last executing test programs: 2.428283574s ago: executing program 2 (id=186): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fsopen(&(0x7f0000000240)='ubifs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 2.348388784s ago: executing program 2 (id=188): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fanotify_init(0x500, 0x400) r3 = fcntl$dupfd(r1, 0x406, r1) fanotify_mark(r2, 0x1, 0x40000019, r3, 0x0) read$FUSE(r3, &(0x7f000003e800)={0x2020}, 0x2020) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100"], 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4000084) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f00000000c0)=@ethtool_cmd={0x4e, 0x0, 0x7, 0x39, 0xff, 0x9, 0x6, 0x5, 0xa, 0x3, 0x7, 0xffff, 0xa1d1, 0x2, 0x8d, 0x1, [0xcff7, 0x9]}}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x6c, 0x0, 0x8, 0x5, 0x0, 0x0, {0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xbf}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x4, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8100}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x95}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8ae}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x50}, 0x804) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000240)={0xfe, 0x0, [{0x7, 0xfffffffe, 0x0, 0x9, 0x2, 0x6}, {0x40000000, 0x8001, 0x1, 0x3, 0x1000, 0x0, 0xd}]}) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000140)=0x26000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) fanotify_init(0x500, 0x400) (async) fcntl$dupfd(r1, 0x406, r1) (async) fanotify_mark(r2, 0x1, 0x40000019, r3, 0x0) (async) read$FUSE(r3, &(0x7f000003e800)={0x2020}, 0x2020) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100"], 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4000084) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f00000000c0)=@ethtool_cmd={0x4e, 0x0, 0x7, 0x39, 0xff, 0x9, 0x6, 0x5, 0xa, 0x3, 0x7, 0xffff, 0xa1d1, 0x2, 0x8d, 0x1, [0xcff7, 0x9]}}) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x6c, 0x0, 0x8, 0x5, 0x0, 0x0, {0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xbf}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x4, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8100}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x95}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8ae}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x50}, 0x804) (async) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000240)={0xfe, 0x0, [{0x7, 0xfffffffe, 0x0, 0x9, 0x2, 0x6}, {0x40000000, 0x8001, 0x1, 0x3, 0x1000, 0x0, 0xd}]}) (async) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000140)=0x26000) (async) 2.19788397s ago: executing program 2 (id=189): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000040)={0x2, 0x0, @ioapic={0x60000, 0xd8dd, 0x81, 0x21c4, 0x0, [{0x3, 0x9, 0x3, '\x00', 0x2c}, {0x3, 0x6, 0x7f, '\x00', 0x4}, {0x1, 0x0, 0x0, '\x00', 0x1}, {0x7, 0x57, 0xc}, {0x9, 0x39, 0x8, '\x00', 0x86}, {0x3, 0x7, 0x10, '\x00', 0xff}, {0x8, 0x58, 0x5, '\x00', 0x4}, {0x81, 0x5e, 0x8, '\x00', 0x6}, {0x3, 0x89, 0x1, '\x00', 0x9}, {0x14, 0x0, 0x7, '\x00', 0x9}, {0xf, 0xc2, 0x6, '\x00', 0x6}, {0x2, 0x24, 0x5, '\x00', 0x9}, {0x8, 0x49, 0x73, '\x00', 0xfb}, {0xf8, 0x1c, 0xfb, '\x00', 0xa}, {0x8, 0x1, 0x5, '\x00', 0x4}, {0x4c, 0x81, 0x1, '\x00', 0xbe}, {0x1, 0x3, 0x4, '\x00', 0x7}, {0x2, 0xe0, 0x3, '\x00', 0xfa}, {0x4, 0xff, 0x6, '\x00', 0x9}, {0xb3, 0x5, 0x7f}, {0x80, 0x40, 0x9, '\x00', 0x2}, {0x2, 0xf2, 0xe}, {0x5, 0x2, 0x9, '\x00', 0x2}, {0x7, 0x8, 0xd, '\x00', 0x9}]}}) r1 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x18981) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000300)={0x8, &(0x7f00000002c0)=[{}, {}, {0x0}, {}, {}, {}, {}, {}]}) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f0000000340)={{}, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x15) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000380)={0x20000000, 0x1, 0x857}) pwritev(r0, &(0x7f0000000700)=[{&(0x7f00000003c0)}, {&(0x7f0000000400)="591060cbb4b9cf5dcce5bbc0a6198434de251de2a4bc9a49d38e996ccb5d91486d3af13c2943a082ae6110d6c2064a07d379491edcb130949caa3cdf36ab42458db7bf97084be1b4a8c1b123d078a2563aaa7d44bd522273872346852ed7e89c2a53894f437a58640d50b3a00fb994c0368f54dd5139f60fd944ae4c4449e78e", 0x80}, {&(0x7f0000000480)="9df39748f01d747b57b24579ac20bf69a3b663d2f8227011e47498ff1041af5ec0364f2732c6b2d357a16b8dbe5f5d8f42872a1cd95014f16904d270fcaa5749429feeedb443acc8ff0365596d534cdb11b9586a1439d2db603f5eb9efff70a5f0bea509894cb43962bbfa1d26bf5236abc1c66d5ea33db6fd61290990ef028a43896dabfcc0119646b206c3c56aecbd1aa90917a8cfa8fa189ae88b43ce4ce67fb6c914", 0xa4}, {&(0x7f0000000540)="7c315830fbea410ff92b2762348ddc35cd0a025408f79fee9f059a7641e20521d85d9e291869edf88a279232f0aae3a4ea2ac9ec8b9577451a0c04925282a3056d1cdc8af01d83ad48f81a99952a02de2b1cdcdcf367dbaa719cb215fa2133b3607fc897b8c1400bacebc45c543768064b8dc9b54613a9b40bf7658769d8fb71694c21c8695142f59984ef8caa30409534e274058547", 0x96}, {&(0x7f0000000600)="cccf74fe409de64280e6eb3ed84eb514320d9a0d3439fc6e3c5a94e5aaa8", 0x1e}, {&(0x7f0000000640)="c32928c02ff43c2ec7c9f2c6b4866053d69f60de43f095652e8e17563ba8b82b982fa61b2fe2c5a2c52b4068aeb1e03af97cedb96ddceb9db9bffb437c727aa8e22797de499150bcf31b4f801f83dcee1818bb4b4475b7466e1d1cbd8e88ed337e86a660ab4e114eb147aa2b8215579c0531ee98827330674133aa727a4dc43fe06290bc90", 0x85}], 0x6, 0x0, 0x76e) write$cgroup_int(r0, &(0x7f0000000780)=0x3, 0x12) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000007c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000ac0)={&(0x7f00000008c0)=[0x0, 0x0, 0x0], &(0x7f0000000900)=[{}, {}, {}, {}], &(0x7f0000000a40)=[0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x3, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000bc0)={&(0x7f0000000b40)=[0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000c80)={&(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000d40)={&(0x7f0000000cc0)=[0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0x22222222}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000001040)={&(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x4, 0x4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000001140)={0x701, 0x2, &(0x7f0000000840)=[0x0, r3], &(0x7f0000000880)=[0x1, 0x9], &(0x7f00000010c0)=[r5, 0x0, r7, 0x0, r8, r10, r16], &(0x7f0000001100)=[0x9, 0x4, 0x7, 0x0, 0x200000000000, 0x8]}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000001200)={&(0x7f0000001180)=[0x0], &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, r13, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000001280)={&(0x7f0000001240)="2c6405119eb823854a0e47515cf76b9b8b96b673a2", 0x15, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000001300)={0x0, r3, r4, 0x0, 0x0, 0x3, &(0x7f00000012c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000001440)={0x0, 0x9, &(0x7f0000001340)=[r6, r17, r11, r12, r14, r15, r9, r18, r19], &(0x7f0000001380)=[0x6], &(0x7f00000013c0)=[r14], &(0x7f0000001400)=[0x1, 0x6, 0x2, 0x10, 0x1, 0x2, 0x1ff, 0x1], 0x0, 0x4}) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x3b) r20 = openat$panthor(0xffffffffffffff9c, &(0x7f0000001480), 0x2, 0x0) ioctl$DRM_IOCTL_UNLOCK(r20, 0x4008642b, &(0x7f00000014c0)={r2, 0x2}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001580)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in6=@private0}}, &(0x7f0000001680)=0xe8) lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001780)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@private2}}, &(0x7f0000001880)=0xe8) mount$fuse(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540), 0x8, &(0x7f00000018c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r21}, 0x2c, {'group_id', 0x3d, r22}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0xa00}}, {@allow_other}], [{@smackfsdef}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@pcr={'pcr', 0x3d, 0x39}}, {@obj_role={'obj_role', 0x3d, '/dev/dri/renderD128\x00'}}, {@subj_type}, {@uid_lt={'uid<', r23}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/dri/renderD128\x00'}}]}}) 2.197538918s ago: executing program 2 (id=190): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x2d4, @empty}, 0x1c) listen(r0, 0x3) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000200)=[@nested_amd_clgi={0x17f, 0x10}, @set_irq_handler={0xc8, 0x20, {0x7b, 0x1}}, @in_dx={0x69, 0x20, {0xd78a, 0x3}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x61, 0x2, 0x34a, 0x3}}, @code={0xa, 0x6f, {"470f79d60f01737dc744240000800000c744240202000000c7442406000000000f011424c744240052000000c744240238000000ff1c240f0e0fc7a90100000066baf80cb8b0010789ef66bafc0ced410f350f017e00f2363e660f017e00"}}, @nested_vmresume={0x130, 0x18, 0x2}], 0x10f}) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000340)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x92, &(0x7f0000000080)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x26, 0x84, 0x2, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @multicast2}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}, {"87829ceeebe16bade2f49824c111bebc90c119142cfda316eb4c5ae005a42aa319e6bde5eb40db87db72ea985386bf15a64cdf9d3a29697acd20acf9d76faf2510bba031fa827e8ca762e4c7d69345c8f44326fe9e44f8b85ce4b38e"}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20}}}}}}, 0x0) 2.138764859s ago: executing program 2 (id=191): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K\x00\x00\x00\x00\x00\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x257, 0x0, 0x100000000000000}]}) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x2}}, 0x20) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KDSKBSENT(r6, 0x4b49, &(0x7f0000001240)={0xfc, "1cf11f0cf3df06723d68cf2e34bec1fe7aeb2e4f9bdca646c4d338b97ec131354c136ec6cf21a7fd51f27fb956a8ae3885ea642da767ac5f7080830a09b0ff10a4e89e9067691bc9d0c78817f1b777a16c084308ced3efc24ca6c31102220f5d34355338afe106101839c316ef0f88d2fcca226daf1c10a3b4d5bfc8a48d752e7f4a193c4b146ed8108bd5fbac85d2de914e1e1f4fd94decd9fdf1c7af946b07ccce200a7e5e20ac043bf7f8dcb806487be03132bf1f4ea1dc15bfee959c453bd5382b93ec14d8cd22c31ae731cbe7526b49c83607a4d6d0184af37286c08c9572e8b83c8dac93d59d5bf5767d5cd3c023cd121bc6894b0449b66a83345f8720f9113d0363314516e93cb1156ed299e6311c6c27c40a0827957a8fdfbc97243266bff54d143624911e7dd42e6cfc53bdace1643feecdf2b236a43f15c815cc95c6dd597a69d1e43791827ad87ec72c556ca24bbdfaa226f2367b76559dfb4b668d9b18bb089124f45be9c870cab5973d8a7488703e0c0704777129845591622a696f225bb81d93f5c72683e9778690770fab6750f3d8ff3162cbf04eb0be6477baa460b3f8e457a7b8bfdda324330accb61d513420c4db90797203eaf78e28160ebda297f435c87ba621e550ecbae53a8e48fa9ce5b40d578f6d20778fb060b7c6706d2b842596148cc25a33b5beb9071468af7ca3cebc7b57391b6b34f8d7b9"}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0xdd) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000340)={0x1f, 0x21, &(0x7f0000000300)="ab847c341f28da592f16ace811982fd253e8d490c206b78d7d614ebc4102e18f61"}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b30, &(0x7f0000000200)={'wlan0\x00'}) fchmodat(r7, &(0x7f00000000c0)='./file0\x00', 0x81) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x01\xe1=\x8d\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) r8 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r8, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0xffff, 0x3231564e, 0x0, [0x2], [0x2000, 0x0, 0xc7], [0x7fffffff, 0x3, 0x0, 0x2], [0xea5a, 0x0, 0x0, 0x200]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) ioctl$KVM_SET_GSI_ROUTING(r9, 0x4008ae6a, &(0x7f0000000000)={0x2, 0x0, [{0x2, 0x1, 0x1, 0x0, @sint={0x2da, 0x5}}, {0x175d, 0x2, 0x1, 0x0, @adapter={0x5, 0x8, 0xaa3f, 0x1, 0x1000}}]}) 1.434715351s ago: executing program 1 (id=198): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x14080, 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x14080, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x21, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x3438a}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xd13d}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x4004004) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x3438a}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xd13d}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x4004004) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0xa, 0xc, 0x7f, 0xc, @loopback, @private1, 0x10, 0x7, 0x5, 0x103}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0xa, 0xc, 0x7f, 0xc, @loopback, @private1, 0x10, 0x7, 0x5, 0x103}}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='auxv\x00') exit(0xf) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000200)=0x2) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000340)='.\x00', 0x850003d1) (async) inotify_add_watch(r3, &(0x7f0000000340)='.\x00', 0x850003d1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000080), 0x8) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f00000002c0)={0x0, &(0x7f0000000080)}) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f00000002c0)={0x0, &(0x7f0000000080)}) read$FUSE(r5, &(0x7f0000000400)={0x2020}, 0x2020) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f0000000200)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', r1, 0x0, 0x1c, 0xc, 0x9, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x8, 0x7, 0x888d, 0x6}}) 1.434274813s ago: executing program 3 (id=199): r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) (rerun: 32) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="ffff2abd7000f8f4df2503"], 0x14}, 0x1, 0x0, 0x0, 0x4004c}, 0x20000000) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="14220100000003002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=0x0, @ANYBLOB="352adfed7009c752ce3a19ae92e0da9dd73e772edc50c5eb973906c54b245318e8"], 0x44}, 0x1, 0x0, 0x0, 0x44091}, 0x0) (async) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="010200caf598f108e6c49197a64d9d26c444db", @ANYRES16=r6, @ANYBLOB="010700000000000000002e000000"], 0x14}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) (async) sendmmsg$inet(r2, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000017c0)="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", 0x671}], 0x1}}], 0x1, 0x2090) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (async, rerun: 64) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) r7 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000000), 0x244400, 0x0) ioctl$PTP_EXTTS_REQUEST(r7, 0x40103d02, &(0x7f0000000040)={0x70, 0x1}) r8 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24}, 0x24}}, 0x0) recvmsg$can_raw(r8, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000006c0)=""/159, 0x9f}, {&(0x7f00000005c0)=""/44, 0x2c}], 0x2}, 0x40000100) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xdd008d5803396e68}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x2f8, 0xffffffff, 0x0, 0x190, 0xa8, 0xffffffff, 0xffffffff, 0x260, 0x260, 0x260, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x4}, {0x0, 0x2, 0x4}, {0x0, 0x6, 0x4}, 0x8eb, 0x8fc}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x1a}, 0xff, 0x0, 'team0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x62, 0x1, 0x46}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1, 0x1}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x3, 0xe, [0x3e, 0x19, 0x16, 0x26, 0x10, 0x20, 0x15, 0xa, 0x3a, 0x3, 0x39, 0x24, 0x36, 0x1, 0x37, 0x32], 0x1, 0x2, 0xf}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@deltaction={0x234, 0x31, 0x71d, 0x70bd2b, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0xfffffc7f}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'skbedit\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x88, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x40}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x14, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'police\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2df6}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x275}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x802}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'ife\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 1.373483908s ago: executing program 3 (id=201): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x100000005) (async) close(0x3) (async) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1854847, 0x0) (async) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file1\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010004000000000202000400", @ANYRES32=0x0, @ANYBLOB="0400000000000000100006000000000020"], 0x2c, 0x3) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20c040, 0x0) 1.288338555s ago: executing program 3 (id=202): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) (async, rerun: 64) r0 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) (async, rerun: 32) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) (rerun: 32) connect$inet6(r1, &(0x7f0000000080)={0xa, 0xffff, 0x0, @empty, 0x2}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) (async) sendto$inet6(r1, 0x0, 0x0, 0x800, 0x0, 0x0) (async) listen(r0, 0xfffffffe) (async, rerun: 32) r2 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) (async) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r4 = io_uring_setup(0x62e5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f4}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}, {0x0}], 0x2, 0x0, 0x3) (async) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) recvmmsg(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="941d", 0x2}], 0x1, 0x0, 0x0, 0x800}}], 0x1, 0x40000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) 1.107806916s ago: executing program 2 (id=203): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000080)="18", 0x49}], 0x1, 0x0, 0x4) bind$x25(r0, &(0x7f0000000080), 0x12) close(r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x810, 0xffffffffffffffff, 0x0) ftruncate(r3, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x15) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x2b3}) mmap(&(0x7f0000666000/0x4000)=nil, 0x4000, 0x8, 0x1010, r0, 0xc6af8000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$binfmt_script(r4, &(0x7f0000022740)={'#! ', './bus', [], 0xa, "6734980aa02b753826e008a731b9a023bbb7b3858d985a2ade573812cef32629671eedf34cd2f1b469b607b80ba375c7f894348514269995da4f7a9796a0f2c5630caf5b633bed6d0f28f82a607a4f5c30bdc65b034d4b244340c137a461da66aa1f4bc6e85e4fd588ff667116d6f3576b86f5df71797bf0cf654ba0506b982aa8ead1668b415866283993ca171dc4e0ef6517b6e675c90d8eb55c1fc97ae5639dd39a158305fc3012284ed852cdb0e4545b3f8d60237bb0f4def752364b259def449b65dd204439d51eafc7ca5ecb517933c5aee1b703da4c323c6032406e"}, 0xe8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') preadv(r6, &(0x7f0000000340)=[{&(0x7f0000003200)=""/4096, 0x1000}], 0x1, 0x2c2, 0xca) 1.107538543s ago: executing program 3 (id=204): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_clone(0x48901800, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0xfff, 0x80000, 0xffffffffffffffff}) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4018}, 0x18) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 878.571843ms ago: executing program 3 (id=205): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x100000005) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0xcd7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtclass={0xccc, 0x28, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xfff1, 0x8}, {0xe, 0xfff3}, {0xfff2, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xa}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_htb={{0x8}, {0xc7c, 0x2, [@TCA_HTB_RATE64={0xc, 0x6, 0x5}, @TCA_HTB_CEIL64={0xc, 0x7, 0x9}, @TCA_HTB_RATE64={0xc, 0x6, 0x80000001}, @TCA_HTB_CTAB={0x404, 0x3, [0x8, 0x1, 0x7, 0xfff, 0xe00, 0x1000, 0xbe6, 0x3, 0x3, 0x42, 0x4, 0xf8f, 0x7, 0xfffffffd, 0x555a48de, 0x1800, 0x6, 0x5, 0x7, 0x0, 0x8, 0xfffffff8, 0x9, 0x5, 0x9, 0x7, 0xffff, 0xfffffffa, 0x10, 0x4e, 0x6, 0x0, 0x6, 0x7, 0xcdd, 0x5, 0x5, 0x7, 0x4, 0x3, 0x9, 0x6, 0x7, 0x5, 0x1000, 0x0, 0x1, 0xb1, 0x40, 0x5, 0x8, 0xe0b5, 0x80000000, 0x8000, 0x1, 0x5, 0x800, 0x4b, 0x26, 0x9, 0x5, 0x40, 0x1ff, 0xad62, 0x4, 0x1d, 0x9, 0xffff, 0xa, 0xdc81, 0x4, 0x2b966f0e, 0x86, 0x26e6, 0x2, 0x2, 0x4, 0x3ff, 0x1ff, 0x80000000, 0x43, 0x74, 0x2, 0x5, 0x4, 0x9, 0x9, 0x9, 0x2, 0x3, 0x6, 0x7a, 0x2, 0x6, 0x2, 0x9, 0xff, 0xc8c2, 0x8001, 0x8, 0x7ff, 0x0, 0xc8b, 0x1, 0x7, 0x80000000, 0x4f, 0x3, 0x5cfb, 0x101, 0x3, 0x23, 0x1, 0x101, 0x4, 0xf797, 0x7ed180, 0x47, 0x3, 0x8, 0x5, 0x6, 0x9, 0x4, 0x8, 0x80000001, 0x9, 0xc, 0x3, 0x5, 0xffffffff, 0x3ff, 0xc5, 0x1, 0x5, 0x7ff, 0x1, 0x7a5, 0x1, 0x400, 0xe, 0x1, 0x0, 0x7, 0x4, 0x6, 0x1, 0x7, 0x1a4448be, 0x5, 0xf, 0x3, 0x80, 0x2, 0x6, 0xf00d, 0x6, 0x4, 0x7, 0x1, 0x4, 0x4, 0x43, 0x1, 0x6, 0xffff, 0x8, 0x2, 0x6, 0x6, 0x1, 0x200, 0x7, 0xb, 0x2, 0x5, 0x2c, 0x7ff, 0xfffffda0, 0x7fffffff, 0x81, 0x5, 0x7ff, 0x1, 0xbc, 0x8, 0x1, 0x1, 0x6, 0xe, 0x8, 0x1, 0x9, 0xfffffe00, 0x9, 0x9, 0x0, 0x7, 0x247, 0x9, 0x3ff, 0x2, 0x4, 0x2, 0x7, 0xe49, 0x9, 0xfffffff9, 0x6, 0x3, 0x9, 0x4, 0x9, 0x800, 0x1, 0x6, 0x80000000, 0x4, 0x1, 0xf2, 0xff, 0xaa, 0xce79, 0x9, 0x8, 0x9, 0x9, 0x10000, 0x4, 0x0, 0x1, 0x8, 0x7, 0x1, 0x8, 0xfffffffa, 0x0, 0x7ff, 0x1, 0x3e783ddf, 0x944, 0x1, 0x1, 0x7, 0x5, 0x1, 0x81, 0x100, 0x43, 0x1, 0xef, 0x3ea, 0xe84d, 0xfff, 0x6, 0x2]}, @TCA_HTB_CTAB={0x404, 0x3, [0x7fffffff, 0x4000, 0x9, 0x3, 0x10001, 0x4, 0x9, 0xc, 0x5, 0x1a, 0x8, 0x6, 0x6, 0x401, 0x8, 0x7ff, 0x1, 0x1, 0xfffffffe, 0xfffffffc, 0xaf, 0xb, 0x1, 0x401, 0x4, 0x5, 0xc, 0xb15, 0x7, 0xfffffd90, 0x7, 0x2f, 0x88, 0x100, 0x5, 0x4, 0x1000, 0x8, 0x7, 0xbb4, 0x2, 0x2, 0x5, 0x10, 0x1000, 0x0, 0x3, 0x81, 0x7, 0x5822, 0xe19, 0x1, 0x4, 0x40, 0x8001, 0xfffffff7, 0x1, 0x372b, 0x0, 0x8fa, 0x10001, 0x8, 0x4, 0x81, 0x7fff, 0x3, 0x8, 0xb97, 0x6, 0x9e8, 0xa290, 0xc9, 0x8000, 0x80, 0x8, 0x4f7b, 0x2, 0x0, 0xf2, 0x2, 0x5, 0x3, 0x0, 0x7, 0x0, 0xaad, 0xfff, 0x4, 0x9, 0x1f, 0x7, 0x1, 0x7f, 0xfe7, 0xd, 0xe997, 0x40, 0x3, 0x2, 0x6, 0x0, 0x200, 0x0, 0x9, 0x7, 0x6, 0x8001, 0x3621, 0x8, 0x800, 0x2, 0xb75, 0x4, 0x8, 0x80000001, 0x5, 0x6, 0x9, 0x9, 0x5e, 0x9, 0x7, 0xd00, 0xfffffe00, 0xffc00000, 0xfffffc00, 0x3, 0x306c, 0xfe, 0x5, 0x8, 0x1, 0x8, 0x800, 0x6, 0xb, 0x6, 0x3, 0x5, 0x5, 0x2, 0xfe, 0xff, 0x6, 0x280, 0x748, 0x4, 0x8, 0x4, 0x50f, 0xc9a6, 0xb6, 0x80000001, 0x3d, 0xff, 0x4, 0x8, 0x1, 0x8000, 0x9, 0xa0c, 0x459, 0xc, 0x6, 0x9, 0x0, 0x0, 0x1000, 0x7f, 0x6, 0x2b, 0x3663, 0xf65, 0xe1, 0x1, 0x0, 0x80000001, 0x945, 0x4, 0x4, 0x7, 0x8, 0x0, 0x3, 0x0, 0x4, 0xffffffff, 0xa3, 0x5, 0xfff, 0xfffffff9, 0x4, 0xff, 0x5, 0x0, 0x2, 0x0, 0xe0000000, 0x1, 0x700, 0x9, 0x6, 0x7, 0x4, 0x2, 0x3fd, 0x1, 0x3ff, 0x3, 0xfffffffa, 0x903d, 0x5, 0x58f6, 0x1, 0x1, 0x100, 0x9, 0x4, 0xf1980bc, 0x7, 0x5, 0xa127, 0x5, 0x3, 0x1, 0x7, 0x2, 0x100, 0x8, 0x3, 0x2, 0xd6e, 0x0, 0xffffffff, 0x0, 0x4, 0x80, 0x8, 0x1, 0x300000, 0x5, 0x3, 0x7fff, 0x8, 0x3, 0x5, 0x9, 0x7, 0x9, 0x0, 0x8, 0x7, 0x4, 0x6, 0x6, 0x101]}, @TCA_HTB_CEIL64={0xc, 0x7, 0x3}, @TCA_HTB_RATE64={0xc, 0x6, 0x9}, @TCA_HTB_CTAB={0x404, 0x3, [0x6, 0x80000081, 0x1ff, 0x1, 0xfffffffd, 0x8, 0x5, 0x2e, 0x6, 0x1, 0x7, 0xaedd, 0x3ff, 0x8, 0x880, 0x2, 0x2c, 0x6, 0x5, 0x0, 0x80, 0x2, 0x800, 0x80000001, 0x800, 0x7, 0x5, 0x4, 0x758, 0x1000, 0x1, 0x4a63c6b2, 0x3, 0x2, 0x7ff, 0xffffffff, 0xfff, 0x7, 0x83c, 0x80, 0x3ff, 0xfff, 0x8000, 0x9, 0x7, 0xf0, 0x8, 0x0, 0x7, 0x3, 0x40, 0x9, 0x7, 0x4, 0xeb8, 0x6861, 0x7, 0x9, 0x1, 0x0, 0x0, 0x672d, 0x7, 0x7ff, 0x200, 0x7, 0x800, 0x2, 0x4, 0x0, 0x7, 0x80000001, 0x3, 0xc0, 0x1, 0xffff0001, 0x0, 0x3, 0x3ff, 0xffffffff, 0x23de29ec, 0x5, 0xc05, 0x6, 0x2, 0x5, 0x8, 0x9, 0x5, 0x871b, 0xd56, 0x6, 0x200, 0x800, 0x6, 0x5, 0xe7, 0x1, 0x4, 0x2a, 0x6, 0xfffffff8, 0x8, 0xfffffffc, 0xfffff8cf, 0x1, 0x6, 0x7f, 0x2, 0xb3, 0x80, 0xda, 0xc0, 0x7, 0x518, 0x9, 0x101, 0xd3, 0x8, 0x0, 0x100, 0x7fffffff, 0x7, 0x26, 0x5, 0xffff, 0x9, 0x80000001, 0x18a, 0x10, 0x10001, 0x9e, 0x8, 0x81, 0xfff, 0x2, 0x1, 0x5ada, 0xc, 0x2, 0x4, 0x2, 0x7ff, 0xc2, 0x3ff, 0x2, 0x4, 0x963eec2, 0x100, 0x6, 0x7, 0x8, 0x8, 0xb53d, 0x46d6, 0x1000, 0x7, 0x8, 0x6, 0x81, 0xa9, 0x9, 0x101, 0x1ff, 0x81, 0x5, 0xd9, 0x1ff, 0xfffffff7, 0x0, 0x100, 0x8, 0x412ff02e, 0x62af2b95, 0x6, 0xfffffffb, 0x8, 0x8, 0x2, 0x9, 0x6, 0x6, 0x5, 0x9f38, 0xd, 0xff, 0x9, 0xb5bf, 0x9da, 0x1, 0xffff359f, 0x40, 0x9, 0x510b, 0xcaf6, 0x2, 0x8, 0x10001, 0x3, 0xffff, 0x28efe0b6, 0x7, 0x100, 0x4, 0xc, 0x3, 0x4, 0x7f, 0xd19c, 0x0, 0x1900, 0x3, 0x5, 0x9, 0x3, 0xd35, 0x3, 0xfffffffc, 0x3, 0x7, 0xd, 0xfffffff7, 0x7f, 0x8000, 0xd, 0x2, 0x9, 0x8, 0x0, 0x7f, 0x1, 0x1c70, 0x0, 0x1, 0x1, 0x3, 0x9, 0x433d, 0x2fd4, 0x800, 0x256, 0x0, 0x9, 0x9, 0x9, 0x8, 0x3, 0x7ff, 0x8, 0x3, 0x3, 0x8, 0x7b4e151, 0x6, 0x1, 0x10]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x3, 0x1, 0x8276, 0x2, 0x2, 0x4}, {0x6, 0x0, 0x0, 0x65e, 0x2, 0x5}, 0x3, 0x401, 0xed65, 0x3ff, 0xff}}]}}, @TCA_RATE={0x6, 0x5, {0x2}}, @TCA_RATE={0x6, 0x5, {0x1, 0x9}}]}, 0xccc}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x17, 0x55, 0x1e5, 0x0, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@mcast1, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x440d4}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000240)=ANY=[@ANYBLOB="4a9f02", @ANYRES32=r8, @ANYBLOB="0000ec002b424035799a00118ac00000"]) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'batadv_slave_0\x00', &(0x7f00000000c0)=@ethtool_modinfo={0x42, 0xc269, 0x79bd}}) lseek(r5, 0x3, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x42) mkdir(&(0x7f0000000180)='./file1\x00', 0x83) fcntl$setlease(r10, 0x400, 0x0) fremovexattr(r9, &(0x7f0000000140)=@known='system.posix_acl_default\x00') 586.065542ms ago: executing program 1 (id=206): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'ip6tnl0\x00', @remote}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4000850) 584.375277ms ago: executing program 1 (id=207): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x9e8, 0x0, 0xa, 0x148, 0x8d8, 0x60, 0x970, 0x2a8, 0x2a8, 0x970, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x850, 0x8b8, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x3ff, 0x1}, {0x9}, {0x1, 0x3}, {}, {0x3, 0x3}, {0x4e, 0x2}, {0x25a5}, {0x0, 0x1}, {0x7}, {0x8001, 0x1}, {0xe, 0x3}], [{0x8, 0x80}, {0x8, 0x3a16}, {0x8, 0x8}, {0x5, 0x8}, {0x100, 0x8}, {0x5, 0x9}, {0x9, 0x421d}, {0x7, 0x5}, {0x6, 0x80000001}, {0x4, 0x7f}, {0x6, 0xb52}], 0x1, 0xb}, {[{0x4, 0x3}, {0x6, 0x3}, {0x80000001, 0x2}, {0xd, 0x1}, {0x21}, {0xfffffff9, 0x2}, {0x37}, {0x6, 0x2}, {0x6e318da7}, {0xff, 0x2}, {0x700000, 0x2}], [{0x5, 0x4}, {0x4, 0x1}, {0x0, 0x81}, {0x7, 0x4}, {0x8, 0x4}, {0x0, 0x9}, {0x8, 0x2}, {0xa, 0x46f}, {0x8, 0x9}, {0x9ae, 0x400}, {0x400, 0x6}], 0x8, 0x2}, {[{0x8}, {0x3, 0x3}, {0x8, 0x2}, {0x3, 0x1}, {0x8}, {0x7, 0x1}, {0x3, 0x3}, {0x8cc, 0x1}, {0x5a, 0x2}, {0x3, 0x2}, {0x4, 0x3}], [{0x5, 0xc00}, {0x4, 0xffff785e}, {0x0, 0x1}, {0x3}, {0x2, 0x3bb2}, {0x8, 0x56}, {0xf68, 0x1}, {0x4, 0x80000001}, {0xffff, 0x2a}, {0x401, 0x2}, {0x1, 0x4a8}], 0x0, 0x4}, {[{0xb}, {0x1ff, 0x2}, {0x80000001, 0x3}, {0x81, 0x2}, {0x52, 0x2}, {0x7, 0x1}, {0x6}, {0x1, 0x2}, {0x40, 0x2}, {0x4, 0x3}, {0x400, 0x2}], [{0x7, 0x2}, {0x5b, 0x1}, {0x0, 0x84b}, {0x195c}, {0x10000000}, {0x400, 0x2}, {0x68a, 0x5}, {0x101, 0x4}, {0x2c}, {0xfff, 0x4}, {0x6, 0x4}], 0x8, 0x3}, {[{0xc}, {0x71d}, {0x428}, {0x2, 0x2}, {0x7, 0x2}, {0x9, 0x2}, {0x80000000}, {0x23b}, {0x2, 0x3}, {0xfffffff7}, {0x6, 0x1}], [{0xe8, 0x4}, {0x7, 0x5}, {0xa, 0xac}, {0x8, 0xff}, {0x2, 0x2}, {0x7e7}, {0x0, 0x800}, {0x6, 0x8}, {0x6, 0xc}, {0x3, 0xc0000000}, {0x3c, 0x64e}], 0xa, 0xa}, {[{0x6, 0x1}, {0x0, 0x2}, {0x800, 0x2}, {0x8, 0x1}, {0x0, 0x1}, {0x4}, {0x789e, 0x1}, {0x5}, {0x226, 0x3}, {0x3, 0x2}, {0x65, 0x2}], [{0x71e, 0xd}, {0x6, 0x3}, {0x7, 0x501}, {0x7f, 0x10}, {0x1, 0xffffff7f}, {0x2, 0x9}, {0x6, 0x7036}, {0xf8a, 0x106}, {0x6, 0x1a}, {0x3, 0xc}, {0x8, 0x200}], 0xb, 0x2}, {[{0x0, 0x1}, {0x4358, 0x1}, {0x5, 0x1}, {0x6}, {0x8000, 0x2}, {0xa, 0x3}, {0x3, 0x2}, {0xbda, 0x1}, {0x5, 0x3}, {0x86e0, 0x3}, {0x7fffffff}], [{0xffffffff, 0x1}, {0x9, 0xe72f}, {0x9, 0xfffffff8}, {0x33, 0x8}, {0x5, 0x8}, {0x80000000, 0x94fc}, {0x600000, 0x8}, {0x1, 0x8}, {0x4, 0xfffffcff}, {0x8, 0xb}, {0x277}], 0x0, 0x3}, {[{0xf}, {0xff, 0x1}, {0x8, 0x2}, {0x6, 0x1}, {0x7, 0x2}, {0x8, 0x3}, {0x9}, {0xffff, 0x3}, {0x9}, {0x8, 0x1}, {0xff}], [{0x0, 0x8}, {0x300, 0xad}, {0x8, 0x4}, {0x9, 0x5}, {0x3, 0x1}, {0x100, 0x94}, {0x7, 0x9}, {0x4, 0x9}, {}, {0x4}, {0x1, 0x2}], 0x5}, {[{0x3ff, 0x2}, {0x8, 0x2}, {0x9, 0x2}, {0x0, 0x2}, {0x8, 0x3}, {0x9, 0x1}, {0x8000}, {0xffffffff, 0x2}, {0x4}, {0x3}, {0xfffffe00, 0x1}], [{0xe99, 0x6}, {0x200d18e2, 0x4}, {0x8, 0x10}, {0x3, 0xd}, {0x5, 0x3}, {0x4, 0x8}, {0x80000000, 0x3}, {0x7f0f, 0x6}, {0x8, 0xf65ffacc}, {0x2, 0x6}, {0xf, 0x5}], 0x6, 0x6}, {[{0x4}, {0x1, 0x1}, {0x2, 0x2}, {0x1, 0x3}, {0x3, 0x1}, {0xff, 0x2}, {0x5, 0x3}, {0x80000000, 0x3}, {0x0, 0x2}, {0xfffff800}, {0x4}], [{0x4, 0x6}, {0xe, 0x291a}, {0x401, 0xffff}, {0x3ff, 0x4}, {0xe976, 0x600}, {0x9, 0xc4e7}, {0xfffffff7, 0x1000}, {0x10, 0xfffffff9}, {0x4, 0x4}, {0x2, 0x8000}, {0x0, 0x3}], 0x5, 0x6}, {[{0x9, 0x2}, {0x1b, 0x1}, {0x4}, {0xe64a, 0x2}, {0x4, 0x3}, {0x3, 0x3}, {0x7, 0x1}, {0x1}, {0x80000001, 0x1}, {0x6, 0x1}, {0x400, 0x3}], [{0x6, 0x10000}, {0x1a002663, 0x69}, {0x8, 0x3}, {0xebb8, 0xe0}, {0x1, 0x8}, {0x1000, 0x3}, {0x5, 0x3}, {0x3, 0x3ff}, {0x7ff, 0x1ff}, {0x8, 0x2}, {0x6, 0x6642}], 0x2, 0xb}], 0x0, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x8000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0xa48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="d40000001b00010027bd7000fbdbdf2500000000000000000000000000000001000000000000000000000000000000014e2100044e2400030a00008089000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="010000000000008069040000000000000100000000000000d30000000000000000000000020000800600000000000000010000000000000000000100000000000100000000000000feffffffffffffff0101000000000000ff07000000000000fb000000bd6b6e00020000010000000007000000000000000a0010"], 0xd4}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='cramfs\x00', 0x800, 0x0) 528.342384ms ago: executing program 1 (id=208): syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x2, @void}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x80, 0x20, 0xe, 0x1, {{0x3a, 0x4, 0x3, 0x3, 0xe8, 0x65, 0x0, 0x2, 0x4, 0x0, @remote, @empty, {[@ssrr={0x89, 0x13, 0x49, [@empty, @empty, @local, @empty]}, @timestamp_addr={0x44, 0x2c, 0xfb, 0x1, 0xe, [{@multicast1, 0x71cb}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@rand_addr=0x64010100, 0x7}, {@private=0xa010101, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff0c}]}, @cipso={0x86, 0x46, 0xffffffffffffffff, [{0x7, 0xf, "3f453c11efdef13bbbac20dcb1"}, {0x0, 0x10, "1b28cc0e284d35abacd89ae668d3"}, {0x3, 0xe, "e49cdba244d51f0ff9f41977"}, {0x7, 0xb, "714a64e352249389c8"}, {0x0, 0x8, "143fbb89ba16"}]}, @timestamp_addr={0x44, 0xc, 0x68, 0x1, 0xa, [{@private=0xa010102, 0xff}]}, @cipso={0x86, 0x2c, 0x1, [{0x6, 0x5, "21db92"}, {0x4, 0x11, "af3a4dbe04265af4a89a7b1747c206"}, {0x7, 0x7, "b9b4971ba6"}, {0x1, 0x6, "7ee6cb22"}, {0x1, 0x3, '2'}]}, @timestamp_prespec={0x44, 0x14, 0x5c, 0x3, 0x9, [{@broadcast, 0x7}, {@rand_addr=0x64010102, 0xb}]}, @end]}}}}}) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f0000000040)={0x3b, &(0x7f0000000200)=[{0x20, '\x00', @buffer={"785f629b000bc36e4c47ceeef4e988279ccb9ce37f092b150598374457bf103b", 0x20}, 0x9}]}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0x48, 0x29, 0x4, {0x4, 0x5, '\x00', [@generic={0xfe, 0x11, "f4a4a3142ee1e12b9826287997a6b33d89"}, @generic={0x80, 0x4, "09e12e5f"}, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit={{0x14}}, @hopopts={{0x30, 0x29, 0x36, {0x5e, 0x2, '\x00', [@generic={0xff}, @pad1, @pad1, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}]}}}], 0xa8}}], 0x1, 0x810) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000081) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000280)={@empty}, &(0x7f00000002c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2e, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x67, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x4) 524.339621ms ago: executing program 1 (id=209): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) r1 = epoll_create(0x8000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000002c00)={{r0, &(0x7f0000002080)='/proc/bus/input/devices\x00', 0x82400, &(0x7f00000020c0)={@align=0x3, {0x0, 0x6, 0x5, 0x100}}, 0xfffffff4, &(0x7f0000002140), &(0x7f0000002180)=0x7}, 0xa, &(0x7f0000002ac0)=[{0x1, 0x9, &(0x7f00000021c0)='r\xf1[%}\x00', &(0x7f0000002200)="5e6c3b1b0a2c884fc88c98674c786ce7b16d2454bf27e080cb1bf70a159c947e3354aa120674a4e6a40c8fbdec4deab269709744d0b34b8cc25908ecda8973f000fc007230e81d0980861ce0f9b1e62e49defdc396e3922fad1f99f0bee0d28b0486c4ddf84dff83270d6d1367714300eb1a0dbf6f562522974c4466064566282756ca30fd51c1d29b8309c752bc8e2c71ee4d627caf9050f531ead97b42531ca6c23ac7c64f7e71c88e13d25a21de4762e77c3ac777b90799a4b3596168eb06f88885ac5b3d31821f1f057499d002b37cd2050f549d8ba8cd91df069cf2bbfef8f6f7c927aa73266c6aee88acb09ef365e97b5f80", 0xf5, 0x10}, {0x2, 0x10000, &(0x7f0000002300)='tmpfs\x00', &(0x7f0000002340)="24044467e63211a32ca0f9079c7598cf56b28b2efae87822759a9b88fbe02a56a5e0cb6f148ef229c2d899a587888b44a45208fba70ce0053334f6570c899bef481946", 0x43, 0xa}, {0x1, 0xfffffffd, &(0x7f00000023c0)=')@{\x00', &(0x7f0000002400)="994f4b03524895ad45ed4c1b59189fecace79a8e2671d09c27cf58b4e3087b1a7b49de5591ae9b2317fb3051f97d836de7aed10ee87a91cf85bd25f8eee1e6d3153ad4e072464096a262c4dd0a393324fc106caeea92c709a10fe3bf1ff72d966db71ad05853d6c1c67548ca52824ba7f9bbe7964e0745c5c7398244d96dcaf9e10e6de875303bd43f50561a0fe3108f204b0f10271977f8", 0x98, 0x18}, {0x0, 0x2, &(0x7f00000024c0)='-\x00', &(0x7f0000002500)="d087bb83f2674da9d47b05a13b1c7c41c41bca09dc2dd9ae0f42acea9806181e1878627c2ceec239e659c001b85a13eeb101e8072b6323732a0a4e0980c8251f1cfeeb0140f7cb179fd4bea0b62c4348e78f03dddc26114a107f3d5cdac13f967f60ae5de35f2acceb", 0x69}, {0x0, 0x7, &(0x7f0000002580)='/proc/bus/input/devices\x00', 0xfffffffffffffffe}, {0x1, 0x8001, &(0x7f00000025c0)='/proc/bus/input/devices\x00', &(0x7f0000002600)="ce6bffa65a645a8944e9d6e72fe6563c4841f3d9b784978d7dd29d798f5846945db114f0d82e32c965aeef1d48ee68093a2498aa0f65ee3763962cce32dbf8efecd170c94998e16efbbd0ba0bc486aaa9d81bacf51191ba237d355d75aca97baf0c269888163ff41cf9158ec7db3ec9498f2e968fcba240313bb40eed4c91f1ac2fe95554b25ce80b17abb8ff81dfbe77090c3c8", 0x94, 0x2610ffe02ae74d19}, {0x1, 0x1ff, &(0x7f00000026c0)='/proc/bus/input/devices\x00', &(0x7f0000002700)="b8acf4be4bab444a222477a1c031d50c450d0c70cb09a53bad7ba97ad0c195b4ce41b3cc25c50017f6343b51b53e2912e6a8bda89526d802a800347367c61f0aa452afec5ad1d9cb7e", 0x49, 0x32}, {0x1, 0x3e, &(0x7f0000002780)='tmpfs\x00', &(0x7f00000027c0)="e3539b5bb7fc1852b72aec8c9d4fbf4280c936a2409a8a8886fc71e3a8d6ea3d663b40e1228322e48dfffd8a7e49b76b38c437475eccd233ce27611f885d13b03c198acafed54b0198ce550767ea9ff273d1833e8a0fc7fb65f37ce07f420d88fc57da0369db5530922372e300ef888683eb6b0764f046c02ac2306dcd663e8b96ce8406b01105db1b135e51c48be78688d92c68cfe5c0fe9d6c300e9bc4694c3d5e13e93164b7a9a7d9d655653d353fb520bc3796f3a45931b716c276a743ad4156d65a3d3403e3a1495038c1a80075fa4005b9", 0xd4, 0x10}, {0x3, 0xa, &(0x7f00000028c0)='/proc/bus/input/devices\x00', &(0x7f0000002900)="a8d40811f2d9c41f8c26cec102a18416aefbb13673b8123b11e440603a472ec969c3600952ff06927c02d92108e6aacec70701b728dfaa80859d831c281a28c9e3a45da7045bc00841945832b421873b4d9ded74c6daae5836fd7ca665f35899f03dd1ced8ca0ecc807ee87f7ffd80f9b21dbc9ce143eb37b47dcb2d5fc5edd891f00dd174ecf4a62bfd9b552619f99403fa3570678fbe71d720db4f73fc815a0fd02ca4cff283c9e98ab41118b80e68e2f09bc316d41903ac9aed390da61aa6e7be2ab2f3a2b5552a805ca01456ba2a7eb696187760719959d3894f096fc901b27d37f893f5", 0xe6, 0x28}, {0x2, 0x7, &(0x7f0000002a00)=']\x00', &(0x7f0000002a40)="be45d9bcba5e905379f3199f12b72d8740c906f79056b770c5ca7a2176368bae467663997e894c2dd786125987e155a807c7f069a041128bfd7eb362d290f45e4bf51f7090a0079798ad826c2c", 0x4d, 0x10}]}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x84000, 0x0) 458.561467ms ago: executing program 1 (id=210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netdevsim0\x00'}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r8, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r9, 0xae80, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x4000) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x79, 0xac}, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3ff, 0x2}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xffe0}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x40000000}, @TCA_U32_SEL={0x24, 0x5, {0xa, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x1, 0xb}]}}]}}]}, 0x5c}}, 0x404c004) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000900000087"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r10, 0x0, &(0x7f0000001700)=""/49}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r10, 0x0, &(0x7f0000001700)=""/53}, 0x20) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r11, 0x401c2103, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0x3, 0xa}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x9a8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000000030000010900020073797a310000000000000000000000000000d899f77820167e53ae5d884d77022fe5f140c214b70faebcfe36e7c87be3f4f7acea2e696efb0b74833d3f031abbd084884d3779e095fc93f196beb6d206183ee73f2d70ab4782050a5f98e950fc351b432cd825d73cfafe732b9e3dda4d3c87706da0c9bf4da1725fa94e4f28320270934bcf6bedfa9be58a875284082d8f9440ae485e3fbc88236ac0d8d3823785df714b11b0831cc55f76a7b291a89ebb6600"], 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x60004040) 457.657218ms ago: executing program 0 (id=211): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1816c1, 0x1ff) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x800, 0x22400) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000080)={0x9, 0x0, 0x2019, 0x2, 0x0, {0x2, 0x4}, 0x1}) close(r0) execve(&(0x7f0000000380)='./file1\x00', 0x0, 0xfffffffffffffffe) 398.342527ms ago: executing program 0 (id=212): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x2, 0x2}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0xfffffffc}}, 0x10) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) open_tree(0xffffffffffffffff, 0x0, 0x1002) r5 = io_uring_setup(0x3075, &(0x7f0000001740)={0x0, 0x644a, 0x10, 0x3, 0x2b4}) io_uring_setup(0x17b2, &(0x7f0000004040)={0x0, 0x2a43, 0x21, 0x2, 0x284, 0x0, r5}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@local, 0x0, 0x5, 0x0, 0xc98, 0xa, 0x10, 0x10, 0x0, 0x0, 0xee01}, {0x4000000, 0x7f, 0x10000000007, 0x3, 0x0, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0x656e, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, r4, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r9, 0x4b31, &(0x7f0000000580)) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x44, r1, 0x917, 0x70bd2c, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0) 397.984839ms ago: executing program 0 (id=213): r0 = socket$netlink(0x10, 0x3, 0xa) (async) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000180)={0x0, &(0x7f0000000080)=[@cpuid={0x64, 0x18, {0xb, 0x1}}], 0x18}) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r5, 0x5411, &(0x7f00000000c0)) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000480)=@newsa={0xf0, 0x10, 0x200, 0x70bd2a, 0x25dfdbfe, {{@in=@remote, @in6=@empty, 0x4e21, 0x9, 0x4e22, 0x97, 0x2, 0x0, 0xa0, 0x16}, {@in=@remote, 0x4d6, 0xff}, @in6=@loopback, {0x4, 0x9, 0x0, 0x1, 0x4d7, 0x7ff, 0x2, 0x10001}, {0x7f, 0x4, 0x10001, 0x1}, {0xffff, 0x9, 0xf}, 0x70bd2b, 0x3504, 0x2, 0x4, 0x10}}, 0xf0}}, 0x4040) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r6, &(0x7f00000001c0)=""/200, 0xc8) 248.053407ms ago: executing program 0 (id=214): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000080)={0xffffffe4, 0x7d2b33e2}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000000c0)={0x6, 0x7, 0xa, 0xfffffff8}, 0x10) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000100)="c4708ac453e7c84723ae3c17d0853c3c061cae321e058cef8eb4a97c29a3ddc1decc392f660c93070707aa041394bed90370cc9028650ff34653d577fd629152b124bf0dcc74b4d157d56aca4c14bbc33f7f1ca3a049afbdb36ee1d39f57bb53dc7bb377830420bf67c815c900787a16cc23da6c1f189796a1e94c8400c8d9f5ac7197a1be31155c6234bfd4e69fa61fcd372d9fbaab8ac4f10a02c10bf78e7b27ef2701dcddb75c81cd4ce5610d30e0368fff843a9343867149d425ae8c0f0e8b55e92f3af295006d892250367313c3cc488f", 0xd3}, {&(0x7f0000000200)="a3242e8cbb11b426568a0d0a7fac196498e40c480f55fcbf67e7369f483fa0228a9bd48d06e9ed0fd34f7fb0d041145f13e7a1a6f687f94fa636c652fe8861ec0cee71c752007db374c51d79f85f5c96c15b1d", 0x53}, {&(0x7f0000000280)="60aaf242e1237b3084d9c1239b19203c8c2a08df51f3f81ee19978d9468a8eb7390b30bdfbf7701668bf186fb1b115ca52f724934a1d6c1fa92871ae79fa7d7a3ab95b11c8381a0c4976cdee5ac90024d5590a49895e2e9e7e5e17fc8b3086cef1596d6f5bfa3b05abb73a6054874c", 0x6f}, {&(0x7f0000000300)="265db5f8b1b9a6120bf2592cf70d40096cc1bdc1e7e7b50ee294b58034c69566aa295d0117454d4f73353f668fec4c124a3ed5564e27f2a08d8b9d1f62734866d5b96b88986a85dc36f34fa40bd4b72a726725707cc6c6c10c145727c148acda239b34bb15f7027a2ce7e1a874813c3fc19c56f5d3f2fb362c16c76e21c178026a0020657dff51bb", 0x88}, {&(0x7f00000003c0)="212aae60494cfb6c5b77597573f106aedf66ed0c8a0ed80f252dc59d643c96c6f99c66492bf02c65410cf2554e8daa689776f64088def52d86bbc4fe30073b1eedc8e5508e332aaff8508a243518ff622377a71d177a3ade02688019dd7dd4f605cd13b994330dba55ef56038d525e4f60a8833083ab1e931b08077a60899135be", 0x81}, {&(0x7f0000000480)="704c66ddd29c510356d0be603a009664fb5c483d70386aebd5ce495dca49353e0f7d764d376e365de5e6151f8ceb90b52508f7af6df70d5808fdefbf5cf34813ee85a2f09927531510a127fd526517cc45a69a574d7258a37e1d8ee1a40c2356ddbb5a2a3440508b46019e30b6ce220d4b4d4cf140240de49037999fe9bf58348cc63649b0e64853f4df500a3d33ded5b6d45905eb0791bd0e57fe4fbe3462ac747245775865cde827001024cde28a761c7b6fdd3583205268352f505e1e7046e6bfa4482c0e1cb00b1f790370ee4699c45451a4a758ac21e59035af1793d8", 0xdf}], 0x6) getpeername$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000006c0)=0x14) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000740)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r0, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x63, &(0x7f0000000880)=[{}], 0x8, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x72, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xd, 0x6, &(0x7f0000000600)=@raw=[@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x26}, @generic={0x9, 0x7, 0x1, 0x5, 0x2}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x8, '\x00', r3, @sock_ops=0x3, r4, 0x8, &(0x7f0000000780)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, r6, r0, 0x2, &(0x7f0000000ac0)=[r0, r0], &(0x7f0000000b00)=[{0x2, 0x2, 0x10, 0xc}, {0x3, 0x4, 0xb, 0xa}], 0x10, 0xfffffbff}, 0x94) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000c00)={0x4, "33c42eb38fd3d4157a9275676d3185d252cafaeb27e9d8975e5e8eba2ee171a9b3c256135cc4d2da7be7d332d2ee298a609441287ff9f3ed034e249e10c9a607181da0290d36f3562436df6334548ac4a27c8144d494a820fc36cf709d584ca8b10776534fca78d77387139ccdf150593f3e4f3a909a4cc01fac62db31ac4970f644ac37cbe6352f7dc6b1e5825a2dde2fafe275473cdb564c7058045332345dbef72a3adb41dddcad4ab33f9887ba5c6b1784aa1289be0c0f8e171ee65dca532339e7318ff00d8054b72293decd0cf4056540c5acb4aebedc78113bfd4a78b214d5a560c2e75807f852a79694f415f3a8029dcb0e4a2ef73255ac772d4ecf1b3e28129e9b3ced7a3bbf48d25e1652cb9e8716d35be780f5fa0bc7247f0009d7e2ac2657455ad532725f777cd0703caf6b274757c7d094c256e180bc10eacfb8eba13b572db16abb80d38867e9996e370a1cb32473ff7b6ecb28809941e88fda84afa1029c521689dac05fe2cd8d77daf10a0e4bcf26b80d4d55f9594227ce397bd4a24126033d115387fdd9e858541aaa438046d91eb49b5080c005dae1004d1737123db37b6443dc5f43661abdd4bf5dc50f867b55cf7ddb298bb8003ca2f0b4f53a26e97aa06c7e2a63cf204465895d696ba613aa5d32093ce717a9f0b8153c235f0b475e820188fe27364d042bb482237da7ed124ea11c0734602ee314de"}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000e40)) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000e80)={0x6, 0x0, [{0x1, 0x5, 0x1, 0x0, @irqchip={0x2, 0x5}}, {0xf, 0x3, 0x1, 0x0, @adapter={0x401, 0x3, 0x6, 0x1000, 0x42d}}, {0x98, 0x2, 0x0, 0x0, @msi={0x4, 0x5, 0xfffffff0, 0x1ff}}, {0x7, 0x1, 0x0, 0x0, @irqchip={0xa, 0x7}}, {0x4, 0x5, 0x0, 0x0, @msi={0x3, 0x9, 0x4, 0x9}}, {0x1, 0x3, 0x1, 0x0, @irqchip={0x7d5, 0x9}}]}) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000fc0)=0x84) ioctl$KVM_RUN(r1, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x10) ioctl$KVM_SET_PIT(r7, 0x8048ae66, &(0x7f0000001000)={[{0x2, 0x0, 0x5, 0xc, 0x19, 0x2, 0x2, 0x9, 0x4, 0x6, 0x7f, 0x9, 0xc3c4}, {0x9, 0x8, 0x1, 0xd, 0x4, 0x81, 0x8, 0xb, 0x4, 0x7, 0xf, 0x6, 0x1000}, {0x8, 0xd, 0x1, 0x4, 0xa1, 0x99, 0x71, 0x2, 0x5, 0x4, 0x5, 0xe, 0xe}], 0x7fffffff}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x3c, r8, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xf, 0x33}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x18, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040044}, 0x4000) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f00000011c0)={{r1}, "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"}) r9 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r9, &(0x7f0000002280)={&(0x7f00000021c0)={0x2c, 0x4, r5, 0x3d}, 0x10, &(0x7f0000002240)=[{&(0x7f0000002200)="7e7674d45170fe2914a1f2db7219ebff193a01381900548697e764321616a030b9e2", 0x22}], 0x1, 0x0, 0x0, 0x8000}, 0x20000010) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002300), r4) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r10, &(0x7f00000023c0)={&(0x7f00000022c0), 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x3c, r11, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x3c}}, 0x4) r12 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x40) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002440), r4) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000002500)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x38, r13, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffff71f}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2c3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$KVM_IRQ_LINE_STATUS(r12, 0xc008ae67, &(0x7f0000002540)={0x4, 0x100}) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000002800)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002600)={0x1bc, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x3}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20008004}, 0x48) 178.213141ms ago: executing program 0 (id=215): r0 = socket$igmp(0x2, 0x3, 0x2) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x162) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x88, 0x10, 0x401, 0x400000, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5a4}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x3c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}, @IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0xd5}, @IFLA_BRPORT_MCAST_TO_UCAST={0x5}, @IFLA_BRPORT_MCAST_TO_UCAST={0x5}, @IFLA_BRPORT_PROTECT={0x5}, @IFLA_BRPORT_BCAST_FLOOD={0x5, 0x1e, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 107.836665ms ago: executing program 0 (id=216): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x72) r3 = openat$pmem0(0xffffff9c, &(0x7f00000000c0), 0x165101, 0x0) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_clone3(&(0x7f0000000340)={0x80800000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, &(0x7f00000002c0)}, 0x58) r5 = dup(r3) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) ioctl$TCSBRK(r5, 0x5409, 0x8a4a) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) clock_adjtime(0x5, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x9, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0xfbfffffffffffffc, 0x7, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') setsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, &(0x7f00000001c0), 0x4) 0s ago: executing program 3 (id=217): mount$cgroup2(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x80, &(0x7f00000003c0)=ANY=[@ANYBLOB="6d656d6f72795f682e9d12664fc0b7f706756765746c625f6163636f756e74696e672c6d656d6f72795f7265637572731009d49dcba4aa5124f4ec5401e40a34ce48fa2396d64f780c36197f2272bf9ae7b8c9ce470d2fdcda54b0421be17157a2fa5bae8908a5fcefd76ec5acb80b1f3c7ec8311abb7a43ef63722e36905f89e85e035ffdbc11704c3ef5cb7271eafb7c4d0f19590f3a7d78c31825e710e4248cdb9d0831a13457001c300cb64b2eb08e6d2eba19ced9e09df0122661b139c7f3d193a5eccf0f4a4f9fd9e6020bedcbfad197e7976377fda6cd4ee7165d879d814159941cdf0dbde286"]) r0 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000000)={0x0, 0xb8, 0x2, &(0x7f00000004c0)={0xfa, "f4e1a230be8f46463fb1a5f1b46f44eaa25e485b747a07678118bc00"}}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r4}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0xb0}}, 0x0) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) ioctl$FE_SET_PROPERTY(r7, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000200)}) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x89901) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x89101) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000200), 0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) ioctl$I2C_SMBUS(r12, 0x720, &(0x7f0000000380)={0x0, 0xa, 0x6, &(0x7f00000002c0)={0x4, "ba9ee696ca29373a22f0ce6bc429698dc4e501fb722505e8ab0f709334e0605a86"}}) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) move_mount(r8, 0x0, r9, 0x0, 0x46) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup(r13) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) kernel console output (not intermixed with test programs): [ 53.089280][ T40] audit: type=1400 audit(1770952654.053:60): avc: denied { rlimitinh } for pid=5902 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.096299][ T40] audit: type=1400 audit(1770952654.053:61): avc: denied { siginh } for pid=5902 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:18327' (ED25519) to the list of known hosts. [ 54.889116][ T40] audit: type=1400 audit(1770952655.873:62): avc: denied { name_bind } for pid=5910 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 54.926099][ T40] audit: type=1400 audit(1770952655.913:63): avc: denied { execute } for pid=5911 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 54.935030][ T40] audit: type=1400 audit(1770952655.913:64): avc: denied { execute_no_trans } for pid=5911 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 57.000662][ T40] audit: type=1400 audit(1770952657.983:65): avc: denied { mounton } for pid=5911 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.009588][ T40] audit: type=1400 audit(1770952657.993:66): avc: denied { mount } for pid=5911 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.011692][ T5911] cgroup: Unknown subsys name 'net' [ 57.128452][ T5911] cgroup: Unknown subsys name 'cpuset' [ 57.133217][ T5911] cgroup: Unknown subsys name 'rlimit' [ 57.331229][ T5915] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 57.978001][ T5911] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.161984][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 61.161996][ T40] audit: type=1400 audit(1770952662.143:82): avc: denied { execmem } for pid=5920 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 61.322733][ T40] audit: type=1400 audit(1770952662.303:83): avc: denied { create } for pid=5924 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.329110][ T40] audit: type=1400 audit(1770952662.303:84): avc: denied { create } for pid=5925 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.340168][ T40] audit: type=1400 audit(1770952662.303:85): avc: denied { read write } for pid=5925 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.342038][ T5929] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.349086][ T40] audit: type=1400 audit(1770952662.303:86): avc: denied { read write } for pid=5924 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.349113][ T40] audit: type=1400 audit(1770952662.303:87): avc: denied { open } for pid=5925 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.349133][ T40] audit: type=1400 audit(1770952662.303:88): avc: denied { open } for pid=5924 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.349154][ T40] audit: type=1400 audit(1770952662.303:89): avc: denied { ioctl } for pid=5925 comm="syz-executor" path="socket:[7198]" dev="sockfs" ino=7198 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.373333][ T5938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.382598][ T5929] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.384988][ T5938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.386565][ T5929] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.388588][ T5938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.389168][ T5937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.390036][ T5937] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.390416][ T5937] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.391105][ T5937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.391357][ T5929] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.393285][ T5940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.393805][ T5938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.394273][ T5938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.397024][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.398805][ T5940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.401174][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.401791][ T5937] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.403716][ T5940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.406666][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.409101][ T40] audit: type=1400 audit(1770952662.393:90): avc: denied { read } for pid=5924 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.436632][ T40] audit: type=1400 audit(1770952662.393:91): avc: denied { open } for pid=5924 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.722157][ T5932] chnl_net:caif_netlink_parms(): no params data found [ 61.774612][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 61.798156][ T5924] chnl_net:caif_netlink_parms(): no params data found [ 61.841432][ T5925] chnl_net:caif_netlink_parms(): no params data found [ 61.863016][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.866300][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.868989][ T5932] bridge_slave_0: entered allmulticast mode [ 61.871787][ T5932] bridge_slave_0: entered promiscuous mode [ 61.894633][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.896987][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.899603][ T5932] bridge_slave_1: entered allmulticast mode [ 61.903848][ T5932] bridge_slave_1: entered promiscuous mode [ 61.994754][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.009898][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.036986][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.039848][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.042978][ T5933] bridge_slave_0: entered allmulticast mode [ 62.046394][ T5933] bridge_slave_0: entered promiscuous mode [ 62.050014][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.052828][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.055067][ T5933] bridge_slave_1: entered allmulticast mode [ 62.057801][ T5933] bridge_slave_1: entered promiscuous mode [ 62.079640][ T5925] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.082220][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.084746][ T5925] bridge_slave_0: entered allmulticast mode [ 62.087338][ T5925] bridge_slave_0: entered promiscuous mode [ 62.099461][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.102475][ T5924] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.106056][ T5924] bridge_slave_0: entered allmulticast mode [ 62.108728][ T5924] bridge_slave_0: entered promiscuous mode [ 62.118287][ T5932] team0: Port device team_slave_0 added [ 62.120146][ T5925] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.122631][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.125267][ T5925] bridge_slave_1: entered allmulticast mode [ 62.128420][ T5925] bridge_slave_1: entered promiscuous mode [ 62.151804][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.155153][ T5924] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.158059][ T5924] bridge_slave_1: entered allmulticast mode [ 62.161830][ T5924] bridge_slave_1: entered promiscuous mode [ 62.185780][ T5932] team0: Port device team_slave_1 added [ 62.190193][ T5925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.198544][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.222779][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.228542][ T5925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.234449][ T5924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.269608][ T5924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.273773][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.276568][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.286248][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.299747][ T5933] team0: Port device team_slave_0 added [ 62.309153][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.311916][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.322419][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.328842][ T5925] team0: Port device team_slave_0 added [ 62.332595][ T5933] team0: Port device team_slave_1 added [ 62.348652][ T5924] team0: Port device team_slave_0 added [ 62.352121][ T5925] team0: Port device team_slave_1 added [ 62.368589][ T5924] team0: Port device team_slave_1 added [ 62.383074][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.385980][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.396180][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.401836][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.404958][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.415564][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.440619][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.443716][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.454225][ T5925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.476504][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.478798][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.487479][ T5924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.492286][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.495346][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.505979][ T5925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.524177][ T5932] hsr_slave_0: entered promiscuous mode [ 62.526476][ T5932] hsr_slave_1: entered promiscuous mode [ 62.529191][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.531477][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.540850][ T5924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.623385][ T5925] hsr_slave_0: entered promiscuous mode [ 62.626424][ T5925] hsr_slave_1: entered promiscuous mode [ 62.629308][ T5925] debugfs: 'hsr0' already exists in 'hsr' [ 62.631665][ T5925] Cannot create hsr debugfs directory [ 62.638358][ T5933] hsr_slave_0: entered promiscuous mode [ 62.641353][ T5933] hsr_slave_1: entered promiscuous mode [ 62.644440][ T5933] debugfs: 'hsr0' already exists in 'hsr' [ 62.646816][ T5933] Cannot create hsr debugfs directory [ 62.673894][ T5924] hsr_slave_0: entered promiscuous mode [ 62.676167][ T5924] hsr_slave_1: entered promiscuous mode [ 62.678289][ T5924] debugfs: 'hsr0' already exists in 'hsr' [ 62.680130][ T5924] Cannot create hsr debugfs directory [ 63.000187][ T5932] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.010599][ T5932] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.016576][ T5932] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.027528][ T5932] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.070315][ T5933] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.077795][ T5933] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.083679][ T5933] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.089635][ T5933] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.163935][ T5925] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.173725][ T5925] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.180977][ T5925] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.187624][ T5925] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.264154][ T5924] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.273804][ T5924] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.278461][ T5924] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.283941][ T5924] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.313508][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.360746][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.369094][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.387641][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.390889][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.404777][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.407866][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.430851][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.434228][ T5282] Bluetooth: hci1: command tx timeout [ 63.434415][ T5282] Bluetooth: hci3: command tx timeout [ 63.437125][ T63] Bluetooth: hci2: command tx timeout [ 63.442822][ T63] Bluetooth: hci0: command tx timeout [ 63.454924][ T5925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.461538][ T91] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.464660][ T91] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.489741][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.492863][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.521677][ T5924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.529356][ T5925] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.549373][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.551749][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.561528][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.563961][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.579928][ T5924] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.603545][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.606577][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.625335][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.628127][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.686359][ T5924] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.707749][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.729517][ T5932] veth0_vlan: entered promiscuous mode [ 63.734617][ T5932] veth1_vlan: entered promiscuous mode [ 63.750558][ T5932] veth0_macvtap: entered promiscuous mode [ 63.757177][ T5932] veth1_macvtap: entered promiscuous mode [ 63.766217][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.779630][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.788115][ T91] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.796359][ T91] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.807620][ T91] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.811518][ T91] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.838053][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.845683][ T5925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.865009][ T5924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.891614][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.900037][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.926033][ T5933] veth0_vlan: entered promiscuous mode [ 63.941705][ T5933] veth1_vlan: entered promiscuous mode [ 63.948048][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.950869][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.959095][ T5925] veth0_vlan: entered promiscuous mode [ 63.979114][ T5925] veth1_vlan: entered promiscuous mode [ 63.993305][ T5924] veth0_vlan: entered promiscuous mode [ 64.000861][ T5933] veth0_macvtap: entered promiscuous mode [ 64.007001][ T5933] veth1_macvtap: entered promiscuous mode [ 64.019350][ T5924] veth1_vlan: entered promiscuous mode [ 64.021370][ T5932] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.026095][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.037467][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.050418][ T5925] veth0_macvtap: entered promiscuous mode [ 64.062102][ T5925] veth1_macvtap: entered promiscuous mode [ 64.072213][ T5924] veth0_macvtap: entered promiscuous mode [ 64.080055][ T91] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.087127][ T91] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.089982][ T91] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.095889][ T5924] veth1_macvtap: entered promiscuous mode [ 64.099186][ T91] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.113842][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.139051][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.149157][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.154425][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.163575][ T46] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.178881][ T46] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.189079][ T46] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.191847][ T46] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.207757][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.217342][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.220378][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.225704][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.228424][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.229929][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.272199][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.275720][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.293225][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.302934][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.326378][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.329194][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.338340][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.341161][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.357336][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.360591][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.575043][ T6040] capability: warning: `syz.0.10' uses 32-bit capabilities (legacy support in use) [ 64.660543][ T6047] syzkaller0: entered promiscuous mode [ 64.662486][ T6047] syzkaller0: entered allmulticast mode [ 64.758165][ T6049] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 64.764298][ T6049] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 64.769350][ T6049] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 64.775304][ T6049] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 64.973294][ T6060] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.012552][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'. [ 65.022507][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17'. [ 65.039013][ T6060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.044793][ T6060] bond1: (slave bond0): making interface the new active one [ 65.048873][ T6060] bond1: (slave bond0): Enslaving as an active interface with an up link [ 65.052181][ T6063] warning: `syz.3.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 65.062517][ T6063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18'. [ 65.191381][ T6076] binder: 6069:6076 ioctl c0306201 200000000540 returned -22 [ 65.195624][ T6076] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 65.223364][ T6075] mmap: syz.3.22 (6075) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 65.327587][ T6079] Malformed UNC in devname [ 65.327587][ T6079] [ 65.329905][ T6079] CIFS: VFS: Malformed UNC in devname [ 65.464285][ T6085] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.496610][ T6085] @0: renamed from bond_slave_1 (while UP) [ 65.528501][ T6083] netlink: 'syz.3.24': attribute type 15 has an invalid length. [ 65.535806][ T63] Bluetooth: hci3: command tx timeout [ 65.535862][ T5282] Bluetooth: hci0: command tx timeout [ 65.538155][ T63] Bluetooth: hci1: command tx timeout [ 65.539874][ T5282] Bluetooth: hci2: command tx timeout [ 65.822691][ T6104] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 65.824866][ T6104] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 65.833192][ T6104] vhci_hcd vhci_hcd.0: Device attached [ 65.835783][ T6105] vhci_hcd: unknown pdu 1 [ 65.836112][ T6104] Bluetooth: MGMT ver 1.23 [ 65.840575][ T46] vhci_hcd vhci_hcd.3: stop threads [ 65.842648][ T46] vhci_hcd vhci_hcd.3: release socket [ 65.844691][ T46] vhci_hcd vhci_hcd.3: disconnect device [ 65.999792][ T6114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.31'. [ 66.011332][ T6110] syz.1.31 uses obsolete (PF_INET,SOCK_PACKET) [ 66.031580][ T6117] gfs2: not a GFS2 filesystem [ 66.094186][ T6120] netlink: 24 bytes leftover after parsing attributes in process `syz.2.33'. [ 66.154387][ T6129] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 66.157919][ T6129] overlayfs: overlapping lowerdir path [ 66.185157][ T40] kauditd_printk_skb: 102 callbacks suppressed [ 66.185173][ T40] audit: type=1400 audit(1770952667.173:194): avc: denied { create } for pid=6128 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 66.195961][ T40] audit: type=1400 audit(1770952667.173:195): avc: denied { setopt } for pid=6128 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 66.227396][ T6133] netlink: 24 bytes leftover after parsing attributes in process `syz.1.38'. [ 66.229859][ T40] audit: type=1400 audit(1770952667.213:196): avc: denied { create } for pid=6134 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.230714][ T6133] netlink: 20 bytes leftover after parsing attributes in process `syz.1.38'. [ 66.231266][ T6135] tipc: Started in network mode [ 66.231278][ T6135] tipc: Node identity 4, cluster identity 4711 [ 66.231284][ T6135] tipc: Node number set to 4 [ 66.249073][ T40] audit: type=1400 audit(1770952667.213:197): avc: denied { write } for pid=6134 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.257390][ T40] audit: type=1400 audit(1770952667.223:198): avc: denied { connect } for pid=6134 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 66.286383][ T6137] netlink: 76 bytes leftover after parsing attributes in process `syz.0.40'. [ 66.289609][ T6137] netlink: 28 bytes leftover after parsing attributes in process `syz.0.40'. [ 66.296113][ T40] audit: type=1400 audit(1770952667.283:199): avc: denied { getopt } for pid=6138 comm="syz.1.41" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.346917][ T40] audit: type=1400 audit(1770952667.333:200): avc: denied { mount } for pid=6143 comm="syz.0.42" name="/" dev="configfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 66.355809][ T40] audit: type=1400 audit(1770952667.333:201): avc: denied { write } for pid=6143 comm="syz.0.42" name="/" dev="configfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.389657][ T40] audit: type=1400 audit(1770952667.373:202): avc: denied { unmount } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 66.402830][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 66.417387][ T40] audit: type=1400 audit(1770952667.403:203): avc: denied { create } for pid=6148 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.561751][ T9] usb 7-1: config 4 has an invalid interface number: 28 but max is 0 [ 66.565230][ T9] usb 7-1: config 4 has no interface number 0 [ 66.570485][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 66.573689][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 66.576243][ T9] usb 7-1: Product: syz [ 66.577603][ T9] usb 7-1: Manufacturer: syz [ 66.579286][ T9] usb 7-1: SerialNumber: syz [ 66.593104][ T9] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:4.28/input/input6 [ 66.665450][ T6164] cifs: Bad value for 'gid' [ 66.666988][ T6164] cifs: Bad value for 'gid' [ 66.668539][ T6164] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 66.677255][ T6164] CIFS mount error: No usable UNC path provided in device string! [ 66.677255][ T6164] [ 66.680637][ T6164] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 66.846517][ T5316] bcm5974 7-1:4.28: could not read from device [ 66.853430][ T5316] bcm5974 7-1:4.28: could not read from device [ 66.861970][ T6127] bcm5974 7-1:4.28: could not read from device [ 66.864219][ T9] usb 7-1: USB disconnect, device number 2 [ 67.434534][ T6189] binder: BINDER_SET_CONTEXT_MGR already set [ 67.437568][ T6189] binder: 6188:6189 ioctl 4018620d 200000000100 returned -16 [ 67.589544][ T6193] Bluetooth: MGMT ver 1.23 [ 67.593207][ T63] Bluetooth: hci1: command tx timeout [ 67.602789][ T63] Bluetooth: hci2: command tx timeout [ 67.603042][ T5940] Bluetooth: hci3: command tx timeout [ 67.606361][ T5282] Bluetooth: hci0: command tx timeout [ 67.650184][ T6210] binder: Bad value for 'max' [ 67.684781][ T6212] team_slave_0: entered promiscuous mode [ 67.687113][ T6212] team_slave_1: entered promiscuous mode [ 67.690187][ T6212] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 67.811782][ T34] IPVS: starting estimator thread 0... [ 67.890700][ T6244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.71'. [ 67.924071][ T6233] IPVS: using max 29 ests per chain, 69600 per kthread [ 67.945420][ T6254] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.958011][ T6254] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 68.074497][ T6269] wg1: entered promiscuous mode [ 68.076109][ T6269] wg1: entered allmulticast mode [ 68.121738][ T6273] netlink: 'syz.3.80': attribute type 1 has an invalid length. [ 68.134026][ T6273] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.137671][ T6267] tipc: Enabling of bearer rejected, failed to enable media [ 68.184517][ T6279] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 68.192612][ T6279] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 68.208074][ T6282] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 68.403491][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 68.449839][ T6299] netlink: 'syz.3.88': attribute type 29 has an invalid length. [ 68.452366][ T6299] netlink: 'syz.3.88': attribute type 3 has an invalid length. [ 68.554516][ T9] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 68.557183][ T9] usb 5-1: config 0 has no interface number 0 [ 68.559255][ T9] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 68.563841][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 68.567991][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 68.572473][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 68.576487][ T9] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 68.579158][ T9] usb 5-1: Product: syz [ 68.580588][ T9] usb 5-1: SerialNumber: syz [ 68.589559][ T9] usb 5-1: config 0 descriptor?? [ 68.594877][ T9] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 68.598537][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input7 [ 68.677613][ T6306] Zero length message leads to an empty skb [ 68.779448][ T6317] PKCS8: Unsupported PKCS#8 version [ 68.793755][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 68.795490][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 68.970875][ T6337] PKCS7: Unknown OID: [4] 5.25.43204.122 [ 68.971369][ T6338] PKCS7: Unknown OID: [4] 5.25.43204.122 [ 68.975510][ T6338] PKCS7: Only support pkcs7_signedData type [ 68.976044][ T6337] PKCS7: Only support pkcs7_signedData type [ 69.055972][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 69.056034][ T5996] usb 5-1: USB disconnect, device number 2 [ 69.058357][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 69.072475][ T5996] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 69.113679][ T6342] misc userio: The device must be registered before sending interrupts [ 69.190093][ T6350] fuse: Bad value for 'fd' [ 69.191720][ T6351] fuse: Bad value for 'fd' [ 69.205432][ T6350] netlink: 'syz.1.103': attribute type 7 has an invalid length. [ 69.208052][ T6350] netlink: 'syz.1.103': attribute type 8 has an invalid length. [ 69.210640][ T6352] xt_hashlimit: size too large, truncated to 1048576 [ 69.210956][ T6351] netlink: 'syz.1.103': attribute type 7 has an invalid length. [ 69.217822][ T6351] netlink: 'syz.1.103': attribute type 8 has an invalid length. [ 69.253035][ T6355] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 69.674226][ T5282] Bluetooth: hci2: command tx timeout [ 69.674266][ T5940] Bluetooth: hci1: command tx timeout [ 69.681245][ T6389] team0 (unregistering): Port device team_slave_0 removed [ 69.683136][ T5940] Bluetooth: hci0: command tx timeout [ 69.684654][ T5282] Bluetooth: hci3: command tx timeout [ 69.687398][ T6389] team0 (unregistering): Port device team_slave_1 removed [ 69.771490][ T6395] openvswitch: netlink: EtherType 50a is less than min 600 [ 70.049505][ T6416] Invalid ELF header type: 2 != 1 [ 70.081150][ T6418] trusted_key: syz.3.126 sent an empty control message without MSG_MORE. [ 70.157701][ T6423] netlink: 'syz.3.127': attribute type 1 has an invalid length. [ 70.157774][ T6424] netlink: 'syz.3.127': attribute type 1 has an invalid length. [ 70.170259][ T6423] bond2: entered promiscuous mode [ 70.172177][ T6423] 8021q: adding VLAN 0 to HW filter on device bond2 [ 70.176884][ T6424] __nla_validate_parse: 7 callbacks suppressed [ 70.176901][ T6424] netlink: 28 bytes leftover after parsing attributes in process `syz.3.127'. [ 70.181708][ T6424] bond2: entered allmulticast mode [ 70.192583][ T6424] bond2: (slave bridge1): making interface the new active one [ 70.195440][ T6424] bridge1: entered promiscuous mode [ 70.197255][ T6424] bridge1: entered allmulticast mode [ 70.201479][ T6424] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 70.202839][ T71] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 70.212905][ T6423] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 70.247998][ T6427] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=6427 comm=syz.3.128 [ 70.354445][ T71] usb 5-1: unable to get BOS descriptor or descriptor too short [ 70.357275][ T71] usb 5-1: not running at top speed; connect to a high speed hub [ 70.360441][ T71] usb 5-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.364786][ T71] usb 5-1: config 1 interface 0 has no altsetting 0 [ 70.368296][ T71] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 70.371145][ T71] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.374169][ T71] usb 5-1: Product: syz [ 70.375562][ T71] usb 5-1: Manufacturer: syz [ 70.377137][ T71] usb 5-1: SerialNumber: syz [ 70.607496][ T71] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 70.614503][ T71] usb 5-1: USB disconnect, device number 3 [ 70.745728][ T6442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 70.980902][ T6466] netlink: 'syz.3.140': attribute type 10 has an invalid length. [ 71.002027][ T6466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.006175][ T6466] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 71.010477][ T6466] netlink: 6 bytes leftover after parsing attributes in process `syz.3.140'. [ 71.136249][ T6474] Invalid ELF header type: 31659 != 1 [ 71.222773][ T10] delete_channel: no stack [ 71.241695][ T6482] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 71.263176][ T6482] overlayfs: missing 'workdir' [ 71.268837][ T40] kauditd_printk_skb: 128 callbacks suppressed [ 71.268847][ T40] audit: type=1400 audit(1770952672.253:332): avc: denied { read } for pid=6483 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.323003][ T40] audit: type=1400 audit(1770952672.313:333): avc: denied { prog_run } for pid=6483 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 71.367111][ T40] audit: type=1400 audit(1770952672.353:334): avc: denied { mount } for pid=6494 comm="syz.1.148" name="/" dev="autofs" ino=12364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 71.606354][ T40] audit: type=1400 audit(1770952672.593:335): avc: denied { ioctl } for pid=6516 comm="syz.1.155" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11402 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 71.668081][ T40] audit: type=1400 audit(1770952672.653:336): avc: denied { map_read map_write } for pid=6516 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 71.816001][ T6517] netlink: 20 bytes leftover after parsing attributes in process `syz.1.155'. [ 72.129793][ T40] audit: type=1400 audit(1770952673.113:337): avc: denied { setopt } for pid=6534 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.140139][ T40] audit: type=1400 audit(1770952673.123:338): avc: denied { getopt } for pid=6534 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.181935][ T40] audit: type=1400 audit(1770952673.163:339): avc: denied { setopt } for pid=6538 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.316335][ T40] audit: type=1400 audit(1770952673.303:340): avc: denied { create } for pid=6543 comm="syz.2.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 72.324972][ T40] audit: type=1400 audit(1770952673.313:341): avc: denied { write } for pid=6543 comm="syz.2.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 72.362848][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 72.514067][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 72.517495][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.520859][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.524134][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 72.529684][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 72.532817][ T10] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 72.535393][ T10] usb 5-1: Manufacturer: syz [ 72.542171][ T10] usb 5-1: config 0 descriptor?? [ 72.755544][ T10] usbhid 5-1:0.0: can't add hid device: -32 [ 72.758046][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 72.805354][ T6565] CIFS mount error: No usable UNC path provided in device string! [ 72.805354][ T6565] [ 72.808674][ T6565] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 72.817233][ T6566] overlayfs: failed to clone upperpath [ 72.863730][ T6572] vxcan1: entered allmulticast mode [ 72.866021][ T6572] netlink: 20 bytes leftover after parsing attributes in process `syz.1.167'. [ 72.890233][ T6572] netlink: 20 bytes leftover after parsing attributes in process `syz.1.167'. [ 73.052827][ T29] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 73.214779][ T29] usb 7-1: unable to get BOS descriptor or descriptor too short [ 73.218386][ T29] usb 7-1: not running at top speed; connect to a high speed hub [ 73.223725][ T29] usb 7-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.227902][ T29] usb 7-1: config 1 interface 0 has no altsetting 0 [ 73.232964][ T29] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 73.236923][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.240784][ T29] usb 7-1: Product: syz [ 73.243373][ T29] usb 7-1: Manufacturer: syz [ 73.246301][ T29] usb 7-1: SerialNumber: syz [ 73.386611][ T6601] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.177'. [ 73.455983][ T29] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 73.465253][ T29] usb 7-1: USB disconnect, device number 3 [ 73.996320][ T6623] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 73.999397][ T6623] overlayfs: failed to set xattr on upper [ 74.002467][ T6623] overlayfs: ...falling back to redirect_dir=nofollow. [ 74.006131][ T6623] overlayfs: ...falling back to index=off. [ 74.008548][ T6623] overlayfs: ...falling back to uuid=null. [ 74.015095][ T6623] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 74.047897][ T6627] netlink: 'syz.2.183': attribute type 1 has an invalid length. [ 74.050604][ T6627] netlink: 'syz.2.183': attribute type 1 has an invalid length. [ 74.053235][ T6627] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.183'. [ 74.168560][ T6637] netlink: 'syz.1.187': attribute type 12 has an invalid length. [ 74.436552][ T10] libceph: connect (1)[c::]:6789 error -101 [ 74.438836][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 74.531505][ T5685] libceph: connect (1)[c::]:6789 error -101 [ 74.534639][ T5685] libceph: mon0 (1)[c::]:6789 connect error [ 74.704311][ T10] libceph: connect (1)[c::]:6789 error -101 [ 74.706964][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 74.793316][ T5685] libceph: connect (1)[c::]:6789 error -101 [ 74.797361][ T5685] libceph: mon0 (1)[c::]:6789 connect error [ 74.870161][ T6661] (syz.3.193,6661,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 74.873806][ T6661] (syz.3.193,6661,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 75.105310][ T6676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.108924][ T6676] batadv_slave_0: entered promiscuous mode [ 75.111535][ T6676] batadv_slave_0: entered allmulticast mode [ 75.155603][ T29] usb 5-1: USB disconnect, device number 4 [ 75.218465][ T6689] ======================================================= [ 75.218465][ T6689] WARNING: The mand mount option has been deprecated and [ 75.218465][ T6689] and is ignored by this kernel. Remove the mand [ 75.218465][ T6689] option from the mount to silence this warning. [ 75.218465][ T6689] ======================================================= [ 75.223426][ T10] libceph: connect (1)[c::]:6789 error -101 [ 75.233192][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 75.303579][ T5685] libceph: connect (1)[c::]:6789 error -101 [ 75.306342][ T5685] libceph: mon0 (1)[c::]:6789 connect error [ 75.324427][ T6652] ceph: No mds server is up or the cluster is laggy [ 75.324493][ T6649] ceph: No mds server is up or the cluster is laggy [ 75.693502][ T5685] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 75.842811][ T5685] usb 7-1: Using ep0 maxpacket: 8 [ 75.845634][ T5685] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 75.849013][ T5685] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 75.851831][ T5685] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.855808][ T5685] usb 7-1: config 0 descriptor?? [ 75.963257][ T6709] netlink: 28 bytes leftover after parsing attributes in process `syz.1.206'. [ 75.991234][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'. [ 76.066530][ T5685] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 76.247371][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.249673][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.313792][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 76.313804][ T40] audit: type=1400 audit(1770952677.303:377): avc: denied { bind } for pid=6699 comm="syz.2.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 76.322779][ T40] audit: type=1400 audit(1770952677.303:378): avc: denied { write } for pid=6732 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 76.393131][ T6735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.402043][ T6735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.406745][ T6737] netlink: 20 bytes leftover after parsing attributes in process `syz.0.215'. [ 76.590088][ T40] audit: type=1400 audit(1770952677.573:379): avc: denied { mount } for pid=6739 comm="syz.0.216" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 76.594195][ T6740] overlayfs: missing 'lowerdir' [ 76.600245][ T6744] cgroup2: Unknown parameter 'memory_h.fOugetlb_accounting' [ 76.604770][ T40] audit: type=1400 audit(1770952677.573:380): avc: denied { mounton } for pid=6739 comm="syz.0.216" path="/49/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 76.628020][ T6744] ================================================================== [ 76.631787][ T6744] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 [ 76.635616][ T6744] Read of size 8 at addr ffff88802e879618 by task syz.3.217/6744 [ 76.640804][ T6744] [ 76.641940][ T6744] CPU: 3 UID: 0 PID: 6744 Comm: syz.3.217 Tainted: G L syzkaller #0 PREEMPT(full) [ 76.641972][ T6744] Tainted: [L]=SOFTLOCKUP [ 76.641977][ T6744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.641984][ T6744] Call Trace: [ 76.641999][ T6744] [ 76.642007][ T6744] dump_stack_lvl+0x100/0x190 [ 76.642026][ T6744] print_report+0x156/0x4c9 [ 76.642053][ T6744] ? __virt_addr_valid+0x81/0x620 [ 76.642068][ T6744] ? __phys_addr+0xe8/0x180 [ 76.642091][ T6744] ? dvb_device_open+0x33f/0x3b0 [ 76.642104][ T6744] kasan_report+0xdf/0x1a0 [ 76.642117][ T6744] ? dvb_device_open+0x33f/0x3b0 [ 76.642141][ T6744] ? __pfx_dvb_device_open+0x10/0x10 [ 76.642153][ T6744] dvb_device_open+0x33f/0x3b0 [ 76.642175][ T6744] ? __pfx_dvb_device_open+0x10/0x10 [ 76.642187][ T6744] chrdev_open+0x234/0x6a0 [ 76.642200][ T6744] ? __pfx_chrdev_open+0x10/0x10 [ 76.642225][ T6744] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 76.642241][ T6744] do_dentry_open+0x6d8/0x1660 [ 76.642264][ T6744] ? __pfx_chrdev_open+0x10/0x10 [ 76.642277][ T6744] vfs_open+0x82/0x3f0 [ 76.642303][ T6744] path_openat+0x208c/0x31a0 [ 76.642318][ T6744] ? __pfx_path_openat+0x10/0x10 [ 76.642344][ T6744] do_file_open+0x20e/0x430 [ 76.642358][ T6744] ? __pfx_do_file_open+0x10/0x10 [ 76.642385][ T6744] ? alloc_fd+0x476/0x790 [ 76.642399][ T6744] ? do_getname+0x191/0x390 [ 76.642426][ T6744] do_sys_openat2+0x10d/0x1e0 [ 76.642441][ T6744] ? __pfx_do_sys_openat2+0x10/0x10 [ 76.642469][ T6744] __x64_sys_openat+0x12d/0x210 [ 76.642485][ T6744] ? __pfx___x64_sys_openat+0x10/0x10 [ 76.642511][ T6744] ? xfd_validate_state+0x129/0x190 [ 76.642529][ T6744] do_syscall_64+0x106/0xf80 [ 76.642566][ T6744] ? clear_bhb_loop+0x40/0x90 [ 76.642592][ T6744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.642606][ T6744] RIP: 0033:0x7fd24815c84e [ 76.642615][ T6744] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 76.642637][ T6744] RSP: 002b:00007fd249043b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 76.642649][ T6744] RAX: ffffffffffffffda RBX: 00007fd2490446c0 RCX: 00007fd24815c84e [ 76.642657][ T6744] RDX: 0000000000000002 RSI: 00007fd249043c00 RDI: ffffffffffffff9c [ 76.642675][ T6744] RBP: 00007fd249043c00 R08: 0000000000000000 R09: 0000000000000000 [ 76.642682][ T6744] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 76.642688][ T6744] R13: 00007fd248416038 R14: 00007fd248415fa0 R15: 00007ffc5b7edcf8 [ 76.642699][ T6744] [ 76.642702][ T6744] [ 76.744747][ T6744] Allocated by task 6665: [ 76.746443][ T6744] kasan_save_stack+0x30/0x50 [ 76.748324][ T6744] kasan_save_track+0x14/0x30 [ 76.749578][ T40] audit: type=1400 audit(1770952677.723:381): avc: denied { unmount } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 76.750227][ T6744] __kasan_kmalloc+0xaa/0xb0 [ 76.760049][ T6744] __kmalloc_noprof+0x301/0x850 [ 76.762010][ T6744] security_inode_init_security+0x113/0x370 [ 76.764343][ T6744] shmem_symlink+0x138/0x9b0 [ 76.766166][ T6744] vfs_symlink+0x178/0x4d0 [ 76.767973][ T6744] filename_symlinkat+0x2a6/0x560 [ 76.770039][ T6744] __x64_sys_symlinkat+0x9c/0xe0 [ 76.772018][ T6744] do_syscall_64+0x106/0xf80 [ 76.773928][ T6744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.776275][ T6744] [ 76.777253][ T6744] Freed by task 6665: [ 76.778850][ T6744] kasan_save_stack+0x30/0x50 [ 76.780765][ T6744] kasan_save_track+0x14/0x30 [ 76.782675][ T6744] kasan_save_free_info+0x3b/0x70 [ 76.784708][ T6744] __kasan_slab_free+0x5f/0x80 [ 76.786617][ T6744] kfree+0x1aa/0x670 [ 76.788187][ T6744] security_inode_init_security+0x2bf/0x370 [ 76.790554][ T6744] shmem_symlink+0x138/0x9b0 [ 76.792422][ T6744] vfs_symlink+0x178/0x4d0 [ 76.794252][ T6744] filename_symlinkat+0x2a6/0x560 [ 76.796252][ T6744] __x64_sys_symlinkat+0x9c/0xe0 [ 76.798162][ T6744] do_syscall_64+0x106/0xf80 [ 76.800009][ T6744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.802387][ T6744] [ 76.803343][ T6744] The buggy address belongs to the object at ffff88802e879600 [ 76.803343][ T6744] which belongs to the cache kmalloc-256 of size 256 [ 76.808758][ T6744] The buggy address is located 24 bytes inside of [ 76.808758][ T6744] freed 256-byte region [ffff88802e879600, ffff88802e879700) [ 76.814094][ T6744] [ 76.815062][ T6744] The buggy address belongs to the physical page: [ 76.817603][ T6744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e878 [ 76.821096][ T6744] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 76.824435][ T6744] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 76.827426][ T6744] page_type: f5(slab) [ 76.829042][ T6744] raw: 00fff00000000040 ffff88801b842b40 dead000000000100 dead000000000122 [ 76.832426][ T6744] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 76.835798][ T6744] head: 00fff00000000040 ffff88801b842b40 dead000000000100 dead000000000122 [ 76.839213][ T6744] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 76.842662][ T6744] head: 00fff00000000001 ffffea0000ba1e01 00000000ffffffff 00000000ffffffff [ 76.846066][ T6744] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 76.849470][ T6744] page dumped because: kasan: bad access detected [ 76.852008][ T6744] page_owner tracks the page as allocated [ 76.854307][ T6744] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 21047489489, free_ts 0 [ 76.861792][ T6744] post_alloc_hook+0x1e1/0x250 [ 76.863736][ T6744] get_page_from_freelist+0x111d/0x3140 [ 76.865526][ T6744] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 76.867389][ T6744] new_slab+0xa6/0x6e0 [ 76.868724][ T6744] refill_objects+0x26b/0x400 [ 76.870486][ T6744] __pcs_replace_empty_main+0x19f/0x600 [ 76.872690][ T6744] __kmalloc_cache_noprof+0x493/0x6f0 [ 76.874857][ T6744] bus_add_driver+0x92/0x5b0 [ 76.876717][ T6744] driver_register+0x1e2/0x360 [ 76.878633][ T6744] do_one_initcall+0x11d/0x690 [ 76.880551][ T6744] kernel_init_freeable+0x6e5/0x790 [ 76.882697][ T6744] kernel_init+0x1f/0x1e0 [ 76.884434][ T6744] ret_from_fork+0x754/0xd80 [ 76.886293][ T6744] ret_from_fork_asm+0x1a/0x30 [ 76.888220][ T6744] page_owner free stack trace missing [ 76.890353][ T6744] [ 76.891326][ T6744] Memory state around the buggy address: [ 76.893551][ T6744] ffff88802e879500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 76.896708][ T6744] ffff88802e879580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 76.899853][ T6744] >ffff88802e879600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.903038][ T6744] ^ [ 76.905004][ T6744] ffff88802e879680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.908165][ T6744] ffff88802e879700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 76.911313][ T6744] ================================================================== [ 76.915885][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 76.920847][ T6744] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 76.923201][ T6744] CPU: 1 UID: 0 PID: 6744 Comm: syz.3.217 Tainted: G L syzkaller #0 PREEMPT(full) [ 76.926521][ T6744] Tainted: [L]=SOFTLOCKUP [ 76.927905][ T6744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.931041][ T6744] Call Trace: [ 76.932094][ T6744] [ 76.933071][ T6744] dump_stack_lvl+0x100/0x190 [ 76.934557][ T6744] vpanic+0x20d/0x630 [ 76.935817][ T6744] panic+0xd1/0xd1 [ 76.937001][ T6744] ? __pfx_panic+0x10/0x10 [ 76.938434][ T6744] ? dvb_device_open+0x33f/0x3b0 [ 76.940015][ T6744] ? preempt_schedule_common+0x42/0xc0 [ 76.941635][ T6744] check_panic_on_warn.cold+0x19/0x34 [ 76.943304][ T6744] end_report.part.0+0x3a/0x90 [ 76.944815][ T6744] kasan_report.cold+0xe/0x18 [ 76.946291][ T6744] ? dvb_device_open+0x33f/0x3b0 [ 76.947814][ T6744] ? __pfx_dvb_device_open+0x10/0x10 [ 76.949443][ T6744] dvb_device_open+0x33f/0x3b0 [ 76.950928][ T6744] ? __pfx_dvb_device_open+0x10/0x10 [ 76.952596][ T6744] chrdev_open+0x234/0x6a0 [ 76.954021][ T6744] ? __pfx_chrdev_open+0x10/0x10 [ 76.955584][ T6744] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 76.957508][ T6744] do_dentry_open+0x6d8/0x1660 [ 76.958979][ T6744] ? __pfx_chrdev_open+0x10/0x10 [ 76.960554][ T6744] vfs_open+0x82/0x3f0 [ 76.961843][ T6744] path_openat+0x208c/0x31a0 [ 76.963339][ T6744] ? __pfx_path_openat+0x10/0x10 [ 76.964947][ T6744] do_file_open+0x20e/0x430 [ 76.966360][ T6744] ? __pfx_do_file_open+0x10/0x10 [ 76.967918][ T6744] ? alloc_fd+0x476/0x790 [ 76.969289][ T6744] ? do_getname+0x191/0x390 [ 76.970710][ T6744] do_sys_openat2+0x10d/0x1e0 [ 76.972202][ T6744] ? __pfx_do_sys_openat2+0x10/0x10 [ 76.973883][ T6744] __x64_sys_openat+0x12d/0x210 [ 76.975432][ T6744] ? __pfx___x64_sys_openat+0x10/0x10 [ 76.977142][ T6744] ? xfd_validate_state+0x129/0x190 [ 76.978803][ T6744] do_syscall_64+0x106/0xf80 [ 76.980279][ T6744] ? clear_bhb_loop+0x40/0x90 [ 76.981806][ T6744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.983665][ T6744] RIP: 0033:0x7fd24815c84e [ 76.985091][ T6744] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 76.991094][ T6744] RSP: 002b:00007fd249043b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 76.993671][ T6744] RAX: ffffffffffffffda RBX: 00007fd2490446c0 RCX: 00007fd24815c84e [ 76.996087][ T6744] RDX: 0000000000000002 RSI: 00007fd249043c00 RDI: ffffffffffffff9c [ 76.998515][ T6744] RBP: 00007fd249043c00 R08: 0000000000000000 R09: 0000000000000000 [ 77.001186][ T6744] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 77.003736][ T6744] R13: 00007fd248416038 R14: 00007fd248415fa0 R15: 00007ffc5b7edcf8 [ 77.006226][ T6744] [ 77.008174][ T6744] Kernel Offset: disabled [ 77.009923][ T6744] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:17:57 Registers: info registers vcpu 0 CPU#0 RAX=00000000000dfddf RBX=ffffffff8e4975c0 RCX=ffffffff8b7ebc75 RDX=0000000000000000 RSI=ffffffff8de617e9 RDI=ffffffff8c1a95a0 RBP=0000000000000000 RSP=ffffffff8e407e00 R8 =0000000000000001 R9 =ffffed100d486755 R10=ffff88806a433aab R11=0000000000000000 R12=fffffbfff1c92eb8 R13=0000000000000000 R14=ffffffff90d84dd0 R15=0000000000000000 RIP=ffffffff8b7ea5df RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d639d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4d2e9e96c0 CR3=000000002241f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d2f74d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee8149926 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee8149926 00007ffee814992c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d2ea32e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d2ea32e86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d2ea32fea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d2ea32e78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d2ebea4a0 00007f4d2ebea480 00007f4d2ebea488 00007f4d2ebea4b8 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d2ebea498 00007f4d2ebea468 00007f4d2ebea4a0 00007f4d2ebea480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 000000000000004c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffff888012d4f000 RBX=0000000000001000 RCX=ffffc90025d89000 RDX=ffffc9000874f000 RSI=ffffffff8b7e19ac RDI=ffff88802cec4900 RBP=0000000000001000 RSP=ffffc90003cff658 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffffc9000874f000 R13=ffff888012d4f000 R14=ffff888012d50000 R15=ffffc90008750000 RIP=ffffffff8b7e19c7 RFL=00010286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4d2f8fa6c0 ffffffff 00c00000 GS =0000 ffff8880d649d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c275b68 CR3=000000002241f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8c074d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff0efb49a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff0efb49a6 00007fff0efb49ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8bfa32e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8bfa32e86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8bfa32fea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8bfa32e78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8bfbea4a0 00007fe8bfbea480 00007fe8bfbea488 00007fe8bfbea4b8 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8bfbea498 00007fe8bfbea468 00007fe8bfbea4a0 00007fe8bfbea480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e4032603c324cda 03b7e1aec5337951 cb5ecac7af1ed539 4420dd659b44ef9d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 254b3652f7def4b0 7b23608d3f5b54e4 b0cd52d84e281230 fc0583159ad39d63 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e57ac91f5cb58e0d c975e6b61765efe0 c41d17ca93392866 58418b66d1eaa82a ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 986b50a04b65cff0 7b7971dff5866b57 f3d6167166ff88d5 4f5ee8c64b1faa66 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff90d84dd8 RBX=0000000000000002 RCX=ffffffff820ef5cd RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff90d84dd0 RBP=ffffc90000187d48 RSP=ffffc90000187cd0 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8272518a RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d659d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd248185640 CR3=000000003579f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d6cfead20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d6cfead20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558b3ebf18 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 66129d2e685f7972 6f6d656d03d4080f 8003003270756f72 676301ffffffffff ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30656c69662f2e01 ffffffffffffffff ef08048003001000 0f80040401438600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0144b00002001080 030079616c726576 6f01ffffffffffff ffffef0802800300 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0108100007800406 0800000800010000 0a08060a016d9a00 08000780033c8004 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 108004040158f000 30656c69662f2e01 ffffffffffffffff ef083c8003007375 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 622f2e01ffffffff fffffffff3081080 03058004020103c2 007375622f2e01ff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffffffffff3 0805800310800400 1000028004048004 0010000a0144b000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff856de265 RDI=ffffffff9b447ce0 RBP=ffffffff9b447ca0 RSP=ffffc900031ff2e8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000036 R14=0000000000000010 R15=ffffffff856de200 RIP=ffffffff856de28f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fd2490446c0 ffffffff 00c00000 GS =0000 ffff8880d669d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2caaa8 CR3=000000005ffce000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000f8000000 Opmask01=0000000001000001 Opmask02=0000000002fefefe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5b7ee1e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5b7ee1e6 00007ffc5b7ee1ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd248232e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd248232e86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd248232fea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd248232e78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000030646e 65746e6f72662f30 726574706164612f 6276642f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000013474d 46574d4c51450c13 514657534247420c 4155470c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2483ea498 00007fd2483ea468 00007fd2483ea4a0 00007fd2483ea480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 86e2bd0ddf1c9459 41819d875d16e74e cda6fd776397e797 d1facbed0b02e6d9 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9f4f4a0fcfeca593 d1f3c739b1612612 f09de0d9ce19ba2e 6d8eb02e4bb60c30 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c005734a131089d db8c24e410e72518 c3787d3a0f59190f 4d7cfbea7172cbf5 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000