428 [ 92.039343][ T9317] [ 92.152153][ T9319] cgroup: fork rejected by pids controller in /syz5 [ 92.202221][ T9] usblp 11-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 92.320964][ T8170] syz_tun: left allmulticast mode [ 92.322327][ T8170] syz_tun: left promiscuous mode [ 92.557150][ T9330] Bluetooth: hci1: Frame reassembly failed (-84) [ 92.559471][ T9079] Bluetooth: hci1: Frame reassembly failed (-84) [ 92.587438][ T9079] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.683273][ T9079] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.700116][ T64] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.704379][ T64] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.707262][ T64] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.711435][ T64] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.716436][ T64] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 92.718704][ T64] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.743960][ T9079] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.809404][ T9079] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.815364][ T9332] chnl_net:caif_netlink_parms(): no params data found [ 92.867404][ T9332] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.869389][ T9332] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.871281][ T9332] bridge_slave_0: entered allmulticast mode [ 92.873557][ T9332] bridge_slave_0: entered promiscuous mode [ 92.876130][ T9332] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.878087][ T9332] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.879984][ T9332] bridge_slave_1: entered allmulticast mode [ 92.882226][ T9332] bridge_slave_1: entered promiscuous mode [ 92.904279][ T9332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.911173][ T9332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.938148][ T9332] team0: Port device team_slave_0 added [ 92.951825][ T9332] team0: Port device team_slave_1 added [ 92.965036][ T9079] bridge_slave_1: left allmulticast mode [ 92.966545][ T9079] bridge_slave_1: left promiscuous mode [ 92.968088][ T9079] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.971699][ T9079] bridge_slave_0: left allmulticast mode [ 92.973221][ T9079] bridge_slave_0: left promiscuous mode [ 92.974725][ T9079] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.218674][ T9079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.222393][ T9079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.226804][ T9079] bond0 (unregistering): Released all slaves [ 93.240615][ T9332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.242372][ T9332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.249142][ T9332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.260339][ T9332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.262204][ T9332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.268969][ T9332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.308167][ T9332] hsr_slave_0: entered promiscuous mode [ 93.310118][ T9332] hsr_slave_1: entered promiscuous mode [ 93.314090][ T9332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.316074][ T9332] Cannot create hsr debugfs directory [ 93.325211][ T35] usb 11-1: USB disconnect, device number 2 [ 93.327922][ T35] usblp0: removed [ 93.531792][ T9079] hsr_slave_0: left promiscuous mode [ 93.533711][ T9079] hsr_slave_1: left promiscuous mode [ 93.537087][ T9079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.539045][ T9079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.541262][ T9079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.543181][ T9079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.561273][ T9079] veth1_macvtap: left promiscuous mode [ 93.562706][ T9079] veth0_macvtap: left promiscuous mode [ 93.564362][ T9079] veth1_vlan: left promiscuous mode [ 93.565762][ T9079] veth0_vlan: left promiscuous mode [ 94.155162][ T9079] team0 (unregistering): Port device team_slave_1 removed [ 94.223440][ T9079] team0 (unregistering): Port device team_slave_0 removed [ 94.251554][ T5955] Bluetooth: hci3: command 0x041b tx timeout [ 94.764474][ T5953] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 94.827284][ T9371] FAULT_INJECTION: forcing a failure. [ 94.827284][ T9371] name failslab, interval 1, probability 0, space 0, times 0 [ 94.831413][ T9374] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 94.834247][ T9371] CPU: 1 UID: 0 PID: 9371 Comm: syz.0.898 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 94.836984][ T9371] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.839811][ T9371] Call Trace: [ 94.840688][ T9371] [ 94.841467][ T9371] dump_stack_lvl+0x16c/0x1f0 [ 94.842701][ T9371] should_fail_ex+0x497/0x5b0 [ 94.843945][ T9371] ? fs_reclaim_acquire+0xae/0x150 [ 94.845283][ T9371] should_failslab+0xc2/0x120 [ 94.846523][ T9371] __kmalloc_noprof+0xcb/0x400 [ 94.847806][ T9371] drm_atomic_state_init+0xe4/0x320 [ 94.849305][ T9371] ? __kasan_kmalloc+0xaa/0xb0 [ 94.851058][ T9371] drm_atomic_state_alloc+0xd3/0x120 [ 94.852617][ T9371] drm_mode_atomic_ioctl+0x3a3/0x25e0 [ 94.854013][ T9371] ? __pfx___lock_acquire+0x10/0x10 [ 94.855360][ T9371] ? __pfx___lock_acquire+0x10/0x10 [ 94.856726][ T9371] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 94.858237][ T9371] ? lock_acquire.part.0+0x11b/0x380 [ 94.859921][ T9371] ? find_held_lock+0x2d/0x110 [ 94.861273][ T9371] ? do_raw_spin_unlock+0x172/0x230 [ 94.862630][ T9371] drm_ioctl_kernel+0x1e6/0x3d0 [ 94.863905][ T9371] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 94.865422][ T9371] ? __pfx___might_fault+0x1/0x10 [ 94.866745][ T9371] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 94.868148][ T9371] ? __might_fault+0xe3/0x190 [ 94.869599][ T9371] drm_ioctl+0x5d6/0xc00 [ 94.871164][ T9371] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 94.872829][ T9371] ? __pfx_drm_ioctl+0x10/0x10 [ 94.874079][ T9371] ? trace_lock_acquire+0x14a/0x1d0 [ 94.875450][ T9371] ? selinux_file_ioctl+0x180/0x270 [ 94.876797][ T9371] ? selinux_file_ioctl+0xb4/0x270 [ 94.878413][ T9371] ? __pfx_drm_ioctl+0x10/0x10 [ 94.879700][ T9371] __x64_sys_ioctl+0x18f/0x220 [ 94.880950][ T9371] do_syscall_64+0xcd/0x250 [ 94.882142][ T9371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.883680][ T9371] RIP: 0033:0x7f8fea97e719 [ 94.884847][ T9371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.890157][ T9371] RSP: 002b:00007f8feb707038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.892850][ T9371] RAX: ffffffffffffffda RBX: 00007f8feab35f80 RCX: 00007f8fea97e719 [ 94.894885][ T9371] RDX: 0000000020000180 RSI: 00000000c03864bc RDI: 0000000000000003 [ 94.896926][ T9371] RBP: 00007f8feb707090 R08: 0000000000000000 R09: 0000000000000000 [ 94.898981][ T9371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.901025][ T9371] R13: 0000000000000000 R14: 00007f8feab35f80 R15: 00007ffd78fa1138 [ 94.903063][ T9371] [ 94.936334][ T5953] Bluetooth: hci4: command tx timeout [ 94.956137][ T39] kauditd_printk_skb: 50 callbacks suppressed [ 94.956146][ T39] audit: type=1400 audit(1731735842.674:675): avc: denied { append } for pid=9384 comm="syz.6.902" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 94.995240][ T9390] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.042774][ T39] audit: type=1326 audit(1731735842.758:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.0.906" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fea97e719 code=0x7ffc0000 [ 95.046479][ T9332] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.054544][ T39] audit: type=1326 audit(1731735842.758:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.0.906" exe="/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f8fea97e719 code=0x7ffc0000 [ 95.060545][ T39] audit: type=1400 audit(1731735842.758:678): avc: denied { sqpoll } for pid=9398 comm="syz.0.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 95.061809][ T9332] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.066392][ T39] audit: type=1326 audit(1731735842.758:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.0.906" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fea97e719 code=0x7ffc0000 [ 95.073939][ T39] audit: type=1326 audit(1731735842.758:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.0.906" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8fea97e719 code=0x7ffc0000 [ 95.080403][ T39] audit: type=1326 audit(1731735842.758:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.0.906" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fea97e719 code=0x7ffc0000 [ 95.086513][ T39] audit: type=1326 audit(1731735842.758:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.0.906" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8fea97e719 code=0x7ffc0000 [ 95.092571][ T39] audit: type=1326 audit(1731735842.758:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.0.906" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fea97e719 code=0x7ffc0000 [ 95.097833][ T9332] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.099903][ T39] audit: type=1326 audit(1731735842.758:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.0.906" exe="/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8fea97e719 code=0x7ffc0000 [ 95.108676][ T9332] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 95.113153][ C3] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 95.162401][ T9413] FAULT_INJECTION: forcing a failure. [ 95.162401][ T9413] name failslab, interval 1, probability 0, space 0, times 0 [ 95.165665][ T9413] CPU: 1 UID: 0 PID: 9413 Comm: syz.0.909 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 95.168464][ T9413] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.171468][ T9413] Call Trace: [ 95.172345][ T9413] [ 95.173126][ T9413] dump_stack_lvl+0x16c/0x1f0 [ 95.174362][ T9413] should_fail_ex+0x497/0x5b0 [ 95.175610][ T9413] ? fs_reclaim_acquire+0xae/0x150 [ 95.176011][ T9332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.176936][ T9413] should_failslab+0xc2/0x120 [ 95.176952][ T9413] __kmalloc_noprof+0xcb/0x400 [ 95.181610][ T9413] drm_atomic_state_init+0x17e/0x320 [ 95.182985][ T9413] ? __kasan_kmalloc+0xaa/0xb0 [ 95.184280][ T9413] drm_atomic_state_alloc+0xd3/0x120 [ 95.185804][ T9413] drm_mode_atomic_ioctl+0x3a3/0x25e0 [ 95.187212][ T9413] ? __pfx___lock_acquire+0x10/0x10 [ 95.188582][ T9413] ? __pfx___lock_acquire+0x10/0x10 [ 95.190181][ T9413] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 95.191711][ T9413] ? lock_acquire.part.0+0x11b/0x380 [ 95.193108][ T9413] ? find_held_lock+0x2d/0x110 [ 95.194327][ T9413] ? do_raw_spin_unlock+0x172/0x230 [ 95.195608][ T9413] drm_ioctl_kernel+0x1e6/0x3d0 [ 95.196806][ T9413] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 95.198200][ T9413] ? __pfx___might_fault+0x1/0x10 [ 95.199796][ T9413] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 95.201549][ T9413] ? __might_fault+0xe3/0x190 [ 95.202786][ T9413] drm_ioctl+0x5d6/0xc00 [ 95.203910][ T9413] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 95.205427][ T9413] ? __pfx_drm_ioctl+0x10/0x10 [ 95.206687][ T9413] ? trace_lock_acquire+0x14a/0x1d0 [ 95.208045][ T9413] ? selinux_file_ioctl+0x180/0x270 [ 95.209390][ T9413] ? selinux_file_ioctl+0xb4/0x270 [ 95.210740][ T9413] ? __pfx_drm_ioctl+0x10/0x10 [ 95.212003][ T9413] __x64_sys_ioctl+0x18f/0x220 [ 95.213265][ T9413] do_syscall_64+0xcd/0x250 [ 95.214455][ T9413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.215996][ T9413] RIP: 0033:0x7f8fea97e719 [ 95.217176][ T9413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.222129][ T9413] RSP: 002b:00007f8feb707038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.224292][ T9413] RAX: ffffffffffffffda RBX: 00007f8feab35f80 RCX: 00007f8fea97e719 [ 95.226352][ T9413] RDX: 0000000020000180 RSI: 00000000c03864bc RDI: 0000000000000003 [ 95.228393][ T9413] RBP: 00007f8feb707090 R08: 0000000000000000 R09: 0000000000000000 [ 95.230425][ T9413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.232470][ T9413] R13: 0000000000000000 R14: 00007f8feab35f80 R15: 00007ffd78fa1138 [ 95.234525][ T9413] [ 95.240514][ T9332] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.246435][ T9131] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.248095][ T9131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.250512][ T9131] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.252276][ T9131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.272856][ T9332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.291308][ T9079] IPVS: stop unused estimator thread 0... [ 95.336469][ T9332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.426383][ T9332] veth0_vlan: entered promiscuous mode [ 95.431737][ T9332] veth1_vlan: entered promiscuous mode [ 95.443958][ T9332] veth0_macvtap: entered promiscuous mode [ 95.447622][ T9332] veth1_macvtap: entered promiscuous mode [ 95.453899][ T9332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.456331][ T9332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.458605][ T9332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.461861][ T9332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.464119][ T9332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.466527][ T9332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.469432][ T9332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.473838][ T9332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.476939][ T9332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.483081][ T9332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.487199][ T9332] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.489494][ T9332] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.493112][ T9332] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.495109][ T9332] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.529867][ T1250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.532517][ T1250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.542936][ T1250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.546495][ T1250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.633677][ T9442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=9442 comm=syz.5.913 [ 95.637589][ T9442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=9442 comm=syz.5.913 [ 95.898199][ T35] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 95.992159][ T9462] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 96.057830][ T8084] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 96.061947][ T35] usb 5-1: config 0 has an invalid interface number: 104 but max is 0 [ 96.063955][ T35] usb 5-1: config 0 has no interface number 0 [ 96.065407][ T35] usb 5-1: config 0 interface 104 has no altsetting 0 [ 96.074838][ T35] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 96.076985][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.078950][ T35] usb 5-1: Product: syz [ 96.081639][ T35] usb 5-1: Manufacturer: syz [ 96.082792][ T35] usb 5-1: SerialNumber: syz [ 96.085311][ T35] usb 5-1: config 0 descriptor?? [ 96.093253][ T35] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 96.105113][ T9477] delete_channel: no stack [ 96.218764][ T8084] usb 10-1: Using ep0 maxpacket: 8 [ 96.221184][ T8084] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 96.223790][ T8084] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 96.226069][ T8084] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 96.228239][ T8084] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.233871][ T8084] usb 10-1: config 0 descriptor?? [ 96.258063][ T9496] x86/PAT: syz.1.930:9496 freeing invalid memtype [mem 0xfed00000-0xfed00fff] [ 96.281029][ T9496] x86/PAT: syz.1.930:9496 freeing invalid memtype [mem 0xfed00000-0xfed00fff] [ 96.283794][ T9496] x86/PAT: syz.1.930:9496 freeing invalid memtype [mem 0xfed00000-0xfed00fff] [ 96.310345][ T35] gspca_vc032x: reg_r err -71 [ 96.311502][ T35] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.312803][ T35] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.315858][ T35] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.317328][ T35] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.318745][ T35] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.319975][ T35] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.321167][ T35] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.322329][ T35] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.323538][ T35] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.324755][ T35] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.327334][ T35] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.328549][ T35] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.329735][ T35] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.330939][ T35] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.332146][ T35] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.334161][ T35] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.336444][ T35] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.337711][ T35] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.338914][ T35] gspca_vc032x: Unknown sensor... [ 96.340055][ T35] vc032x 5-1:0.104: probe with driver vc032x failed with error -22 [ 96.347081][ T35] usb 5-1: USB disconnect, device number 9 [ 96.358655][ T9506] sp0: Synchronizing with TNC [ 96.452839][ T8084] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 96.474988][ T5953] Bluetooth: hci3: command 0x041b tx timeout [ 96.490899][ T9516] __nla_validate_parse: 3 callbacks suppressed [ 96.490907][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.6.936'. [ 96.494580][ T9516] netlink: 24 bytes leftover after parsing attributes in process `syz.6.936'. [ 96.525270][ T9518] tipc: Enabling of bearer rejected, failed to enable media [ 96.664426][ T9530] netlink: 'syz.6.942': attribute type 13 has an invalid length. [ 96.666705][ T9451] iowarrior 10-1:0.0: Error -90 while submitting URB [ 96.668005][ T9530] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 96.668740][ T9450] iowarrior 10-1:0.0: Error -90 while submitting URB [ 96.669118][ T9451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.669212][ T9451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.676375][ T9530] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 96.678283][ T9530] gretap1: entered promiscuous mode [ 96.679543][ T9530] gretap1: entered allmulticast mode [ 96.868101][ T9555] FAULT_INJECTION: forcing a failure. [ 96.868101][ T9555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.875580][ T9555] CPU: 3 UID: 0 PID: 9555 Comm: syz.0.950 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 96.878109][ T9555] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.880667][ T9555] Call Trace: [ 96.881486][ T9555] [ 96.882233][ T9555] dump_stack_lvl+0x16c/0x1f0 [ 96.883391][ T9555] should_fail_ex+0x497/0x5b0 [ 96.884539][ T9555] _copy_to_user+0x32/0xd0 [ 96.885631][ T9555] drm_ioctl+0x5fe/0xc00 [ 96.886679][ T9555] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 96.888085][ T9555] ? __pfx_drm_ioctl+0x10/0x10 [ 96.889237][ T9555] ? trace_lock_acquire+0x14a/0x1d0 [ 96.890494][ T9555] ? selinux_file_ioctl+0x180/0x270 [ 96.891753][ T9555] ? selinux_file_ioctl+0xb4/0x270 [ 96.892989][ T9555] ? __pfx_drm_ioctl+0x10/0x10 [ 96.894147][ T9555] __x64_sys_ioctl+0x18f/0x220 [ 96.895316][ T9555] do_syscall_64+0xcd/0x250 [ 96.896416][ T9555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.897824][ T9555] RIP: 0033:0x7f8fea97e719 [ 96.898904][ T9555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.903462][ T9555] RSP: 002b:00007f8feb707038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.905440][ T9555] RAX: ffffffffffffffda RBX: 00007f8feab35f80 RCX: 00007f8fea97e719 [ 96.907330][ T9555] RDX: 0000000020000180 RSI: 00000000c03864bc RDI: 0000000000000003 [ 96.909217][ T9555] RBP: 00007f8feb707090 R08: 0000000000000000 R09: 0000000000000000 [ 96.911095][ T9555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 96.913002][ T9555] R13: 0000000000000000 R14: 00007f8feab35f80 R15: 00007ffd78fa1138 [ 96.914902][ T9555] [ 97.002728][ T9548] netlink: 20 bytes leftover after parsing attributes in process `syz.6.948'. [ 97.004951][ T9548] netlink: 28 bytes leftover after parsing attributes in process `syz.6.948'. [ 97.054912][ T9581] netlink: 20 bytes leftover after parsing attributes in process `syz.6.957'. [ 97.082742][ T9586] smc: net device bond0 applied user defined pnetid SYZ0 [ 97.116649][ T9592] FAULT_INJECTION: forcing a failure. [ 97.116649][ T9592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.120071][ T9592] CPU: 2 UID: 0 PID: 9592 Comm: syz.6.960 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 97.122797][ T9592] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.125570][ T9592] Call Trace: [ 97.126458][ T9592] [ 97.127237][ T9592] dump_stack_lvl+0x16c/0x1f0 [ 97.128617][ T9592] should_fail_ex+0x497/0x5b0 [ 97.129900][ T9592] _copy_to_user+0x32/0xd0 [ 97.131064][ T9592] simple_read_from_buffer+0xd0/0x160 [ 97.132468][ T9592] proc_fail_nth_read+0x198/0x270 [ 97.133773][ T9592] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.135203][ T9592] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.136635][ T9592] vfs_read+0x1df/0xbe0 [ 97.137723][ T9592] ? __fget_files+0x23a/0x3f0 [ 97.138947][ T9592] ? fdget_pos+0x24c/0x360 [ 97.140116][ T9592] ? __pfx_lock_release+0x10/0x10 [ 97.141421][ T9592] ? trace_lock_acquire+0x14a/0x1d0 [ 97.142774][ T9592] ? __pfx_vfs_read+0x10/0x10 [ 97.144010][ T9592] ? __pfx___mutex_lock+0x10/0x10 [ 97.145321][ T9592] ? __fget_files+0x244/0x3f0 [ 97.146562][ T9592] ksys_read+0x12f/0x260 [ 97.147668][ T9592] ? __pfx_ksys_read+0x10/0x10 [ 97.148922][ T9592] do_syscall_64+0xcd/0x250 [ 97.150096][ T9592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.151635][ T9592] RIP: 0033:0x7f37b937d15c [ 97.152830][ T9592] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 97.157766][ T9592] RSP: 002b:00007f37ba1ac030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 97.159922][ T9592] RAX: ffffffffffffffda RBX: 00007f37b9535f80 RCX: 00007f37b937d15c [ 97.159937][ T5953] Bluetooth: hci4: command tx timeout [ 97.161936][ T9592] RDX: 000000000000000f RSI: 00007f37ba1ac0a0 RDI: 0000000000000004 [ 97.165286][ T9592] RBP: 00007f37ba1ac090 R08: 0000000000000000 R09: 0000000000000000 [ 97.167329][ T9592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 97.169370][ T9592] R13: 0000000000000000 R14: 00007f37b9535f80 R15: 00007ffc4c9f6858 [ 97.171454][ T9592] [ 97.284914][ T9606] xt_l2tp: missing protocol rule (udp|l2tpip) [ 97.307587][ T9609] tmpfs: Unknown parameter 'usrquotaj1v&s(yx \ NKǠh-ZV@4z6M;3&l nm^]:i쨨YT$%@.6 w:Di\D%mgŚn:){T' [ 97.377739][ T9614] pim6reg1: entered promiscuous mode [ 97.379142][ T9614] pim6reg1: entered allmulticast mode [ 97.389974][ T9614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.967'. [ 97.518142][ T9617] block device autoloading is deprecated and will be removed. [ 97.800434][ T1485] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 97.982167][ T1485] usb 6-1: Using ep0 maxpacket: 8 [ 97.984835][ T1485] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 97.986868][ T1485] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.989154][ T1485] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 97.991423][ T1485] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.994066][ T1485] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.997100][ T1485] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 97.999398][ T1485] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.185681][ T71] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 98.280183][ T9643] xt_TCPMSS: Only works on TCP SYN packets [ 98.284570][ T9643] ipt_rpfilter: unknown options [ 98.314073][ T1485] usb 6-1: usb_control_msg returned -32 [ 98.315902][ T9647] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 98.318418][ T1485] usbtmc 6-1:16.0: can't read capabilities [ 98.347404][ T71] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 98.350237][ T71] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.352822][ T71] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 98.355170][ T71] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.358554][ T71] usb 5-1: config 0 descriptor?? [ 98.580498][ T71] usbhid 5-1:0.0: can't add hid device: -71 [ 98.582585][ T71] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 98.588178][ T71] usb 5-1: USB disconnect, device number 10 [ 98.698798][ T5953] Bluetooth: hci3: command 0x041b tx timeout [ 98.745694][ T9684] /dev/sg0: Can't lookup blockdev [ 99.030684][ T8084] usb 10-1: USB disconnect, device number 3 [ 99.040553][ T8084] iowarrior 10-1:0.0: I/O-Warror #0 now disconnected [ 99.065662][ T9697] SELinux: policydb magic number 0xf0f2e2b0 does not match expected magic number 0xf97cff8c [ 99.068151][ T9698] program syz.5.993 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.068393][ T9697] SELinux: failed to load policy [ 99.071695][ T9698] netlink: 'syz.5.993': attribute type 3 has an invalid length. [ 99.074202][ T9698] netlink: 228 bytes leftover after parsing attributes in process `syz.5.993'. [ 99.080610][ T9698] trusted_key: encrypted_key: master key parameter is missing [ 99.309409][ T9720] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 99.383242][ T5955] Bluetooth: hci4: command tx timeout [ 99.466216][ T9739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.925512][ T9743] tmpfs: Bad value for 'mpol' [ 99.928000][ T9743] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1009'. [ 99.985431][ T9744] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1009'. [ 100.059009][ T9761] Mount JFS Failure: -22 [ 100.250153][ T9766] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1016'. [ 100.622544][ T62] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 100.764362][ T5983] usb 6-1: USB disconnect, device number 8 [ 100.772415][ T62] usb 10-1: device descriptor read/64, error -71 [ 100.809957][ T9778] dccp_invalid_packet: P.Data Offset(0) too small [ 100.922165][ T5955] Bluetooth: hci3: command 0x041b tx timeout [ 100.930599][ T39] kauditd_printk_skb: 45 callbacks suppressed [ 100.930607][ T39] audit: type=1400 audit(1731735848.258:730): avc: denied { bind } for pid=9783 comm="syz.6.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 101.039640][ T62] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 101.190367][ T62] usb 10-1: device descriptor read/64, error -71 [ 101.309177][ T62] usb usb10-port1: attempt power cycle [ 101.524679][ T39] audit: type=1400 audit(1731735848.819:731): avc: denied { wake_alarm } for pid=9810 comm="syz.6.1030" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 101.606130][ T5955] Bluetooth: hci4: command tx timeout [ 101.691704][ T62] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 101.723980][ T62] usb 10-1: device descriptor read/8, error -71 [ 101.937449][ T1485] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 101.939642][ T35] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 101.947293][ T39] audit: type=1400 audit(1731735849.212:732): avc: denied { map } for pid=9816 comm="syz.1.1032" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 101.949424][ T9817] CUSE: DEVNAME unspecified [ 101.954539][ T39] audit: type=1400 audit(1731735849.212:733): avc: denied { execute } for pid=9816 comm="syz.1.1032" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 101.984722][ T39] audit: type=1400 audit(1731735849.250:734): avc: denied { read } for pid=9818 comm="syz.1.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 101.991847][ T62] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 102.013497][ T62] usb 10-1: device descriptor read/8, error -71 [ 102.039651][ T39] audit: type=1400 audit(1731735849.296:735): avc: denied { write } for pid=9818 comm="syz.1.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 102.041712][ T9820] __nla_validate_parse: 3 callbacks suppressed [ 102.041721][ T9820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1033'. [ 102.100629][ T35] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.104663][ T35] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.108196][ T35] usb 11-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 102.111642][ T35] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.115143][ T1485] usb 5-1: config 0 has no interfaces? [ 102.118196][ T35] usb 11-1: config 0 descriptor?? [ 102.122518][ T1485] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.124926][ T1485] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.127256][ T1485] usb 5-1: Product: syz [ 102.128756][ T1485] usb 5-1: Manufacturer: syz [ 102.130185][ T1485] usb 5-1: SerialNumber: syz [ 102.132761][ T1485] usb 5-1: config 0 descriptor?? [ 102.135254][ T62] usb usb10-port1: unable to enumerate USB device [ 102.376313][ T8084] usb 5-1: USB disconnect, device number 11 [ 102.554101][ T35] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 102.556650][ T35] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 102.561297][ T35] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:0D8C:0022.0005/input/input11 [ 102.568533][ T35] cm6533_jd 0003:0D8C:0022.0005: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 102.812583][ T9814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.815043][ T9814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.894727][ T9825] xt_NFQUEUE: number of total queues is 0 [ 102.930789][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1036'. [ 103.078735][ T9840] binder: BINDER_SET_CONTEXT_MGR already set [ 103.080522][ T9840] binder: 9836:9840 ioctl 4018620d 20000100 returned -16 [ 103.104102][ T5983] usb 11-1: USB disconnect, device number 3 [ 103.105459][ T9845] 9pnet_virtio: no channels available for device syz [ 103.145808][ T5955] Bluetooth: hci3: command 0x041b tx timeout [ 103.607209][ T9860] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1043'. [ 103.640844][ T9862] SELinux: Context f is not valid (left unmapped). [ 103.643471][ T39] audit: type=1400 audit(1731735850.802:736): avc: denied { read } for pid=9861 comm="syz.5.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 103.649394][ T9862] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 103.668943][ T39] audit: type=1400 audit(1731735850.821:737): avc: denied { create } for pid=9863 comm="syz.5.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 103.814250][ T9872] netlink: 'syz.6.1049': attribute type 2 has an invalid length. [ 103.816366][ T9872] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1049'. [ 103.961834][ T39] audit: type=1400 audit(1731735851.102:738): avc: denied { associate } for pid=9863 comm="syz.5.1046" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 103.970363][ T39] audit: type=1400 audit(1731735851.102:739): avc: denied { append } for pid=9863 comm="syz.5.1046" name="file0" dev="9p" ino=37617751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.985471][ T9864] netfs: Couldn't get user pages (rc=-14) [ 103.988225][ T9864] Unsupported ieee802154 address type: 0 [ 104.160592][ T9887] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1054'. [ 104.164318][ T9887] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1054'. [ 104.258248][ T9891] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1053'. [ 104.304115][ T9907] netlink: 'syz.0.1058': attribute type 2 has an invalid length. [ 104.305962][ T9907] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1058'. [ 104.329779][ T9911] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1060'. [ 105.369452][ T9951] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1070'. [ 105.370857][ T5955] Bluetooth: hci3: command 0x041b tx timeout [ 105.381146][ T9951] netlink: 'syz.1.1070': attribute type 4 has an invalid length. [ 105.462857][ T9966] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 105.468603][ T9966] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.470805][ T9966] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.573430][ T9974] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 105.767604][ T9984] syz.5.1079: attempt to access beyond end of device [ 105.767604][ T9984] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 105.771006][ T9984] exFAT-fs (nbd5): unable to read boot sector [ 105.772626][ T9984] exFAT-fs (nbd5): failed to read boot sector [ 105.774225][ T9984] exFAT-fs (nbd5): failed to recognize exfat type [ 105.971152][T10008] 9pnet_virtio: no channels available for device syz [ 105.973195][T10008] 9pnet_virtio: no channels available for device syz [ 105.975147][T10008] 9pnet_virtio: no channels available for device syz [ 105.977130][T10008] 9pnet_virtio: no channels available for device syz [ 105.979272][T10008] 9pnet_virtio: no channels available for device syz [ 105.981245][T10008] 9pnet_virtio: no channels available for device syz [ 105.983233][T10008] 9pnet_virtio: no channels available for device syz [ 105.985198][T10008] 9pnet_virtio: no channels available for device syz [ 105.987253][T10008] 9pnet_virtio: no channels available for device syz [ 105.989328][T10008] 9pnet_virtio: no channels available for device syz [ 105.991319][T10008] 9pnet_virtio: no channels available for device syz [ 105.993345][T10008] 9pnet_virtio: no channels available for device syz [ 105.995388][T10008] 9pnet_virtio: no channels available for device syz [ 105.997358][T10008] 9pnet_virtio: no channels available for device syz [ 105.999431][T10008] 9pnet_virtio: no channels available for device syz [ 106.001624][T10008] 9pnet_virtio: no channels available for device syz [ 106.003647][T10008] 9pnet_virtio: no channels available for device syz [ 106.005686][T10008] 9pnet_virtio: no channels available for device syz [ 106.007673][T10008] 9pnet_virtio: no channels available for device syz [ 106.009638][T10008] 9pnet_virtio: no channels available for device syz [ 106.011730][T10008] 9pnet_virtio: no channels available for device syz [ 106.013921][T10008] 9pnet_virtio: no channels available for device syz [ 106.296758][T10029] netlink: 'syz.0.1091': attribute type 1 has an invalid length. [ 106.298647][T10029] netlink: 'syz.0.1091': attribute type 2 has an invalid length. [ 106.331374][T10036] input: syz0 as /devices/virtual/input/input12 [ 106.333082][T10036] input: failed to attach handler leds to device input12, error: -6 [ 106.376402][T10037] netlink: 'syz.0.1091': attribute type 10 has an invalid length. [ 106.378849][ T39] kauditd_printk_skb: 14 callbacks suppressed [ 106.378857][ T39] audit: type=1400 audit(1731735853.359:754): avc: denied { append } for pid=10039 comm="syz.6.1094" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 106.391443][T10037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.393305][ T39] audit: type=1400 audit(1731735853.359:755): avc: denied { map } for pid=10039 comm="syz.6.1094" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 106.400507][ T39] audit: type=1400 audit(1731735853.359:756): avc: denied { write execute } for pid=10039 comm="syz.6.1094" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 106.574168][T10045] gtp0: entered promiscuous mode [ 106.575924][T10045] gtp0: entered allmulticast mode [ 106.931360][T10087] vlan2: entered allmulticast mode [ 106.932770][T10087] netdevsim netdevsim6 netdevsim2: entered allmulticast mode [ 107.058224][ T8084] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 107.120059][T10098] xt_l2tp: invalid flags combination: c [ 107.121942][T10098] PKCS7: Unknown OID: [5] (bad) [ 107.124065][T10098] PKCS7: Only support pkcs7_signedData type [ 107.200920][T10104] xt_hashlimit: size too large, truncated to 1048576 [ 107.222458][ T39] audit: type=1400 audit(1731735854.154:757): avc: denied { mounton } for pid=10103 comm="syz.6.1112" path="/121/file0/bus" dev="ramfs" ino=34831 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 107.228711][T10107] overlayfs: failed to resolve './file0': -2 [ 107.229272][ T8084] usb 6-1: Using ep0 maxpacket: 8 [ 107.235147][ T8084] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 107.237358][ T8084] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 107.248881][ T8084] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 107.252508][ T8084] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 107.255127][ T8084] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.258476][ T8084] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 107.260880][ T8084] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.276451][ T39] audit: type=1400 audit(1731735854.201:758): avc: denied { read } for pid=10110 comm="syz.6.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 107.417182][T10116] smc: net device bond0 erased user defined pnetid SYZ0 [ 107.483255][ T8084] usb 6-1: usb_control_msg returned -32 [ 107.484877][ T8084] usbtmc 6-1:16.0: can't read capabilities [ 107.588326][ T39] audit: type=1400 audit(1731735854.491:759): avc: denied { watch } for pid=10123 comm="syz.6.1117" path="/125/file0/file0" dev="9p" ino=37617751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.590956][T10126] 9pnet_virtio: no channels available for device syz [ 107.594591][ T39] audit: type=1400 audit(1731735854.491:760): avc: denied { mounton } for pid=10123 comm="syz.6.1117" path="/125/file0/file0" dev="9p" ino=37617751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.760327][T10135] __nla_validate_parse: 7 callbacks suppressed [ 107.760338][T10135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1121'. [ 107.764754][T10135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1121'. [ 107.985397][T10176] netlink: 'syz.5.1130': attribute type 39 has an invalid length. [ 108.016499][ T39] audit: type=1400 audit(1731735854.893:761): avc: denied { write } for pid=10177 comm="syz.6.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 108.288304][ T9134] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.311690][T10189] program syz.6.1139 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.462554][ T5955] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 108.464272][T10211] netlink: 'syz.6.1144': attribute type 1 has an invalid length. [ 108.466936][T10211] xt_hashlimit: size too large, truncated to 1048576 [ 108.861276][T10232] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1151'. [ 108.929393][ T39] audit: type=1400 audit(1731735855.745:762): avc: denied { map } for pid=10233 comm="syz.0.1153" path="socket:[31741]" dev="sockfs" ino=31741 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.935554][ T39] audit: type=1400 audit(1731735855.745:763): avc: denied { read } for pid=10233 comm="syz.0.1153" path="socket:[31741]" dev="sockfs" ino=31741 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.955810][T10237] netlink: 'syz.5.1154': attribute type 12 has an invalid length. [ 108.957803][T10237] netlink: 'syz.5.1154': attribute type 11 has an invalid length. [ 108.959757][T10237] netlink: 190580 bytes leftover after parsing attributes in process `syz.5.1154'. [ 108.982898][T10242] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1155'. [ 109.017795][ T8084] hid-generic 0000:0000:0000.0006: unknown main item tag 0x7 [ 109.019784][ T8084] hid-generic 0000:0000:0000.0006: ignoring exceeding usage max [ 109.022592][ T8084] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 109.024670][ T8084] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 109.028209][ T8084] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 109.030322][ T8084] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 109.032472][ T8084] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 109.035049][ T8084] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 109.037604][ T8084] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 109.039560][ T8084] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 109.041475][ T8084] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 109.043611][ T8084] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 109.045545][ T8084] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 109.047805][ T8084] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 109.049730][ T8084] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 109.051708][ T8084] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 109.054166][ T8084] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 109.056153][ T8084] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 109.058105][ T8084] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 109.060100][ T8084] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 109.062018][ T8084] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 109.064270][ T8084] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 109.066237][ T8084] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 109.071857][ T8084] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz0] on syz0 [ 109.128168][T10260] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 109.130227][T10260] #PF: supervisor instruction fetch in kernel mode [ 109.132044][T10260] #PF: error_code(0x0010) - not-present page [ 109.135166][T10260] PGD 2ecf2067 P4D 2ecf2067 PUD 3546b067 PMD 0 [ 109.136802][T10260] Oops: Oops: 0010 [#1] PREEMPT SMP KASAN NOPTI [ 109.138410][T10260] CPU: 3 UID: 0 PID: 10260 Comm: syz.5.1160 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 109.141136][T10260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.143930][T10260] RIP: 0010:0x0 [ 109.144852][T10260] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 109.146744][T10260] RSP: 0018:ffffc9000d8879c8 EFLAGS: 00010287 [ 109.148318][T10260] RAX: 0000000000000afc RBX: 0000000000000000 RCX: ffffc90006421000 [ 109.150348][T10260] RDX: 0000000000040000 RSI: ffffea00014fa1c0 RDI: ffff88802983bc00 [ 109.152379][T10260] RBP: ffffea00014fa1c0 R08: 0000000000000007 R09: 0000000000000000 [ 109.154451][T10260] R10: 0000000000000000 R11: ffffffff961d45d0 R12: 1ffff92001b10f3a [ 109.156477][T10260] R13: ffff88802983bc00 R14: 0000000000000000 R15: dffffc0000000000 [ 109.158488][T10260] FS: 00007ff9449f46c0(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000 [ 109.160760][T10260] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.162499][T10260] CR2: ffffffffffffffd6 CR3: 0000000048408000 CR4: 0000000000352ef0 [ 109.164659][T10260] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 109.166776][T10260] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 109.168807][T10260] Call Trace: [ 109.169672][T10260] [ 109.170441][T10260] ? __die+0x1e/0x60 [ 109.171467][T10260] ? page_fault_oops+0x3b6/0xb80 [ 109.172754][T10260] ? __pfx_page_fault_oops+0x10/0x10 [ 109.174121][T10260] ? __pfx___lock_acquire+0x10/0x10 [ 109.175470][T10260] ? __pfx_lock_release+0x10/0x10 [ 109.176769][T10260] ? do_user_addr_fault+0xa90/0x13f0 [ 109.178127][T10260] ? rcu_is_watching+0x12/0xc0 [ 109.179369][T10260] ? exc_page_fault+0x5c/0xc0 [ 109.180588][T10260] ? asm_exc_page_fault+0x26/0x30 [ 109.181883][T10260] filemap_read_folio+0xc6/0x2a0 [ 109.183191][T10260] ? __pfx_filemap_read_folio+0x10/0x10 [ 109.184694][T10260] ? __filemap_get_folio+0x2a5/0xaf0 [ 109.186062][T10260] do_read_cache_folio+0x263/0x5c0 [ 109.187445][T10260] freader_get_folio+0x337/0x8e0 [ 109.188721][T10260] freader_fetch+0xc2/0x5f0 [ 109.189891][T10260] ? mt_find+0x4c8/0xa20 [ 109.190992][T10260] __build_id_parse.isra.0+0xed/0x7a0 [ 109.192386][T10260] ? __pfx___build_id_parse.isra.0+0x10/0x10 [ 109.193924][T10260] ? __pfx_find_vma+0x10/0x10 [ 109.195142][T10260] do_procmap_query+0xd62/0x1030 [ 109.196429][T10260] ? __pfx_do_procmap_query+0x10/0x10 [ 109.197776][T10260] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 109.199456][T10260] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 109.201086][T10260] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 109.202755][T10260] ? selinux_file_ioctl+0x180/0x270 [ 109.204052][T10260] ? selinux_file_ioctl+0xb4/0x270 [ 109.205339][T10260] procfs_procmap_ioctl+0x7d/0xb0 [ 109.206587][T10260] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 109.207995][T10260] __x64_sys_ioctl+0x18f/0x220 [ 109.209161][T10260] do_syscall_64+0xcd/0x250 [ 109.210400][T10260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.211852][T10260] RIP: 0033:0x7ff943b7e719 [ 109.212960][T10260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.217749][T10260] RSP: 002b:00007ff9449f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.219825][T10260] RAX: ffffffffffffffda RBX: 00007ff943d35f80 RCX: 00007ff943b7e719 [ 109.221692][T10260] RDX: 0000000020000180 RSI: 00000000c0686611 RDI: 0000000000000005 [ 109.223583][T10260] RBP: 00007ff943bf175e R08: 0000000000000000 R09: 0000000000000000 [ 109.225499][T10260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.227431][T10260] R13: 0000000000000000 R14: 00007ff943d35f80 R15: 00007fff895c6688 [ 109.229415][T10260] [ 109.230200][T10260] Modules linked in: [ 109.231173][T10260] CR2: 0000000000000000 [ 109.232238][T10260] ---[ end trace 0000000000000000 ]--- [ 109.233648][T10260] RIP: 0010:0x0 [ 109.234547][T10260] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 109.236376][T10260] RSP: 0018:ffffc9000d8879c8 EFLAGS: 00010287 [ 109.237901][T10260] RAX: 0000000000000afc RBX: 0000000000000000 RCX: ffffc90006421000 [ 109.239877][T10260] RDX: 0000000000040000 RSI: ffffea00014fa1c0 RDI: ffff88802983bc00 [ 109.241854][T10260] RBP: ffffea00014fa1c0 R08: 0000000000000007 R09: 0000000000000000 [ 109.243789][T10260] R10: 0000000000000000 R11: ffffffff961d45d0 R12: 1ffff92001b10f3a [ 109.245779][T10260] R13: ffff88802983bc00 R14: 0000000000000000 R15: dffffc0000000000 [ 109.247722][T10260] FS: 00007ff9449f46c0(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000 [ 109.249941][T10260] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.251608][T10260] CR2: ffffffffffffffd6 CR3: 0000000048408000 CR4: 0000000000352ef0 [ 109.253623][T10260] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 109.255700][T10260] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 109.257666][T10260] Kernel panic - not syncing: Fatal exception [ 109.259789][T10260] Kernel Offset: disabled [ 109.260905][T10260] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:44:18 Registers: info registers vcpu 0 CPU#0 RAX=fffffbfff20bebb1 RBX=fffffbfff20bebb2 RCX=ffffffff8169adde RDX=0000000000000001 RSI=0000000000000008 RDI=ffffffff905f5d88 RBP=fffffbfff20bebb1 RSP=ffffc90000137ab8 R8 =0000000000000000 R9 =fffffbfff20bebb1 R10=ffffffff905f5d8f R11=0000000000000052 R12=0000000000000000 R13=0000000000000000 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff81ef210b RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055557d515808 CR3=00000000444d8000 CR4=00352ef0 DR0=0000000100000001 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000305f6576616c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f37b93f25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f37b93f2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f37b93f2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f37b93f2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f37b93f269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f37b93f277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f37b950c488 00007f37b950c480 00007f37b950c478 00007f37b950c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f37ba06d100 00007f37b950c440 00007f37b9500004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f37b950c498 00007f37b950c490 00007f37b950c488 00007f37b950c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 02ff010000000000 0000000000000000 0000bb0000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000040000 0001000000000000 0003000000214e00 00204e0000040000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6411000000000000 00000000000080fe ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000000000000 00000000000002ff 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010000f5ffffffff ffffff0000000000 0100000000000000 00000000000002ff ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffc90006740000 RBX=0000000000000000 RCX=ffff8880278f8fb0 RDX=000000000000009d RSI=ffffffff864c53d6 RDI=ffff8880278f9188 RBP=0000000000000001 RSP=ffffc900008b0b88 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=ffffffff8b6f76c0 R12=0000000000000001 R13=0000000000004e20 R14=ffff8880278f8fb0 R15=0000000000000001 RIP=ffffffff864c5413 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbfe16b6d00 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055906aa9f908 CR3=000000002c698000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=8801aba9061b052d f585fc3b791902be 8801aba9061b052d f585fc3b791902be 8801aba9061b052d f585fc3b791902be 8801aba9061b052d f585fc3b791902be ZMM18=88e032546e4dd0c4 bc544bb2c7f38794 88e032546e4dd0c4 bc544bb2c7f38794 88e032546e4dd0c4 bc544bb2c7f38794 88e032546e4dd0c4 bc544bb2c7f38794 ZMM19=e907000000000000 0000000000000004 e907000000000000 0000000000000003 e907000000000000 0000000000000002 e907000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=79859e3079859e30 79859e3079859e30 79859e3079859e30 79859e3079859e30 79859e3079859e30 79859e3079859e30 79859e3079859e30 79859e3079859e30 ZMM22=a9dbe71ca9dbe71c a9dbe71ca9dbe71c a9dbe71ca9dbe71c a9dbe71ca9dbe71c a9dbe71ca9dbe71c a9dbe71ca9dbe71c a9dbe71ca9dbe71c a9dbe71ca9dbe71c ZMM23=5e6dc1785e6dc178 5e6dc1785e6dc178 5e6dc1785e6dc178 5e6dc1785e6dc178 5e6dc1785e6dc178 5e6dc1785e6dc178 5e6dc1785e6dc178 5e6dc1785e6dc178 ZMM24=e1bb772ae1bb772a e1bb772ae1bb772a e1bb772ae1bb772a e1bb772ae1bb772a e1bb772ae1bb772a e1bb772ae1bb772a e1bb772ae1bb772a e1bb772ae1bb772a ZMM25=eaad0fc4eaad0fc4 eaad0fc4eaad0fc4 eaad0fc4eaad0fc4 eaad0fc4eaad0fc4 eaad0fc4eaad0fc4 eaad0fc4eaad0fc4 eaad0fc4eaad0fc4 eaad0fc4eaad0fc4 ZMM26=7c2b5adb7c2b5adb 7c2b5adb7c2b5adb 7c2b5adb7c2b5adb 7c2b5adb7c2b5adb 7c2b5adb7c2b5adb 7c2b5adb7c2b5adb 7c2b5adb7c2b5adb 7c2b5adb7c2b5adb ZMM27=c7799f66c7799f66 c7799f66c7799f66 c7799f66c7799f66 c7799f66c7799f66 c7799f66c7799f66 c7799f66c7799f66 c7799f66c7799f66 c7799f66c7799f66 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=e8050000e8050000 e8050000e8050000 e8050000e8050000 e8050000e8050000 e8050000e8050000 e8050000e8050000 e8050000e8050000 e8050000e8050000 info registers vcpu 2 CPU#2 RAX=00000000000cc174 RBX=0000000000000002 RCX=ffffffff8b23b459 RDX=ffffed100d507026 RSI=ffffffff8bd1b640 RDI=ffffffff816477cc RBP=ffffed1003b56000 RSP=ffffc90000197e08 R8 =0000000000000000 R9 =ffffed100d507025 R10=ffff88806a83812b R11=0000000000000000 R12=0000000000000002 R13=ffff88801dab0000 R14=ffffffff905f5d88 R15=0000000000000000 RIP=ffffffff8b23c83f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff943d37a8c CR3=0000000048408000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff943bf25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff943bf2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff943bf2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff943bf2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff943bf269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff943bf277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000085 00000000000004b7 00000008000003b7 fffffff800000207 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9500000023000000 8500000001000000 8500000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b7fffffff8000002 07000000000000a2 bf00000000fff88a 7b00000000000008 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850bb9b5 RDI=ffffffff9aaebc80 RBP=ffffffff9aaebc40 RSP=ffffc9000d887278 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=0000000000000073 R14=ffffffff850bb950 R15=0000000000000000 RIP=ffffffff850bb9df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007ff9449f46c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000048408000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000280001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9449f3f90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff943bf25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff943bf2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff943bf2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff943bf2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff943bf269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff943bf277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666c65732f636f72 702f0073252f666c 65732d6461657268 742f636f72702f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 434940560a464a57 550a0056000a4349 405608414440574d 510a464a57550a00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000