last executing test programs: 2m0.097040637s ago: executing program 0 (id=1122): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r1) (async) socket$kcm(0x29, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) r3 = accept$alg(r2, 0x0, 0x0) accept(r3, 0x0, 0x0) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r6], 0x44}}, 0x0) (async) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200000, 0x3) utimensat(r7, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000240)=ANY=[@ANYBLOB="7fffffffff22770050e4760cc20bb63e89cdd426a9f2e6b189648d8c61042c6a"], 0x8) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) r10 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r10, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) (async) connect$pptp(r10, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 2m0.037636669s ago: executing program 0 (id=1123): r0 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) r1 = dup(r0) copy_file_range(r0, &(0x7f0000000100)=0xb76, r1, 0x0, 0x2aad109b, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BLKGETDISKSEQ(r2, 0x80081280, &(0x7f0000000180)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000100100000d"], 0x18}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r1, 0x8010aebc, &(0x7f0000000480)={0x6000, 0x10000}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="0e62b9f77895a0eec38875ca79f343408a584ae9c687e3dd4bc6d85246a2da3f57c1c2bd23d9b46e43ca2f06a82886e3b4bc04e43467fa8c298c50f9d70485d8307f936b466105dfc66959b5559b899a1386d7c7c7c64c80081a709fb588fe4a6825e8dd9034751bf9a086ee1689ac28"], 0x24}], 0x1}, 0x4048004) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="891b73854a6e91602936d02e82cf6e061c000000", @ANYRES32=r5, @ANYBLOB="0200a600"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/76, 0x4c}], 0x1) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a800000000007d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r8 = accept(r7, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000580)="86717cc407d45f89763a78c367222fcaee9235bc405a4cc0dcab8a3c1723cc4f8c3c49c889be174c", 0x28, 0x0, &(0x7f00000005c0)={0xa, 0x4e24, 0x5, @empty, 0x1}, 0x1c) sendmmsg$alg(r8, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6", 0x11}], 0x1}], 0x1, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x0, 0x5, 0x0, 0xa70e23e9bdaf89ed, r1, 0x1000, '\x00', r5, r9, 0x2, 0x1, 0x5, 0x0, @value=r1, @void, @value=r1}, 0x50) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r10, &(0x7f0000000040)={&(0x7f0000000140)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7c}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000629000000370000000c0000000000000056f2fc8a0382849773554b941c1f75fb"], 0x18}, 0x24004800) recvmsg(r8, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r11 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r11, &(0x7f0000000080)=[{&(0x7f0000000340)='L', 0x1}], 0x1, 0x87fffff, 0x7, 0x4) 2m0.036786053s ago: executing program 0 (id=1125): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[]) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$SIOCAX25NOUID(r4, 0x89e3, &(0x7f0000000100)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0x67, &(0x7f0000000300)={&(0x7f00000001c0)={0x138, 0x1, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SYNPROXY={0x44, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x835a}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xfffffff0}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xf61}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7fff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x101}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x200}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x400}, @CTA_LABELS={0x2c, 0x16, 0x1, 0x0, [0xba4, 0xffff, 0x200, 0x100, 0x7fffffff, 0xc, 0xecd3, 0x6, 0x4, 0x1000]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x1}, 0x2000c004) write(r3, &(0x7f0000000080)="29000300010003", 0x7) 1m59.917505695s ago: executing program 0 (id=1127): mkdir(&(0x7f0000000400)='./file0\x00', 0x1f9) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB='huge=always']) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="70010000100033060000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000004000000080010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000000b23030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000100000000000000000000000000000000000000080000000000000029bd7000000000000a000100000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00200002004e2200010000000000000000000000000000000000001c00040002004e2100000000fc020000000000000000000000000001"], 0x170}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, 0x0, 0x20000011) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r2, 0xc17, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r4 = open(&(0x7f00000000c0)='./file0\x00', 0x14927e, 0x16a) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x2) connect$netrom(r5, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) truncate(&(0x7f0000000000)='./bus\x00', 0x7fed) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000030000000000000000000000850000008700000085000000070000009500"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0810", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f000051d000/0x4000)=nil, 0x4000, 0x27fffff, 0x4002011, r4, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x15, 0x21, &(0x7f0000000000)="bbd97387d2a478a102d7a82b266c94aca6f0fda510ca516643bfc43dad346521b3"}) mkdir(&(0x7f0000000400)='./file0\x00', 0x1f9) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB='huge=always']) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="70010000100033060000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000004000000080010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000000b23030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000100000000000000000000000000000000000000080000000000000029bd7000000000000a000100000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00200002004e2200010000000000000000000000000000000000001c00040002004e2100000000fc020000000000000000000000000001"], 0x170}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, 0x0, 0x20000011) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r1) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r2, 0xc17, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) open(&(0x7f00000000c0)='./file0\x00', 0x14927e, 0x16a) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) mkdir(&(0x7f0000000100)='./file1\x00', 0x2) (async) connect$netrom(r5, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) truncate(&(0x7f0000000000)='./bus\x00', 0x7fed) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000030000000000000000000000850000008700000085000000070000009500"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0810", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) mmap(&(0x7f000051d000/0x4000)=nil, 0x4000, 0x27fffff, 0x4002011, r4, 0x0) (async) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x15, 0x21, &(0x7f0000000000)="bbd97387d2a478a102d7a82b266c94aca6f0fda510ca516643bfc43dad346521b3"}) (async) 1m59.726682537s ago: executing program 0 (id=1129): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x9000, @loopback}], 0x1c) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x7a, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6092c01f00442f00fe80000000000000000000dfffffffba00000000000000000000ffff000000002421880b0000000000000057000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)=""/47, &(0x7f0000000040)=0x2f) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000780), 0x2, 0x8000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r4, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r4], &(0x7f0000000200), &(0x7f00000000c0)=[r5], &(0x7f0000000040), 0x0, 0x300}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000004c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7, 0x0, 0xffff, 0x5, 0x800, "c1e28a6304ed7c9ed1723eb0ec84c1fb8b580f36a55c8b956c19afd734dc5a138e70bb8428d874b0375cc1a7e8dfda9020303ef6159044717e578dc8f42fe6bfdd8b8ceb8e2a9c8cafe69ad86702bbe8fca943344b3426aec29c1a7e2ac9387d0e3c74c11d41a9a57795724353c1bf3cbb317b05d2ef25d61bb8eb1b3c558779"}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000580), 0x2df5, 0x10341) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) lseek(r10, 0x600000000000, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x835, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0x9], [0x1, 0x0, 0x0, 0xffffffff], [0x3ff, 0x0, 0x0, 0x4]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000180)={r12, 0x80000, 0xffffffffffffffff}) pread64(r13, &(0x7f0000000300)=""/102, 0x66, 0xe2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000080)={r12}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000000)={r12}) getsockopt$inet6_int(r6, 0x29, 0x1a, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0xd, @dev={0xfe, 0x80, '\x00', 0xf}, 0x4e1}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0xfffff2ee, @remote, 0x5}, @in={0x2, 0x4e22, @remote}], 0x78) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800040010004000000000e60000000000000000", @ANYRES32=0x0, @ANYBLOB="40090000318800000500110007000000"], 0x28}, 0x1, 0x0, 0x0, 0x104}, 0x0) 1m59.482777774s ago: executing program 0 (id=1133): r0 = socket$inet6(0xa, 0x80002, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newaddr={0x3c, 0x14, 0x200, 0x70bd25, 0x25dfdbfc, {0x2, 0x1f, 0x8, 0xff, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x401}, @IFA_LABEL={0x14, 0x3, 'macsec0\x00'}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000240), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@getnexthop={0x20, 0x76, 0xa11, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) pivot_root(&(0x7f00000000c0)='./cgroup\x00', 0x0) 1m59.457615431s ago: executing program 32 (id=1133): r0 = socket$inet6(0xa, 0x80002, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newaddr={0x3c, 0x14, 0x200, 0x70bd25, 0x25dfdbfc, {0x2, 0x1f, 0x8, 0xff, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x401}, @IFA_LABEL={0x14, 0x3, 'macsec0\x00'}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000240), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@getnexthop={0x20, 0x76, 0xa11, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) pivot_root(&(0x7f00000000c0)='./cgroup\x00', 0x0) 1m4.41332869s ago: executing program 1 (id=2224): mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x13801, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc}) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x2ff, [0x5, 0xffffffff], 0x6}, 0x10) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xb) 1m4.412341835s ago: executing program 1 (id=2225): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x61c040, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) (async) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r2, 0x3, 0x4002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000480)={0x14, 0x0, 0x3, 0x401, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8004) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r6, 0xee01, 0x0) (async) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000040)="42d7", 0xfffff, 0xfffffffffffffffe) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) (async) close(0x3) 1m3.889032823s ago: executing program 1 (id=2227): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYBLOB="c1f2a3457c5a6c4727e5a1730132bbdc1ce3d4d7771de96e4015d9e2825da67a468ff812c96d7bdcb33e06d38653294087a499841117d85d17309a3ac48a7d7cbd99099999f380985de17728ce05cc55704afa18fb453ccfa750c92c869e4434eb90868afb37d02951889aa950a235eedc10d22532566fe999244753069017e25a02f770bccab7a2c2dcb0440853f055f96c97e99bd9200c6a3ef5cf87bda956d959970e9a2239166abf00e43138da4dd8e9530ea74bcb3f88f17077c3881aaa4b6d498eca607dbd07b3255d3eb41dce030044cf0cab3035e32f", @ANYRESDEC=r0, @ANYRES64=r0], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) open_by_handle_at(r0, &(0x7f0000000000)=@reiserfs_3={0xc, 0x3, {0x6, 0x64f9, 0x5}}, 0x412080) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000040)={0x6, 'bridge_slave_1\x00', {0x4}, 0x39}) 1m3.798533745s ago: executing program 1 (id=2229): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0xd0f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x60}, 0x28) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x1a4, r4, 0xe701ac47a3d23ecd, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x17e, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00\x91d\xe6,\xd3@I\x17\xf3\xbeeI8bz\xdb\xb8s0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\xacs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=40\xe8R\x83p,J\xca\x85\xcb\xfa:\xdb\xda\x05\xed\xc8\xad\xa2\xfc0C\x9e3\x8e*\xae\x91\xa4\xc7)\xc0\x87\x9b\xee~\xdb\xac\x03\x90\xb1\x05\x81\xb1j\xfaO`\xa7\xa0\xeb\x83\x13 \xc8\x98\xdb\v \x95\x8eD\xc3\xc6:\xcc%\x88\xc7\xa5\xe5\xfc\xccl\x96F_\x92\xa2\xc3\xea@\"\xb1\x1b`o~B\xb4W\xd8\v\xabCBL\x81A\x92D\xd5{K\xf0\xd5\x91\n\x94\x9b\xd9\xdb2E\\\xb1\x90\xf1\xfc\xc1}\x96\xf4\xba3g\xc8\xf7j\xbc\xf1\x11\xe3\x05\xean9M\xeb&\xd2\xdf\xbe\xa1\xe8[\x91\xa5\x90uX\xd0IH!\xe3\x8a9k\x94\xc8\xde\xea\xc6^\x96\xceV\xb2\xcba\x8b\xbc\xe9'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x2}, 0x4000840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)="d8000000180081034e91f783db4cb9040a1d020006007409e8fc55a10a0015000400142603600e120800060000000401a8000800080002000000000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d4e1cace81ed0bffece0b42a9ecbeeccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93000000000000004867edef090d82c399b3b549", 0xd8}], 0x1}, 0x0) 1m3.738376477s ago: executing program 1 (id=2231): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x11d080, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41}) mkdir(&(0x7f0000000100)='./file1/file0\x00', 0x124) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x11d080, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) (async) syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41}) (async) mkdir(&(0x7f0000000100)='./file1/file0\x00', 0x124) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') (async) 1m3.735518955s ago: executing program 1 (id=2232): r0 = socket$inet6(0xa, 0x2, 0x200000) r1 = gettid() rt_sigqueueinfo(r1, 0x36, &(0x7f00000007c0)={0x20, 0x2, 0x4}) syz_pidfd_open(r1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000000)={@mcast1}, 0x14) 48.624535965s ago: executing program 33 (id=2232): r0 = socket$inet6(0xa, 0x2, 0x200000) r1 = gettid() rt_sigqueueinfo(r1, 0x36, &(0x7f00000007c0)={0x20, 0x2, 0x4}) syz_pidfd_open(r1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000000)={@mcast1}, 0x14) 38.388153202s ago: executing program 5 (id=2496): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES32=r1], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x100000}, 0x50) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0xc048aeca, &(0x7f0000000080)) r5 = memfd_create(&(0x7f00000014c0)='e\xf4\x01\x88-\x00\xe96\xec\xaf[Uvy*\v\x12\xf9\x88(\xf0\x82\xf9\xcfF*B\x00a\xe2\xf4r\x99%\xbaq4\x16\xd5\x00+\x98s\x88\x1d@Tl\"\x89\xe9\xa0\x13\x83y\xe6\xaa}k6%\xdcG!\x05\xf7\xa0b\x8a\xda\x91B\x05\xc3\x9c/\x8a\x19\x91\xb9\xfc\xfa\xd33\xc2w7H@\xaaG\xf6\x8d\xd9`\xbc\xb8\xc6\xd6\x80\xf9\x83l\x1c\x8b]}S\xe3\x01\x9a\x85\'\xb2\xbfx\xc8=/d\xdc\xbb\xd6Z \xcd\xfe\x8c\x02/\xa1\xa3-\xf7\x00'/149, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x822000e0}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x20008000) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x9, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x1c, r7, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x10) sendfile(r0, r5, 0x0, 0x8000fb00) 38.232287056s ago: executing program 5 (id=2500): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) (async) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x200000000000000) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x4, 0x2}, 0x18, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_usb_disconnect(r4) (async) syz_usb_disconnect(r4) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000240)={0x14, &(0x7f0000000300)={0x9e038035a25c4640, 0x1, 0xe8, {0xe8, 0x8, "7fea86ebb5c46bb4d947f6421dd34db52b091f397c50f20ad5ff5fbb7b2ba2b3ccd809564c87ab4c6238946c262b0c8436ac6ece256a067374bf4648f5e92e7a186f09f422195acf7d989eb809ea1b21094ef3541d924a97fc7fa22e7b6108cef83477e02e1d81f4b216097f755811560316c909f060404b52b6c288bfa0da7219446d3351262579147fabb1a66551664082d1edcd9fdf2ed0ce18987aef4dcb1acf841291588ac2ccd5e3085e797354c28c309062cf11c1d8c293b6ff1ffd70cca17ac1c35cf4ec6a3ab6d6eb465a979e77a4fbd47b6f9c072bb0f105c2e0b148c64601cf3a"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x1c, &(0x7f0000000400)={0x40, 0x5, 0x6e, "4a0c1dfef34199b2d5900c4df0966abc0eda465e780b90cef104502043537f4369751f25d9c15ab124103a17d8ff14e7938e9766490d5d54e7440c48e9781aecc114c19079964b9f0c2132b406a3a90b6b2d40c86effc0f1908d5c6abd8535dc95e43d049bb40e327383dcf9117f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x8}}) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000040)={0x8003, r2}, 0x0) ioctl$NBD_DISCONNECT(r2, 0xab08) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000140)={r5}) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x4f27, 0xf, 0x3, 0xfffffffe, 0x1, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x7537e112, 0x2, 0x9, 0x6, 0x40000003, 0x89, 0x2, 0xf28, 0x20001e56, 0xb, 0x4, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) (async) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x4f27, 0xf, 0x3, 0xfffffffe, 0x1, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x7537e112, 0x2, 0x9, 0x6, 0x40000003, 0x89, 0x2, 0xf28, 0x20001e56, 0xb, 0x4, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) 36.146655049s ago: executing program 5 (id=2505): times(0xfffffffffffffffe) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r1}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00001f00000000001c00128009000100626f6eb8203277c302592b5ff1ee13103600000000"], 0x3c}}, 0x0) 36.144653329s ago: executing program 5 (id=2506): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file1\x00', 0x80000, 0x108) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000280)='./file1\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x5, 0x7fffffff}]}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r2) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x5}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r4, &(0x7f0000000340)="3efc7e5bec96208118d461b596ae6791ddfbadcb147bce1d8aea975552d6edf320c1e640ef7cc3b2e82d9ba3e732a60377256bc6c695f381900892e8b9549783791af8b44f8a274cca77b4f2a22aafd23957795e72728f82b423de569743ca523e54890711abf18ba0c10d290ff54c973469f7c79fbec51b72d8d434a23a56f859d2d4fa6e37efccbf844e5619e4d3399fac43930eebc04ca0f6270104e86cd113e6c2b5f0d54b4802c5da9f125b7a034a2361a6d8adec64f065a10057d61ddcfd", &(0x7f00000004c0)=""/188}, 0x20) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x81, &(0x7f0000000000)=ANY=[@ANYBLOB="6d708e6c3d6465bf83756c74fc066c1d14950e0b653a2c00"]) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x64, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="85"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) 35.273835779s ago: executing program 5 (id=2515): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002800)="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", 0x306}, {&(0x7f0000002b40)="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", 0x2ae}], 0x2}, 0x8400) (async) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002800)="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", 0x306}, {&(0x7f0000002b40)="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", 0x2ae}], 0x2}, 0x8400) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)="9d", 0x1}], 0x1}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)="9d", 0x1}], 0x1}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x200, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x200, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) (async) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f00000004c0)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r4, 0x80) (async) listen(r4, 0x80) accept$netrom(r4, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89b1, &(0x7f0000000040)={'macvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x44e3763ac5239ba7}}) (async) ioctl$SIOCSIFHWADDR(r5, 0x89b1, &(0x7f0000000040)={'macvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x44e3763ac5239ba7}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000380)) sendmsg$nl_route_sched(r6, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4, {0x2}}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x70}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES8=r8], 0x28c}, 0x1, 0x0, 0x0, 0x5}, 0xc00c085) creat(&(0x7f00000000c0)='./file0\x00', 0x48) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000300)={[0xb0ae, 0xd91, 0x6, 0x9, 0x7, 0x9, 0x7, 0x3ff, 0x377e, 0xff, 0x3, 0x8, 0x100000001, 0x7, 0x9, 0x83], 0x5000, 0x28010}) pipe2$9p(&(0x7f0000000000), 0x0) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r10 = dup(r9) write$P9_RLERRORu(r10, &(0x7f0000000540)=ANY=[], 0x53) (async) write$P9_RLERRORu(r10, &(0x7f0000000540)=ANY=[], 0x53) 34.951647611s ago: executing program 5 (id=2519): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@getpolicy={0x58, 0x15, 0x1, 0x70bd25, 0x25dfdbfb, {{@in=@multicast1, @in=@remote, 0x4e23, 0x0, 0x4e21, 0x9, 0x2, 0x20, 0x80, 0x11}, 0x6e6bb5}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket(0x10, 0x3, 0x0) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2, 0x3}}, 0x2e) (async) ioctl$PPPIOCGL2TPSTATS(r4, 0x8004745a, &(0x7f0000005280)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wg2\x00'}) r6 = dup(r1) (async) r7 = socket$kcm(0x10, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={'\x00', 0x0, 0x0, {0xfffffffffffffff8, 0xffff}, {0x6, 0x2}, 0xab4, [0x5, 0x3, 0x3, 0x4000000005, 0x40, 0x66, 0x1, 0x5f, 0x4, 0x8, 0x10, 0x11, 0x6, 0xffdffffffffffff7, 0x621, 0xe4]}) (async) r8 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, &(0x7f0000000180)) (async) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200fe80ffff00000e1208000f0100810401a80016ea1f000b400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async, rerun: 64) mprotect(&(0x7f0000274000/0x3000)=nil, 0x3000, 0x6) 34.912779837s ago: executing program 34 (id=2519): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@getpolicy={0x58, 0x15, 0x1, 0x70bd25, 0x25dfdbfb, {{@in=@multicast1, @in=@remote, 0x4e23, 0x0, 0x4e21, 0x9, 0x2, 0x20, 0x80, 0x11}, 0x6e6bb5}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket(0x10, 0x3, 0x0) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2, 0x3}}, 0x2e) (async) ioctl$PPPIOCGL2TPSTATS(r4, 0x8004745a, &(0x7f0000005280)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wg2\x00'}) r6 = dup(r1) (async) r7 = socket$kcm(0x10, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={'\x00', 0x0, 0x0, {0xfffffffffffffff8, 0xffff}, {0x6, 0x2}, 0xab4, [0x5, 0x3, 0x3, 0x4000000005, 0x40, 0x66, 0x1, 0x5f, 0x4, 0x8, 0x10, 0x11, 0x6, 0xffdffffffffffff7, 0x621, 0xe4]}) (async) r8 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, &(0x7f0000000180)) (async) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200fe80ffff00000e1208000f0100810401a80016ea1f000b400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async, rerun: 64) mprotect(&(0x7f0000274000/0x3000)=nil, 0x3000, 0x6) 2.307351054s ago: executing program 3 (id=2949): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r1, &(0x7f00000029c0)=""/4096, 0x1000, 0xd36) (async) pread64(r1, &(0x7f00000029c0)=""/4096, 0x1000, 0xd36) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f00000001c0)={r3, r3, 0x0, 0x80000001, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000140)={&(0x7f00000003c0)=[r3, r4], 0x2}) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000080)={0x61c, "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"}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x2a020400) syz_clone3(&(0x7f0000001240)={0xc0000, 0x0, 0x0, 0x0, {0xfbffffff}, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x58) sendfile(r5, r0, &(0x7f0000002080)=0x3a, 0x23b) 1.902822262s ago: executing program 6 (id=2962): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) setreuid(0xffffffffffffffff, 0xee00) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r3, 0x0) setregid(r3, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x81}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0x6, {0x3, 0x0, 0x20, 0xfffffffffffffff9, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r6, r7, 0x5, 0xfffffffd}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000280)=0x0) r10 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r11, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x10400, &(0x7f00000002c0)={[{@mode={'mode', 0x3d, 0x3ff}}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@gid={'gid', 0x3d, r3}}, {@gid={'gid', 0x3d, r7}}, {@gid={'gid', 0x3d, r8}}], [{@hash}, {@audit}, {@uid_gt={'uid>', r9}}, {@dont_appraise}, {@euid_gt={'euid>', r11}}]}) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000), &(0x7f0000000200)) 1.899393238s ago: executing program 6 (id=2963): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r6 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r6, 0x16) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) (async) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) (async) gettid() (async) rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) (async) tkill(r6, 0x16) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 1.439585811s ago: executing program 3 (id=2964): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x7ea, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x20012d5c}}, 0x44) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x7ea, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x20012d5c}}, 0x44) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f00000076c0)) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f00000076c0)) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) (async) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000880)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000001000000000000000100000000000000000000f6ff"]) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"]) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x40) add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) (async) add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) (async) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, &(0x7f0000000080)={0x1f}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xc2}, @exit], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x90) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x50000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000340)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 1.047844105s ago: executing program 4 (id=2967): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x27) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0xc4, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0xb3, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3"]}]}, 0xc4}], 0x1}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xfea}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0x10000}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f0000000500)=""/88, &(0x7f0000000480)=""/49}) ioctl$DVD_WRITE_STRUCT(r1, 0x5390, &(0x7f00000006c0)=@physical={0x0, 0x0, [{0x1, 0xa, 0x9, 0x0, 0x0, 0x1, 0x2, 0x4, 0x8, 0x0, 0x4, 0x3, 0xaf}, {0xc, 0x2, 0x1, 0x4, 0x5, 0x0, 0x2, 0x1, 0x9, 0x0, 0x6, 0x2e, 0x6e2}, {0x6, 0x1, 0x8, 0x0, 0x4, 0x0, 0x0, 0xa, 0x8, 0x1, 0x5, 0x7, 0xd}, {0x7, 0xf, 0x6, 0x7, 0x3, 0x1, 0x2, 0x5, 0x0, 0x1, 0xe8a8, 0x3, 0x7}]}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) r5 = syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xffffffffffffffff, 0x0, 0x2, @scatter={0x0, 0xf5ff, 0x0}, 0x0, 0x0, 0x1, 0x6, 0x2, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x14, 0x32, 0x20, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) 965.248816ms ago: executing program 4 (id=2970): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x2, 0x4, 0x1, 0xbf27, 0x20520, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)={@ipv4={""/10, ""/2, @initdev}, 0x0}, &(0x7f00000001c0)=0x14) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000f73c6ce3", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = syz_io_uring_setup(0x10d2, &(0x7f0000000680)={0x0, 0xb0d5, 0x80, 0x3, 0x12}, &(0x7f0000000080)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x402d, 0x0, 0x0, 0x1000004}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x18, 0x0, 0x7fff}) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r5, &(0x7f00000001c0), &(0x7f0000000140)=""/41}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1c, 0x26, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0x3, 0x7, 0x1, 0x100, 0xfffffffffffffffc}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @map_fd={0x18, 0x8, 0x1, 0x0, r2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000480)=""/4096, 0x41000, 0x2, '\x00', r3, @fallback=0x3a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x8, &(0x7f0000000240)=[r0, r0, r0, r0, r0, r5], &(0x7f0000000280)=[{0x4, 0x5, 0x8, 0x2}, {0x4, 0x1, 0x5, 0x1}, {0x4, 0x5, 0x10, 0x5}, {0x3, 0x2, 0x2, 0x3}, {0x0, 0x1, 0x6, 0x6}, {0x4, 0x1, 0x10, 0x6}, {0x1, 0x5, 0xd, 0xb}, {0x1, 0x4, 0x0, 0x3}], 0x10, 0xfffffff8}, 0x94) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000a37000/0x3000)=nil, 0x3000, 0x0, 0x747119fef32489d1, r2, 0x8000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, 0x0, &(0x7f00000003c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x8}, 0x0, {0x0, r10}}) 947.322933ms ago: executing program 6 (id=2972): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) dup3(r0, r0, 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x5, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 945.914037ms ago: executing program 6 (id=2973): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x804, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r2 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x406}}}, 0x7) setresuid(0x0, r3, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/freeze_filesystems', 0x149882, 0x8) write$sysctl(r4, &(0x7f0000000040)='1\x00', 0x2) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x2}, [{0x2, 0x5, r3}], {}, [], {0x10, 0x6}, {0x20, 0x3}}, 0x2c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r5 = inotify_init1(0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x80089419, &(0x7f0000000000)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000280)={0x3}) 879.976702ms ago: executing program 4 (id=2974): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) dup(r3) close_range(r1, 0xffffffffffffffff, 0x2) 879.71317ms ago: executing program 6 (id=2975): r0 = epoll_create(0x9) r1 = dup2(r0, r0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) r3 = epoll_create1(0x80000) r4 = fcntl$dupfd(r1, 0x406, r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x10, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x851, 0x0, 0x0, 0x0, 0xff}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00'}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000001480)={0x4000200c}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0x10}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000080)={0x20000000}) 858.869033ms ago: executing program 6 (id=2976): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2e, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x28}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 795.94627ms ago: executing program 4 (id=2978): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r6, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) (async) write$sndseq(r5, &(0x7f0000000300)=[{0x84, 0x77, 0x0, 0x0, @time={0x8, 0x80}, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @tick, {0xfd}, {}, @note={0x81}}, {0x6, 0x3, 0x9, 0xff, @time={0x10000, 0x4}, {0x10, 0x5}, {0xc, 0x2}, @time=@time={0x5, 0xb436}}, {0x0, 0x3, 0xa, 0x4, @time={0x3, 0x6}, {0xbb, 0x3}, {0xdb}, @result={0x5, 0x9}}], 0x70) (async) listen(r4, 0x2) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x72b4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) (async) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001300)=@newtfilter={0x894, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r13, {0x0, 0xfffc}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_POLICE={0x850, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x7, 0x4, 0xc, 0x9, {0xd, 0x2, 0x4, 0x4, 0x5, 0x401}, {0x4, 0x1, 0x5, 0x10, 0xfff7, 0x4b2}, 0x6, 0x14ff, 0x3fe}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x38, 0x1, 0x1, 0x8, 0x7f, 0x6, 0x3, 0x6, 0x1, 0x86, 0x9, 0x6, 0x5, 0x9, 0x5f, 0x0, 0x0, 0x13f, 0xfffffffe, 0x0, 0xd31, 0xf54, 0x9, 0x4, 0x4, 0x6, 0x9, 0x7fffffff, 0xfffffffd, 0x7fffffff, 0x8, 0x0, 0xfffffffe, 0x5, 0x5dbd0fd8, 0x8, 0x1887, 0x2, 0x95c, 0x7, 0x6, 0xa, 0x7f, 0xfffffffe, 0x8, 0x5, 0x6, 0x4, 0x6, 0x402f, 0xd, 0x5, 0x6f9d, 0x0, 0x800, 0x3ff, 0x8, 0xa, 0x9, 0x4, 0xd, 0x3, 0xb8f, 0x6, 0x0, 0xffffffff, 0x8000, 0xffffffff, 0x8, 0xfffffffc, 0xee, 0x4, 0x9, 0x2, 0x54eef174, 0xc, 0x9, 0x5, 0xe2, 0x20004, 0x1, 0xffff, 0x5, 0x5, 0x7, 0x5, 0x2, 0x4, 0x4, 0x7, 0x100, 0x8, 0x2, 0x9, 0x0, 0x0, 0xe32, 0x6, 0x8, 0x6, 0x66, 0x7, 0x7, 0x8, 0x5b, 0x7625, 0x51, 0x6, 0xfffffffe, 0x0, 0xa4d, 0x2, 0x10001, 0x7, 0x8, 0x3, 0x8, 0x3, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x400000, 0xc55b, 0x8000, 0xf943, 0x4, 0x3000000, 0x2003, 0x10000, 0xd, 0xffffffff, 0x9, 0xd3, 0xfffffffb, 0x4, 0x9, 0x401, 0x82baa23, 0xd, 0x0, 0x6, 0x21a, 0x5, 0x1, 0x1430, 0x8, 0x4, 0x7, 0xe, 0x7dab, 0x4, 0x5, 0x4, 0x3, 0xfffffffe, 0x7, 0x6, 0x8ef6, 0x7239, 0x80000001, 0x0, 0xd41, 0x6, 0x2, 0x4, 0x200, 0x8, 0x3, 0xc14, 0x7324, 0x4, 0x50f6, 0x5, 0x4, 0x3, 0x2, 0x7, 0x4, 0x6, 0x5, 0x3, 0x7767, 0x8, 0xe0ba, 0x4f, 0x3, 0x4, 0x7, 0x7fffffff, 0x3, 0x3, 0x5, 0x8, 0x4, 0x80, 0x401, 0x7, 0x1, 0x0, 0x8, 0x7c4, 0x3, 0x6, 0x6, 0xe8, 0x0, 0x6, 0x6, 0x3, 0x8a4, 0x1, 0x9, 0x9, 0x9, 0x200, 0x7, 0xd235, 0x9, 0x7fffffff, 0xf7d, 0x8001, 0x2, 0x7fff, 0x9f7c, 0x7, 0x4, 0xf, 0x1, 0x2, 0x6, 0x26e, 0x5, 0x80, 0x400, 0x5, 0xc, 0xff, 0xffff7002, 0x63c, 0x9, 0x1ff, 0xfff, 0x8, 0xcc, 0x40, 0x8, 0xed6, 0xf6, 0x0, 0x3, 0x9, 0x10, 0x9, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x6, 0x8, 0x8000, 0x8, 0x2, 0x9, 0x5, 0xfff, 0x3, 0x101, 0xbf7, 0x8, 0xff, 0x6, 0x113, 0xffff, 0x1, 0x8, 0x7fffffff, 0x6, 0x9, 0x33, 0x5, 0x2f7, 0x100, 0x21, 0x4, 0x7, 0xff, 0x6, 0xfffffffe, 0x7, 0x8, 0x1, 0x8, 0xf33c, 0x3, 0x1, 0x80000000, 0x62e, 0x3, 0xdb2, 0x0, 0xe00, 0x4, 0x2, 0x3, 0x2, 0xfffffff6, 0x5, 0x3, 0x7, 0x9, 0x1, 0x7f, 0x4, 0x6, 0x4, 0x3, 0x0, 0x803, 0x1, 0x5, 0x0, 0x8000, 0xfffffffa, 0xb7, 0xc8b6f5a2, 0x6, 0x2f, 0x7ff, 0x9, 0x8, 0x6, 0x0, 0x8, 0x9, 0x0, 0x5, 0x8b34, 0x2, 0x0, 0x4, 0x4, 0xfeffffff, 0x1, 0xa, 0xfffffffb, 0x3, 0xffffffff, 0x0, 0x4, 0xd6, 0x7, 0x4, 0x80003, 0x8, 0x9, 0x8, 0x2de0, 0x5191, 0x6, 0x401, 0x7, 0x9, 0x5, 0x3, 0x6, 0x1, 0xfffffffb, 0x1, 0xfffffffa, 0x4, 0x768, 0x7, 0x7f, 0x6, 0x7, 0x4, 0x8b, 0x4, 0x0, 0x5, 0xf0, 0x42490, 0xd, 0x3, 0x5c, 0x80, 0x2, 0x800, 0x8, 0x6, 0xff, 0xffff0000, 0x3, 0x10000, 0x80000001, 0x5, 0xffffffff, 0x4be24694, 0x2, 0x2, 0x100, 0x5, 0x1, 0x7, 0x4, 0xffffff95, 0x5, 0x2, 0xc, 0x6, 0x1000, 0xa, 0x7, 0x4, 0x340, 0x0, 0x0, 0x7, 0x101, 0x2, 0x7ce2352, 0x7fffffff, 0x5e, 0x8e5b, 0x3, 0x8, 0x9, 0x1, 0x80000000, 0x10000007, 0x301, 0x91, 0x3, 0x80000001, 0x9, 0x1, 0x3e79, 0xffffffff, 0x8, 0x80525, 0x7, 0x6, 0x2470a614, 0xe, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4, 0x1, 0x1, 0xfffffc1f, 0x6, 0x2, 0x1, 0x9, 0x7fff, 0xffffffff, 0x4, 0xffff2b7d, 0x4, 0xcdff, 0x9, 0x0, 0x49, 0x6, 0x0, 0x5, 0x9, 0x7, 0x8, 0x7, 0xea, 0x7, 0x7, 0x2, 0x5, 0xff, 0x6, 0xffff, 0x4cd, 0x7, 0x3, 0x3, 0x10001, 0x0, 0x6, 0x7, 0xffffffff, 0xe000000, 0x3, 0x4, 0x7, 0x8, 0xb, 0x7, 0x0, 0xcb65, 0x6, 0xe, 0x240000, 0x9, 0x8, 0x8, 0xfffffff8, 0x9, 0xf, 0x8, 0x5, 0x9, 0x100]}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x10}}]}, 0x894}, 0x1, 0x0, 0x0, 0xc004884}, 0x0) 720.622622ms ago: executing program 4 (id=2980): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r1, &(0x7f000000ae80)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4020000000000007911280000000000850000002e0000009500000000000000358bb9f43d86b13600"/50], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0xa98c43cda3754db8, '\x00', 0x0, @sk_reuseport=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0xfff, @value=r1}, 0x94) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) close(r2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) (async) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x4, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="38558d7a", 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='update ecryptfs\x00'], 0x1a, 0xfffffffffffffffc) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000580)={0x2, &(0x7f0000000280)=[{0x200, 0x9f, &(0x7f00000004c0)="4c3964cd091a0800f80f3b599ca71567d988963ef9649d164b1fdcb2d01c1ca4e8c2f6131e39d165a68b3f96190806cd274a7d17a35b1eada27841f96e1446e24e0a02bfafeadf9d6625ac5057ddd4b857788d81d4fce27e1d79fd8217384ee138beadd6f436ed7fc4b387a8fd88385a3fe100a0d1522605813a2287ce4a82a0a216f0a7cfc4d6d93f1d7720b74ef9a5bf566ffa1d85c66c959bd84d466a76", 0x1, 0x1}, {0x9, 0xc2, &(0x7f0000000640)="0e5cd1856e3fbf3862510d2968f62f62a041e31259c07123b6e1cf09aff4008b02a8c828e688e24ea0abbfa66a0b03d17805d6e635a3f21a5b8f6fbee6f1aedfa43352e328edca7848ac3f66cea9d6374cd081c08cbe7827382f4d9558afb264a5def6acae2232d69c600bdff1c8744f8a3c9cca8bceb94b788d40ea1b85aed92f3697cc0c3bfb850b555b3993447d742de8d88fd35fa61f3c89234721e9e8929a96d69c640f47c1684e9ce6e67e9f6484bbdf620821ed882df52aeef9075e4d002f", 0x1, 0x1}]}) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x5c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x5c}}, 0x0) 715.607303ms ago: executing program 4 (id=2982): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x100480, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0x8000000000000001, 0x8, 0x0, 0x8, 0x10001, 0x80000000000006, 0x1000000006, 0x10007ffffe]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000080)="470f23fc6541fc48b8e7320000000000000f23d80f21f80f23e1f8f30f1edd0f2221c74c24022063800000002c24f30f556797c483fd005b02ea6426470f01cf65666466430f3833af00580000", 0x4d}], 0x1, 0x3e, 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 560.2919ms ago: executing program 3 (id=2985): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'pim6reg1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000880), 0x86000, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r6, 0x0, 0x12, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume_offset', 0xa0042, 0x0) write$tcp_mem(r8, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x7, 0x1c, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x5, 0x1, 0x0, r8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x9}, @alu={0x4, 0x0, 0x4, 0x3, 0xb, 0x130, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4}, @ldst={0x0, 0x0, 0x6, 0x7, 0x1, 0x10, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0xa2ec414ff5b93c5a}}}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x7f, &(0x7f0000000a40)=""/127, 0x40f00, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x5, &(0x7f0000000b00)=[r0, r0], &(0x7f0000000b40)=[{0x0, 0x3, 0x8, 0x1}, {0x4, 0x2, 0x9, 0xc}, {0x2, 0x1, 0x600, 0x3}, {0x0, 0x3, 0x9}, {0x3, 0x5, 0x3, 0xb}], 0x10, 0x7}, 0x94) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000040)={0x50, 0x0, &(0x7f0000000300)=[@register_looper, @increfs={0x40046304, 0x2}, @acquire_done={0x40106309, 0x1}, @request_death, @increfs_done={0x40106308, 0x1}, @dead_binder_done], 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000200)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @exit], &(0x7f0000000380)='syzkaller\x00', 0x47f10845, 0x0, &(0x7f00000003c0), 0x40f00, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xe, 0xa5}, 0x10, 0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000480)=[{0x4, 0x2, 0x6, 0xb}, {0x3, 0x4, 0xc, 0x3}, {0x3, 0x4, 0x2, 0x7}, {0x3, 0x2, 0x7, 0xb}, {0x4, 0x5, 0x1, 0x8}, {0x3, 0x4, 0x1, 0x2}, {0x4, 0x2, 0x0, 0x3}, {0x1, 0x1, 0x4, 0x4}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r10, 0x0, 0xf4, 0x4, &(0x7f00000005c0)="1d248590873f2fca7beec6ba6bad70cf32d2fb308f6c10a6aa404dcb33f08a923292008d2459228e9f2b0fce2809b2d69f047c1f36a8b3109a3f610443ef3bfeb0d9b91bf6cb0ec6fcb5dd2b6d2ddb131b92163d80d6e1af8265c6993cca56bdf9b282b6b2e7c328edd9d9b7dfe5aa8372a7be64b44f1a679cc687ec1f562be0ffec0ac6146490ad7095eeadf593df15b419d53d41d99b6aee2759c739d71b711989a4b6eb826ddf1a3f6d0e5988a1dee066d71b4566e0170a71beb4a88c25592695c97b39e4f786c11a23591acb4c97e0ec5c626d1a56fd73bcf4d0371bc31d91dbbd5f48daaedd6b611681ffcda6d531e80944", &(0x7f00000006c0)=""/4, 0x9, 0x0, 0x9, 0x93, &(0x7f0000000700)="e3ff151833e1f6f28e", &(0x7f0000000740)="567efb1c7a363215b545dbff80bbad36e04a6fe7264fbbcd20581513757f1201c62156167d3cc701566015472509e683f71e87ab9ac73d886d83472714cf544a280b2ad14b94ca7a54a14ef505e4efd07cc73b6a20154db5a6854f69d7d2f294ccd73090a57e24317029fee7131572e968db60cce4d940c897d41c4de55bf9e8a7c4aa5b382b21391cad98580c4666700480d1", 0x5, 0x0, 0x5}, 0x50) 430.286648ms ago: executing program 3 (id=2987): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, 0x25, 0x1, 0x70bd29, 0x25dfdbfc, {0x3}}, 0x14}}, 0x20000000) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xbc, 0x19, 0x2, 0x0, 0x2000, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x4e22, 0x0, 0xa, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffff7}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x4}]}, 0xbc}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='\x996\x19(\xef+\x89d\x8bQ\xccnB\xb4!eU\x82\xe7V\xe8!\x9a`:\xd1 8\xd7D\x1dSE\xed\xc4\xf0\xc3\x1c\xc4\xe8\xce\t\xc1y|YT\xa2\xae{\x02\x03-\x80\xed\x01\xea\xc2\x06\xb0\x94\x17,mb/\x00,\xff\xf7\x89\xd4\x00\x00[A\xb9\xb2\x9eD\xe8Q3\x0e\xa9\xba\x88\x1c\x1cyM\xd2\xa2\x91\xfa\x88Z-G\xc3F\xb0\xf5\x95()\r~\xc9*\xd8\xc4\x00\x00\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @rand_addr=0x64010100}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0x70}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x2}, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x24, 0x10, 0x1, 0x70bd25, 0xfffffffb, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0x12}, {0xe, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc804f9fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 229.309238ms ago: executing program 3 (id=2989): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x2c040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b70500000000000061103000000000000fa000000000000095000000000000001f495ff727520cccddfad6fab92a770b445d050000006edc1b5613c5e35079725d19e88b662c2596b2f0b40aa9de45cf931a7ddaae7bdd97a9787684a5a6bbe879d6561715a194eb15d509b1837f6d317d12dd2c98f05e43aa14b3655a78009367bac65148a671b0ffd1c946b31202b7c73e0f1c5df29d57ed708602599a04fde318753c358d42ba7c52b4e20bc5c0e91fbc96da558c38891cd5bc38b6db9863a1273811976d15ba39fe2700"/218], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000040)={0x1, 0x0, [{0x0, 0x0, 0xffff8fe1, [0x9, 0x168]}]}) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83}, 0x1c) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) syz_emit_ethernet(0xfc0, &(0x7f0000001500)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010526", 0xf8a, 0x3a, 0x0, @private0, @mcast2, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x1f, 0x19, "9df8869c24c505b7d471402a31e6ea98307116e5d84627360d9f4ded8e743b0a5631de7eb2af6781b38261e2ca88016e2bf001896cdfa7fc8170ab9adb87a391d8e02124fa9dfc4d572402ea66f17f88eeb6f25953faff57b27820bfe984332773e6f52bd686cf5e7bd0796180260e419b51620df7e8d9a8fc812c38cde15d9ae250850e519b044586e7bd0537f0b62ff3ee6e1b592140da9cef727f98361e77ad3c9c574dc00f3813d78ec38bf0639a73f5620eb2712015d39bbf81edc0ee2334608a65cd2fa59aa2f8"}, {0x22, 0x5, "0e8ea79a6ce39825120e696373c2cb5b842a188554365fcc7635f93b6b0cf7183c1473add686df2b883aed0b5a"}, {0x18, 0x16, "164812996b35d1b9e2f009bfa0918189ad27dd4a3d46585c7d16ce907c5504011d36dea981a80b504f997c2ed526ad05711a33c9b09415e65278bdb063fd5588fc70a76509a5aa4aab42b570d3da4dc3da6880bc1677389dae6d0f72189dd3807350da1da304211d879a6b952cc3ae70ff339f7dc3891b890464a8f8e817e7dfb439eb3e220f99e7be4abd1954d0e48cbcb2f991a0669584e702c34c2675ed3952a32e09d61359fbc7edb7dfd1d1c780"}, {0x0, 0x11, "b5fbe47cdb0b36345cc09f83e901dae4e362a963a13d4e5a77cd4635f762afac9637356d83e8410668207a283af51ec73dcccd5e34b888c9d6caf39b588d14ba163d0397375dfb1cb3f3a525b67095c43745f91ac908c1af4a0e62cc0730bb558e8a52746023e8f17ff22a41f825a7acb5902c8b2983e30fa5c18e28bcbc5ef7151c720cb0bf141365"}, {0xe, 0x19, "37ee356bee650bdd6af02cea4cad621cf827ed7ecb805aac800dcc61eae89f6d389087b862cf9558a7a289b4b959ba78102a42520fabfcd675eb5da12d23af9b213046ebfe548c661623d918704b93e0e8c093bb33c345ed4ef134f209875aae46e8c5687fead9814b3add68478c4ca286bb4e3419e54c20df53b7c7f256093a0e04867445fd011a78cfad22ac7ad2db83e0648fe231839ae93cc75254879267f4327ef43aa4739e70f9578f96825c35f9642d3f4df76bd6ff7612674ae9189c4cceedccc72228c1"}, {0x5, 0x1b, "2890ab98d2047b0789f6e5e4ab99c79937d655f7876ca184567615000e9ac4aedcbeccbec4fa8ffeec4e3e94d0da137df21b2b6d4b16ae78bcb72d4f797d51192b56f4bf2922764899880660eedc0194bffc872df8a661bb891a4d118f560e11c5eaab7fe8e436799d26d5fda68bd1ef3763f9b93693a2a8282aab9b9962124857784bb5462c3d76113cc913796214e0f2f9ea8e6bde667578b5c1293ff8cc710816c5be206317edfa4b99e90e5ddc976669468bdd6cbbb350e24da20228c725f686fe97201078aaa5f9028fb68cd6e66610fe937a4c4e2d"}, {0x1f, 0xa, "0f078023085bc803dc3c68c0c4e6e790e139b1650b0dbd28073aae4aa7d13e92eab598a25147b369a7d2585c1d562f2c40b6b20c730e4236a6b856e36eb32ae0902a49e36d8c2cf4ef89c55cde367a37d5bacda3"}, {0x1f, 0x9, "87b62409876b32a091ad326971e24d0c74d96b20f59e34c1afef8d39b944eb7f0a49d314c3bbe43250158a11806d0784a37b9a3f3bd14e34b971a03cab740eb95caccb968bcf478e"}, {0x1, 0x160, "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"}]}}}}}}, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) r6 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r6, 0x111, 0x2, 0x0, 0x4) 226.926632ms ago: executing program 2 (id=2990): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = syz_open_dev$rtc(&(0x7f00000003c0), 0x1, 0x200002) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@fallback=r2, r0, 0x18, 0x0, 0x0, @void, @value=r1}, 0x20) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x80040, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f0000000440), 0xc, &(0x7f0000000480)={&(0x7f0000000980)=@newtfilter={0x121c, 0x2c, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x5}, {0xd, 0xfff2}, {0x1, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x1}}, @filter_kind_options=@f_basic={{0xa}, {0x119c, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0xfff2}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x8, 0x7}}, @TCA_BASIC_EMATCHES={0x76c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb}}, @TCA_EMATCH_TREE_LIST={0x1e0, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xa4, 0x1, 0x0, 0x0, {{0x2, 0x0, 0x8001}, "f97a5a90ba9d436e6e9d3c97e1e305cd748cc3fbf547ecc86249b85d9444eb6365a95b476497b84eed9f894e86ec85da6aea3f5dbfe5ea0047bcb0079678da84a17ceb3b611232e60b26501f925792e99c642cdf117ad9426673046a7f00d6dc0e8a4dbd7e4879c7600a76181d4a029d4457d660e91d5a96dc9ca37e58a022446a3ff2a4b99087dde4f329aadee88c0aa426a89eab048bce"}}, @TCF_EM_CONTAINER={0xc8, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x9}, "a75a08f2c894c3a9e6e762ece568f365f18e2398903bafd20f00815b9f5e7aeefcc7cbaa1b11ed6db40e17b0089a3e7bc906b5992a04382ac565d30d81140f4a53a493e6b87cc379f68385befffdb273f71c4aa94f3802f7dc67ffa43d5d3309c27479260996a088daae872fe3cac9493dc549eccf3a6ac173864c7b3596a06de4b1d4cb2c8552c7a1b55b65b2cfd5351da3fd22884490f070480b985316041be141f31fbbb731eaffdc6e12416895b0b94a9d26652464cda125ee87"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xc7, 0x8, 0x7fff}, {0x0, 0x1}}}, @TCF_EM_CONTAINER={0x48, 0x3, 0x0, 0x0, {{0x6, 0x0, 0x7}, "9d6adf611ddb3bff611361a04daf71f29025a1cd7f480d9d33ec507bb3859b3efe7a8533f52a7fc5586d3e71eb3220a8d8b44792284246eb79c483"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x1ff}, {0x6, 0x52, 0x5, 0x0, 0x7, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x174, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x3}, {0x4, 0x6, 0x2, "aefe963bd2ad"}}}, @TCF_EM_CONTAINER={0x68, 0x1, 0x0, 0x0, {{0x40, 0x0, 0x4}, "8383ccc703ad301f3abc7b1d66d76260cc6ba22b5f6192c411a9aca66bfeeccdf33bbebfea842c87fbec4f3e882498923204c416e1a9dbe1f7cb5e0fc5dabd71d22d102a60e2c6eb275eaa96a39b0ad72c7feb504cb6496785"}}, @TCF_EM_IPT={0x30, 0x3, 0x0, 0x0, {{0xe0c7, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}]}}, @TCF_EM_CONTAINER={0xc0, 0x1, 0x0, 0x0, {{0xc1cd, 0x0, 0x3}, "67f40b6fd8b5f9f3f842922f740a1e44236a9c4d9e6c4c839b248790066c32908678ec1e6319f0e72f5addca2af798e42bd950a85ed53026d2fa3e80882d7ffba47bb5793cae93786a43386bc33e71721062db445d86004f0e6c571abf9073cf856915ccd912604d64d5b8196d35e75f04ea6741cde4088dbec67e3a77607c0490e799ed3d96dc47f8654752c3dbcbc51fa7b6a38128880006a4746d59c79af378085cefc2dd66ffacf9afcd58b124d61dce"}}]}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0xaf6f, 0x2, 0x7fff}, {0x2, 0x5, 0x0, "f1dd89648a"}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x86, 0x7, 0x9}, {{0x0, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x32c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xcc, 0x3, 0x0, 0x0, {{0x9, 0x0, 0x5}, "56ff7997da178bd6088533306972ac71dc77d8a498632f247a6b3b3d548c409732f44b14dbdcd20a74ce0434488348615291a09304f85b6eaca91af0655eaccddaf63085c27b713144cc419b38c256bb4e6ad12150a54f017b4306f57c01c1710798cd64b5c922b0c575569abaa26304173a0b76addc89f5bf822fc577d105e14410da49aadd6bbddae65a2ffe62438a957bdddbe762a0f6caca1ada0ff882b2eec2f47d696a0187dcaa30b3b2f612c9d3d554c29a3ae4bcef55af06c342bc"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x4, 0x1, 0xfff7}, {0x3, 0xe570, 0x5, 0x7, 0x0, 0x0, 0x2}}}, @TCF_EM_META={0x88, 0x1, 0x0, 0x0, {{0x8f, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x4}, {0x1, 0x5}}}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0x2f, 0x2, [@TCF_META_TYPE_VAR='f', @TCF_META_TYPE_VAR="204a5efe39c86bbe", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="71bf31cc71594b16", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="15cb", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x6, 0x2}, {0x245, 0x9}}}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xfffe, 0x7, 0x2}, {{0x2}, {0x3, 0x0, 0x1}}}}, @TCF_EM_IPT={0x20, 0x2, 0x0, 0x0, {{0x8, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}]}}, @TCF_EM_IPT={0xe8, 0x1, 0x0, 0x0, {{0x8001, 0x9, 0x5}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_DATA={0xd1, 0x5, "7f4fee95453e3fc36515f5a2ad68c32a1354d0aa2ee97f7586a0a7df7a945b16b43a9789c02bc5bd3c9d56fe1a2db2ec9e6570687fba2bf5268e6e5f5ccce09ffb2e612043b877e51bd9406f7ea8404e51e0210e6d606797ae7c4f6455aba3f4d77b3d9ef50ed52bc12221c68115c6942f1720cc09d37b53340b147a88eaf5e22a10c23edd6674b231cc583e5dc5c9ca894b2f3c015c8891c9b18751487d75b287aacd666f374cc2c6e3f6dccb5f0608b63d1b2492b35c13129528cea7072d0ed321f98871eb41a14b8fc2d2bb"}]}}, @TCF_EM_META={0x6c, 0x3, 0x0, 0x0, {{0x9, 0x4, 0xe}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x80}, {0xbc6f, 0x1, 0x1}}}, @TCA_EM_META_RVALUE={0x33, 0x3, [@TCF_META_TYPE_VAR="b966329618ebebd6", @TCF_META_TYPE_VAR="ab7a953341e9", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="7f610498517af8d336fc", @TCF_META_TYPE_VAR="78a767df49e094de3755", @TCF_META_TYPE_VAR="9102ea4356"]}, @TCA_EM_META_RVALUE={0x20, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="d9c35a80", @TCF_META_TYPE_INT=0x6]}]}}, @TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0xc1, 0x4, 0xc9}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x9}, {0x7, 0x40, 0x2}}}, @TCA_EM_META_RVALUE={0xb, 0x3, [@TCF_META_TYPE_VAR="695b03", @TCF_META_TYPE_INT=0x6]}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x81, 0x8, 0x2}, {0x1, 0x4, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_META={0x7c, 0x3, 0x0, 0x0, {{0x5, 0x4, 0xa}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x81, 0x2}, {0xfff1, 0x9, 0x2}}}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0xf8, 0x2}, {0x0, 0x0, 0x1}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x7f, 0x2}, {0x4, 0xff}}}, @TCA_EM_META_RVALUE={0x17, 0x3, [@TCF_META_TYPE_VAR="7b99", @TCF_META_TYPE_VAR="4f59d7", @TCF_META_TYPE_VAR="93a30f5b8c", @TCF_META_TYPE_VAR="e7ae58f8501e", @TCF_META_TYPE_VAR="f20df6"]}, @TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_VAR="9b285bb780798f", @TCF_META_TYPE_VAR="53bd2a970f862f", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa]}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xe782, 0x8, 0x6}, {0x3, 0x5, 0x1}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x8, 0x2, 0x7f}, {0x7, 0x8, 0x1, "e83cb73e9b3f651d"}}}]}]}, @TCA_BASIC_POLICE={0x88, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x10000000, 0x7, 0x9, 0x2, {0x73, 0x0, 0x0, 0x1, 0x3, 0x8}, {0x2, 0x0, 0x90, 0x4, 0x1, 0x5}, 0x2, 0x1, 0x4}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x3, 0x4, 0x1000, 0x7, {0x8, 0x0, 0x8, 0x8, 0x8, 0x6}, {0xaf, 0x1, 0x7, 0x4, 0xa00, 0xf}, 0x2, 0x16af10ff, 0x2}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x40}]}, @TCA_BASIC_ACT={0x54, 0x3, [@m_bpf={0x50, 0x20, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x6, 0x6, 0x72d, 0xfffffff9}}]}, {0xe, 0x6, "87e3ca066a5e04b5a63e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_BASIC_EMATCHES={0x514, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x3, 0x4080}, {0x401, 0x8b9, 0x5, 0x81}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x3, 0x7, 0x800}, {{0x3, 0x0, 0x1, 0x1}, {0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0x3}, {0x2, 0xcd7f, 0x570, 0xcd}}}]}, @TCA_EMATCH_TREE_LIST={0x280, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0xb}, {0x7, 0x0, 0xdf, 0x1, 0x5, 0x1, 0x1}}}, @TCF_EM_META={0xe4, 0x2, 0x0, 0x0, {{0x50e, 0x4, 0xffff}, [@TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="a0e3430b3bfce2b595f1", @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_VAR="11cb9a79eb", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="e5247b7a24fa1a"]}, @TCA_EM_META_RVALUE={0x23, 0x3, [@TCF_META_TYPE_VAR="bcf5f4", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x4, 0x1}, {0x0, 0x8, 0x2}}}, @TCA_EM_META_LVALUE={0x17, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="c6556dae586f0c", @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x8}, {0x564a, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfff, 0x8, 0x2}, {0x1, 0x14, 0x1}}}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="9efdf362"]}, @TCA_EM_META_LVALUE={0x2c, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="92ff88", @TCF_META_TYPE_VAR="9b90c4819771cf3ee6", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="b279cf7214256e0c"]}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4}, {{0x2, 0x0, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xdc, 0x2, 0x0, 0x0, {{0xe0, 0x0, 0x5}, "946aa48d70a83fe40c5d2bfea88f36e13e584c6d99f91b826b6ed5d560f7afdca79c44c85ccdea9d3e8eda0a4dca754fe6aace79fb129a76190a10f622171fd9a5bba300043533b9c0ab3d97fce37698b6f8d06ba915b67958094bac770928ac8eee0326eca8aad853c49edd41be684917275d1564248f6b477e27cb3fdebc27751c51080f88acb25f419a0df8ead0ed1599f889a7f01cc6e0eb9615a964924446fe9730ce55ddb72689273e9a44a9f2cc6be43b0f96b28af41244692190920d99230d0d1c8144aec8d6176e3f7b2757"}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x8d3, 0x8, 0x4}, {0x0, 0x4, 0x7}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x7, 0x2, 0x7}, {0x3, 0x2, 0x2, 'YD'}}}, @TCF_EM_CONTAINER={0x6c, 0x3, 0x0, 0x0, {{0x9, 0x0, 0xec75}, "bb79cebff33bfad11a534bd50bc150f75ea648f24f35e6c027e7ea813e3f30cd4c83c51ea24ef53469b7fcbc5a9477a651bcd923b6817de3ff4d2fe86d6412d7eb5fe7b3e9416d07bfcf73a8f6d1584b0a4464f23d1e7bd8a5204389394fed41"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xcd78}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8001}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1ff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xaf}}, @TCA_EMATCH_TREE_LIST={0x12c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x5d, 0x2, 0x17}, {0xa9d, 0x5, 0x2, "1b91d5570c"}}}, @TCF_EM_IPT={0x80, 0x2, 0x0, 0x0, {{0x3, 0x9, 0x8c}, [@TCA_EM_IPT_MATCH_DATA={0x74, 0x5, "9c6d01852bc0a740e23f0afe660c95dbbe6ec47f9166434c82d17f8a9a7312c6c1b2ad7a9845e0e81f7f004bf566bf22304a46b425815d4ec48becd32865ba5afa56ce68d0a14e2e3ab297dda58eff0cf447ac3de7bf042ec21d6b0fe7ef4feb226b9230f56f552d6375687fdd4acd9c"}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8780, 0x7, 0x9704}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x2, 0x2, 0x1000}, {0x62, 0x0, 0x1}}}, @TCF_EM_IPT={0x3c, 0x3, 0x0, 0x0, {{0x2, 0x9, 0x25e}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_HOOK={0x8}]}}, @TCF_EM_META={0x30, 0x1, 0x0, 0x0, {{0x9, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x9, 0x1}, {0x2a5d, 0x3}}}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="c0612cca09eaf6", @TCF_META_TYPE_VAR="bb58", @TCF_META_TYPE_INT=0x4]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xe}}, @TCA_EMATCH_TREE_LIST={0xe4, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1f6, 0x7, 0x101}, {{0x2, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x20, 0x2, 0x0, 0x0, {{0x3, 0x0, 0xfff}, "05d488dc4967c1a8e6b2bd07193b39ca052967"}}, @TCF_EM_IPT={0x70, 0x3, 0x0, 0x0, {{0x2, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_DATA={0x64, 0x5, "2a35b12ef079faabf43edc89d86118ec8d4fdbbe8f74e256bebc2eabe0fb77e99efb65a337a319e4ad4c2b28a0df8f8f644307d04c9840a26ca61f137b335d0d857915efda96d734d939cba344fcabc5469daa446f77e1a9d5db130d17c0f4fe"}]}}, @TCF_EM_IPT={0x20, 0x2, 0x0, 0x0, {{0x6, 0x9, 0xff}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xfff, 0x3, 0x7}, {0x3, 0x100, 0x9, 0x866c}}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0x4}}, @TCA_BASIC_POLICE={0x424, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0xe57c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xc, 0x1426, 0xffffc000, 0xff, 0x5, 0x400, 0x10, 0x10000, 0x0, 0x7, 0x1, 0xffff, 0x1, 0x4, 0x4, 0x4, 0x6, 0x0, 0x101, 0x401, 0x3, 0x3, 0x400, 0x1, 0x3, 0x3ff, 0x1260, 0x0, 0xef8, 0x11, 0x0, 0x1, 0x80000001, 0x2, 0x3, 0x1c0, 0x6, 0x1, 0x1620, 0x3562, 0x7, 0xc71, 0xb8, 0x0, 0x7, 0x2b54, 0xb, 0x5, 0x3, 0x7, 0x9, 0xfffffff7, 0x8, 0x3, 0x5, 0x1000, 0x200, 0x6, 0x80, 0x0, 0x9, 0xa9, 0x3, 0x2, 0x8, 0xb, 0x5, 0x3, 0x2, 0x8, 0x2, 0xffffffff, 0x403, 0x100, 0x8, 0xd49, 0x8, 0x8, 0xfff, 0xffffff01, 0x0, 0x2, 0x6, 0x0, 0x6, 0x7, 0xf03, 0x7, 0x9, 0x0, 0x1, 0x8, 0x4, 0x40, 0x9b, 0x8, 0x7, 0x7, 0x2, 0x8, 0x10, 0x1f, 0x0, 0x89af, 0x8, 0x4, 0x3c7f, 0x0, 0x9, 0xffff2dcb, 0x0, 0x0, 0x2, 0x2442, 0x0, 0x0, 0x8, 0x81, 0x5a, 0x1, 0x0, 0x8, 0x8, 0x3, 0x3ff, 0x1, 0x7f, 0x1, 0x1, 0x1, 0x7, 0x101, 0x3, 0x10001, 0x5, 0x5, 0x99f7, 0x10001, 0x5, 0xd, 0x5, 0x3a, 0x3, 0x2, 0x80000000, 0x6e, 0x1ff, 0x10000, 0x23c6, 0x8, 0x800, 0x40000000, 0x8, 0xffffffff, 0x0, 0x0, 0x6, 0x6, 0xfffffff8, 0x3, 0x67bd, 0xfffffffd, 0x0, 0x108650ef, 0x4, 0x6, 0x9, 0x200, 0x9, 0x2, 0xfffffffa, 0xffffffff, 0x4, 0x0, 0x5b, 0x200, 0x7ff, 0x4, 0x8, 0x9, 0xc078, 0x6, 0x7ff, 0x9, 0x6, 0x4, 0x9, 0x9, 0x81, 0x2, 0x284, 0x6, 0x1, 0xd, 0xd, 0xe5, 0x3a, 0x9, 0x1, 0x100, 0xffffffff, 0x2, 0x1, 0x1, 0x4, 0xffffff00, 0x401, 0x8, 0x2, 0x6, 0x2, 0x0, 0xfffffff9, 0x4, 0x101, 0x7, 0x1, 0xffff, 0x3, 0x1, 0x3, 0x0, 0x1ff, 0x200, 0x9, 0x1, 0x14e, 0x69, 0x8, 0x1, 0x5, 0x4, 0x3000, 0x6, 0x4, 0xffffffff, 0x0, 0x3, 0x2, 0x2, 0x80000001, 0x4, 0x1, 0x3, 0xd, 0x80000000, 0x0, 0x1, 0xa9f, 0x8, 0x6, 0x80, 0x1000, 0x40, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]}]}}, @filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x4}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @TCA_RATE={0x6, 0x5, {0x49, 0xb}}]}, 0x121c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r5 = memfd_create(&(0x7f00000025c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r5, 0x0) r6 = syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ppoll(&(0x7f0000000280)=[{r3, 0xc02c}, {0xffffffffffffffff, 0x30a0}, {0xffffffffffffffff, 0x2040}, {r5, 0x1040}, {r6, 0x8520}, {r0, 0x88}, {0xffffffffffffffff, 0x8a}, {0xffffffffffffffff, 0x34b3}], 0x8, &(0x7f00000002c0), &(0x7f0000000300)={[0x6f4]}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@fallback=r0, 0x2f, 0x0, 0x0, &(0x7f0000000840)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f00000001c0)=r7) unshare(0x80) clock_gettime(0xb, &(0x7f0000000040)) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) 150.785297ms ago: executing program 2 (id=2991): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000010079102800000000005e500000000000000200000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x10}, 0x94) r0 = socket(0x2b, 0x2, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'gre0\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x7, 0x1, 0x0, 0x0, {{0x12, 0x4, 0x1, 0x0, 0x48, 0x64, 0x0, 0x4, 0x2f, 0x0, @multicast2, @multicast1, {[@lsrr={0x83, 0xb, 0xd2, [@loopback, @rand_addr=0x64010100]}, @timestamp={0x44, 0x8, 0x71, 0x0, 0x8, [0x9]}, @cipso={0x86, 0x20, 0x1, [{0x0, 0x11, "24d444330ff133800e2ddd030bb34c"}, {0x7, 0x9, "851448b22e53a9"}]}]}}}}}) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @llc={0x1a, 0x18, 0x2, 0x7, 0x1, 0x2, @multicast}, @ethernet={0x301, @multicast}, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, 0xb8a, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)='sit0\x00', 0x80000034598ce9, 0xc00000000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r6 = open(&(0x7f0000000280)='./file0/file0\x00', 0x0, 0x40) fcntl$setlease(r6, 0x400, 0x1) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x20, 0x0, &(0x7f0000000140)=[@increfs, @request_death, @decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) r7 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) syz_emit_ethernet(0x237, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60404c8eb19f7ab1380000000000007bf61000000000646e0000ff00000000015c1e000000000000c90000000000000000"], 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@decrefs], 0x0, 0x0, 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="5c020000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r1], 0x25c}}, 0x0) ioctl$KVM_SET_XCRS(r7, 0x4188aea7, &(0x7f0000000400)={0x2, 0x5, [{0x9, 0x0, 0x1ff}, {0xc, 0x0, 0x6}, {0xb2, 0x0, 0x8}, {0xc47, 0x0, 0x2}, {0x8, 0x0, 0x7}, {0x2, 0x0, 0x8}, {0xffff, 0x0, 0xa60}, {0x7}, {0x3, 0x0, 0x80}, {0x2, 0x0, 0x8}, {0xfffffffc, 0x0, 0x3}, {0x6}, {0x1, 0x0, 0x1ff}, {0x9, 0x0, 0x1}, {0x80000001, 0x0, 0x3}, {0x9de, 0x0, 0x8}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1200000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000732ce441000000000000000000ddfcf82c90207693957b2f7f0bed66e0bbb0123c8b6cecb28b147b6437530dbc5c0f75603fba0297b5393d99d0fee016bba85ac84225290e99d80261ef5f55a9315728211828f2b1"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r8, @ANYRES32, @ANYBLOB='\a'], 0x10) r9 = openat$sr(0xffffffffffffff9c, &(0x7f00000005c0), 0x1a840, 0x0) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r10, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r11, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r10, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r11, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r10, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r12, 0x0, 0xa, 0xa34c1, 0x3, &(0x7f0000000a00)='\'Q4', 0x10005}) write$UHID_DESTROY(r9, &(0x7f00000009c0), 0x4) write$bt_hci(r0, &(0x7f0000000000)={0x1, @accept_logical_link={{0x439, 0x21}, {0xc9, {0x9, 0x0, 0x0, 0x68, 0x5, 0x2}, {0x5, 0x9, 0x7, 0x0, 0x600000, 0x4}}}}, 0x25) 147.872264ms ago: executing program 2 (id=2992): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x80, 0xc800) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000001100)={&(0x7f0000001200)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0xf5ff, 0x1, &(0x7f0000001140)="b5"}], 0x2}) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x101881) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r3, 0x0) syz_clone(0x20022180, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001100)={r0, 0x2, {0x0, 0x0, 0x0, 0x800, 0xffe, 0x0, 0x0, 0x3, 0x1c, "339f020bbe82b3980000e4d6000000de00100d07000000000000009d03740250ceaac594b1b3d741dda1b719b438ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0x1ff]}}) 60.83943ms ago: executing program 2 (id=2993): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20004440) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000480)='\b\b', 0x2}, {&(0x7f00000004c0)="1ed8b706d45f", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x40}, 0x20000810) 60.332837ms ago: executing program 2 (id=2994): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb) close_range(r0, r0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081e0}, 0x44000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1.007233ms ago: executing program 3 (id=2995): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x88203, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = add_key$user(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000005c0)="fb4123435053c6cb738000e66702f96cf898000dd44406d44172d2be9bd09d029997ca96083994f7934c4d2508cdc8c7cbbbc20f168242aa4f5b68d81f8e2525e5c5a584825da96ecea548ece9a65bfb0dbfe5eafa8ecc3a2dff094a1ab0064124545b9aa0a664a17260c8e33ac77193147dacf9267f4d50acd0d6c2aae17780107f69bd01265f4fd96e69fd6fecea5688f299590ab596dd716c2e447c811c319d150d1e612976da8dc1668c90a1e9445490bcc6179134de06d6121499c4387d8fead5ea3f06d984688c8628c9114a1ab47ac9dc63f8e30b4689ccbde8f84920d9edc9de06d09cc94e174df2", 0xec, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000140), &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700)="34d58e8bf781554db417", 0xa, 0xffffffffffffffff) (async) r4 = add_key$fscrypt_v1(&(0x7f0000000740), &(0x7f0000000780)={'fscrypt:', @desc3}, &(0x7f00000007c0)={0x0, "2b000052c2108725d2b1a72bcb6c3fc2d5510cef87c30fd4715744740462f2e96608caf67fd1a79e805ccffedc8c37ebc6146c67091d3ebf8ae34de694efe666", 0x35}, 0x48, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000840)={r2, r3, r4}, &(0x7f0000000880)=""/133, 0x85, 0x0) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001e80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f00000009c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fddbdf2564a11869deacc1a0aa992100000008000300", @ANYRES32=r8, @ANYBLOB="0500f600070000002c002d80100000009d6bd976285bbdf2cb66f257e9ff000002020202020200000a00000002020202020200000a00060008021100000000000a00f5000149f5ec9daf00000a00f5005050505050500000"], 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 32) r9 = socket$inet(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, 0x0) (async) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000940)='net/psched\x00') ioctl$AUTOFS_IOC_ASKUMOUNT(r10, 0x80049370, &(0x7f0000000980)) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async, rerun: 32) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x5, 0x7, 0x10, 0xfff, 0x3}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x58}}, 0x0) (async) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000100)=0x6) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000001c0)={"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"}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 2 (id=2996): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x29, 0x9, 0x7, 0x0, 0x0, @private0, @local, 0x8000, 0x8, 0x240, 0x45}}) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x100000000000f7) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f00000000c0)=0x10000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffc, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x4, 0x4}}}]}, 0x3c}}, 0x24000010) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161042, 0x91) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xe7c) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r9 = dup(r7) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r9, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r9, &(0x7f0000000140)=ANY=[], 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',posixacl']) kernel console output (not intermixed with test programs): tmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 168.803665][ T5975] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 168.810962][ T40] audit: type=1400 audit(1756304000.531:14168): avc: denied { ioctl } for pid=14162 comm="syz.2.2355" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 168.816291][ T5975] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 168.828749][ T5975] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 168.836152][ T5326] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 168.839494][ T5326] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 168.842014][ T5326] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 168.845737][ T5326] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 168.848966][ T5326] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 168.853282][ T40] audit: type=1400 audit(1756304000.601:14169): avc: denied { mounton } for pid=14164 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 168.880247][T14164] xfrm0 speed is unknown, defaulting to 1000 [ 168.989824][T14164] chnl_net:caif_netlink_parms(): no params data found [ 169.090427][T14164] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.093595][T14164] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.096908][T14164] bridge_slave_0: entered allmulticast mode [ 169.102991][T14164] bridge_slave_0: entered promiscuous mode [ 169.107717][T14164] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.110750][T14164] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.113886][T14164] bridge_slave_1: entered allmulticast mode [ 169.118405][T14164] bridge_slave_1: entered promiscuous mode [ 169.168216][T14164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.173676][T14164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.195874][T14163] syz.2.2355 (14163): drop_caches: 2 [ 169.229935][T14164] team0: Port device team_slave_0 added [ 169.234693][T14164] team0: Port device team_slave_1 added [ 169.277559][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 169.285128][T14164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.290075][T14164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.305516][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 169.314174][T14164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.320500][T14164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.324816][T14164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.334553][T14164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.356561][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 169.384694][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 169.411553][T14164] hsr_slave_0: entered promiscuous mode [ 169.414549][T14164] hsr_slave_1: entered promiscuous mode [ 169.417346][T14164] debugfs: 'hsr0' already exists in 'hsr' [ 169.420249][T14164] Cannot create hsr debugfs directory [ 169.475975][T14188] binder: 14187:14188 ioctl c0485661 200000000280 returned -22 [ 169.481217][T14188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2361'. [ 169.496478][T14188] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2361'. [ 169.516273][T14188] geneve4: entered promiscuous mode [ 169.518976][T14188] geneve4: entered allmulticast mode [ 169.665884][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 169.702816][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 169.863638][T14164] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 169.869205][T14164] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 169.875043][T14164] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 169.881927][T14164] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 169.917433][T14164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.927539][T14164] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.933408][ T8763] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.936406][ T8763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.943021][ T8783] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.945450][ T8783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.066681][T14164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.098291][T14164] veth0_vlan: entered promiscuous mode [ 170.105159][T14164] veth1_vlan: entered promiscuous mode [ 170.124381][T14164] veth0_macvtap: entered promiscuous mode [ 170.129475][T14164] veth1_macvtap: entered promiscuous mode [ 170.139945][T14164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.149067][T14164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.157905][ T8783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.162587][ T8783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.166406][ T8783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.173978][ T8783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.209512][ T8740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.215047][ T8740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.230396][ T8740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.233399][ T8740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.269931][ T8465] udevd[8465]: symlink '../../loop3' '/dev/disk/by-diskseq/94.tmp-b7:3' failed: Read-only file system [ 170.346123][T14216] sg_write: data in/out 3171656/251 bytes for SCSI command 0x0-- guessing data in; [ 170.346123][T14216] program syz.3.2354 not setting count and/or reply_len properly [ 170.372510][T14216] nfs: Bad value for 'source' [ 170.600926][ T8463] udevd[8463]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 170.704552][T14237] random: crng reseeded on system resumption [ 170.740541][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 170.909873][T14264] ALSA: seq fatal error: cannot create timer (-22) [ 170.916853][ T5326] Bluetooth: hci0: command tx timeout [ 171.003907][T14268] SELinux: syz.4.2381 (14268) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 171.737784][T14294] loop7: detected capacity change from 0 to 7 [ 171.770115][T14296] random: crng reseeded on system resumption [ 171.779083][T14296] Restarting kernel threads ... [ 171.780862][ T5975] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 171.783228][T14296] Done restarting kernel threads. [ 171.786516][ T5975] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 171.789194][ T5975] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 171.793930][ T5975] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 171.797541][ T5975] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 171.848420][T14295] xfrm0 speed is unknown, defaulting to 1000 [ 171.861345][T12910] bridge0: port 1(syz_tun) entered disabled state [ 171.867492][T12910] syz_tun (unregistering): left allmulticast mode [ 171.870114][T12910] syz_tun (unregistering): left promiscuous mode [ 171.873602][T12910] bridge0: port 1(syz_tun) entered disabled state [ 171.883749][T14294] Dev loop7: unable to read RDB block 7 [ 171.886106][T14294] loop7: unable to read partition table [ 171.888795][T14294] loop7: partition table beyond EOD, truncated [ 171.892870][T14294] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 171.955284][T14308] netlink: 'syz.2.2392': attribute type 1 has an invalid length. [ 171.996570][T14295] chnl_net:caif_netlink_parms(): no params data found [ 172.015595][T12910] [U] ``````` [ 172.108808][T14295] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.111704][T14295] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.114839][T14295] bridge_slave_0: entered allmulticast mode [ 172.117529][T14295] bridge_slave_0: entered promiscuous mode [ 172.121180][T14295] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.125826][T14295] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.129073][T14295] bridge_slave_1: entered allmulticast mode [ 172.131628][T14295] bridge_slave_1: entered promiscuous mode [ 172.163007][T14295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.170268][T14295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.205738][T14295] team0: Port device team_slave_0 added [ 172.210467][T14295] team0: Port device team_slave_1 added [ 172.243418][T14295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.246353][T14295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.257159][T14295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.263027][T14295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.266512][T14295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.277162][T14295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.315663][T14295] hsr_slave_0: entered promiscuous mode [ 172.318607][T14295] hsr_slave_1: entered promiscuous mode [ 172.321735][T14295] debugfs: 'hsr0' already exists in 'hsr' [ 172.324376][T14295] Cannot create hsr debugfs directory [ 172.344614][ T24] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 172.440192][T14295] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 172.450431][T14295] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 172.456224][T14295] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 172.461353][T14295] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 172.481348][T14295] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.484228][T14295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.487299][T14295] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.490082][T14295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.515688][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 172.519036][ T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.522571][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 172.524629][T14295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.526829][ T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 24864, setting to 1024 [ 172.526859][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 172.526878][ T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.526911][ T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 172.526930][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.562202][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.565597][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.575776][T14295] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.584639][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.587377][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.595627][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.598691][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.729996][T14295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.732299][ T24] usb 7-1: GET_CAPABILITIES returned 0 [ 172.734974][ T24] usbtmc 7-1:16.0: can't read capabilities [ 172.741884][ T24] usb 7-1: USB disconnect, device number 33 [ 172.884975][T14295] veth0_vlan: entered promiscuous mode [ 172.891166][T14295] veth1_vlan: entered promiscuous mode [ 172.910611][T14295] veth0_macvtap: entered promiscuous mode [ 172.915903][T14295] veth1_macvtap: entered promiscuous mode [ 172.924799][T14295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.935490][T14295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.948541][ T8763] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.952447][ T8763] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.957050][ T8763] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.962975][ T8763] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.000149][ T8783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.003261][T14362] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 173.004353][ T8783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.009830][ T5975] Bluetooth: hci0: command tx timeout [ 173.014046][T14362] overlayfs: missing 'lowerdir' [ 173.031499][ T8763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.035488][ T8763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.076580][T14371] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2387'. [ 173.083024][T14371] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2387'. [ 173.160804][T14387] ptrace attach of "/syz-executor exec"[14295] was attempted by " b\x0a\x0c ! \x07    ?j}6ٱĞ Dl\x0a9:$VQ\x09d'ZbWzr‘Q``V\x5c4fL\x0a6\x0az^k`q0ȟ [ 173.244559][T14399] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2410'. [ 173.281437][T14399] netlink: zone id is out of range [ 173.283706][T14399] netlink: get zone limit has 8 unknown bytes [ 173.339817][T14407] lo: entered promiscuous mode [ 173.351510][T14410] lo: left promiscuous mode [ 173.750131][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 173.755569][T14416] bridge0: entered promiscuous mode [ 173.785581][ T40] kauditd_printk_skb: 285 callbacks suppressed [ 173.785601][ T40] audit: type=1400 audit(1756304005.513:14455): avc: denied { create } for pid=14417 comm="syz.2.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 173.791566][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 173.799879][ T40] audit: type=1400 audit(1756304005.513:14456): avc: denied { getopt } for pid=14417 comm="syz.2.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 173.811772][ T40] audit: type=1400 audit(1756304005.513:14457): avc: denied { read } for pid=14417 comm="syz.2.2415" dev="nsfs" ino=4026533004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 173.823437][ T40] audit: type=1400 audit(1756304005.513:14458): avc: denied { open } for pid=14417 comm="syz.2.2415" path="net:[4026533004]" dev="nsfs" ino=4026533004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 173.834928][ T40] audit: type=1400 audit(1756304005.513:14459): avc: denied { create } for pid=14417 comm="syz.2.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 173.843748][ T40] audit: type=1400 audit(1756304005.513:14460): avc: denied { getopt } for pid=14417 comm="syz.2.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 173.852137][ T40] audit: type=1400 audit(1756304005.513:14461): avc: denied { setopt } for pid=14417 comm="syz.2.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 173.860850][ T40] audit: type=1400 audit(1756304005.513:14462): avc: denied { ioctl } for pid=14417 comm="syz.2.2415" path="socket:[68405]" dev="sockfs" ino=68405 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 173.874861][ T40] audit: type=1400 audit(1756304005.523:14463): avc: denied { module_request } for pid=14417 comm="syz.2.2415" kmod="netdev-vxcan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 173.884652][ T40] audit: type=1400 audit(1756304005.543:14464): avc: denied { sys_module } for pid=14417 comm="syz.2.2415" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 173.895143][ T5975] Bluetooth: hci2: command tx timeout [ 173.969614][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 174.026391][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 174.067698][ T8465] udevd[8465]: symlink '../../loop5' '/dev/disk/by-diskseq/74.tmp-b7:5' failed: Read-only file system [ 174.130177][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 174.165320][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 174.186695][T13013] vhci_hcd: connection reset by peer [ 174.191165][ T1150] vhci_hcd: stop threads [ 174.192982][ T1150] vhci_hcd: release socket [ 174.196085][ T1150] vhci_hcd: disconnect device [ 174.265202][ T6011] vhci_hcd: vhci_device speed not set [ 174.294686][ T5326] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 174.298897][ T5326] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 174.301663][ T5326] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 174.306674][ T5326] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 174.309753][ T5326] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 174.331621][T14437] xfrm0 speed is unknown, defaulting to 1000 [ 174.415878][T14437] chnl_net:caif_netlink_parms(): no params data found [ 174.452923][T14437] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.455463][T14437] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.458286][T14437] bridge_slave_0: entered allmulticast mode [ 174.461374][T14437] bridge_slave_0: entered promiscuous mode [ 174.467964][T14437] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.470994][T14437] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.473869][T14437] bridge_slave_1: entered allmulticast mode [ 174.477087][T14437] bridge_slave_1: entered promiscuous mode [ 174.501751][T14437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.509847][T14437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.532154][T14437] team0: Port device team_slave_0 added [ 174.535055][T14437] team0: Port device team_slave_1 added [ 174.553326][T14437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.555569][T14437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.565406][T14437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.570760][T14437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.573166][T14437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.582390][T14437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.622682][T14437] hsr_slave_0: entered promiscuous mode [ 174.624970][T14437] hsr_slave_1: entered promiscuous mode [ 174.627605][T14437] debugfs: 'hsr0' already exists in 'hsr' [ 174.629680][T14437] Cannot create hsr debugfs directory [ 174.694798][T14437] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.699194][T14437] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.760555][T14437] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.764687][T14437] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.821525][T14437] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.824917][T14437] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.880918][T14437] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.884402][T14437] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.971536][T14437] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 174.976925][T14437] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 174.982455][T14437] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 174.988233][T14437] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 175.003720][T14437] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.006355][T14437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.009729][T14437] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.012698][T14437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.030098][ T8763] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.034724][ T8763] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.050295][T14437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.063944][T14437] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.071521][ T8782] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.074571][ T8782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.082760][ T8764] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.086220][ T8764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.100402][ T5975] Bluetooth: hci0: command tx timeout [ 175.199018][T14437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.225738][T14437] veth0_vlan: entered promiscuous mode [ 175.234007][T14437] veth1_vlan: entered promiscuous mode [ 175.253541][T14437] veth0_macvtap: entered promiscuous mode [ 175.258670][T14437] veth1_macvtap: entered promiscuous mode [ 175.272537][T14437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.281051][T14437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.288446][ T8783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.293514][ T8783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.298511][ T8783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.301965][ T79] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.330251][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.332848][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.346759][ T8783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.350358][ T8783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.377035][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 175.437576][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 175.441714][T14460] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.2421'. [ 175.474984][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 175.994562][ T5975] Bluetooth: hci2: command tx timeout [ 176.034530][T10109] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 176.168659][T14485] loop6: detected capacity change from 0 to 2560 [ 176.172149][ T8465] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.175611][ T8465] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.179420][ T8465] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.183676][ T8465] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.187639][T10109] usb 7-1: Using ep0 maxpacket: 8 [ 176.188139][ T8465] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.191536][T10109] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 176.193461][ T8465] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.196842][T10109] usb 7-1: config 0 has no interface number 0 [ 176.196874][T10109] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 176.196894][T10109] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 176.196913][T10109] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 176.196932][T10109] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 176.196950][T10109] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 176.196978][T10109] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 176.196996][T10109] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.197994][T10109] usb 7-1: config 0 descriptor?? [ 176.200659][ T8465] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.205619][T10109] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 176.207793][ T8465] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.249575][ T8465] ldm_validate_partition_table(): Disk read failed. [ 176.252198][ T8465] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.255380][ T8465] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.259575][ T8465] Dev loop6: unable to read RDB block 0 [ 176.262377][ T8465] loop6: unable to read partition table [ 176.266622][T14485] ldm_validate_partition_table(): Disk read failed. [ 176.270467][T14485] Dev loop6: unable to read RDB block 0 [ 176.273225][T14485] loop6: unable to read partition table [ 176.276103][T14485] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 176.339325][T14489] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2430'. [ 176.347027][T14489] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2430'. [ 176.386552][ T5975] Bluetooth: hci3: command tx timeout [ 176.422854][T14493] No control pipe specified [ 176.426007][T14491] netlink: 294 bytes leftover after parsing attributes in process `syz.4.2431'. [ 176.432144][T14491] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2431'. [ 176.581932][T14505] syz.4.2435 (14505): /proc/14504/oom_adj is deprecated, please use /proc/14504/oom_score_adj instead. [ 176.587154][T14505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2435'. [ 176.591307][T14505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2435'. [ 176.639241][T14507] nvme_fabrics: missing parameter 'transport=%s' [ 176.642244][T14507] nvme_fabrics: missing parameter 'nqn=%s' [ 176.719972][T14512] syzkaller1: entered promiscuous mode [ 176.721786][T14512] syzkaller1: entered allmulticast mode [ 176.958432][T14527] xfrm0 speed is unknown, defaulting to 1000 [ 177.094021][T14527] Bluetooth: MGMT ver 1.23 [ 177.190522][ T5975] Bluetooth: hci0: command tx timeout [ 177.596674][ T10] usb 7-1: USB disconnect, device number 34 [ 177.601238][ T10] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 177.785572][T14551] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=14551 comm=syz.4.2444 [ 178.085485][ T5975] Bluetooth: hci2: command tx timeout [ 178.314656][T14584] __nla_validate_parse: 1 callbacks suppressed [ 178.314668][T14584] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2455'. [ 178.352336][T14590] Bluetooth: (null): Invalid header checksum [ 178.394661][T14593] syzkaller1: entered promiscuous mode [ 178.398011][T14593] syzkaller1: entered allmulticast mode [ 178.447159][T14588] kvm: kvm [14587]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 178.452150][T14588] kvm: kvm [14587]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 178.477837][ T5975] Bluetooth: hci3: command tx timeout [ 178.478145][T14588] kvm: kvm [14587]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 178.511525][T14588] kvm: kvm [14587]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 178.516058][T14588] kvm: kvm [14587]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 178.541579][T14588] kvm_intel: kvm [14587]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 179.035719][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 179.160169][ T40] kauditd_printk_skb: 260 callbacks suppressed [ 179.160179][ T40] audit: type=1400 audit(1756304010.855:14725): avc: denied { create } for pid=14607 comm="syz.2.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 179.172201][ T40] audit: type=1400 audit(1756304010.865:14726): avc: denied { write } for pid=14607 comm="syz.2.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 179.245910][ T8465] udevd[8465]: symlink '../../loop5' '/dev/disk/by-diskseq/74.tmp-b7:5' failed: Read-only file system [ 179.250328][ T40] audit: type=1400 audit(1756304010.944:14727): avc: denied { bind } for pid=14611 comm="syz.5.2463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 179.251701][T14612] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2463'. [ 179.258146][ T40] audit: type=1400 audit(1756304010.944:14728): avc: denied { name_bind } for pid=14611 comm="syz.5.2463" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 179.269643][ T40] audit: type=1400 audit(1756304010.944:14729): avc: denied { node_bind } for pid=14611 comm="syz.5.2463" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 179.269926][T14612] fuse: Unknown parameter './file0' [ 179.283482][ T40] audit: type=1400 audit(1756304010.984:14730): avc: denied { create } for pid=14611 comm="syz.5.2463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 179.292628][ T40] audit: type=1400 audit(1756304010.984:14731): avc: denied { lock } for pid=14611 comm="syz.5.2463" path="socket:[72912]" dev="sockfs" ino=72912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 179.345903][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 179.371199][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 179.374979][ T40] audit: type=1400 audit(1756304011.074:14732): avc: denied { create } for pid=14615 comm="syz.2.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 179.385462][ T40] audit: type=1400 audit(1756304011.074:14733): avc: denied { getopt } for pid=14615 comm="syz.2.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 179.396430][ T8465] udevd[8465]: symlink '../../loop5' '/dev/disk/by-diskseq/74.tmp-b7:5' failed: Read-only file system [ 179.403371][ T40] audit: type=1400 audit(1756304011.074:14734): avc: denied { setopt } for pid=14615 comm="syz.2.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 179.413115][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 179.420619][T14618] loop6: detected capacity change from 0 to 7 [ 179.434997][ T8465] udevd[8465]: symlink '../../loop6' '/dev/disk/by-diskseq/112.tmp-b7:6' failed: Read-only file system [ 179.452240][ T8463] udevd[8463]: symlink '../../loop5' '/dev/disk/by-diskseq/74.tmp-b7:5' failed: Read-only file system [ 179.493596][ T8465] udevd[8465]: symlink '../../loop3' '/dev/disk/by-diskseq/94.tmp-b7:3' failed: Read-only file system [ 179.527926][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 179.584522][T14641] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2474'. [ 179.673781][T14648] dlm: Unknown command passed to DLM device : 255 [ 179.673781][T14648] [ 179.693719][ T5963] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 179.712341][T14651] ieee802154 phy0 wpan0: encryption failed: -22 [ 179.728863][T14651] xfrm0 speed is unknown, defaulting to 1000 [ 179.778987][T14651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2477'. [ 179.787789][T14651] netlink: 'syz.3.2477': attribute type 5 has an invalid length. [ 179.808381][T14655] netlink: 480 bytes leftover after parsing attributes in process `syz.2.2478'. [ 179.844300][ T5963] usb 10-1: Using ep0 maxpacket: 32 [ 179.851551][ T5963] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.863974][ T5963] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.870251][ T5963] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 179.875168][ T5963] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.879383][ T5963] usb 10-1: config 0 descriptor?? [ 180.165703][ T5975] Bluetooth: hci2: command tx timeout [ 180.312403][ T5963] savu 0003:1E7D:2D5A.000D: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 180.483679][T14661] program syz.4.2480 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.513631][ T34] usb 10-1: USB disconnect, device number 2 [ 180.536920][T14663] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 180.541470][T14663] overlayfs: missing 'lowerdir' [ 180.567818][ T5975] Bluetooth: hci3: command tx timeout [ 180.589894][T14665] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2482'. [ 180.666305][T14657] orangefs_mount: mount request failed with -4 [ 180.757393][T14677] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2487'. [ 180.817679][T14683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2489'. [ 180.899145][ T34] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 181.051417][ T34] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 181.056189][ T34] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 181.061516][ T34] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 181.062968][T14688] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14688 comm=syz.4.2490 [ 181.068691][ T34] usb 10-1: string descriptor 0 read error: -22 [ 181.074490][ T34] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.078865][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.086573][T14667] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 181.305089][ T34] cdc_ncm 10-1:1.0: bind() failure [ 181.310384][ T34] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 181.316589][ T34] cdc_ncm 10-1:1.1: bind() failure [ 181.321549][T14692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2491'. [ 181.324287][ T34] usb 10-1: USB disconnect, device number 3 [ 181.483614][T14697] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2492'. [ 181.967302][T14712] netlink: 'syz.4.2499': attribute type 1 has an invalid length. [ 181.981665][T14715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.986396][T14715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.019286][ T840] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 182.192407][T14715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.196711][T14715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.197188][ T840] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 182.203137][ T840] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 182.208429][ T840] usb 7-1: config 0 interface 0 has no altsetting 0 [ 182.213763][ T840] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 182.217700][ T5963] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 182.220965][ T840] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 182.224460][ T840] usb 7-1: Product: syz [ 182.226861][ T840] usb 7-1: Manufacturer: syz [ 182.229447][ T840] usb 7-1: SerialNumber: syz [ 182.233600][ T840] usb 7-1: config 0 descriptor?? [ 182.237797][ T840] hub 7-1:0.0: bad descriptor, ignoring hub [ 182.240751][ T840] hub 7-1:0.0: probe with driver hub failed with error -5 [ 182.245583][ T840] usb 7-1: selecting invalid altsetting 0 [ 182.257654][ T6048] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 182.416813][ T6048] usb 9-1: Using ep0 maxpacket: 32 [ 182.420793][ T6048] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 182.425113][ T6048] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 182.428545][ T6048] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 182.432680][ T6048] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 182.436255][ T6048] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 182.439684][ T6048] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 182.445073][ T6048] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 182.449143][ T6048] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.453492][ T6048] usb 9-1: config 0 descriptor?? [ 182.548139][ T840] usb 7-1: USB disconnect, device number 35 [ 182.657601][ T5975] Bluetooth: hci3: command tx timeout [ 182.661232][ T6048] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 182.668971][ T6048] usb 9-1: USB disconnect, device number 4 [ 182.671941][ T6048] usblp0: removed [ 182.878821][ T5963] usb 10-1: device descriptor read/64, error -71 [ 182.909105][ T840] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 183.081305][ T840] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 183.085370][ T840] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 183.090172][ T840] usb 7-1: config 0 interface 0 has no altsetting 0 [ 183.099914][ T6048] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 183.129915][ T5963] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 183.250412][ T6048] usb 9-1: Using ep0 maxpacket: 32 [ 183.254527][ T6048] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 183.258759][ T6048] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 183.263962][ T6048] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 183.267718][ T6048] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 183.271868][ T6048] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 183.275833][ T6048] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 183.281478][ T6048] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 183.285351][ T6048] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.291840][ T6048] usb 9-1: config 0 descriptor?? [ 183.292865][ T5963] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.298243][ T5963] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 1281, setting to 64 [ 183.303344][ T5963] usb 10-1: config 0 interface 0 has no altsetting 0 [ 183.308168][ T5963] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 183.312323][ T5963] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 183.316232][ T5963] usb 10-1: Product: syz [ 183.317937][ T5963] usb 10-1: Manufacturer: syz [ 183.319795][ T5963] usb 10-1: SerialNumber: syz [ 183.322594][ T5963] usb 10-1: config 0 descriptor?? [ 183.326379][ T5963] hub 10-1:0.0: bad descriptor, ignoring hub [ 183.328957][ T5963] hub 10-1:0.0: probe with driver hub failed with error -5 [ 183.333690][ T5963] usb 10-1: selecting invalid altsetting 0 [ 183.496860][ T6048] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 183.527720][T14714] block nbd5: NBD_DISCONNECT [ 183.642741][ T1339] usb 10-1: USB disconnect, device number 5 [ 183.700108][ T6048] usb 9-1: USB disconnect, device number 5 [ 183.708120][ T6048] usblp0: removed [ 184.066280][ T8465] udevd[8465]: symlink '../../loop5' '/dev/disk/by-diskseq/74.tmp-b7:5' failed: Read-only file system [ 184.100974][ T8465] udevd[8465]: symlink '../../loop5' '/dev/disk/by-diskseq/74.tmp-b7:5' failed: Read-only file system [ 184.183865][T14741] tmpfs: Unknown parameter 'mpl' [ 184.548302][ T40] kauditd_printk_skb: 147 callbacks suppressed [ 184.548319][ T40] audit: type=1400 audit(1756304016.229:14882): avc: denied { read } for pid=14742 comm="syz.4.2507" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 184.561058][ T40] audit: type=1400 audit(1756304016.229:14883): avc: denied { open } for pid=14742 comm="syz.4.2507" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 184.566703][ T8465] udevd[8465]: symlink '../../loop3' '/dev/disk/by-diskseq/94.tmp-b7:3' failed: Read-only file system [ 184.573112][ T40] audit: type=1400 audit(1756304016.229:14884): avc: denied { ioctl } for pid=14742 comm="syz.4.2507" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x5328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 184.589677][ T40] audit: type=1400 audit(1756304016.269:14885): avc: denied { create } for pid=14746 comm="syz.4.2509" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 184.600648][ T40] audit: type=1400 audit(1756304016.269:14886): avc: denied { ioctl } for pid=14744 comm="syz.3.2508" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=73255 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 184.617537][ T40] audit: type=1400 audit(1756304016.299:14887): avc: denied { create } for pid=14744 comm="syz.3.2508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 184.623434][T14749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2510'. [ 184.625594][ T40] audit: type=1400 audit(1756304016.299:14888): avc: denied { create } for pid=14748 comm="syz.4.2510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 184.639264][ T40] audit: type=1400 audit(1756304016.299:14889): avc: denied { setopt } for pid=14744 comm="syz.3.2508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 184.648635][ T40] audit: type=1400 audit(1756304016.309:14890): avc: denied { create } for pid=14748 comm="syz.4.2510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 184.662802][ T40] audit: type=1400 audit(1756304016.338:14891): avc: denied { map_create } for pid=14750 comm="syz.4.2511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 184.703524][T14754] program syz.4.2512 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.792715][ T840] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 184.798370][ T840] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 184.802813][ T840] usb 7-1: Product: syz [ 184.808133][ T840] usb 7-1: config 0 descriptor?? [ 184.810938][ T840] usb 7-1: can't set config #0, error -71 [ 184.815483][ T840] usb 7-1: USB disconnect, device number 36 [ 184.981354][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 185.002660][T14763] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2514'. [ 185.012162][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 185.012946][T14763] 9p: Unknown uid 00000000004294967295 [ 185.052184][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 185.253980][ T8764] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.324484][ T8764] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.406149][ T8764] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.473984][ T5326] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 185.477748][ T5326] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 185.484501][ T5326] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 185.488906][ T5326] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 185.492151][ T8764] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.492437][ T5326] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 185.517283][T14772] xfrm0 speed is unknown, defaulting to 1000 [ 185.551964][ T8465] udevd[8465]: symlink '../../loop3' '/dev/disk/by-diskseq/94.tmp-b7:3' failed: Read-only file system [ 185.599342][T14772] chnl_net:caif_netlink_parms(): no params data found [ 185.629323][ T8764] bridge_slave_1: left allmulticast mode [ 185.631989][ T8764] bridge_slave_1: left promiscuous mode [ 185.634364][ T8764] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.638709][ T8764] bridge_slave_0: left allmulticast mode [ 185.641706][ T8764] bridge_slave_0: left promiscuous mode [ 185.644253][ T8764] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.753088][ T8764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.759101][ T8764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.764056][ T8764] bond0 (unregistering): Released all slaves [ 185.812120][T14772] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.815154][T14772] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.818258][T14772] bridge_slave_0: entered allmulticast mode [ 185.822976][T14772] bridge_slave_0: entered promiscuous mode [ 185.827414][T14772] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.831076][T14772] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.835764][T14772] bridge_slave_1: entered allmulticast mode [ 185.839145][T14772] bridge_slave_1: entered promiscuous mode [ 185.861869][ T8465] udevd[8465]: symlink '../../loop3' '/dev/disk/by-diskseq/94.tmp-b7:3' failed: Read-only file system [ 185.897306][T14772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.904864][T14772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.915648][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 185.958724][ T5954] udevd[5954]: symlink '../../loop3' '/dev/disk/by-diskseq/94.tmp-b7:3' failed: Read-only file system [ 185.961548][T14772] team0: Port device team_slave_0 added [ 185.992463][T14797] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.996713][T14797] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.057462][T14809] program syz.4.2527 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.057801][T14797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.072155][T14797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.136240][T14772] team0: Port device team_slave_1 added [ 186.150660][ T79] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.156116][ T79] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.159979][ T79] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.188240][T14813] Option '_n'tr1ZQ3-ֵkXv~' to dns_resolver key: bad/missing value [ 186.200914][ T79] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.222617][T14772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.228765][T14772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.240508][T14772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.256526][ T8764] hsr_slave_0: left promiscuous mode [ 186.259677][ T8764] hsr_slave_1: left promiscuous mode [ 186.263410][ T8764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.269538][ T8764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.273566][ T8764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.279082][ T8764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.286780][ T8764] veth1_macvtap: left promiscuous mode [ 186.289568][ T8764] veth0_macvtap: left promiscuous mode [ 186.292621][ T8764] veth1_vlan: left promiscuous mode [ 186.296883][ T8764] veth0_vlan: left promiscuous mode [ 186.505828][ T8764] team0 (unregistering): Port device team_slave_1 removed [ 186.525921][ T8764] team0 (unregistering): Port device team_slave_0 removed [ 186.613241][T14772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.616649][T14772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.628242][T14772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.694073][T14772] hsr_slave_0: entered promiscuous mode [ 186.696761][T14772] hsr_slave_1: entered promiscuous mode [ 186.699237][T14772] debugfs: 'hsr0' already exists in 'hsr' [ 186.701249][T14772] Cannot create hsr debugfs directory [ 186.794753][T14843] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.821117][T14846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2539'. [ 186.851050][T14772] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 186.861904][T14772] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 186.872556][T14772] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 186.882304][T14772] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 186.979208][T14772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.990246][T14772] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.995719][ T8740] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.998923][ T8740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.010644][ T8764] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.013526][ T8764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.148919][T14772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.164799][T14892] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 187.167826][T14892] overlayfs: failed to set xattr on upper [ 187.170736][T14892] overlayfs: ...falling back to redirect_dir=nofollow. [ 187.173961][T14892] overlayfs: ...falling back to index=off. [ 187.176754][T14892] overlayfs: ...falling back to uuid=null. [ 187.271315][T14900] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2548'. [ 187.315542][T14772] veth0_vlan: entered promiscuous mode [ 187.323001][T14772] veth1_vlan: entered promiscuous mode [ 187.326331][T14909] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2550'. [ 187.336812][T14772] veth0_macvtap: entered promiscuous mode [ 187.341864][T14772] veth1_macvtap: entered promiscuous mode [ 187.351560][T14772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.363257][T14772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.367047][T14906] usb 1-1: USB disconnect, device number 3 [ 187.372213][ T8763] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.376303][ T8763] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.381419][ T8763] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.384614][ T8763] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.421341][ T8740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.423984][ T8740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.438646][ T8783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.443112][ T8783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.538057][T14923] comedi: No check for data length of config insn id 3 is implemented [ 187.540894][T14923] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 187.544419][T14923] comedi: Assuming n=15 is correct [ 187.565408][T14931] kvm: user requested TSC rate below hardware speed [ 187.569969][ T5326] Bluetooth: hci1: command tx timeout [ 187.574567][T14931] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4223616668 (8447233336 ns) > initial count (4629617844 ns). Using initial count to start timer. [ 187.587312][T14934] netlink: 'syz.6.2556': attribute type 1 has an invalid length. [ 187.592463][T14934] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.2556'. [ 187.823994][T14945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2559'. [ 187.831934][T14945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2559'. [ 187.855373][T14945] binder_alloc: 14944: binder_alloc_buf size 16480 failed, no address space [ 187.859438][T14945] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 187.869151][T14945] hfs: can't find a HFS filesystem on dev sr0 [ 188.188727][T14952] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2561'. [ 188.242473][T14955] program syz.6.2561 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.850046][T14970] kvm: user requested TSC rate below hardware speed [ 188.854852][T14970] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4223616668 (8447233336 ns) > initial count (4629617844 ns). Using initial count to start timer. [ 189.187624][T14993] xfrm0 speed is unknown, defaulting to 1000 [ 189.529736][ T8763] Bluetooth: hci2: Frame reassembly failed (-84) [ 189.532624][T15014] Bluetooth: hci2: Frame reassembly failed (-84) [ 189.535013][ T8763] Bluetooth: hci2: Frame reassembly failed (-84) [ 189.659398][ T5975] Bluetooth: hci1: command tx timeout [ 189.743751][ T40] kauditd_printk_skb: 358 callbacks suppressed [ 189.743768][ T40] audit: type=1400 audit(1756304021.396:15250): avc: denied { read write } for pid=14772 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.757136][ T8465] udevd[8465]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 189.761788][ T40] audit: type=1400 audit(1756304021.396:15251): avc: denied { open } for pid=14772 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.771318][ T40] audit: type=1400 audit(1756304021.396:15252): avc: denied { ioctl } for pid=14772 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.781941][ T40] audit: type=1400 audit(1756304021.416:15253): avc: denied { ioctl } for pid=15015 comm="syz.6.2580" path="socket:[76205]" dev="sockfs" ino=76205 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 189.792287][ T40] audit: type=1400 audit(1756304021.416:15254): avc: denied { setopt } for pid=15015 comm="syz.6.2580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 189.793733][T14981] 9pnet_fd: p9_fd_create_tcp (14981): problem connecting socket to 127.0.0.1 [ 189.801384][ T40] audit: type=1400 audit(1756304021.446:15255): avc: denied { mount } for pid=15017 comm="syz.6.2581" name="/" dev="ocfs2_dlmfs" ino=76219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 189.813579][ T40] audit: type=1400 audit(1756304021.446:15256): avc: denied { ioctl } for pid=15017 comm="syz.6.2581" path="socket:[76223]" dev="sockfs" ino=76223 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 189.824219][ T40] audit: type=1400 audit(1756304021.446:15257): avc: denied { ioctl } for pid=15017 comm="syz.6.2581" path="socket:[76224]" dev="sockfs" ino=76224 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 189.834786][ T40] audit: type=1400 audit(1756304021.456:15258): avc: denied { read write } for pid=15017 comm="syz.6.2581" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 189.844196][ T40] audit: type=1400 audit(1756304021.456:15259): avc: denied { open } for pid=15017 comm="syz.6.2581" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 189.911041][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 189.950843][ T8465] udevd[8465]: symlink '../../loop3' '/dev/disk/by-diskseq/94.tmp-b7:3' failed: Read-only file system [ 189.995125][T15023] kvm: MWAIT instruction emulated as NOP! [ 190.559740][T15028] netlink: 6 bytes leftover after parsing attributes in process `syz.6.2584'. [ 190.575879][T15028] netlink: 1204 bytes leftover after parsing attributes in process `syz.6.2584'. [ 190.579900][T15028] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2584'. [ 190.613213][T15031] netlink: 328 bytes leftover after parsing attributes in process `syz.6.2585'. [ 190.620791][ T8465] udevd[8465]: symlink '../../loop3' '/dev/disk/by-diskseq/94.tmp-b7:3' failed: Read-only file system [ 190.783716][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 190.812053][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 190.838838][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 190.875467][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 191.485243][ T8465] udevd[8465]: symlink '../../loop3' '/dev/disk/by-diskseq/94.tmp-b7:3' failed: Read-only file system [ 191.576810][ T5326] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 191.596501][T15057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2593'. [ 191.613293][T15057] team0: Port device team_slave_0 removed [ 191.629062][T15059] netlink: 'syz.4.2594': attribute type 15 has an invalid length. [ 191.640893][ T8465] udevd[8465]: symlink '../../loop3' '/dev/disk/by-diskseq/94.tmp-b7:3' failed: Read-only file system [ 191.657375][T15060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2593'. [ 191.737762][ T5970] Bluetooth: hci1: command tx timeout [ 192.107229][T15085] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 192.116320][T15085] Invalid source name [ 192.118332][T15085] UBIFS error (pid: 15085): cannot open "./file0", error -22 [ 192.145617][T15087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2602'. [ 192.155977][T15087] xfrm1: entered promiscuous mode [ 192.158200][T15087] xfrm1: entered allmulticast mode [ 192.537396][T15064] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 192.540608][T15064] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 192.545195][T15064] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 192.549021][T15064] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 192.554677][T15064] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 192.560280][T15064] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 192.565139][T15064] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 192.568057][T15064] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 192.572707][T15064] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 192.641608][T15066] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 192.645040][T15066] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 192.647803][T15066] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 192.771400][T15105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.801370][ T5975] Bluetooth: hci3: unexpected event for opcode 0x2028 [ 192.820060][T15105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.017542][T15123] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2613'. [ 193.071678][T15126] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15126 comm=syz.2.2614 [ 193.488597][T15137] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2617'. [ 193.492580][T15137] xt_socket: unknown flags 0xd0 [ 193.718235][T15146] syz_tun: entered allmulticast mode [ 193.820679][T15156] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 193.845761][T15162] bond0: entered promiscuous mode [ 193.850435][T15162] bond_slave_0: entered promiscuous mode [ 193.853129][T15162] bond_slave_1: entered promiscuous mode [ 193.855823][T15162] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 193.862396][T15162] bond0: entered allmulticast mode [ 193.865913][T15162] bond_slave_0: entered allmulticast mode [ 193.869095][T15162] bond_slave_1: entered allmulticast mode [ 193.871468][T15162] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 193.931080][T15169] ieee802154 phy0 wpan0: encryption failed: -126 [ 194.104944][T15189] misc userio: Begin command sent, but we're already running [ 194.109186][T15181] syzkaller0: entered promiscuous mode [ 194.113252][T15181] syzkaller0: entered allmulticast mode [ 194.124421][T15196] misc userio: Can't change port type on an already running userio instance [ 194.128831][T15193] misc userio: Begin command sent, but we're already running [ 194.134287][T15189] misc userio: Begin command sent, but we're already running [ 194.213656][T15202] bond1: entered promiscuous mode [ 194.216675][T15202] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.390728][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.458482][ T10] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 194.458821][ T24] usb 7-1: new low-speed USB device number 37 using dummy_hcd [ 194.612387][ T10] usb 11-1: unable to get BOS descriptor or descriptor too short [ 194.616161][ T10] usb 11-1: not running at top speed; connect to a high speed hub [ 194.629132][ T10] usb 11-1: config 1 has an invalid descriptor of length 154, skipping remainder of the config [ 194.629243][ T24] usb 7-1: Invalid ep0 maxpacket: 32 [ 194.634144][ T10] usb 11-1: config 1 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.634174][ T10] usb 11-1: config 1 interface 0 has no altsetting 0 [ 194.640417][ T10] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 194.648386][ T10] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.651969][ T10] usb 11-1: Product: syz [ 194.653677][ T10] usb 11-1: Manufacturer: syz [ 194.656008][ T10] usb 11-1: SerialNumber: syz [ 194.709855][ T5975] Bluetooth: hci1: command 0x0419 tx timeout [ 194.709894][ T5970] Bluetooth: hci0: command 0x0c1a tx timeout [ 194.745393][T15219] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 194.769739][ T24] usb 7-1: new low-speed USB device number 38 using dummy_hcd [ 194.865665][ T10] cdc_ether 11-1:1.0: probe with driver cdc_ether failed with error -22 [ 194.871237][ T10] usb 11-1: USB disconnect, device number 2 [ 194.921069][ T24] usb 7-1: Invalid ep0 maxpacket: 32 [ 194.923434][ T24] usb usb7-port1: attempt power cycle [ 194.961238][ T40] kauditd_printk_skb: 28369 callbacks suppressed [ 194.961253][ T40] audit: type=1400 audit(1756304026.595:43629): avc: denied { create } for pid=15220 comm="syz.4.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 194.972599][ T40] audit: type=1400 audit(1756304026.595:43630): avc: denied { getopt } for pid=15220 comm="syz.4.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 194.979892][ T40] audit: type=1400 audit(1756304026.595:43631): avc: denied { create } for pid=15220 comm="syz.4.2643" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 194.988844][ T40] audit: type=1400 audit(1756304026.595:43632): avc: denied { create } for pid=15220 comm="syz.4.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 194.997551][ T40] audit: type=1400 audit(1756304026.595:43633): avc: denied { setopt } for pid=15220 comm="syz.4.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 195.005363][ T40] audit: type=1400 audit(1756304026.595:43634): avc: denied { shutdown } for pid=15220 comm="syz.4.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 195.011459][ T40] audit: type=1400 audit(1756304026.595:43635): avc: denied { getopt } for pid=15220 comm="syz.4.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 195.016782][ T40] audit: type=1400 audit(1756304026.595:43636): avc: denied { connect } for pid=15220 comm="syz.4.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 195.026814][ T40] audit: type=1400 audit(1756304026.595:43637): avc: denied { name_connect } for pid=15220 comm="syz.4.2643" dest=20007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 195.036889][ T40] audit: type=1400 audit(1756304026.595:43638): avc: denied { ioctl } for pid=15220 comm="syz.4.2643" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=75602 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 195.125391][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.261821][ T24] usb 7-1: new low-speed USB device number 39 using dummy_hcd [ 195.282218][ T24] usb 7-1: Invalid ep0 maxpacket: 32 [ 195.423191][ T24] usb 7-1: new low-speed USB device number 40 using dummy_hcd [ 195.425144][T15228] netlink: 'syz.6.2646': attribute type 1 has an invalid length. [ 195.431878][T15228] lo speed is unknown, defaulting to 1000 [ 195.434636][T15228] lo speed is unknown, defaulting to 1000 [ 195.437599][T15228] lo speed is unknown, defaulting to 1000 [ 195.444438][T15228] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 195.453009][ T24] usb 7-1: Invalid ep0 maxpacket: 32 [ 195.455422][T15228] lo speed is unknown, defaulting to 1000 [ 195.455579][ T24] usb usb7-port1: unable to enumerate USB device [ 195.458845][T15228] lo speed is unknown, defaulting to 1000 [ 195.464497][T15228] lo speed is unknown, defaulting to 1000 [ 195.467517][T15228] lo speed is unknown, defaulting to 1000 [ 195.470691][T15228] lo speed is unknown, defaulting to 1000 [ 195.474755][T15228] lo speed is unknown, defaulting to 1000 [ 195.477998][T15228] lo speed is unknown, defaulting to 1000 [ 195.480793][T15228] lo speed is unknown, defaulting to 1000 [ 195.499821][ T8465] udevd[8465]: symlink '../../loop3' '/dev/disk/by-diskseq/94.tmp-b7:3' failed: Read-only file system [ 195.515347][T15236] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2649'. [ 195.538853][ T8465] udevd[8465]: symlink '../../loop3' '/dev/disk/by-diskseq/94.tmp-b7:3' failed: Read-only file system [ 195.574562][T15247] fuse: Bad value for 'user_id' [ 195.576688][ T8465] udevd[8465]: symlink '../../loop3' '/dev/disk/by-diskseq/94.tmp-b7:3' failed: Read-only file system [ 195.576764][T15247] fuse: Bad value for 'user_id' [ 195.613500][ T8465] udevd[8465]: symlink '../../loop3' '/dev/disk/by-diskseq/94.tmp-b7:3' failed: Read-only file system [ 195.622475][T15250] __nla_validate_parse: 7 callbacks suppressed [ 195.622491][T15250] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2654'. [ 195.708553][ T8465] udevd[8465]: symlink '../../loop3' '/dev/disk/by-diskseq/94.tmp-b7:3' failed: Read-only file system [ 195.737171][ T8465] udevd[8465]: symlink '../../loop3' '/dev/disk/by-diskseq/94.tmp-b7:3' failed: Read-only file system [ 195.768990][ T8463] udevd[8463]: symlink '../../loop3' '/dev/disk/by-diskseq/94.tmp-b7:3' failed: Read-only file system [ 195.775009][ T79] Bluetooth: hci2: Frame reassembly failed (-84) [ 195.853483][T15276] Failed to get privilege flags for destination (handle=0x2:0x7ff) [ 195.858464][T15276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15276 comm=syz.4.2661 [ 195.865202][T15276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2661'. [ 195.911508][T15278] batman_adv: batadv0: Adding interface: dummy0 [ 195.914584][T15278] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.926014][T15278] batman_adv: batadv0: Interface activated: dummy0 [ 195.933729][T15278] batadv0: mtu less than device minimum [ 195.938084][T15278] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.943015][T15278] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.947926][T15278] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.952738][T15278] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.957826][T15278] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.962466][T15278] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.967420][T15278] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 196.086377][T15280] sock: sock_timestamping_bind_phc: sock not bind to device [ 196.396666][T15296] : entered promiscuous mode [ 196.612074][T15300] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2669'. [ 196.615780][T15300] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2669'. [ 196.622724][T15300] erspan0: entered promiscuous mode [ 196.627694][T15300] erspan0: left promiscuous mode [ 196.719077][T15304] binder: 15303:15304 unknown command 0 [ 196.721380][T15304] binder: 15303:15304 ioctl c0306201 200000000080 returned -22 [ 196.726461][T15304] binder_alloc: 15303: binder_alloc_buf, no vma [ 196.797719][ T5975] Bluetooth: hci0: command 0x0c1a tx timeout [ 196.807610][ T5975] Bluetooth: hci1: command 0x0419 tx timeout [ 196.863718][T15306] block device autoloading is deprecated and will be removed. [ 197.187538][T15313] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2673'. [ 197.222364][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 197.245540][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 197.256896][T15321] input: syz1 as /devices/virtual/input/input34 [ 197.258969][T15321] input: failed to attach handler leds to device input34, error: -6 [ 197.272872][ T8465] udevd[8465]: setting mode of /dev/input/event3 to 020660 failed: Read-only file system [ 197.386119][T15325] netlink: 'syz.2.2676': attribute type 3 has an invalid length. [ 197.389040][T15325] netlink: 'syz.2.2676': attribute type 1 has an invalid length. [ 197.392472][T15325] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2676'. [ 197.397001][T15325] net_ratelimit: 13 callbacks suppressed [ 197.397011][T15325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.841425][ T5970] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 197.841519][ T5975] Bluetooth: hci2: command 0xfc11 tx timeout [ 197.935446][T15353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2684'. [ 198.295371][T15376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2689'. [ 198.315127][T15376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2689'. [ 198.626981][T15393] loop6: detected capacity change from 0 to 7 [ 198.629454][T15398] No source specified [ 198.631675][T15393] Dev loop6: unable to read RDB block 7 [ 198.634759][T15393] loop6: AHDI p1 [ 198.636735][T15393] loop6: partition table partially beyond EOD, truncated [ 198.688020][T15398] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2696'. [ 198.741979][T15422] binder_alloc: binder_alloc_mmap_handler: 15420 2000000a0000-2000000a2000 already mapped failed -16 [ 198.828693][T15436] 9pnet_virtio: no channels available for device syz [ 198.885592][ T5970] Bluetooth: hci1: command 0x0419 tx timeout [ 198.885712][ T5975] Bluetooth: hci0: command 0x0c1a tx timeout [ 198.911664][T15398] vlan2: entered allmulticast mode [ 198.914045][T15398] bridge0: entered allmulticast mode [ 198.917967][T15398] bridge1: port 1(vlan2) entered blocking state [ 198.920694][T15398] bridge1: port 1(vlan2) entered disabled state [ 198.924882][T15398] vlan2: entered promiscuous mode [ 198.927799][T15398] bridge0: entered promiscuous mode [ 198.972579][T15461] binder: BINDER_SET_CONTEXT_MGR already set [ 198.975016][T15461] binder: 15458:15461 ioctl 4018620d 200000004a80 returned -16 [ 198.975174][T15460] binder_alloc: binder_alloc_mmap_handler: 15458 200000ffd000-200001000000 already mapped failed -16 [ 199.387527][ T5963] libceph: connect (1)[c::]:6789 error -101 [ 199.389562][ T5963] libceph: mon0 (1)[c::]:6789 connect error [ 199.438688][T15504] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(1) [ 199.441346][T15504] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 199.445238][T15504] vhci_hcd vhci_hcd.0: Device attached [ 199.462533][T10109] libceph: connect (1)[c::]:6789 error -101 [ 199.464817][T10109] libceph: mon0 (1)[c::]:6789 connect error [ 199.506305][T15501] ceph: No mds server is up or the cluster is laggy [ 199.510385][T15505] usbip_core: unknown command [ 199.512759][T15505] vhci_hcd: unknown pdu 1668249189 [ 199.515294][T15505] usbip_core: unknown command [ 199.518207][T15504] ceph: No mds server is up or the cluster is laggy [ 199.520041][ T8760] vhci_hcd: stop threads [ 199.522975][ T8760] vhci_hcd: release socket [ 199.525136][ T8760] vhci_hcd: disconnect device [ 199.633243][T15527] geneve2: entered promiscuous mode [ 199.635864][T15527] geneve2: entered allmulticast mode [ 199.641568][ T1144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 199.645419][ T1144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 199.649460][ T1144] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 199.653069][ T1144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 199.866245][T15540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15540 comm=syz.6.2735 [ 199.945600][T15535] netdevsim netdevsim6: Direct firmware load for . [ 199.945600][T15535] failed with error -2 [ 199.951616][T15535] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 199.951616][T15535] [ 200.002161][ T40] kauditd_printk_skb: 389 callbacks suppressed [ 200.002173][ T40] audit: type=1400 audit(1756304031.616:44028): avc: denied { unmount } for pid=9967 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 200.029811][ T40] audit: type=1400 audit(1756304031.646:44029): avc: denied { read write } for pid=15541 comm="syz.4.2736" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 200.037981][ T40] audit: type=1400 audit(1756304031.646:44030): avc: denied { open } for pid=15541 comm="syz.4.2736" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 200.088657][ T40] audit: type=1400 audit(1756304031.696:44031): avc: denied { read } for pid=15543 comm="syz.4.2737" dev="nsfs" ino=4026533553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 200.096325][ T40] audit: type=1400 audit(1756304031.696:44032): avc: denied { open } for pid=15543 comm="syz.4.2737" path="net:[4026533553]" dev="nsfs" ino=4026533553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 200.105057][ T40] audit: type=1400 audit(1756304031.696:44033): avc: denied { create } for pid=15543 comm="syz.4.2737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 200.112502][ T40] audit: type=1400 audit(1756304031.706:44034): avc: denied { prog_run } for pid=15543 comm="syz.4.2737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 200.220564][ T40] audit: type=1400 audit(1756304031.835:44035): avc: denied { create } for pid=15548 comm="syz.4.2738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 200.221545][T15549] openvswitch: netlink: Duplicate or invalid key (type 0). [ 200.228447][ T40] audit: type=1400 audit(1756304031.835:44036): avc: denied { write } for pid=15548 comm="syz.4.2738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 200.241452][T15549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.248845][ T40] audit: type=1400 audit(1756304031.855:44037): avc: denied { create } for pid=15548 comm="syz.4.2738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 200.635990][T15579] openvswitch: netlink: Multiple metadata blocks provided [ 200.693188][ T8465] udevd[8465]: symlink '../../loop6' '/dev/disk/by-diskseq/116.tmp-b7:6' failed: Read-only file system [ 200.728772][T15586] __nla_validate_parse: 12 callbacks suppressed [ 200.728786][T15586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2748'. [ 200.876732][T15583] kvm: pic: non byte write [ 200.973115][ T5970] Bluetooth: hci1: command 0x0419 tx timeout [ 201.089337][ T8465] udevd[8465]: symlink '../../loop6' '/dev/disk/by-diskseq/116.tmp-b7:6' failed: Read-only file system [ 201.091783][T15602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15602 comm=syz.6.2753 [ 201.104790][ T8465] udevd[8465]: symlink '../../loop3' '/dev/disk/by-diskseq/94.tmp-b7:3' failed: Read-only file system [ 201.107971][T15607] netlink: 'syz.3.2754': attribute type 17 has an invalid length. [ 201.112707][T15607] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2754'. [ 201.116498][T15607] macvtap0: entered allmulticast mode [ 201.118286][T15607] veth0_macvtap: entered allmulticast mode [ 201.121358][T15607] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 201.122628][ T8465] udevd[8465]: symlink '../../loop6' '/dev/disk/by-diskseq/116.tmp-b7:6' failed: Read-only file system [ 201.156520][ T8465] udevd[8465]: symlink '../../loop3' '/dev/disk/by-diskseq/94.tmp-b7:3' failed: Read-only file system [ 201.172513][ T8465] udevd[8465]: symlink '../../loop6' '/dev/disk/by-diskseq/116.tmp-b7:6' failed: Read-only file system [ 201.196171][ T8465] udevd[8465]: symlink '../../loop6' '/dev/disk/by-diskseq/116.tmp-b7:6' failed: Read-only file system [ 201.244604][ T8465] udevd[8465]: symlink '../../loop6' '/dev/disk/by-diskseq/116.tmp-b7:6' failed: Read-only file system [ 201.257665][ T8465] udevd[8465]: symlink '../../loop3' '/dev/disk/by-diskseq/94.tmp-b7:3' failed: Read-only file system [ 201.278411][ T8465] udevd[8465]: symlink '../../loop6' '/dev/disk/by-diskseq/116.tmp-b7:6' failed: Read-only file system [ 201.281137][T15629] program syz.6.2761 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.309198][T15630] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2760'. [ 201.332923][T15630] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15630 comm=syz.3.2760 [ 201.543099][T15644] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2767'. [ 201.546762][T15644] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 201.549562][T15644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.108003][T15658] binder: 15657:15658 ioctl 400c620e 200000000080 returned -22 [ 202.132340][T15660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2773'. [ 202.286396][T15670] kvm: pic: single mode not supported [ 202.286783][T15670] kvm: pic: non byte read [ 202.587087][T15684] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2780'. [ 202.595490][T15684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2780'. [ 202.599700][T15684] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2780'. [ 202.657936][T15687] netlink: 'syz.2.2781': attribute type 9 has an invalid length. [ 202.661606][T15687] netlink: 'syz.2.2781': attribute type 7 has an invalid length. [ 202.664986][T15687] netlink: 'syz.2.2781': attribute type 8 has an invalid length. [ 203.060169][ T5975] Bluetooth: hci1: command 0x0419 tx timeout [ 204.091791][T15700] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2785'. [ 204.097150][T15700] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2785'. [ 204.181119][T15713] SELinux: failed to load policy [ 204.230428][T15719] kvm: kvm [15718]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x2010200000009 [ 204.288300][T15725] overlayfs: missing 'lowerdir' [ 204.328662][T15723] bridge: RTM_NEWNEIGH with invalid ether address [ 204.537643][T15742] netlink: 'syz.4.2796': attribute type 18 has an invalid length. [ 204.541348][T15742] netlink: 'syz.4.2796': attribute type 18 has an invalid length. [ 204.573210][T15746] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15746 comm=syz.4.2797 [ 204.598747][T15749] IPVS: set_ctl: invalid protocol: 11612 172.30.1.7:20003 [ 204.632562][T15754] loop7: detected capacity change from 0 to 7 [ 204.637570][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.642126][ C3] buffer_io_error: 27 callbacks suppressed [ 204.642144][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 204.649542][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.653954][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 204.658253][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.662087][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 204.665675][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.669544][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 204.673165][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.677188][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 204.686452][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.690347][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 204.697028][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.701573][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 204.706061][ T8465] ldm_validate_partition_table(): Disk read failed. [ 204.709007][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.712815][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 204.716564][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.720936][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 204.726614][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.730280][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 204.734368][ T8465] Dev loop7: unable to read RDB block 0 [ 204.739488][ T8465] loop7: unable to read partition table [ 204.741405][ T8465] loop7: partition table beyond EOD, truncated [ 204.754664][T15754] ldm_validate_partition_table(): Disk read failed. [ 204.759796][T15754] Dev loop7: unable to read RDB block 0 [ 204.762248][T15754] loop7: unable to read partition table [ 204.765112][T15754] loop7: partition table beyond EOD, truncated [ 204.768419][T15754] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 204.839715][T15763] loop9: detected capacity change from 0 to 7 [ 204.843181][T15763] loop9: [ 204.844540][T15763] loop9: partition table partially beyond EOD, truncated [ 205.068896][ T40] kauditd_printk_skb: 218 callbacks suppressed [ 205.068911][ T40] audit: type=1400 audit(1756304036.668:44256): avc: denied { create } for pid=15780 comm="syz.6.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 205.080607][ T40] audit: type=1400 audit(1756304036.668:44257): avc: denied { create } for pid=15780 comm="syz.6.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 205.090760][ T40] audit: type=1400 audit(1756304036.668:44258): avc: denied { write } for pid=15780 comm="syz.6.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 205.100725][ T40] audit: type=1400 audit(1756304036.668:44259): avc: denied { perfmon } for pid=15780 comm="syz.6.2807" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 205.111210][ T40] audit: type=1400 audit(1756304036.668:44260): avc: denied { create } for pid=15780 comm="syz.6.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 205.121386][ T40] audit: type=1400 audit(1756304036.668:44262): avc: denied { prog_run } for pid=15780 comm="syz.6.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 205.129361][ T40] audit: type=1400 audit(1756304036.668:44263): avc: denied { bind } for pid=15780 comm="syz.6.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 205.139642][ T40] audit: type=1400 audit(1756304036.668:44261): avc: denied { write } for pid=15780 comm="syz.6.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 205.148865][ T40] audit: type=1400 audit(1756304036.708:44264): avc: denied { create } for pid=15785 comm="syz.6.2808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 205.161165][ T40] audit: type=1400 audit(1756304036.708:44265): avc: denied { create } for pid=15785 comm="syz.6.2808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 205.711617][T15802] tipc: Started in network mode [ 205.713759][T15802] tipc: Node identity de754beb54c4, cluster identity 4711 [ 205.716308][T15802] tipc: Enabled bearer , priority 0 [ 205.744278][T15802] syzkaller0: entered promiscuous mode [ 205.746749][T15802] syzkaller0: entered allmulticast mode [ 205.757431][T15802] tipc: Resetting bearer [ 205.827286][T15805] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 205.831713][T15805] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 205.836712][T15805] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 205.844077][T15801] tipc: Resetting bearer [ 205.852283][T15801] tipc: Disabling bearer [ 205.957523][T15808] devtmpfs: Unknown parameter 'fd' [ 205.957558][T15807] devtmpfs: Unknown parameter 'fd' [ 205.967534][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 206.174506][ T8465] udevd[8465]: symlink '../../loop6' '/dev/disk/by-diskseq/116.tmp-b7:6' failed: Read-only file system [ 206.195821][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 206.231855][ T61] lo speed is unknown, defaulting to 1000 [ 206.331295][T15833] __nla_validate_parse: 5 callbacks suppressed [ 206.331313][T15833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2822'. [ 206.378991][T15836] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 206.832988][ T5970] Bluetooth: hci2: command 0x1003 tx timeout [ 206.836065][ T5975] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 206.866542][ T8465] udevd[8465]: symlink '../../loop3' '/dev/disk/by-diskseq/94.tmp-b7:3' failed: Read-only file system [ 206.906095][ T8465] udevd[8465]: symlink '../../loop3' '/dev/disk/by-diskseq/94.tmp-b7:3' failed: Read-only file system [ 207.034294][ T8465] udevd[8465]: symlink '../../loop6' '/dev/disk/by-diskseq/116.tmp-b7:6' failed: Read-only file system [ 207.061697][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 207.084925][T15871] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2834'. [ 207.088687][T15871] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 207.104321][T15867] block nbd4: server does not support multiple connections per device. [ 207.151443][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 207.204366][T15867] block nbd4: server does not support multiple connections per device. [ 207.275470][T15867] block nbd4: server does not support multiple connections per device. [ 207.299781][T15876] IPVS: set_ctl: invalid protocol: 46 10.1.1.2:20004 [ 207.327749][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 207.368588][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 207.378329][T15867] block nbd4: server does not support multiple connections per device. [ 207.407299][T15884] netlink: 'syz.2.2839': attribute type 19 has an invalid length. [ 207.455745][T15867] block nbd4: server does not support multiple connections per device. [ 207.545970][T15867] block nbd4: server does not support multiple connections per device. [ 207.656882][T15905] netlink: 'syz.2.2845': attribute type 10 has an invalid length. [ 207.660377][T15905] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2845'. [ 207.665282][T15867] block nbd4: server does not support multiple connections per device. [ 207.668198][T15905] team0: Port device geneve0 added [ 207.672614][ T8760] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 207.676820][ T8760] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 207.680668][ T8760] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 207.685276][ T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 207.715721][T15905] xfrm0 speed is unknown, defaulting to 1000 [ 207.719060][T15905] lo speed is unknown, defaulting to 1000 [ 207.804964][T15867] block nbd4: server does not support multiple connections per device. [ 207.854165][T15867] block nbd4: server does not support multiple connections per device. [ 207.857857][T15867] block nbd4: shutting down sockets [ 208.033871][ T6249] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 208.183915][ T6249] usb 7-1: Using ep0 maxpacket: 8 [ 208.187815][ T6249] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 208.193795][ T6249] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 208.198373][ T6249] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 208.202505][ T6249] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.208561][ T6249] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 208.213376][ T6249] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.329088][T15952] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2861'. [ 208.431961][T15913] netlink: 1740 bytes leftover after parsing attributes in process `syz.2.2847'. [ 208.432131][T15954] netlink: 1740 bytes leftover after parsing attributes in process `syz.2.2847'. [ 208.441138][ T6249] usb 7-1: GET_CAPABILITIES returned 0 [ 208.444233][ T6249] usbtmc 7-1:16.0: can't read capabilities [ 208.743801][ T10] usb 7-1: USB disconnect, device number 41 [ 208.870113][T15964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2865'. [ 208.874427][T15964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2865'. [ 208.881220][T15964] netlink: 'syz.3.2865': attribute type 12 has an invalid length. [ 208.923683][T15968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2866'. [ 208.936908][T15968] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15968 comm=syz.3.2866 [ 209.102748][ T6249] usb 11-1: new full-speed USB device number 3 using dummy_hcd [ 209.255680][ T6249] usb 11-1: config 0 has no interfaces? [ 209.258206][ T6249] usb 11-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 209.262037][ T6249] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.266640][ T6249] usb 11-1: config 0 descriptor?? [ 209.484549][T10109] usb 11-1: USB disconnect, device number 3 [ 210.107866][ T40] kauditd_printk_skb: 197 callbacks suppressed [ 210.107884][ T40] audit: type=1400 audit(1756304041.694:44463): avc: denied { bind } for pid=15996 comm="syz.3.2873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 210.108698][T16000] Can't find a SQUASHFS superblock on nullb0 [ 210.110852][ T40] audit: type=1400 audit(1756304041.694:44464): avc: denied { mounton } for pid=15996 comm="syz.3.2873" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 210.120284][T16000] netlink: 272 bytes leftover after parsing attributes in process `syz.3.2873'. [ 210.363931][ T40] audit: type=1400 audit(1756304041.954:44465): avc: denied { create } for pid=16001 comm="syz.6.2874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 210.372753][ T40] audit: type=1400 audit(1756304041.954:44466): avc: denied { setopt } for pid=16001 comm="syz.6.2874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 210.380969][ T40] audit: type=1400 audit(1756304041.954:44467): avc: denied { create } for pid=16001 comm="syz.6.2874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 210.389735][ T40] audit: type=1400 audit(1756304041.954:44468): avc: denied { create } for pid=16001 comm="syz.6.2874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 210.401026][ T40] audit: type=1400 audit(1756304041.954:44469): avc: denied { write } for pid=16001 comm="syz.6.2874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 210.410210][ T40] audit: type=1400 audit(1756304041.954:44470): avc: denied { read } for pid=16001 comm="syz.6.2874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 210.418619][ T40] audit: type=1400 audit(1756304041.954:44471): avc: denied { bind } for pid=16001 comm="syz.6.2874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 210.429076][ T40] audit: type=1400 audit(1756304041.954:44472): avc: denied { listen } for pid=16001 comm="syz.6.2874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 210.625539][T16016] macvlan2: entered promiscuous mode [ 210.628180][T16016] macvlan2: entered allmulticast mode [ 210.636326][T16016] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 210.804644][T16019] bridge_slave_0: left allmulticast mode [ 210.807639][T16019] bridge_slave_0: left promiscuous mode [ 210.810199][T16019] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.855280][T16019] bridge_slave_1: left allmulticast mode [ 210.858032][T16019] bridge_slave_1: left promiscuous mode [ 210.862972][T16019] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.869639][T16019] bond0: (slave bond_slave_0): Releasing backup interface [ 210.876687][T16019] bond0: (slave bond_slave_1): Releasing backup interface [ 210.889805][T16019] team0: Port device team_slave_1 removed [ 210.896454][T16019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.899657][T16019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.904455][T16019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.907580][T16019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.925415][T16032] vlan0: entered promiscuous mode [ 210.933363][T16032] team0: Port device vlan0 added [ 210.948055][T16019] tipc: Failed to obtain node identity [ 210.950432][T16019] tipc: Enabling of bearer rejected, failed to enable media [ 210.972918][ T8463] udevd[8463]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 211.047319][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 211.094417][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 211.147926][T16055] 9pnet_fd: p9_fd_create_tcp (16055): problem connecting socket to 127.0.0.1 [ 211.151549][ T5954] udevd[5954]: setting mode of /dev/vcs26 to 020660 failed: Read-only file system [ 211.152753][ T8465] udevd[8465]: symlink '../../loop3' '/dev/disk/by-diskseq/94.tmp-b7:3' failed: Read-only file system [ 211.155438][ T8462] udevd[8462]: setting mode of /dev/vcsu26 to 020660 failed: Read-only file system [ 211.158932][ T8463] udevd[8463]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 211.162012][ T6819] udevd[6819]: setting mode of /dev/vcsa26 to 020660 failed: Read-only file system [ 211.175112][ T5954] udevd[5954]: setting owner of /dev/vcs26 to uid=0, gid=5 failed: Read-only file system [ 211.181682][ T6819] udevd[6819]: setting owner of /dev/vcsa26 to uid=0, gid=5 failed: Read-only file system [ 211.473439][T16076] __nla_validate_parse: 5 callbacks suppressed [ 211.473457][T16076] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2900'. [ 211.482494][T16077] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2900'. [ 211.502277][T16004] Set syz1 is full, maxelem 65536 reached [ 211.510536][ T61] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 211.570109][ T6249] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 211.670920][ T61] usb 7-1: Using ep0 maxpacket: 32 [ 211.674160][ T61] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 211.678558][ T61] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 211.682929][ T61] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 211.688160][ T61] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 211.692839][ T61] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 211.697363][ T61] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 211.700563][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.704365][ T61] usb 7-1: config 0 descriptor?? [ 211.740229][ T6249] usb 9-1: Using ep0 maxpacket: 16 [ 211.743482][ T6249] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 211.748908][ T6249] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 211.752221][ T6249] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.754884][ T6249] usb 9-1: Product: syz [ 211.756216][ T6249] usb 9-1: Manufacturer: syz [ 211.757840][ T6249] usb 9-1: SerialNumber: syz [ 211.760253][ T6249] usb 9-1: config 0 descriptor?? [ 211.763383][ T6249] hub 9-1:0.0: bad descriptor, ignoring hub [ 211.765559][ T6249] hub 9-1:0.0: probe with driver hub failed with error -5 [ 211.769205][ T6249] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input36 [ 211.910649][ T61] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 42 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 212.070086][ T6058] usb 9-1: USB disconnect, device number 6 [ 212.262271][T16094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2892'. [ 212.266312][T16094] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 212.411238][T16096] IPVS: set_ctl: invalid protocol: 60 100.1.1.0:20000 [ 212.503603][ T5975] Bluetooth: hci1: unexpected event for opcode 0x0c1a [ 212.506653][T16100] kvm: pic: non byte read [ 212.513077][T16100] kvm: pic: non byte read [ 212.515507][T16100] kvm: pic: single mode not supported [ 212.515515][T16100] pic_ioport_write: 1 callbacks suppressed [ 212.515523][T16100] kvm: pic: level sensitive irq not supported [ 212.521018][T16100] kvm: pic: non byte read [ 212.527247][T16100] kvm: pic: non byte read [ 212.530785][T16100] kvm: pic: non byte read [ 212.533273][T16100] kvm: pic: single mode not supported [ 212.533526][T16100] kvm: pic: non byte read [ 212.537682][T16100] kvm: pic: non byte read [ 212.540730][T16100] kvm: pic: non byte read [ 212.543524][T16100] kvm: pic: non byte read [ 212.553093][T16100] block device autoloading is deprecated and will be removed. [ 212.555936][T16100] syz.6.2906: attempt to access beyond end of device [ 212.555936][T16100] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 212.660774][T16107] can0: slcan on ttyS3. [ 212.700223][T16107] can0 (unregistered): slcan off ttyS3. [ 212.751601][T16115] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2912'. [ 212.786884][T16117] bond0: entered promiscuous mode [ 212.788688][T16117] bond_slave_0: entered promiscuous mode [ 212.791016][T16117] bond_slave_1: entered promiscuous mode [ 212.794141][T16117] bond0: left promiscuous mode [ 212.795769][T16117] bond_slave_0: left promiscuous mode [ 212.797615][T16117] bond_slave_1: left promiscuous mode [ 212.835854][T16118] "syz.6.2913" (16118) uses obsolete ecb(arc4) skcipher [ 212.948793][ T61] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 212.992870][ T5975] Bluetooth: hci1: unknown advertising packet type: 0x82 [ 212.992960][ T5975] Bluetooth: hci1: Malformed LE Event: 0x02 [ 212.993377][T16123] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2915'. [ 213.002709][T16123] netlink: 'syz.6.2915': attribute type 7 has an invalid length. [ 213.005962][T16123] netlink: 'syz.6.2915': attribute type 8 has an invalid length. [ 213.011713][T16123] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2915'. [ 213.098957][ T61] usb 9-1: Using ep0 maxpacket: 32 [ 213.102313][ T61] usb 9-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 213.105459][ T61] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.110794][ T61] usb 9-1: config 0 descriptor?? [ 213.116505][ T61] as10x_usb: device has been detected [ 213.119432][ T61] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 213.128376][ T61] usb 9-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 213.137999][ T61] as10x_usb: error during firmware upload part1 [ 213.142366][ T61] Registered device nBox DVB-T Dongle [ 214.072476][T16133] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2918'. [ 214.079490][T16133] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2918'. [ 214.219676][ T6048] usb 7-1: USB disconnect, device number 42 [ 214.225175][ T6048] usblp0: removed [ 214.552661][T16162] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2926'. [ 214.640260][T16177] mac80211_hwsim hwsim25 a: renamed from wlan1 [ 214.667126][T10109] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 214.698224][ T5975] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 214.810028][T16187] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.2933'. [ 214.838809][T10109] usb 11-1: config index 0 descriptor too short (expected 90, got 87) [ 214.842327][T10109] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.848665][T10109] usb 11-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 214.852572][T10109] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.856244][T10109] usb 11-1: Product: syz [ 214.860176][T10109] usb 11-1: Manufacturer: syz [ 214.863080][T10109] usb 11-1: SerialNumber: syz [ 214.869104][T10109] usb 11-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 214.883863][T10109] usb 11-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 214.971934][T15431] bond0 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 214.976382][T15431] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 215.092318][ T24] usb 11-1: USB disconnect, device number 4 [ 215.620255][ T40] kauditd_printk_skb: 247 callbacks suppressed [ 215.620272][ T40] audit: type=1400 audit(1756304047.219:44720): avc: denied { write } for pid=16190 comm="syz.2.2934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 215.629278][ T40] audit: type=1400 audit(1756304047.219:44721): avc: denied { write } for pid=16190 comm="syz.2.2934" lport=35255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 215.674614][ T6048] usb 9-1: USB disconnect, device number 7 [ 215.685634][ T6048] Unregistered device nBox DVB-T Dongle [ 215.688126][ T6048] as10x_usb: device has been disconnected [ 215.690983][ T40] audit: type=1400 audit(1756304047.279:44722): avc: denied { prog_load } for pid=16192 comm="syz.4.2935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 215.702939][ T40] audit: type=1400 audit(1756304047.279:44723): avc: denied { bpf } for pid=16192 comm="syz.4.2935" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 215.710868][ T40] audit: type=1400 audit(1756304047.279:44724): avc: denied { create } for pid=16192 comm="syz.4.2935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 215.719065][ T40] audit: type=1400 audit(1756304047.279:44725): avc: denied { setopt } for pid=16192 comm="syz.4.2935" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 215.801509][ T40] audit: type=1400 audit(1756304047.389:44726): avc: denied { sqpoll } for pid=16196 comm="syz.4.2936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 215.808367][ T40] audit: type=1400 audit(1756304047.389:44727): avc: denied { create } for pid=16196 comm="syz.4.2936" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 215.816233][ T40] audit: type=1400 audit(1756304047.389:44728): avc: denied { ioctl } for pid=16196 comm="syz.4.2936" path="socket:[81481]" dev="sockfs" ino=81481 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 215.825674][ T40] audit: type=1400 audit(1756304047.389:44729): avc: denied { module_request } for pid=16196 comm="syz.4.2936" kmod="rtnl-link-bond_slave" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 215.947795][T10109] ath9k_htc 11-1:1.0: ath9k_htc: Target is unresponsive [ 215.951119][T10109] ath9k_htc: Failed to initialize the device [ 215.954607][ T24] usb 11-1: ath9k_htc: USB layer deinitialized [ 217.057709][T15431] bond1 (unregistering): Released all slaves [ 217.066264][T15431] bond0 (unregistering): Released all slaves [ 217.073957][T15431] bond2 (unregistering): Released all slaves [ 217.081634][T15431] bond3 (unregistering): Released all slaves [ 217.090750][T15431] bond4 (unregistering): Released all slaves [ 217.097740][T15431] bond5 (unregistering): Released all slaves [ 217.108473][T16191] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2934'. [ 217.111923][T16191] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2934'. [ 217.115233][T16191] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2934'. [ 217.147773][T16204] loop6: detected capacity change from 0 to 7 [ 217.148556][ T8465] udevd[8465]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 217.158959][T16204] Dev loop6: unable to read RDB block 7 [ 217.161310][T16204] loop6: unable to read partition table [ 217.164011][T16204] loop6: partition table beyond EOD, truncated [ 217.166774][T15431] : left promiscuous mode [ 217.169366][T16204] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 217.181821][ T5954] udevd[5954]: symlink '../../loop6' '/dev/disk/by-diskseq/122.tmp-b7:6' failed: Read-only file system [ 217.207755][ T8465] udevd[8465]: symlink '../../loop6' '/dev/disk/by-diskseq/122.tmp-b7:6' failed: Read-only file system [ 217.209339][ T8463] udevd[8463]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 217.218123][T16212] gre0: entered promiscuous mode [ 217.220340][T16212] gre0: entered allmulticast mode [ 217.222121][ T8465] udevd[8465]: symlink '../../loop6' '/dev/disk/by-diskseq/122.tmp-b7:6' failed: Read-only file system [ 217.238832][ T8465] udevd[8465]: symlink '../../loop3' '/dev/disk/by-diskseq/94.tmp-b7:3' failed: Read-only file system [ 217.261065][ T5954] udevd[5954]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 217.275348][T15431] IPVS: stopping backup sync thread 12574 ... [ 217.276594][ T8465] udevd[8465]: symlink '../../loop3' '/dev/disk/by-diskseq/94.tmp-b7:3' failed: Read-only file system [ 217.279759][T16220] syz.3.2943: vmalloc error: size 3429728256, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 217.290924][T16220] CPU: 3 UID: 0 PID: 16220 Comm: syz.3.2943 Not tainted syzkaller #0 PREEMPT(full) [ 217.290948][T16220] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 217.290959][T16220] Call Trace: [ 217.290965][T16220] [ 217.290971][T16220] dump_stack_lvl+0x16c/0x1f0 [ 217.291038][T16220] warn_alloc+0x248/0x3a0 [ 217.291057][T16220] ? __pfx_warn_alloc+0x10/0x10 [ 217.291078][T16220] ? kasan_save_stack+0x42/0x60 [ 217.291096][T16220] ? kasan_save_stack+0x33/0x60 [ 217.291112][T16220] ? kasan_save_track+0x14/0x30 [ 217.291128][T16220] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 217.291151][T16220] ? __vb2_queue_alloc+0x8c9/0x1280 [ 217.291172][T16220] ? vb2_core_create_bufs+0x559/0xab0 [ 217.291200][T16220] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 217.291223][T16220] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 217.291253][T16220] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 217.291279][T16220] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 217.291309][T16220] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 217.291332][T16220] vmalloc_user_noprof+0x9e/0xe0 [ 217.291357][T16220] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 217.291379][T16220] vb2_vmalloc_alloc+0x135/0x3f0 [ 217.291403][T16220] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 217.291427][T16220] __vb2_queue_alloc+0x8c9/0x1280 [ 217.291454][T16220] vb2_core_create_bufs+0x559/0xab0 [ 217.291478][T16220] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 217.291504][T16220] ? __pfx_stack_trace_save+0x10/0x10 [ 217.291528][T16220] ? __mutex_trylock_common+0xe9/0x250 [ 217.291558][T16220] vb2_create_bufs+0x5e8/0x840 [ 217.291580][T16220] ? __pfx_vb2_create_bufs+0x10/0x10 [ 217.291599][T16220] ? v4l_sanitize_colorspace+0x213/0x400 [ 217.291619][T16220] vb2_ioctl_create_bufs+0x244/0x3e0 [ 217.291638][T16220] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 217.291659][T16220] vidioc_create_bufs+0x7d/0xf0 [ 217.291677][T16220] v4l_create_bufs+0x156/0x270 [ 217.291702][T16220] __video_do_ioctl+0xb40/0xfc0 [ 217.291720][T16220] ? __might_fault+0x13b/0x190 [ 217.291737][T16220] ? __pfx___video_do_ioctl+0x10/0x10 [ 217.291752][T16220] ? lock_release+0x201/0x2f0 [ 217.291783][T16220] video_usercopy+0x4cd/0x1720 [ 217.291801][T16220] ? __pfx___video_do_ioctl+0x10/0x10 [ 217.291817][T16220] ? selinux_kernel_read_file+0x110/0x130 [ 217.291844][T16220] ? __pfx_video_usercopy+0x10/0x10 [ 217.291871][T16220] v4l2_ioctl+0x1bd/0x250 [ 217.291886][T16220] ? __pfx_v4l2_ioctl+0x10/0x10 [ 217.291902][T16220] __x64_sys_ioctl+0x18b/0x210 [ 217.291932][T16220] do_syscall_64+0xcd/0x4c0 [ 217.291952][T16220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.291972][T16220] RIP: 0033:0x7ff2b7b8ebe9 [ 217.291987][T16220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.292005][T16220] RSP: 002b:00007ff2b8aa0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.292037][T16220] RAX: ffffffffffffffda RBX: 00007ff2b7db5fa0 RCX: 00007ff2b7b8ebe9 [ 217.292048][T16220] RDX: 0000200000000280 RSI: 00000000c100565c RDI: 0000000000000007 [ 217.292059][T16220] RBP: 00007ff2b7c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 217.292068][T16220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.292078][T16220] R13: 00007ff2b7db6038 R14: 00007ff2b7db5fa0 R15: 00007ffd8ea42bc8 [ 217.292094][T16220] [ 217.292101][T16220] Mem-Info: [ 217.445388][T16220] active_anon:11442 inactive_anon:2 isolated_anon:0 [ 217.445388][T16220] active_file:5523 inactive_file:15779 isolated_file:0 [ 217.445388][T16220] unevictable:1768 dirty:35 writeback:0 [ 217.445388][T16220] slab_reclaimable:9097 slab_unreclaimable:89840 [ 217.445388][T16220] mapped:25718 shmem:2405 pagetables:1829 [ 217.445388][T16220] sec_pagetables:314 bounce:0 [ 217.445388][T16220] kernel_misc_reclaimable:0 [ 217.445388][T16220] free:469684 free_pcp:10510 free_cma:0 [ 217.460455][ T8463] udevd[8463]: symlink '../../loop6' '/dev/disk/by-diskseq/123.tmp-b7:6' failed: Read-only file system [ 217.465410][T16220] Node 0 active_anon:45768kB inactive_anon:8kB active_file:22084kB inactive_file:62792kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:102688kB dirty:136kB writeback:0kB shmem:10180kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16880kB pagetables:6572kB sec_pagetables:1256kB all_unreclaimable? yes Balloon:0kB [ 217.473760][T16229] can0: slcan on ptm1. [ 217.484100][T16220] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:324kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:184kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:176kB pagetables:744kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 217.499757][T16220] Node 0 DMA free:11244kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 217.512955][T16220] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 217.516146][T16220] Node 0 DMA32 free:253392kB boost:61900kB min:89416kB low:96292kB high:103168kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45892kB inactive_anon:8kB active_file:22084kB inactive_file:62792kB unevictable:3536kB writepending:136kB present:2080628kB managed:1263492kB mlocked:0kB bounce:0kB free_pcp:38488kB local_pcp:9240kB free_cma:0kB [ 217.531637][T16220] lowmem_reserve[]: 0 0 0 0 0 [ 217.533942][T16220] Node 1 Normal free:1614100kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:324kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:4096kB local_pcp:0kB free_cma:0kB [ 217.547149][T16220] lowmem_reserve[]: 0 0 0 0 0 [ 217.549504][T16220] Node 0 DMA: 5*4kB (U) 5*8kB (U) 5*16kB (U) 5*32kB (U) 5*64kB (U) 5*128kB (U) 5*256kB (U) 5*512kB (U) 4*1024kB (U) 1*2048kB (M) 0*4096kB = 11244kB [ 217.557294][T16220] Node 0 DMA32: 7*4kB (UME) 528*8kB (UME) 493*16kB (UME) 828*32kB (UME) 314*64kB (UME) 204*128kB (UME) 163*256kB (UME) 147*512kB (UME) 51*1024kB (UM) 0*2048kB 0*4096kB = 254060kB [ 217.566731][T16220] Node 1 Normal: 169*4kB (UME) 240*8kB (UME) 239*16kB (UME) 378*32kB (UME) 239*64kB (UME) 174*128kB (UME) 152*256kB (UME) 143*512kB (UME) 130*1024kB (UME) 7*2048kB (UM) 317*4096kB (UM) = 1614100kB [ 217.575131][T16220] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 217.579452][T16220] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 217.583692][T16220] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 217.588408][T16220] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 217.592301][T16220] 23706 total pagecache pages [ 217.594434][T16220] 3 pages in swap cache [ 217.596314][T16220] Free swap = 124984kB [ 217.598248][T16220] Total swap = 124996kB [ 217.600147][T16220] 1048443 pages RAM [ 217.601844][T16220] 0 pages HighMem/MovableOnly [ 217.603963][T16220] 283257 pages reserved [ 217.604369][T16228] can0 (unregistered): slcan off ptm1. [ 217.605880][T16220] 0 pages cma reserved [ 217.633940][ T8465] udevd[8465]: symlink '../../loop6' '/dev/disk/by-diskseq/123.tmp-b7:6' failed: Read-only file system [ 217.644680][T16233] Bluetooth: MGMT ver 1.23 [ 217.652976][T15431] hsr_slave_0: left promiscuous mode [ 217.657683][T15431] hsr_slave_1: left promiscuous mode [ 217.665038][T15431] veth1_vlan: left promiscuous mode [ 218.093242][T16253] tipc: Started in network mode [ 218.096853][T16253] tipc: Node identity 1e775b92751e, cluster identity 4711 [ 218.100714][T16253] tipc: Enabled bearer , priority 0 [ 218.105777][T16252] tipc: Resetting bearer [ 218.172452][T16240] syz.3.2949 (16240): drop_caches: 1 [ 218.181512][T16252] tipc: Disabling bearer [ 218.200165][T16240] syz.3.2949 (16240): drop_caches: 1 [ 218.316909][ T5975] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 218.603349][ T24] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 218.755526][ T24] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.763646][ T24] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 218.767846][ T24] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 218.771116][ T24] usb 11-1: Product: syz [ 218.772875][ T24] usb 11-1: Manufacturer: syz [ 218.775212][ T24] usb 11-1: SerialNumber: syz [ 218.981108][ T24] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 219.083572][T16282] binder: BINDER_SET_CONTEXT_MGR already set [ 219.086244][T16282] binder: 16281:16282 ioctl 4018620d 200000000f80 returned -16 [ 219.183779][T16287] loop3: detected capacity change from 0 to 1 [ 219.187468][T16287] Dev loop3: unable to read RDB block 1 [ 219.190142][T16287] loop3: unable to read partition table [ 219.194381][T16287] loop3: partition table beyond EOD, truncated [ 219.197348][T16287] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 219.205142][T16290] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2968'. [ 219.210136][T16290] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2968'. [ 219.242156][ T6058] usb 11-1: USB disconnect, device number 5 [ 219.245578][ T6058] usblp0: removed [ 219.315520][ T5975] Bluetooth: hci1: unexpected event for opcode 0x0406 [ 219.430281][T16315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2977'. [ 219.457755][T16317] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2978'. [ 219.471472][ T5975] Bluetooth: hci3: unexpected event for opcode 0x5681 [ 219.477673][T16322] tty tty1: ldisc open failed (-12), clearing slot 0 [ 219.494249][T16327] trusted_key: encrypted_key: master key parameter is missing [ 219.725091][T16348] binder: 16337:16348 ioctl c0306201 2000000003c0 returned -14 [ 219.830501][T16350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2987'. [ 219.950079][T16354] xfrm0 speed is unknown, defaulting to 1000 [ 219.954187][T16354] lo speed is unknown, defaulting to 1000 [ 220.079465][T16362] binder: 16361:16362 ioctl 4188aea7 200000000400 returned -22 [ 220.134424][T16365] Invalid logical block size (2) [ 220.247074][T16373] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2995'. [ 220.284828][T16380] siw: device registration error -23 [ 220.287657][T16378] ------------[ cut here ]------------ [ 220.290056][T16378] WARNING: CPU: 1 PID: 16378 at mm/page_alloc.c:5124 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 220.290123][T16380] program syz.6.2997 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 220.294881][T16378] Modules linked in: [ 220.294906][T16378] CPU: 1 UID: 0 PID: 16378 Comm: syz.2.2996 Not tainted syzkaller #0 PREEMPT(full) [ 220.294938][T16378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 220.294953][T16378] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 220.294983][T16378] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 cf 9c 81 09 83 fe 0a 0f 86 0a fe ff ff 80 3d bd 9d 7e 0e 00 75 0b c6 05 b4 9d 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 220.295006][T16378] RSP: 0018:ffffc9000347f7f0 EFLAGS: 00010246 [ 220.295025][T16378] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 220.295039][T16378] RDX: 0000000000000000 RSI: 000000000000001b RDI: 0000000000040d40 [ 220.295053][T16378] RBP: 000000000000001b R08: 0000000000000005 R09: 0000000000000009 [ 220.295067][T16378] R10: 000000000000001b R11: 0000000000000001 R12: 0000000000040d40 [ 220.345224][T16378] R13: 1ffff9200068ff13 R14: ffffffff9ae78a24 R15: 000000000000001b [ 220.348961][T16378] FS: 00007fe8408cf6c0(0000) GS:ffff8880d67bc000(0000) knlGS:0000000000000000 [ 220.354635][T16378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 220.358084][T16378] CR2: 0000200000002100 CR3: 0000000037434000 CR4: 0000000000352ef0 [ 220.361440][T16378] Call Trace: [ 220.363356][T16378] [ 220.364672][T16378] ? do_syscall_64+0xcd/0x4c0 [ 220.366749][T16378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.369477][T16378] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 220.372258][T16378] ? rcu_is_watching+0x12/0xc0 [ 220.374283][T16378] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 220.376838][T16378] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 220.379402][T16378] ? policy_nodemask+0xea/0x4e0 [ 220.381460][T16378] alloc_pages_mpol+0x1fb/0x550 [ 220.383850][T16378] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 220.386520][T16378] ? v9fs_fid_get_acl+0x7a/0x120 [ 220.388957][T16378] ___kmalloc_large_node+0xed/0x160 [ 220.391545][T16378] ? v9fs_fid_get_acl+0x7a/0x120 [ 220.394208][T16378] __kmalloc_large_node_noprof+0x1c/0x70 [ 220.396816][T16378] __kmalloc_noprof.cold+0xc/0x61 [ 220.399062][T16378] ? __pfx_iget5_locked+0x10/0x10 [ 220.401226][T16378] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 220.403850][T16378] ? p9_req_put+0x1c6/0x250 [ 220.405806][T16378] v9fs_fid_get_acl+0x7a/0x120 [ 220.407848][T16378] v9fs_get_acl+0xee/0x530 [ 220.409762][T16378] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 220.412338][T16378] v9fs_mount+0x4fd/0xa90 [ 220.414431][T16378] ? __pfx_v9fs_mount+0x10/0x10 [ 220.417135][T16378] ? cap_capable+0xb3/0x250 [ 220.419472][T16378] ? __pfx_v9fs_mount+0x10/0x10 [ 220.422177][T16378] legacy_get_tree+0x10c/0x220 [ 220.424571][T16378] vfs_get_tree+0x8b/0x340 [ 220.426497][T16378] path_mount+0x1513/0x2000 [ 220.428575][T16378] ? __pfx_path_mount+0x10/0x10 [ 220.430668][T16378] ? kmem_cache_free+0x2d1/0x4d0 [ 220.432777][T16378] ? putname+0x154/0x1a0 [ 220.434701][T16378] ? putname+0x154/0x1a0 [ 220.436515][T16378] ? __x64_sys_mount+0x28d/0x310 [ 220.438699][T16378] __x64_sys_mount+0x28d/0x310 [ 220.440797][T16378] ? __pfx___x64_sys_mount+0x10/0x10 [ 220.443535][T16378] do_syscall_64+0xcd/0x4c0 [ 220.446002][T16378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.448807][T16378] RIP: 0033:0x7fe83f98ebe9 [ 220.451009][T16378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.459368][T16378] RSP: 002b:00007fe8408cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 220.462957][T16378] RAX: ffffffffffffffda RBX: 00007fe83fbb5fa0 RCX: 00007fe83f98ebe9 [ 220.466578][T16378] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 220.471022][T16378] RBP: 00007fe83fa11e19 R08: 0000200000000580 R09: 0000000000000000 [ 220.474982][T16378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.478304][T16378] R13: 00007fe83fbb6038 R14: 00007fe83fbb5fa0 R15: 00007ffd57990458 [ 220.481933][T16378] [ 220.483313][T16378] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 220.486374][T16378] CPU: 1 UID: 0 PID: 16378 Comm: syz.2.2996 Not tainted syzkaller #0 PREEMPT(full) [ 220.490206][T16378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 220.494707][T16378] Call Trace: [ 220.496175][T16378] [ 220.497562][T16378] dump_stack_lvl+0x3d/0x1f0 [ 220.499635][T16378] vpanic+0x6e8/0x7a0 [ 220.501408][T16378] ? __pfx_vpanic+0x10/0x10 [ 220.503380][T16378] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 220.505941][T16378] panic+0xca/0xd0 [ 220.507630][T16378] ? __pfx_panic+0x10/0x10 [ 220.509694][T16378] check_panic_on_warn+0xab/0xb0 [ 220.512318][T16378] __warn+0xf6/0x3c0 [ 220.514218][T16378] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 220.517001][T16378] report_bug+0x3c3/0x580 [ 220.519000][T16378] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 220.521580][T16378] handle_bug+0x184/0x210 [ 220.523446][T16378] exc_invalid_op+0x17/0x50 [ 220.525374][T16378] asm_exc_invalid_op+0x1a/0x20 [ 220.527486][T16378] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 220.530275][T16378] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 cf 9c 81 09 83 fe 0a 0f 86 0a fe ff ff 80 3d bd 9d 7e 0e 00 75 0b c6 05 b4 9d 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 220.539026][T16378] RSP: 0018:ffffc9000347f7f0 EFLAGS: 00010246 [ 220.541710][T16378] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 220.544983][T16378] RDX: 0000000000000000 RSI: 000000000000001b RDI: 0000000000040d40 [ 220.548318][T16378] RBP: 000000000000001b R08: 0000000000000005 R09: 0000000000000009 [ 220.551617][T16378] R10: 000000000000001b R11: 0000000000000001 R12: 0000000000040d40 [ 220.554965][T16378] R13: 1ffff9200068ff13 R14: ffffffff9ae78a24 R15: 000000000000001b [ 220.558318][T16378] ? do_syscall_64+0xcd/0x4c0 [ 220.560416][T16378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.563759][T16378] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 220.567250][T16378] ? rcu_is_watching+0x12/0xc0 [ 220.569454][T16378] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 220.571909][T16378] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 220.574359][T16378] ? policy_nodemask+0xea/0x4e0 [ 220.576400][T16378] alloc_pages_mpol+0x1fb/0x550 [ 220.578475][T16378] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 220.580691][T16378] ? v9fs_fid_get_acl+0x7a/0x120 [ 220.582807][T16378] ___kmalloc_large_node+0xed/0x160 [ 220.584796][T16378] ? v9fs_fid_get_acl+0x7a/0x120 [ 220.586651][T16378] __kmalloc_large_node_noprof+0x1c/0x70 [ 220.589305][T16378] __kmalloc_noprof.cold+0xc/0x61 [ 220.592222][T16378] ? __pfx_iget5_locked+0x10/0x10 [ 220.594698][T16378] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 220.596904][T16378] ? p9_req_put+0x1c6/0x250 [ 220.598609][T16378] v9fs_fid_get_acl+0x7a/0x120 [ 220.600620][T16378] v9fs_get_acl+0xee/0x530 [ 220.602472][T16378] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 220.604818][T16378] v9fs_mount+0x4fd/0xa90 [ 220.606661][T16378] ? __pfx_v9fs_mount+0x10/0x10 [ 220.608775][T16378] ? cap_capable+0xb3/0x250 [ 220.610763][T16378] ? __pfx_v9fs_mount+0x10/0x10 [ 220.612869][T16378] legacy_get_tree+0x10c/0x220 [ 220.615132][T16378] vfs_get_tree+0x8b/0x340 [ 220.617281][T16378] path_mount+0x1513/0x2000 [ 220.619443][T16378] ? __pfx_path_mount+0x10/0x10 [ 220.621616][T16378] ? kmem_cache_free+0x2d1/0x4d0 [ 220.623807][T16378] ? putname+0x154/0x1a0 [ 220.625625][T16378] ? putname+0x154/0x1a0 [ 220.627597][T16378] ? __x64_sys_mount+0x28d/0x310 [ 220.630024][T16378] __x64_sys_mount+0x28d/0x310 [ 220.632197][T16378] ? __pfx___x64_sys_mount+0x10/0x10 [ 220.634584][T16378] do_syscall_64+0xcd/0x4c0 [ 220.637089][T16378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.640114][T16378] RIP: 0033:0x7fe83f98ebe9 [ 220.642190][T16378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.649883][T16378] RSP: 002b:00007fe8408cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 220.653297][T16378] RAX: ffffffffffffffda RBX: 00007fe83fbb5fa0 RCX: 00007fe83f98ebe9 [ 220.656568][T16378] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 220.660205][T16378] RBP: 00007fe83fa11e19 R08: 0000200000000580 R09: 0000000000000000 [ 220.664266][T16378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.668135][T16378] R13: 00007fe83fbb6038 R14: 00007fe83fbb5fa0 R15: 00007ffd57990458 [ 220.671508][T16378] [ 220.673663][T16378] Kernel Offset: disabled [ 220.675469][T16378] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:27:31 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000011 RCX=ffffffff81afa167 RDX=ffff88804fa98000 RSI=ffffffff81afa152 RDI=0000000000000005 RBP=ffffc90003b1f960 RSP=ffffc90003b1f800 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff88806a53b328 R12=1ffff92000763f08 R13=0000000000000000 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff81afa15b RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff2b8a5cf98 CR3=000000002b7bd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeffd0 Opmask01=0000000000004211 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 00007ffdacfbf0a0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ccf1d17f0 00007f9ccf1d17e0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00006f7300656d61 6e656c6966000d0a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 000000ffffffffff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff00000000ff00 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44444549074c440a 1a1a1a1a1817595e ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 58455a045a5e4c07 41494b585e444445 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620732520 6465746165726300 0a73253a47000a73 253d73253a45000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305560005 4140514440574600 0a56001f47000a56 001856001f45000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c6c6174735f7563 725f78616d006c74 6373797300313d65 6c6261003600363a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e2e65726f632e74 656e2e6c74637379 73203034313d6873 657268745f676f64 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e617020343d7372 6f6e696d5f796361 67656c5f6d756e5f 6964656d6f632e69 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656d6f63203233 3d78616d5f736462 6e2032333d706f6f 6c5f78616d203233 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00002aa26eaa1410 0000000534261130 0000000000000311 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000003754e RBX=0000000000000041 RCX=ffffc900078b2000 RDX=0000000000080000 RSI=ffffffff819acd80 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000347f488 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=3a474e494e524157 R12=1ffff9200068fe93 R13=0000000000000200 R14=ffff888061f1a440 R15=ffffc9000347f550 RIP=ffffffff819acd89 RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fe8408cf6c0 ffffffff 00c00000 GS =0000 ffff8880d67bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000002100 CR3=0000000037434000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd8ea42f50 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd8ea430d6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd8ea430d6 00007ffd8ea430dc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff2b7c12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff2b7c12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff2b7c12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff2b7c12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff2b7c12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff2b7c12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000800000 RBX=ffff888105b71710 RCX=0000000000000017 RDX=0000000000080000 RSI=ffffffff866cd50a RDI=0000000000000005 RBP=0000000000000017 RSP=ffffc900044075d0 R8 =0000000000000005 R9 =000000000000001f R10=0000000000000017 R11=206d6172676f7270 R12=ffffc9000013d138 R13=ffff888105b7176c R14=ffff888105b71718 R15=0000000000000000 RIP=ffffffff866cd517 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007ff2173f66c0 ffffffff 00c00000 GS =0000 ffff8880d68bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c29c326 CR3=000000005f180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020000000 Opmask02=0000000002fefefe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff80291720 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff802918a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff802918a6 00007fff802918ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff219212e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff219212e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff219212e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff219212e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff219212ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff219212fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000082cd RBX=0000000000000001 RCX=0000000000014e91 RDX=00000000000082ce RSI=00000000000a977a RDI=ffffffff920044f0 RBP=ffffc90000a7f7c0 RSP=ffffc90000a7f708 R8 =0000000000000000 R9 =0000000000000000 R10=ffffc90000a7f778 R11=00000000000082cd R12=ffffc90000a7f7c8 R13=ffffc90000a7f778 R14=ffffc90000a7f7ad R15=ffffffff8182cdce RIP=ffffffff816ae6ed RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d69bc000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000003e4b5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000